Changes in 1.8.3

• Fixed progress reporting for OCI and extra-data
• The in-memory summary cache is more efficient
• Fixed authentication getting stuck in a loop in some cases
• Fixed authentication error reporting
• We now extract OCI info for runtimes as well as apps
• Fixed crash if anonymous authentication fails and -y is specified
• flatpak info now only looks at the specified installation
  if one is specified
• Better error reporting for server HTTP errors during download
• Uninstall now removes applications before the runtime it depends on
• Fixed test-suite to pass with the latest OSTree version
• Fixed dbus environment variables in flatpak enter
• Avoid updating metadata from the remote when uninstalling
• Fixed error message handling in various places
• FlatpakTransaction now verifies all passed in refs to avoid
  potential issues with invalid names
• Updated translations

$ sha256sum flatpak-1.8.3.tar.xz
33667fdd5cf65914209488bf3e7e574ddb57667bb7939863b4fcb40ca8b66edd  flatpak-1.8.3.tar.xz

Changes in 1.8.2

• Added validation of collection id settings for remotes
• Fix seccomp filters on s390
• Robustness fixes to the spawn portal
• Fix support for masking update in the system installation
• Better support for distros with uncommon models of merged /usr
• Cache responses from localed/AccountService
• Fix hangs in cases where xdg-dbus-proxy fails to start
• Fix double-free in cups socket detection
• OCI authenticator now doesn't ask for auth in case of http errors

$ sha256sum flatpak-1.8.2.tar.xz 
7926625df7c2282a5ee1a8b3c317af53d40a663b1bc6b18a2dc8747e265085b0  flatpak-1.8.2.tar.xz

Changes in 1.8.1

• Avoid calling authenticator in update if ref didn't change
• Don't fail transaction if ref is already installed (after transaction start)
• Fix flatpak run handling of userns in the --device=all case
• Fix handling of extensions from different remotes
• Fix flatpak run --no-session-bus
• Updated translations

$ sha256sum flatpak-1.8.1.tar.xz 
66914b66f9a64079386cc097a40a19fa8419568df7fb456f2e407f0f76ac9ead  flatpak-1.8.1.tar.xz

This is a minor fix to the authentication system that avoids
unnecessary authentication when doing an update when the app hasn't
changed. This was problematic for the OCI backend as it now
authenticates by default.

$ sha256sum flatpak-1.6.5.tar.xz 
8109ffb6a3e9bfc5dcf8999c9243b21596489f77d866b848169d50c0627f14db  flatpak-1.6.5.tar.xz

New stable release series 1.8.

Changes:

• FlatpakTransaction has a new signal "install-authenticator" which clients can handle to
  install authenticators needed for the transaction. This is done in the CLI commands.
• We now always expose the host timezone data, allowing us the expose the host /etc/localtime
  in a way that works better, fixing several apps that had timezone issues.
• Fix flatpak enter which didn't work in some cases.
• We now ship a systemd unit (not installed by default) to automatically detect plugged in
  usb sticks with sideload repos.
• By default we no longer install the gdm env.d file, as the systemd generators work better
• create-usb now exports partial commits by default
• Fix handling of docker media types in oci remotes
• Fix subjects in remote-info --log output

$ sha256sum flatpak-1.8.0.tar.xz 
4364bce42994f2e8e8a44dfa068bafa1a77f542b8138fb04cbc064937e3a9d34  flatpak-1.8.0.tar.xz

Changes in 1.6.4

This release backports some of the OCI authenticator fixes from the 1.7 series, and
should now be able to host flatpak images on e.g. docker hub.

Other changes:

• Fix a use-after free in libflatpak
• Don't list p2p downgrades in list of available updates

$ sha256sum flatpak-1.6.4.tar.xz 
700328b990d89a21f27b7365611a1e51879916cd69068b0bf794df057c9fe448  flatpak-1.6.4.tar.xz

Changes in 1.7.3

• Allow direct ALSA device access if app has pulseaudio access.
• Flatpak now ships a sysusers.d file for allowing systemd to create the required users.
• Fix issue in remote-delete where it failed to delete system remotes if it had to uninstall
  something first.
• New library calls flatpak_transaction_operation_get_related_to_ops(), flatpak_transaction_operation_get_is_skipped() and
  flatpak_transaction_set_no_interaction().
• New options --[no-]follow-redirect in remote-add/modify
• New spawn portal APIs to get real pid of launched app.
• By default, all OCI remotes now use the flatpak-oci-authenticator.
• Support flatpak remote-info and flatpak update --commit= to specific versions for OCI remotes.
• Initial work in progress on using deltas for OCI remotes.
• Fix race in the generation of ld.so.cache when starting copies of the same app at the same time.
• Minor fix in what locales are installed on update.
• Flatpak uninstall now doesn't fail if one ref (of many) was not installed.
• Flatpak systemd transient units now have an app-prefix to match new XDG spec for
  cgroup names.
• In some cases we previously downloaded the summary twice.
• flatpak upgrade is now an alias for flatpak update.
• Fix to selinux module to work without unconfined module.
• Respect user XDG basedirs when finding users fonts and icons.
• Fix issue where thread were sometimes initialized causing flatpak enter to fail.
• Better error reporting when authentication goes wrong.

$ sha256sum flatpak-1.7.3.tar.xz 
90c68861ae2ff3579106539d301b1cfc61e510976d8b56771d650506a9360d58  flatpak-1.7.3.tar.xz

Changes in 1.7.2

This fixes some regressions in progress reporting in 1.7.1, where it would report > 100%.

Other changes:

• Completion support for fish shell
• Properly handle migration of remotes with collection ids
• The summary now has some extra-data download size info which can make downloads slightly more efficient

$ sha256sum flatpak-1.7.2.tar.xz 
84ca5b06ef56ffe282a2603b157080bc242723f69731926a6593020a75ce2895  flatpak-1.7.2.tar.xz

This is the first release in the 1.7.x unstable release series.

A major change is that the support for the ostree peer-to-peer installation has been
simplified. Flatpak no longer supports installing from local network peers, and sideloading
from local usb stick is no longer automatic. To enable sideloading you have to configure
a sideload repository by creating a symlink to it from /var/lib/flatpak/sideload-repos or
/run/flatpak/sideload-repos. Due to this the flatpak code has been simplified internally
and the p2p support is more efficient.

Other major changes

• If an app has filesystem access, the host /lib is accessible as /run/host/lib, etc.
• New filesystem permission "host-etc" and "host-os" give access to system /usr and /etc.
• Flatpak now uses variant-schema-compiler to generate more efficient code for
  parsing GVariant files from ostreee.
• libsystemd use is now optional in configure.
• Journal sockets are mounted readonly
• document-export now supports exporting directories (requires new portal version)
• DConf migration now allows version numbers in object paths

$ sha256sum flatpak-1.7.1.tar.xz 
aae66b0770154b31ea48e5b53060e9ca2a1b656cd322546a43730c77ea63885b  flatpak-1.7.1.tar.xz

The main change in this version is a fix for a regression in the progress calculation
for applications using extra-data. Additionally the bundled version of bubblewrap
is updated to 0.4.1 which fixes a security issue in some cases. See
GHSA-j2qp-rvxj-43vj
for details.

Other changes:

• Updated translations
• Don't break if users primary gid is not in the nsswitch database
• Fix crash in flatpak repair if no remotes are configured
• Some updates to the oci authenticator
• Retry downloads of extra data

$ sha256sum flatpak-1.6.3.tar.xz 
5142f0ae48100f6af1fd43695a253a0a32d69b3280aff4d4f1ad93d61bb6489f  flatpak-1.6.3.tar.xz