{"uuid": "e79624bd-dfd8-43de-bfcb-309b0b8e5cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28948", "type": "seen", "source": "https://gist.github.com/julian-klode/eb0381c1cb2cec713ba78d7462ad6167", "content": "diff -Nru snapd-2.75.2+ubuntu26.04.2/debian/changelog snapd-2.76+ubuntu26.04.2/debian/changelog\n--- snapd-2.75.2+ubuntu26.04.2/debian/changelog\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/changelog\t2026-06-17 16:30:00.000000000 +0200\n@@ -1,3 +1,199 @@\n+snapd (2.76+ubuntu26.04.2) resolute; urgency=medium\n+\n+  * New upstream release, LP: #2154498\n+    - assertions: add helper for validating integrity data\n+    - assertions: drop incorrect/non-standard Ed25519 support\n+    - confdb: allow only API admin read access to confdb secrets\n+    - confdb: block concurrent confdb accesses\n+    - confdb: block concurrent snapctl accesses to configuration\n+      database\n+    - confdb: check for ephemeral data when missing save-view hook on\n+      commit\n+    - confdb: ignore not-found errors in confdb-schema refreshes\n+    - confdb: support --wait-for timeouts when accessing confdb\n+    - core-initrd: add group referenced in udev rules\n+    - core-initrd: add libbpf dependency to initramfs\n+    - core-initrd: add missing libbpf dependency in 24.04 packaging\n+    - core-initrd: ensure audio is a system group\n+    - core-initrd: fix /boot/uboot mount with u-boot env in dedicated\n+      partition\n+    - core-initrd: increase mount burst from 5 to 128 for faster boot\n+    - core-initrd: sync partition udev rules with the ones in core-base\n+    - core-initrd: sync with latest upload to snappy-dev PPA\n+    - core-initrd: synchronize changelogs with latest PPA upload\n+    - core-initrd: update changelog with latest PPA upload\n+    - core-initrd: add nfnetlink module to fix nf netlink\n+      socket speed regression (Ubuntu Core only)\n+    - cross-distro: allow snapd to manipulate systemd unit files in\n+      SELinux policy\n+    - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch\n+    - desktop: fix common ID selection with multiple desktop plugs\n+    - FDE: allow user mode on core in secboot TPM handling\n+    - FDE: bump go-efilib dependency\n+    - FDE: bump secboot to rev cdcb64992e54 for FDE fixes\n+    - FDE: deprecate check-pin/passphrase API endpoints\n+    - LP: #2147606 FDE: give inactive state on classic\n+    - FDE: improve tracing for OP-TEE probing\n+    - FDE: move auto-repair logic to overlord/fdestate and provide state\n+    - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and\n+      recovery key parsing\n+    - FDE: use any primary key matching digest when adding a keyslot\n+    - FDE: use ignore action for preinstall check in VM\n+    - interfaces: bluez | drop explicit deny send_destination in D-Bus\n+      configuration\n+    - interfaces: conditionally deny /proc/self/mountinfo to suppress Go\n+      1.25+ denials\n+    - interfaces: custom-device | fix for-device validation panic on\n+      non-string value\n+    - interfaces: disallow auto-connect to parallel installs\n+    - interfaces: docker | make plug implicit on classic systems\n+    - interfaces: ignore errors in disconnect hooks during explicit snap\n+      disconnect\n+    - interfaces: mediatek-accel | add plug interface base declaration\n+    - interfaces: microceph-support | suppress noisy sudo denial audit\n+      logs\n+    - interfaces: podman | add new interface for podman socket access\n+    - interfaces: pulseaudio | fix security tag syntax inconsistency\n+    - interfaces: raw-usb | allow USB device enumeration on Fairphone 5\n+      with NexDock\n+    - interfaces: restore auto-connections on failed refresh undo\n+    - interfaces: bool-file | support deep SoC sysfs paths\n+      for LED brightness\n+    - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17\n+      compliant\n+    - packaging: add cross-distro build script and instructions\n+    - packaging: add openSUSE 16.0 spread support\n+    - packaging: Debian build improvements\n+    - packaging: default openSUSE to /var/lib/snapd/snap and sync from\n+      downstream\n+    - packaging: fix Launchpad FIPS build detection for snapd-fips job\n+    - packaging: refactor and clean up snapd.mk, standardize test-data\n+      directories\n+    - packaging: switch to golang-github-chai2010-gettext-go-dev\n+    - packaging: update bundled AppArmor 4.1.7 (snapd snap only)\n+    - prompting: escape paths in prompt constraints\n+    - prompting: improve API error handling and validation\n+    - prompting: improve error message when no handler service is\n+      present\n+    - prompting: re-enable the prompting notice backend\n+    - prompting: respond with full user-allowed permission set\n+    - prompting: validate permissions while unmarshalling\n+    - remote device management: implement dispatch-mgmt-messages task\n+      with sequencing support\n+    - LP: #2125344 snap: avoid empty channel forwarding message\n+    - snap: clarify snap install help text for --classic\n+      and --devmode\n+    - LP: #2152908 snap: print complex attributes in snap interface\n+      --attrs output\n+    - snap: add run-inhibit hint and inhibit info when a snap is\n+      disabled\n+    - snap: allow removing a snap and its base at the same time\n+    - snap: display detailed component information in snap info\n+    - snap: extend AlreadyInstalledError to multiple snaps and\n+      components\n+    - snap: extend set-quota command options description with accepted\n+      value formats\n+    - snap: implement snap delta command for computing snap deltas\n+    - snap: improve consistency for snap install when some snaps are\n+      already installed\n+    - snap: show hint in snap list that a snap has components\n+    - snap-confine: allow inheriting unix sockets from snaps\n+    - snap-confine: allow linking to libm in AppArmor profile\n+    - snap-confine: fix out-of-bounds read in mountinfo parser for\n+      partial escape sequences\n+    - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags\n+    - snap-confine: remove experimental persistent per-user mount\n+      namespace feature\n+    - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF\n+      helpers\n+    - snap-confine: support transparent_hugepage in AppArmor profile\n+    - snap-confine: use strchr after NUL-terminating in infofile parser\n+    - snap-update-ns: switch to a multi-pass process for constructing\n+      and updating mount namespaces\n+    - RemoveMountUnitFile now unmounts even if mount unit file is\n+      missing\n+    - Add explicit mount phase during single-reboot refresh to fix undo\n+      of kernel refreshes\n+    - Add security audit logging subsystem\n+    - Add base prioritized AppArmmor snippets for strictly confined or\n+      jailed snaps\n+    - Allow openshell snap to use experimental daemon-scope: user\n+    - Allow configuring mount unit options based on filesystem type\n+    - Allow equals signs in uevent values in netlink parser\n+    - Also bind-mount directories modified by kmod backend during\n+      preseed\n+    - Clean up potentially corrupted files during snap download undo\n+    - Complete the bootloader environment implementation\n+    - Copy integrity data files during snap install\n+    - Create hook for seed refresh mode\n+    - Create removal tasks for old seed-refresh seeds\n+    - Dispatch systemctl commands asynchronously when calling Stop()\n+    - Ensure /tmp/.X11-unix created inside mount namespace has correct\n+      permissions\n+    - Ensure exclusive changes conflict with refresh/revert\n+    - Ensure existing snap confinement flags are not dropped when\n+      installing or removing components\n+    - Export ubuntu-boot-state filename constant from bootloader package\n+    - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin\n+    - Fix integration between prerequisites task and seed-refresh mode\n+    - Fix split-refresh overwriting provided lane\n+    - Fix use of umask in GetListener for socket activation\n+    - Ignore net.ErrClosed during daemon shutdown\n+    - Implement ResolveValidationSetsEnforcementError in terms of one\n+      call\n+    - Improve snapctl install consistency when components are already\n+      installed\n+    - Inject seed creation tasks into snap refresh flow\n+    - Introduce system options for custom certificates on Ubuntu Core\n+    - Keep idle services with activation units stopped on reload\n+    - List snap components in snap-debug-info via debug-tools\n+    - Look at gadget.yaml instead of marker file to determine ubootpart\n+      usage\n+    - LP: #1966067 Skip redundant xdg-settings confirmation prompt when\n+      setting is already correct\n+    - LP: #2110368 Fix component installation for private snaps via\n+      snapctl\n+    - LP: #2110368 Fix download of private snap components by setting\n+      UserID\n+    - LP: #2144666 Fix mount namespace updates with synthetic bind\n+      mounts on same target paths\n+    - LP: #2146337 Improve handling of failed downloads and retain\n+      partial files for resume\n+    - LP: #2147207 Fix snap enable/disable cycle forgetting components\n+    - Make run-inhibit hint for kill-snap-apps task based on kill reason\n+    - Merge content-provider prerequisite updates into seed-refresh\n+    - Move SortServices into Backend.StartServices\n+    - Move state to client change conversion to ctlcmd package\n+    - Omit misleading \"try to refresh snapd\" suggestion for ISA-related\n+      errors\n+    - Only create link-component tasks when needed during refresh to\n+      existing revision\n+    - Reconfigure piboot bootloader on gadget refreshes to preserve\n+      os_prefix\n+    - Reduce the number of AppArmor profile regenerations during snap\n+      operations\n+    - Refactor seed-refresh ownership to devicestate\n+    - Regenerate certificate database on remodels\n+    - Remove obsolete FIXME comment in VersionCompare\n+    - Remove unused GenerateDmVerityData helper from snap/integrity\n+    - Rename and document error type for ISA assumes flags\n+    - Restart snapd from daemon.Stop to improve restart reliability\n+    - Restart stopped services on error in stopSnapServices for\n+      transactionality\n+    - Simplify certificate-db updates on model-base refresh/installs\n+    - Support racing Loop and Stop correctly in overlord\n+    - Support sending file descriptors to systemd via sd_notify\n+    - Unroll CPU-heavy recursive function in snap state handlers\n+    - Update seccomp syscalls list for kernel 7.1.0\n+    - Use change ID to prevent nested seed-refresh spawned by\n+      prerequisites\n+    - Validate content interface plug target directories exist for\n+      core26+ snaps\n+    - Validate layout paths exist in snap tree for snaps using bare or\n+      core26+\n+\n+ -- Ernest Lotter   Thu, 17 Jun 2026 16:30:00 +0200\n+\n snapd (2.75.2+ubuntu26.04.2) resolute; urgency=medium\n \n   * New upstream release, LP: #2143882\n@@ -11,110 +207,6 @@\n \n  -- Katie May   Mon, 30 Mar 2026 17:06:36 +0200\n \n-snapd (2.75.1+ubuntu26.04.2) resolute; urgency=medium\n-\n-    - FDE: limit number of boot check log entries\n-    - Allow a logged in user to refresh private snaps during a refresh\n-      with multiple snaps\n-    - Use precise prune pattern for tmpfiles (CVE-2026-3888)\n-\n- -- Katie May   Wed, 18 Mar 2026 09:59:01 +0100\n-\n-snapd (2.75+ubuntu26.04.2) resolute; urgency=medium\n-\n-    - FDE: run early boot check only once per boot\n-    - FDE: update secboot to revision 77bc2457cc76\n-    - FDE: add degraded state for status API\n-    - FDE: prevent resealing tasks from running together\n-    - FDE: enable using keyslot tokens to store protected keys for UC26+\n-    - FDE: early commit kcmdline config transaction in update-gadget-\n-      cmdline to mitigate possible race condition\n-    - FDE: ensure extra snapd kcmdline fragments are applied\n-    - FDE: remove old secboot activation API calls\n-    - LP: #2142130 update apparmor parser to 4.1.7\n-    - LP: #2137543 disable translations in formatted output for snapctl\n-      services\n-    - LP: #2142655 improve snap size reporting precision in snap info\n-      output\n-    - LP: #2139664 snap-confine: remove race condition triggered by hat\n-      profile\n-    - LP: #2139065 skip 70-snap.*.rules when building dracut initramfs\n-    - LP: #2002697 error early on removal without purge if home is in\n-      NFS mount\n-    - LP: #2141461 Intefaces: allow snap-update-ns to read\n-      /proc/pid/auxv\n-    - LP: #2138268 Interfaces: kerberos-tickets| new interface allow\n-      access to kerberos tickets stored in /tmp\n-    - Interfaces: block-devices| allow Xen block devices\n-    - Interfaces: u2f-devices| add Tokey 3 FIDO\n-    - Interfaces: devlxd| new interface allowing acccess to LXD devlxd\n-      socket and APIs\n-    - Interfaces: browser-support| allow reading pressure stall info\n-      information\n-    - Interfaces: network-setup-control| allow additional netplan files\n-      access\n-    - Interfaces: desktop| allow access kvantum, lxqt, and gtk4\n-      configuration files\n-    - Interfaces: system-observe| allow fdinfo access for GPU monitoring\n-    - Interfaces: ubuntu-pro-control| allow access to Ubuntu Advantage\n-      client configuration\n-    - Prompting: add API endpoint to ask whether application should have\n-      access\n-    - Prompting: add support for audio-record prompting via API endpoint\n-    - Prompting: store snap name instead of apparmor label in requests\n-    - Prompting: respond with 503 to API requests when prompting\n-      subsystem is shutting down\n-    - Prompting: generalize prompting subsystem to support requests from\n-      outside AppArmor\n-    - Confdb: unset data for missing paths in set request\n-    - Confdb: return 400 for API requests with missing filter\n-      constraints\n-    - Confdb: return 400 for API requests with unmatched filter\n-      constraints\n-    - Confdb: support typed constraints in confdb filtering\n-    - Confdb: fixed unmarshalling transaction with placeholder path in\n-      deltas\n-    - Confdb: refresh confdb-schema assertions during manual refresh\n-    - Remote device management (experimental): add skeleton device\n-      management manager\n-    - Remote device management (experimental): add message exchange loop\n-    - Components: add snap component command, include component summary\n-      in snap info output\n-    - Components: enforce validation sets when installing components\n-    - Configuration: add system.motd configuration option to customize\n-      message of the day (motd)\n-    - packaging: remove dependencies libbrotli1, libfreetype6, and\n-      libpng16-16 from snap\n-    - snap-bootstrap: use libblkid for disk information to speed up boot\n-    - snap-confine: improve data handling error\n-    - snap-confine: use ld cache from the app base for core26+\n-    - snap: add riscv ISA detection for snaps\n-    - squashfs: reduce memory footprint of single file extraction\n-    - Add experimental snap delta format\n-    - Enable early download of seed snaps during refresh\n-    - Enable parallel downloads of essential snaps during refresh\n-    - Disallow removing components required by validation sets\n-    - Make snap prepare-image fail on --validation=ignore if model has\n-      enforced validation-sets\n-    - Fix correctly handling interrupted snap downloads\n-    - Fix handling of store throttling for refresh-app-awareness\n-      monitored snaps\n-    - Stop removed \"endure\" services on refresh\n-    - Install by default from the initramfs for UC26+, removing the need\n-      for a reboot after installation\n-    - Keep minidebuginfo in snapd snap\n-    - Make snap-specific systemd cgroup mandatory for snaps using core26\n-      and later, improve messaging for failure scenarios\n-    - Preserve stale connections of broken snaps\n-    - Remove enforce-validation-sets need for network\n-    - Opportunistic discarding of mount namespace when updating slot\n-      providers\n-    - Support for delaying updates of snap mount namespaces when\n-      refreshing slot providers\n-    - Use application CommonID as default source for desktop ID\n-\n- -- Katie May   Mon, 09 Mar 2026 17:10:13 +0100\n-\n snapd (2.74.1+ubuntu26.04.4) resolute; urgency=medium\n \n   * New upstream release, LP: #2138629\n@@ -122,7 +214,17 @@\n \n  -- Ernest Lotter   Thu, 14 Apr 2026 09:30:00 +0200\n \n-snapd (2.74.1) xenial; urgency=medium\n+snapd (2.74.1+ubuntu26.04.3) resolute; urgency=medium\n+\n+  * New upstream release, LP: #2138629\n+    - FDE: secboot fixes\n+    - Security: CVE-2026-3888\n+    - Packaging: fix deb package version number\n+    - Packaging: fix autopkgtest failure to install spread\n+\n+ -- Ernest Lotter   Thu, 24 Mar 2026 13:46:00 +0200\n+\n+snapd (2.74.1+ubuntu26.04) resolute; urgency=medium\n \n   * New upstream release, LP: #2138629\n     - FDE: measure DeployedMode and AuditMode variables if they appear\n@@ -143,7 +245,7 @@\n \n  -- Ernest Lotter   Thu, 12 Feb 2026 21:27:23 +0200\n \n-snapd (2.74) xenial; urgency=medium\n+snapd (2.74+ubuntu26.04) resolute; urgency=medium\n \n   * New upstream release, LP: #2138629\n     - FDE: use new activation API from secboot\n@@ -251,7 +353,7 @@\n \n  -- Ernest Lotter   Tue, 20 Jan 2026 18:54:17 +0200\n \n-snapd (2.73) xenial; urgency=medium\n+snapd (2.73+ubuntu26.04) resolute; urgency=medium\n \n   * New upstream release, LP: #2132084\n     - FDE: do not save incomplete FDE state when resealing was skipped\n@@ -362,7 +464,7 @@\n \n  -- Ernest Lotter   Fri, 21 Nov 2025 09:08:02 +0200\n \n-snapd (2.72) xenial; urgency=medium\n+snapd (2.72+ubuntu26.04.1) resolute; urgency=medium\n \n   * New upstream release, LP: #2124239\n     - FDE: support replacing TPM protected keys at runtime via the\n@@ -473,15818 +575,10 @@\n \n  -- Ernest Lotter   Thu, 18 Sep 2025 10:00:54 +0200\n \n-snapd (2.71) xenial; urgency=medium\n+snapd (2.71.1+ubuntu25.10.1) questing; urgency=medium\n \n   * New upstream release, LP: #2118396\n-    - FDE: auto-repair when recovery key is used\n-    - FDE: revoke keys on shim update\n-    - FDE: revoke old TPM keys when dbx has been updated\n-    - FDE: do not reseal FDE hook keys every time\n-    - FDE: store keys in the kernel keyring when installing from initrd\n-    - FDE: allow disabled DMA on Core\n-    - FDE: snap-bootstrap: do not check for partition in scan-disk on\n-      CVM\n-    - FDE: support secboot preinstall check for 25.10+ hybrid installs\n-      via the /v2/system/{label} endpoint\n-    - FDE: support generating recovery key at install time via the\n-      /v2/systems/{label} endpoint\n-    - FDE: update passphrase quality check at install time via the\n-      /v2/systems/{label} endpoint\n-    - FDE: support replacing recovery key at runtime via the new\n-      /v2/system-volumes endpoint\n-    - FDE: support checking recovery keys at runtime via the /v2/system-\n-      volumes endpoint\n-    - FDE: support enumerating keyslots at runtime via the /v2/system-\n-      volumes endpoint\n-    - FDE: support changing passphrase at runtime via the /v2/system-\n-      volumes endpoint\n-    - FDE: support passphrase quality check at runtime via the\n-      /v2/system-volumes endpoint\n-    - FDE: update secboot to revision 3e181c8edf0f\n-    - Confdb: support lists and indexed paths on read and write\n-    - Confdb: alias references must be wrapped in brackets\n-    - Confdb: support indexed paths in confdb-schema assertion\n-    - Confdb: make API errors consistent with options\n-    - Confdb: fetch confdb-schema assertion on access\n-    - Confdb: prevent --previous from being used in read-side hooks\n-    - Components: fix snap command with multiple components\n-    - Components: set revision of seed components to x1\n-    - Components: unmount extra kernel-modules components mounts\n-    - AppArmor Prompting: add lifespan \"session\" for prompting rules\n-    - AppArmor Prompting: support restoring prompts after snapd restart\n-    - AppArmor Prompting: limit the extra information included in probed\n-      AppArmor features and system key\n-    - Notices: refactor notice state internals\n-    - SELinux: look for restorecon/matchpathcon at all known locations\n-      rather than current PATH\n-    - SELinux: update policy to allow watching cgroups (for RAA), and\n-      talking to user session agents (service mgmt/refresh)\n-    - Refresh App Awareness: Fix unexpected inotify file descriptor\n-      cleanup\n-    - snap-confine: workaround for glibc fchmodat() fallback and handle\n-      ENOSYS\n-    - snap-confine: add support for host policy for limiting users able\n-      to run snaps\n-    - LP: #2114923 Reject system key mismatch advise when not yet seeded\n-    - Use separate lanes for essential and non-essential snaps during\n-      seeding and allow non-essential installs to retry\n-    - Fix bug preventing remodel from core18 to core18 when snapd snap\n-      is unchanged\n-    - LP: #2112551 Make removal of last active revision of a snap equal\n-      to snap remove\n-    - LP: #2114779 Allow non-gpt in fallback mode to support RPi\n-    - Switch from using systemd LogNamespace to manually controlled\n-      journal quotas\n-    - Change snap command trace logging to only log the command names\n-    - Grant desktop-launch access to /v2/snaps\n-    - Update code for creating the snap journal stream\n-    - Switch from using core to snapd snap for snap debug connectivity\n-    - LP: #2112544 Fix offline remodel case where we switched to a\n-      channel without an actual refresh\n-    - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed\n-      tarball\n-    - LP: #1952500 Fix snap command progress reporting\n-    - LP: #1849346 Interfaces: kerberos-tickets |  add new interface\n-    - Interfaces: u2f | add support for Thetis Pro\n-    - Interfaces: u2f | add OneSpan device and fix older device\n-    - Interfaces: pipewire, audio-playback | support pipewire as system\n-      daemon\n-    - Interfaces: gpg-keys | allow access to GPG agent sockets\n-    - Interfaces: usb-gadget | add new interface\n-    - Interfaces: snap-fde-control, firmware-updater-support | add new\n-      interfaces to support FDE\n-    - Interfaces: timezone-control | extend to support timedatectl\n-      varlink\n-    - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and\n-      procfs directories\n-    - Interfaces: microstack-support | allow SR-IOV attachments\n-    - Interfaces: modify AppArmor template to allow snaps to read their\n-      own systemd credentials\n-    - Interfaces: posix-mq | allow stat on /dev/mqueue\n-    - LP: #2098780 Interfaces: log-observe | add capability\n-      dac_read_search\n-    - Interfaces: block-devices | allow access to ZFS pools and datasets\n-    - LP: #2033883 Interfaces: block-devices | opt-in access to\n-      individual partitions\n-    - Interfaces: accel | add new interface to support accel kernel\n-      subsystem\n-    - Interfaces: shutdown | allow client to bind on its side of dbus\n-      socket\n-    - Interfaces: modify seccomp template to allow pwritev2\n-    - Interfaces: modify AppArmor template to allow reading\n-      /proc/sys/fs/nr_open\n-    - Packaging: drop snap.failure service for openSUSE\n-    - Packaging: add SELinux support for openSUSE\n-    - Packaging: disable optee when using nooptee build tag\n-    - Packaging: add support for static PIE builds in snapd.mk, drop\n-      pie.patch from openSUSE\n-    - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04\n-    - Packaging: use snapd.mk for packaging on Fedora\n-    - Packaging: exclude .git directory\n-    - Packaging: fix DPKG_PARSECHANGELOG assignment\n-    - Packaging: fix building on Fedora with dpkg installed\n-\n- -- Ernest Lotter   Fri, 25 Jul 2025 13:18:47 +0200\n-\n-snapd (2.70) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2112209\n-    - FDE: Fix reseal with v1 hook key format\n-    - FDE: set role in TPM keys\n-    - AppArmor prompting (experimental): add handling for expired\n-      requests or listener in the kernel\n-    - AppArmor prompting: log the notification protocol version\n-      negotiated with the kernel\n-    - AppArmor prompting: implement notification protocol v5 (manually\n-      disabled for now)\n-    - AppArmor prompting: register listener ID with the kernel and\n-      resend notifications after snapd restart (requires protocol v5+)\n-    - AppArmor prompting: select interface from metadata tags and set\n-      request interface accordingly (requires protocol v5+)\n-    - AppArmor prompting: include request PID in prompt\n-    - AppArmor prompting: move the max prompt ID file to a subdirectory\n-      of the snap run directory\n-    - AppArmor prompting: avoid race between closing/reading socket fd\n-    - Confdb (experimental): make save/load hooks mandatory if affecting\n-      ephemeral\n-    - Confdb: clear tx state on failed load\n-    - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.\n-      confdb-schema)\n-    - Confdb: add NestedEphemeral to confdb schemas\n-    - Confdb: add early concurrency checks\n-    - Simplify building Arch package\n-    - Enable snapd.apparmor on Fedora\n-    - Build snapd snap with libselinux\n-    - Emit snapd.apparmor warning only when using apparmor backend\n-    - When running snap, on system key mismatch e.g. due to network\n-      attached HOME, trigger and wait for a security profiles\n-      regeneration\n-    - Avoid requiring state lock to get user, warnings, or pending\n-      restarts when handling API requests\n-    - Start/stop ssh.socket for core24+ when enabling/disabling the ssh\n-      service\n-    - Allow providing a different base when overriding snap\n-    - Modify snap-bootstrap to mount snapd snap directly to /snap\n-    - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap\n-      as fallback\n-    - Modify core-initrd to use systemctl reboot instead of /sbin/reboot\n-    - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file\n-      creation directory so it can be copied to the kernel snap\n-    - Build the early initrd from installed ucode packages\n-    - Create drivers tree when remodeling from UC20/22 to UC24\n-    - Load gpio-aggregator module before the helper-service needs it\n-    - Run 'systemctl start' for mount units to ensure they are run also\n-      when unchanged\n-    - Update godbus version to 'v5 v5.1.0'\n-    - Add support for POST to /v2/system-info with system-key-mismatch\n-      indication from the client\n-    - Add 'snap sign --update-timestamp' flag to update timestamp before\n-      signing\n-    - Add vfs support for snap-update-ns to use to simulate and evaluate\n-      mount sequences\n-    - Add refresh app awareness debug logging\n-    - Add snap-bootstrap scan-disk subcommand to be called from udev\n-    - Add feature to inject proxy store assertions in build image\n-    - Add OP-TEE bindings, enable by default in ARM and ARM64 builds\n-    - Fix systemd dependency options target to go under 'unit' section\n-    - Fix snap-bootstrap reading kernel snap instead of base resulting\n-      in bad modeenv\n-    - Fix a regression during seeding when using early-config\n-    - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps\n-    - Make Azure kernels reboot upon panic\n-    - Fix snap-confine to not drop capabilities if the original user is\n-      already root\n-    - Fix data race when stopping services\n-    - Fix task dependency issue by temporarily disable re-refresh on\n-      prerequisite updates\n-    - Fix compiling against op-tee on armhf\n-    - Fix dbx update when not using FDE\n-    - Fix potential validation set deadlock due to bases waiting on\n-      snaps\n-    - LP: #2104066 Only cancel notices requests on stop/shutdown\n-    - Interfaces: bool-file | fix gpio glob pattern as required for\n-      '[XXXX]*' format\n-    - Interfaces: system-packages-doc | allow access to\n-      /usr/local/share/doc\n-    - Interfaces: ros-snapd-support interface | added new interface\n-    - Interfaces: udisks2 | allow chown capability\n-    - Interfaces: system-observe | allow reading cpu.max\n-    - Interfaces: serial-port | add ttyMAXX to allowed list\n-    - Interfaces: modified seccomp template to disallow\n-      'O_NOTIFICATION_PIPE'\n-    - Interfaces: fwupd | add support for modem-manager plugin\n-    - Interfaces: gpio-chardev | make unsupported and remove\n-      experimental flag to hide this feature until gpio-aggregator is\n-      available\n-    - Interfaces: hardware-random | fix udev match rule\n-    - Interfaces: timeserver-control | extend to allow timedatectl\n-      timesync commands\n-    - Interfaces: add symlinks backend\n-    - Interfaces: system key mismatch handling\n-\n- -- Ernest Lotter   Tue, 03 Jun 2025 11:46:44 +0200\n-\n-snapd (2.69) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2105854\n-    - FDE: re-factor listing of the disks based on run mode model and\n-      model to correctly resolve paths\n-    - FDE: run snapd from snap-failure with the correct keyring mode\n-    - Snap components: allow remodeling back to an old snap revision\n-      that includes components\n-    - Snap components: fix remodel to a kernel snap that is already\n-      installed on the system, but not the current kernel due to a\n-      previous remodel.\n-    - Snap components: fix for snapctl inputs that can crash snapd\n-    - Confdb (experimental): load ephemeral data when reading data via\n-      snapctl get\n-    - Confdb (experimental): load ephemeral data when reading data via\n-      snap get\n-    - Confdb (experimental): rename {plug}-view-changed hook to observe-\n-      view-{plug}\n-    - Confdb (experimental): rename confdb assertion to confdb-schema\n-    - Confdb (experimental): change operator grouping in confdb-control\n-      assertion\n-    - Confdb (experimental): add confdb-control API\n-    - AppArmor: extend the probed features to include the presence of\n-      files, as well as directories\n-    - AppArmor prompting (experimental): simplify the listener\n-    - AppArmor metadata tagging (disabled): probe parser support for\n-      tags\n-    - AppArmor metadata tagging (disabled): implement notification\n-      protocol v5\n-    - Confidential VMs: sysroot.mount is now dynamically created by\n-      snap-bootstrap instead of being a static file in the initramfs\n-    - Confidential VMs: Add new implementation of snap integrity API\n-    - Non-suid snap-confine: first phase to replace snap-confine suid\n-      with capabilities to achieve the required permissions\n-    - Initial changes for dynamic security profiles updates\n-    - Provide snap icon fallback for /v2/icons without requiring network\n-      access at runtime\n-    - Add eMMC gadget update support\n-    - Support reexec when using /usr/libexec/snapd on the host (Arch\n-      Linux, openSUSE)\n-    - Auto detect snap mount dir location on unknown distributions\n-    - Modify snap-confine AppArmor template to allow all glibc HWCAPS\n-      subdirectories to prevent launch errors\n-    - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-\n-      bootstrap to remove usage of go templates to reduce size by 4MB\n-    - Fix snap-bootstrap to mount kernel snap from\n-      /sysroot/writable/system-data\n-    - LP: #2106121 fix snap-bootstrap busy loop\n-    - Fix encoding of time.Time by using omitzero instead of omitempty\n-      (on go 1.24+)\n-    - Fix setting snapd permissions through permctl for openSUSE\n-    - Fix snap struct json tags typo\n-    - Fix snap pack configure hook permissions check incorrect file mode\n-    - Fix gadget snap reinstall to honor existing sizes of partitions\n-    - Fix to update command line when re-executing a snapd tool\n-    - Fix 'snap validate' of specific missing newline and add error on\n-      missed case of 'snap validate --refresh' without another action\n-    - Workaround for snapd-confine time_t size differences between\n-      architectures\n-    - Disallow pack and install of snapd, base and os with specific\n-      configure hooks\n-    - Drop udev build dependency that is no longer required and add\n-      missing systemd-dev dependency\n-    - Build snap-bootstrap with nomanagers tag to decrease size by 1MB\n-    - Interfaces: polkit | support custom polkit rules\n-    - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is\n-      confined by AppArmor\n-    - Interfaces: log-observe | add missing udev rule\n-    - Interfaces: hostname-control | fix call to hostnamectl in core24\n-    - Interfaces: network-control | allow removing created network\n-      namespaces\n-    - Interfaces: scsi-generic | re-enable base declaration for scsi-\n-      generic plug\n-    - Interfaces: u2f | add support for Arculus AuthentiKey\n-\n- -- Ernest Lotter   Tue, 08 Apr 2025 12:53:39 +0200\n-\n-snapd (2.68.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2098137\n-    - LP: #2109843 fix missing preseed files when running in a container\n-\n- -- Ernest Lotter   Wed, 21 May 2025 17:46:09 +0200\n-\n-snapd (2.68.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2098137\n-    - Snap components: LP: #2104933 workaround for classic 24.04/24.10\n-      models that incorrectly specify core22 instead of core24\n-    - Update build dependencies\n-\n- -- Ernest Lotter   Wed, 02 Apr 2025 19:48:25 +0200\n-\n-snapd (2.68.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2098137\n-    - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to\n-      old keyring path\n-    - Fix Plucky snapd deb build issue related to /var/lib/snapd/void\n-      permissions\n-    - Fix snapd deb build complaint about ifneq with extra bracket\n-\n- -- Ernest Lotter   Mon, 10 Mar 2025 20:13:38 +0200\n-\n-snapd (2.68.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2098137\n-    - FDE: use boot mode for FDE hooks\n-    - FDE: add snap-bootstrap compatibility check to prevent image\n-      creation with incompatible snapd and kernel snap\n-    - FDE: add argon2 out-of-process KDF support\n-    - FDE: have separate mutex for the sections writing a fresh modeenv\n-    - FDE: LP: #2099709 update secboot to e07f4ae48e98\n-    - Confdb: support pruning ephemeral data and process alternative\n-      types in order\n-    - core-initrd: look at env to mount directly to /sysroot\n-    - core-initrd: prepare for Plucky build and split out 24.10\n-      (Oracular)\n-    - Fix missing primed packages in snapd snap manifest\n-    - Interfaces: posix-mq | fix incorrect clobbering of global variable\n-      and make interface more precise\n-    - Interfaces: opengl | add more kernel fusion driver files\n-\n- -- Ernest Lotter   Thu, 27 Feb 2025 09:56:20 +0200\n-\n-snapd (2.68.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2098137\n-    - Fix snap-confine type specifier type mismatch on armhf\n-\n- -- Ernest Lotter   Mon, 24 Feb 2025 10:31:49 +0200\n-\n-snapd (2.68) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2098137\n-    - FDE: add support for new and more extensible key format that is\n-      unified between TPM and FDE hook\n-    - FDE: add support for adding passphrases during installation\n-    - FDE: update secboot to 30317622bbbc\n-    - Snap components: make kernel components available on firstboot\n-      after either initramfs or ephemeral rootfs style install\n-    - Snap components: mount drivers tree from initramfs so kernel\n-      modules are available in early boot stages\n-    - Snap components: support remodeling to models that contain\n-      components\n-    - Snap components: support offline remodeling to models that contain\n-      components\n-    - Snap components: support creating new recovery systems with\n-      components\n-    - Snap components: support downloading components with 'snap\n-      download' command\n-    - Snap components: support sideloading asserted components\n-    - AppArmor Prompting(experimental): improve version checks and\n-      handling of listener notification protocol for communication with\n-      kernel AppArmor\n-    - AppArmor Prompting(experimental): make prompt replies idempotent,\n-      and have at most one rule for any given path pattern, with\n-      potentially mixed outcomes and lifespans\n-    - AppArmor Prompting(experimental): timeout unresolved prompts after\n-      a period of client inactivity\n-    - AppArmor Prompting(experimental): return an error if a patch\n-      request to the API would result in a rule without any permissions\n-    - AppArmor Prompting(experimental): warn if there is no prompting\n-      client present but prompting is enabled, or if a prompting-related\n-      error occurs during snapd startup\n-    - AppArmor Prompting(experimental): do not log error when converting\n-      empty permissions to AppArmor permissions\n-    - Confdb(experimental): rename registries to confdbs (including API\n-      /v2/registries => /v2/confdb)\n-    - Confdb(experimental): support marking confdb schemas as ephemeral\n-    - Confdb(experimental): add confdb-control assertion and feature\n-      flag\n-    - Refresh App Awareness(experimental): LP: #2089195 prevent\n-      possibility of incorrect notification that snap will quit and\n-      update\n-    - Confidential VMs: snap-bootstrap support for loading partition\n-      information from a manifest file for cloudimg-rootfs mode\n-    - Confidential VMs: snap-bootstrap support for setting up cloudimg-\n-      rootfs as an overlayfs with integrity protection\n-    - dm-verity for essential snaps: add support for snap-integrity\n-      assertion\n-    - Interfaces: modify AppArmor template to allow owner read on\n-      @{PROC}/@{pid}/fdinfo/*\n-    - Interfaces: LP: #2072987 modify AppArmor template to allow using\n-      setpriv to run daemon as non-root user\n-    - Interfaces: add configfiles backend that ensures the state of\n-      configuration files in the filesystem\n-    - Interfaces: add ldconfig backend that exposes libraries coming\n-      from snaps to either the rootfs or to other snaps\n-    - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when\n-      inside a container\n-    - Interfaces: add auditd-support interface that grants audit_control\n-      capability and required paths for auditd to function\n-    - Interfaces: add checkbox-support interface that allows\n-      unrestricted access to all devices\n-    - Interfaces: fwupd | allow access to dell bios recovery\n-    - Interfaces: fwupd | allow access to shim and fallback shim\n-    - Interfaces: mount-control | add mount option validator to detect\n-      mount option conflicts early\n-    - Interfaces: cpu-control | add read access to /sys/kernel/irq/\n-    - Interfaces: locale-control | changed to be implicit on Ubuntu Core\n-      Desktop\n-    - Interfaces: microstack-support | support for utilizing of AMD SEV\n-      capabilities\n-    - Interfaces: u2f | added missing OneSpan device product IDs\n-    - Interfaces: auditd-support | grant seccomp setpriority\n-    - Interfaces: opengl interface | enable parsing of nvidia driver\n-      information files\n-    - Allow mksquashfs 'xattrs' when packing snap types os, core, base\n-      and snapd as part of work to support non-root snap-confine\n-    - Upstream/downstream packaging changes and build updates\n-    - Improve error logs for malformed desktop files to also show which\n-      desktop file is at fault\n-    - Provide more precise error message when overriding channels with\n-      grade during seed creation\n-    - Expose 'snap prepare-image' validation parameter\n-    - Add snap-seccomp 'dump' command that dumps the filter rules from a\n-      compiled profile\n-    - Add fallback release info location /etc/initrd-release\n-    - Added core-initrd to snapd repo and fixed issues with ubuntu-core-\n-      initramfs deb builds\n-    - Remove stale robust-mount-namespace-updates experimental feature\n-      flag\n-    - Remove snapd-snap experimental feature (rejected) and it's feature\n-      flag\n-    - Changed snap-bootstrap to mount base directly on /sysroot\n-    - Mount ubuntu-seed mounted as no-{suid,exec,dev}\n-    - Mapping volumes to disks: add support for volume-assignments in\n-      gadget\n-    - Fix silently broken binaries produced by distro patchelf 0.14.3 by\n-      using locally build patchelf 0.18\n-    - Fix mismatch between listed refresh candidates and actual refresh\n-      due to outdated validation sets\n-    - Fix 'snap get' to produce compact listing for tty\n-    - Fix missing store-url by keeping it as part of auxiliary store\n-      info\n-    - Fix snap-confine attempting to retrieve device cgroup setup inside\n-      container where it is not available\n-    - Fix 'snap set' and 'snap get' panic on empty strings with early\n-      error checking\n-    - Fix logger debug entries to show correct caller and file\n-      information\n-    - Fix issue preventing hybrid systems from being seeded on first\n-      boot\n-    - LP: #1966203 remove auto-import udev rules not required by deb\n-      package to avoid unwanted syslog errors\n-    - LP: #1886414 fix progress reporting when stdout is on a tty, but\n-      stdin is not\n-\n- -- Ernest Lotter   Thu, 13 Feb 2025 12:42:09 +0200\n-\n-snapd (2.67.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2089691\n-    - Fix apparmor permissions to allow snaps access to kernel modules\n-      and firmware on UC24, which also fixes the kernel-modules-control\n-      interface on UC24\n-    - AppArmor prompting (experimental): disallow /./ and /../ in path\n-      patterns\n-    - Fix 'snap run' getent based user lookup in case of bad PATH\n-    - Fix snapd using the incorrect AppArmor version during undo of an\n-      refresh for regenerating snap profiles\n-    - Add new syscalls to base templates\n-    - hardware-observe interface: allow riscv_hwprobe syscall\n-    - mount-observe interface: allow listmount and statmount syscalls\n-\n- -- Ernest Lotter   Wed, 15 Jan 2025 22:02:37 +0200\n-\n-snapd (2.67) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2089691\n-    - AppArmor prompting (experimental): allow overlapping rules\n-    - Registry view (experimental): Changes to registry data (from both\n-      users and snaps) can be validated and saved by custodian snaps\n-    - Registry view (experimental): Support 'snapctl get --pristine' to\n-      read the registry data excluding staged transaction changes\n-    - Registry view (experimental): Put registry commands behind\n-      experimental feature flag\n-    - Components: Make modules shipped/created by kernel-modules\n-      components available right after reboot\n-    - Components: Add tab completion for local component files\n-    - Components: Allow installing snaps and components from local files\n-      jointly on the CLI\n-    - Components: Allow 'snapctl model' command for gadget and kernel\n-      snaps\n-    - Components: Add 'snap components' command\n-    - Components: Bug fixes\n-    - eMMC gadget updates (WIP): add syntax support in gadget.yaml for\n-      eMMC schema\n-    - Support for ephemeral recovery mode on hybrid systems\n-    - Support for dm-verity options in snap-bootstrap\n-    - Support for overlayfs options and allow empty what argument for\n-      tmpfs\n-    - Enable ubuntu-image to determine the size of the disk image to\n-      create\n-    - Expose 'snap debug' commands 'validate-seed' and 'seeding'\n-    - Add debug API option to use dedicated snap socket /run/snapd-\n-      snap.socket\n-    - Hide experimental features that are no longer required\n-      (accepted/rejected)\n-    - Mount ubuntu-save partition with no{exec,dev,suid} at install, run\n-      and factory-reset\n-    - Improve memory controller support with cgroup v2\n-    - Support ssh socket activation configurations (used by ubuntu\n-      22.10+)\n-    - Fix generation of AppArmor profile with incorrect revision during\n-      multi snap refresh\n-    - Fix refresh app awareness related deadlock edge case\n-    - Fix not caching delta updated snap download\n-    - Fix passing non root uid, guid to initial tmpfs mount\n-    - Fix ignoring snaps in try mode when amending\n-    - Fix reloading of service activation units to avoid systemd errors\n-    - Fix snapd snap FIPS build on Launchpad to use Advantage Pro FIPS\n-      updates PPA\n-    - Make killing of snap apps best effort to avoid possibility of\n-      malicious failure loop\n-    - Alleviate impact of auto-refresh failure loop with progressive\n-      delay\n-    - Dropped timedatex in selinux-policy to avoid runtime issue\n-    - Fix missing syscalls in seccomp profile\n-    - Modify AppArmor template to allow using SNAP_REEXEC on arch\n-      systems\n-    - Modify AppArmor template to allow using vim.tiny (available in\n-      base snaps)\n-    - Modify AppArmor template to add read-access to debian_version\n-    - Modify AppArmor template to allow owner to read\n-      @{PROC}/@{pid}/sessionid\n-    - {common,personal,system}-files interface: prohibit trailing @ in\n-      filepaths\n-    - {desktop,shutdown,system-observe,upower-observe} interface:\n-      improve for Ubuntu Core Desktop\n-    - custom-device interface: allow @ in custom-device filepaths\n-    - desktop interface: improve launch entry and systray integration\n-      with session\n-    - desktop-legacy interface: allow DBus access to\n-      com.canonical.dbusmenu\n-    - fwupd interface: allow access to nvmem for thunderbolt plugin\n-    - mpris interface: add plasmashell as label\n-    - mount-control interface: add support for nfs mounts\n-    - network-{control,manager} interface: add missing dbus link rules\n-    - network-manager-observe interface: add getDevices methods\n-    - opengl interface: add Kernel Fusion Driver access to opengl\n-    - screen-inhibit-control interface: improve screen inhibit control\n-      for use on core\n-    - udisks2 interface: allow ping of the UDisks2 service\n-    - u2f-devices interface: add Nitrokey Passkey\n-\n- -- Ernest Lotter   Mon, 02 Dec 2024 23:14:24 +0200\n-\n-snapd (2.66.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2083490\n-    - AppArmor prompting (experimental): Fix kernel prompting support\n-      check\n-    - Allow kernel snaps to have content slots\n-    - Fix ignoring snaps in try mode when amending\n-\n- -- Ernest Lotter   Fri, 11 Oct 2024 10:05:46 +0200\n-\n-snapd (2.66) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2083490\n-    - AppArmor prompting (experimental): expand kernel support checks\n-    - AppArmor prompting (experimental): consolidate error messages and\n-      add error kinds\n-    - AppArmor prompting (experimental): grant /v2/snaps/{name} via\n-      snap-interfaces-requests-control\n-    - AppArmor prompting (experimental): add checks for duplicate\n-      pattern variants\n-    - Registry views (experimental): add handlers that commit (and\n-      cleanup) registry transactions\n-    - Registry views (experimental): add a snapctl fail command for\n-      rejecting registry transactions\n-    - Registry views (experimental): allow custodian snaps to implement\n-      registry hooks that modify and save registry data\n-    - Registry views (experimental): run view-changed hooks only for\n-      snaps plugging views affected by modified paths\n-    - Registry views (experimental): make registry transactions\n-      serialisable\n-    - Snap components: handle refreshing components to revisions that\n-      have been on the system before\n-    - Snap components: enable creating Ubuntu Core images that contain\n-      components\n-    - Snap components: handle refreshing components independently of\n-      snaps\n-    - Snap components: handle removing components when refreshing a snap\n-      that no longer defines them\n-    - Snap components: extend snapd Ubuntu Core installation API to\n-      allow for picking optional snaps and components to install\n-    - Snap components: extend kernel.yaml with \"dynamic-modules\",\n-      allowing kernel to define a location for kmods from component\n-      hooks\n-    - Snap components: renamed component type \"test\" to \"standard\"\n-    - Desktop IDs: support installing desktop files with custom names\n-      based on desktop-file-ids desktop interface plug attr\n-    - Auto-install snapd on classic systems as prerequisite for any non-\n-      essential snap install\n-    - Support loading AppArmor profiles on WSL2 with non-default kernel\n-      and securityfs mounted\n-    - Debian/Fedora packaging updates\n-    - Add snap debug command for investigating execution aspects of the\n-      snap toolchain\n-    - Improve snap pack error for easier parsing\n-    - Add support for user services when refreshing snaps\n-    - Add snap remove --terminate flag for terminating running snap\n-      processes\n-    - Support building FIPS complaint snapd deb and snap\n-    - Fix to not use nss when looking up for users/groups from snapd\n-      snap\n-    - Fix ordering in which layout changes are saved\n-    - Patch snapd snap dynamic linker to ignore LD_LIBRARY_PATH and\n-      related variables\n-    - Fix libexec dir for openSUSE Slowroll\n-    - Fix handling of the shared snap directory for parallel installs\n-    - Allow writing to /run/systemd/journal/dev-log by default\n-    - Avoid state lock during snap removal to avoid delaying other snapd\n-      operations\n-    - Add nomad-support interface to enable running Hashicorp Nomad\n-    - Add intel-qat interface\n-    - u2f-devices interface: add u2f trustkey t120 product id and fx\n-      series fido u2f devices\n-    - desktop interface: improve integration with xdg-desktop-portal\n-    - desktop interface: add desktop-file-ids plug attr to desktop\n-      interface\n-    - unity7 interface: support desktop-file-ids in desktop files rule\n-      generation\n-    - desktop-legacy interface: support desktop-file-ids in desktop\n-      files rule generation\n-    - desktop-legacy interface: grant access to gcin socket location\n-    - login-session-observe interface: allow introspection\n-    - custom-device interface: allow to explicitly identify matching\n-      device in udev tagging block\n-    - system-packages-doc interface: allow reading /usr/share/javascript\n-    - modem-manager interface: add new format of WWAN ports\n-    - pcscd interface: allow pcscd to read opensc.conf\n-    - cpu-control interface: add IRQ affinity control to cpu_control\n-    - opengl interface: add support for cuda workloads on Tegra iGPU in\n-      opengl interface\n-\n- -- Ernest Lotter   Fri, 04 Oct 2024 14:22:03 +0200\n-\n-snapd (2.65.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2077473\n-    - Fix missing aux info from store on snap setup\n-\n- -- Ernest Lotter   Thu, 12 Sep 2024 09:40:17 +0200\n-\n-snapd (2.65.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2077473\n-    - Bump squashfuse from version 0.5.0 to 0.5.2 (used in snapd deb\n-      only)\n-\n- -- Ernest Lotter   Fri, 06 Sep 2024 17:08:45 +0200\n-\n-snapd (2.65.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2077473\n-    - Support building snapd using base Core22 (Snapcraft 8.x)\n-    - FIPS: support building FIPS complaint snapd variant that switches\n-      to FIPS mode when the system boots with FIPS enabled\n-    - AppArmor: update to latest 4.0.2 release\n-    - AppArmor: enable using ABI 4.0 from host parser\n-    - AppArmor: fix parser lookup\n-    - AppArmor: support AppArmor snippet priorities\n-    - AppArmor: allow reading cgroup memory.max file\n-    - AppArmor: allow using snap-exec coming from the snapd snap when\n-      starting a confined process with jailmode\n-    - AppArmor prompting (experimental): add checks for prompting\n-      support, include prompting status in system key, and restart snapd\n-      if prompting flag changes\n-    - AppArmor prompting (experimental): include prompt prefix in\n-      AppArmor rules if prompting is supported and enabled\n-    - AppArmor prompting (experimental): add common types, constraints,\n-      and mappings from AppArmor permissions to abstract permissions\n-    - AppArmor prompting (experimental): add path pattern parsing and\n-      matching\n-    - AppArmor prompting (experimental): add path pattern precedence\n-      based on specificity\n-    - AppArmor prompting (experimental): add packages to manage\n-      outstanding request prompts and rules\n-    - AppArmor prompting (experimental): add prompting API and notice\n-      types, which require snap-interfaces-requests-control interface\n-    - AppArmor prompting (experimental): feature flag can only be\n-      enabled if prompting is supported, handler service connected, and\n-      the service can be started\n-    - Registry views (experimental): rename from aspects to registries\n-    - Registry views (experimental): support reading registry views and\n-      setting/unsetting registry data using snapctl\n-    - Registry views (experimental): fetch and refresh registry\n-      assertions as needed\n-    - Registry views (experimental): restrict view paths from using a\n-      number as first character and view names to storage path style\n-      patterns\n-    - Snap components: support installing snaps and components from\n-      files at the same time (no REST API/CLI)\n-    - Snap components: support downloading components related assertions\n-      from the store\n-    - Snap components: support installing components from the store\n-    - Snap components: support removing components individually and\n-      during snap removal\n-    - Snap components: support kernel modules as components\n-    - Snap components: support for component install, pre-refresh and\n-      post-refresh hooks\n-    - Snap components: initial support for building systems that contain\n-      components\n-    - Refresh app awareness (experimental): add data field for\n-      /v2/changes REST API to allow associating each task with affected\n-      snaps\n-    - Refresh app awareness (experimental): use the app name from\n-      .desktop file in notifications\n-    - Refresh app awareness (experimental): give snap-refresh-observe\n-      interface access to /v2/snaps/{name} endpoint\n-    - Improve snap-confine compatibility with nvidia drivers\n-    - Allow re-exec when SNAP_REEXEC is set for unlisted distros to\n-      simplify testing\n-    - Allow mixing revision and channel on snap install\n-    - Generate GNU build ID for Go binaries\n-    - Add missing etelpmoc.sh for shell completion\n-    - Do not attempt to run snapd on classic when re-exec is disabled\n-    - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse\n-    - Add snap debug API command to enable running raw queries\n-    - Enable snap-confine snap mount directory detection\n-    - Replace global seccomp filter with deny rules in standard seccomp\n-      template\n-    - Remove support for Ubuntu Core Launcher (superseded by snap-\n-      confine)\n-    - Support creating pending serial bound users after serial assertion\n-      becomes available\n-    - Support disabling cloud-init using kernel command-line\n-    - In hybrid systems, apps can refresh without waiting for restarts\n-      required by essential snaps\n-    - Ship snap-debug-info.sh script used for system diagnostics\n-    - Improve error messages when attempting to run non-existent snap\n-    - Switch to -u UID:GID for strace-static\n-    - Support enabling snapd logging with snap set system\n-      debug.snapd.{log,log-level}\n-    - Add options system.coredump.enable and system.coredump.maxuse to\n-      support using systemd-coredump on Ubuntu Core\n-    - Provide documentation URL for 'snap interface '\n-    - Fix snapd riscv64 build\n-    - Fix restarting activated services instead of their activator units\n-      (i.e. sockets, timers)\n-    - Fix potential unexpected auto-refresh of snap on managed schedule\n-    - Fix potential segfault by guarding against kernel command-line\n-      changes on classic system\n-    - Fix proxy entries in /etc/environment with missing newline that\n-      caused later manual entries to not be usable\n-    - Fix offline remodelling by ignoring prerequisites that will\n-      otherwise be downloaded from store\n-    - Fix devmode seccomp deny regression that caused spamming the log\n-      instead of actual denies\n-    - Fix snap lock leak during refresh\n-    - Fix not re-pinning validation sets that were already pinned when\n-      enforcing new validation sets\n-    - Fix handling of unexpected snapd runtime failure\n-    - Fix /v2/notices REST API skipping notices with duplicate\n-      timestamps\n-    - Fix comparing systemd versions that may contain pre-release\n-      suffixes\n-    - Fix udev potentially starting before snap-device-helper is made\n-      available\n-    - Fix race in snap seed metadata loading\n-    - Fix treating cloud-init exit status 2 as error\n-    - Fix to prevent sending refresh complete notification if snap snap-\n-      refresh-observe interface is connected\n-    - Fix to queue snapctl service commands if run from the default-\n-      configure hook to ensure they get up-to-date config values\n-    - Fix stop service failure when the service is not actually running\n-      anymore\n-    - Fix parsing /proc/PID/mounts with spaces\n-    - Add registry interface that provides snaps access to a particular\n-      registry view\n-    - Add snap-interfaces-requests-control interface to enable prompting\n-      client snaps\n-    - steam-support interface: remove all AppArmor and seccomp\n-      restrictions to improve user experience\n-    - opengl interface: improve compatibility with nvidia drivers\n-    - home interface: autoconnect home on Ubuntu Core Desktop\n-    - serial-port interface: support RPMsg tty\n-    - display-control interface: allow changing LVDS backlight power and\n-      brightness\n-    - power-control interface: support for battery charging thesholds,\n-      type/status and AC type/status\n-    - cpu-control interface: allow CPU C-state control\n-    - raw-usb interface: support RPi5 and Thinkpad x13s\n-    - custom-device interface: allow device file locking\n-    - lxd-support interface: allow LXD to self-manage its own cgroup\n-    - network-manager interface: support MPTCP sockets\n-    - network-control interface: allow plug/slot access to gnutls config\n-      and systemd resolved cache flushing via D-Bus\n-    - network-control interface: allow wpa_supplicant dbus api\n-    - gpio-control interface: support gpiochip* devices\n-    - polkit interface: fix \"rw\" mount option check\n-    - u2f-devices interface: enable additional security keys\n-    - desktop interface: enable kde theming support\n-\n- -- Ernest Lotter   Sat, 24 Aug 2024 10:31:20 +0200\n-\n-snapd (2.65) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2077473\n-    - Support building snapd using base Core22 (Snapcraft 8.x)\n-    - FIPS: support building FIPS complaint snapd variant that switches\n-      to FIPS mode when the system boots with FIPS enabled\n-    - AppArmor: update to latest 4.0.2 release\n-    - AppArmor: enable using ABI 4.0 from host parser\n-    - AppArmor: fix parser lookup\n-    - AppArmor: support AppArmor snippet priorities\n-    - AppArmor: allow reading cgroup memory.max file\n-    - AppArmor: allow using snap-exec coming from the snapd snap when\n-      starting a confined process with jailmode\n-    - AppArmor prompting (experimental): add checks for prompting\n-      support, include prompting status in system key, and restart snapd\n-      if prompting flag changes\n-    - AppArmor prompting (experimental): include prompt prefix in\n-      AppArmor rules if prompting is supported and enabled\n-    - AppArmor prompting (experimental): add common types, constraints,\n-      and mappings from AppArmor permissions to abstract permissions\n-    - AppArmor prompting (experimental): add path pattern parsing and\n-      matching\n-    - AppArmor prompting (experimental): add path pattern precedence\n-      based on specificity\n-    - AppArmor prompting (experimental): add packages to manage\n-      outstanding request prompts and rules\n-    - AppArmor prompting (experimental): add prompting API and notice\n-      types, which require snap-interfaces-requests-control interface\n-    - AppArmor prompting (experimental): feature flag can only be\n-      enabled if prompting is supported, handler service connected, and\n-      the service can be started\n-    - Registry views (experimental): rename from aspects to registries\n-    - Registry views (experimental): support reading registry views and\n-      setting/unsetting registry data using snapctl\n-    - Registry views (experimental): fetch and refresh registry\n-      assertions as needed\n-    - Registry views (experimental): restrict view paths from using a\n-      number as first character and view names to storage path style\n-      patterns\n-    - Snap components: support installing snaps and components from\n-      files at the same time (no REST API/CLI)\n-    - Snap components: support downloading components related assertions\n-      from the store\n-    - Snap components: support installing components from the store\n-    - Snap components: support removing components individually and\n-      during snap removal\n-    - Snap components: support kernel modules as components\n-    - Snap components: support for component install, pre-refresh and\n-      post-refresh hooks\n-    - Snap components: initial support for building systems that contain\n-      components\n-    - Refresh app awareness (experimental): add data field for\n-      /v2/changes REST API to allow associating each task with affected\n-      snaps\n-    - Refresh app awareness (experimental): use the app name from\n-      .desktop file in notifications\n-    - Refresh app awareness (experimental): give snap-refresh-observe\n-      interface access to /v2/snaps/{name} endpoint\n-    - Improve snap-confine compatibility with nvidia drivers\n-    - Allow re-exec when SNAP_REEXEC is set for unlisted distros to\n-      simplify testing\n-    - Allow mixing revision and channel on snap install\n-    - Generate GNU build ID for Go binaries\n-    - Add missing etelpmoc.sh for shell completion\n-    - Do not attempt to run snapd on classic when re-exec is disabled\n-    - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse\n-    - Add snap debug API command to enable running raw queries\n-    - Enable snap-confine snap mount directory detection\n-    - Replace global seccomp filter with deny rules in standard seccomp\n-      template\n-    - Remove support for Ubuntu Core Launcher (superseded by snap-\n-      confine)\n-    - Support creating pending serial bound users after serial assertion\n-      becomes available\n-    - Support disabling cloud-init using kernel command-line\n-    - In hybrid systems, apps can refresh without waiting for restarts\n-      required by essential snaps\n-    - Ship snap-debug-info.sh script used for system diagnostics\n-    - Improve error messages when attempting to run non-existent snap\n-    - Switch to -u UID:GID for strace-static\n-    - Support enabling snapd logging with snap set system\n-      debug.snapd.{log,log-level}\n-    - Add options system.coredump.enable and system.coredump.maxuse to\n-      support using systemd-coredump on Ubuntu Core\n-    - Provide documentation URL for 'snap interface '\n-    - Fix restarting activated services instead of their activator units\n-      (i.e. sockets, timers)\n-    - Fix potential unexpected auto-refresh of snap on managed schedule\n-    - Fix potential segfault by guarding against kernel command-line\n-      changes on classic system\n-    - Fix proxy entries in /etc/environment with missing newline that\n-      caused later manual entries to not be usable\n-    - Fix offline remodelling by ignoring prerequisites that will\n-      otherwise be downloaded from store\n-    - Fix devmode seccomp deny regression that caused spamming the log\n-      instead of actual denies\n-    - Fix snap lock leak during refresh\n-    - Fix not re-pinning validation sets that were already pinned when\n-      enforcing new validation sets\n-    - Fix handling of unexpected snapd runtime failure\n-    - Fix /v2/notices REST API skipping notices with duplicate\n-      timestamps\n-    - Fix comparing systemd versions that may contain pre-release\n-      suffixes\n-    - Fix udev potentially starting before snap-device-helper is made\n-      available\n-    - Fix race in snap seed metadata loading\n-    - Fix treating cloud-init exit status 2 as error\n-    - Fix to prevent sending refresh complete notification if snap snap-\n-      refresh-observe interface is connected\n-    - Fix to queue snapctl service commands if run from the default-\n-      configure hook to ensure they get up-to-date config values\n-    - Fix stop service failure when the service is not actually running\n-      anymore\n-    - Fix parsing /proc/PID/mounts with spaces\n-    - Add registry interface that provides snaps access to a particular\n-      registry view\n-    - Add snap-interfaces-requests-control interface to enable prompting\n-      client snaps\n-    - steam-support interface: remove all AppArmor and seccomp\n-      restrictions to improve user experience\n-    - opengl interface: improve compatibility with nvidia drivers\n-    - home interface: autoconnect home on Ubuntu Core Desktop\n-    - serial-port interface: support RPMsg tty\n-    - display-control interface: allow changing LVDS backlight power and\n-      brightness\n-    - power-control interface: support for battery charging thesholds,\n-      type/status and AC type/status\n-    - cpu-control interface: allow CPU C-state control\n-    - raw-usb interface: support RPi5 and Thinkpad x13s\n-    - custom-device interface: allow device file locking\n-    - lxd-support interface: allow LXD to self-manage its own cgroup\n-    - network-manager interface: support MPTCP sockets\n-    - network-control interface: allow plug/slot access to gnutls config\n-      and systemd resolved cache flushing via D-Bus\n-    - network-control interface: allow wpa_supplicant dbus api\n-    - gpio-control interface: support gpiochip* devices\n-    - polkit interface: fix \"rw\" mount option check\n-    - u2f-devices interface: enable additional security keys\n-    - desktop interface: enable kde theming support\n-\n- -- Ernest Lotter   Fri, 23 Aug 2024 08:49:28 +0200\n-\n-snapd (2.64) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2072986\n-    - Support building snapd using base Core22 (Snapcraft 8.x)\n-    - FIPS: support building FIPS complaint snapd variant that switches\n-      to FIPS mode when the system boots with FIPS enabled\n-    - AppArmor: update to AppArmor 4.0.1\n-    - AppArmor: support AppArmor snippet priorities\n-    - AppArmor prompting: add checks for prompting support, include\n-      prompting status in system key, and restart snapd if prompting\n-      flag changes\n-    - AppArmor prompting: include prompt prefix in AppArmor rules if\n-      prompting is supported and enabled\n-    - AppArmor prompting: add common types, constraints, and mappings\n-      from AppArmor permissions to abstract permissions\n-    - AppArmor prompting: add path pattern parsing and matching\n-    - Registry views (experimental): rename from aspects to registries\n-    - Registry views (experimental): support reading registry views\n-      using snapctl\n-    - Registry views (experimental): restrict view paths from using a\n-      number as first character and view names to storage path style\n-      patterns\n-    - Snap components: support installing snaps and components from\n-      files at the same time (no REST API/CLI)\n-    - Snap components: support downloading components related assertions\n-      from the store\n-    - Snap components: support installing components from the store (no\n-      REST API/CLI)\n-    - Snap components: support removing components (REST API, no CLI)\n-    - Snap components: started support for component hooks\n-    - Snap components: support kernel modules as components\n-    - Refresh app awareness (experimental): add data field for\n-      /v2/changes REST API to allow associating each task with affected\n-      snaps\n-    - Refresh app awareness (experimental): use the app name from\n-      .desktop file in notifications\n-    - Refresh app awareness (experimental): give snap-refresh-observe\n-      interface access to /v2/snaps/{name} endpoint\n-    - Allow re-exec when SNAP_REEXEC is set for unlisted distros to\n-      simplify testing\n-    - Generate GNU build ID for Go binaries\n-    - Add missing etelpmoc.sh for shell completion\n-    - Do not attempt to run snapd on classic when re-exec is disabled\n-    - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse\n-    - Add snap debug api command to enable running raw queries\n-    - Enable snap-confine snap mount directory detection\n-    - Replace global seccomp filter with deny rules in standard seccomp\n-      template\n-    - Remove support for Ubuntu Core Launcher (superseded by snap-\n-      confine)\n-    - Support creating pending serial bound users after serial assertion\n-      becomes available\n-    - Support disabling cloud-init using kernel command-line\n-    - In hybrid systems, apps can refresh without waiting for restarts\n-      required by essential snaps\n-    - Ship snap-debug-info.sh script used for system diagnostics\n-    - Improve error messages when attempting to run non-existent snap\n-    - Switch to -u UID:GID for strace-static\n-    - Support enabling snapd logging with snap set system\n-      debug.snapd.{log,log-level}\n-    - Fix restarting activated services instead of their activator units\n-      (i.e. sockets, timers)\n-    - Fix potential unexpected auto-refresh of snap on managed schedule\n-    - Fix potential segfault by guarding against kernel command-line\n-      changes on classic system\n-    - Fix proxy entries in /etc/environment with missing newline that\n-      caused later manual entries to not be usable\n-    - Fix offline remodelling by ignoring prerequisites that will\n-      otherwise be downloaded from store\n-    - Fix devmode seccomp deny regression that caused spamming the log\n-      instead of actual denies\n-    - Fix snap lock leak during refresh\n-    - Fix not re-pinning validation sets that were already pinned when\n-      enforcing new validation sets\n-    - Fix handling of unexpected snapd runtime failure\n-    - Fix /v2/notices REST API skipping notices with duplicate\n-      timestamps\n-    - Fix comparing systemd versions that may contain pre-release\n-      suffixes\n-    - Fix udev potentially starting before snap-device-helper is made\n-      available\n-    - Fix race in snap seed metadata loading\n-    - Fix treating cloud-init exit status 2 as error\n-    - Fix to prevent sending refresh complete notification if snap snap-\n-      refresh-observe interface is connected\n-    - Fix to queue snapctl service commands if run from the default-\n-      configure hook to ensure they get up-to-date config values\n-    - Fix stop service failure when the service is not actually running\n-      anymore\n-    - Add registry interface that provides snaps access to a particular\n-      registry view\n-    - steam-support interface: relaxed AppArmor and seccomp restrictions\n-      to improve user experience\n-    - home interface: autoconnect home on Ubuntu Core Desktop\n-    - serial-port interface: support RPMsg tty\n-    - display-control interface: allow changing LVDS backlight power and\n-      brightness\n-    - power-control interface: support for battery charging thesholds,\n-      type/status and AC type/status\n-    - cpu-control interface: allow CPU C-state control\n-    - raw-usb interface: support RPi5 and Thinkpad x13s\n-    - custom-device interface: allow device file locking\n-    - lxd-support interface: allow LXD to self-manage its own cgroup\n-    - network-manager interface: support MPTCP sockets\n-    - network-control interface: allow plug/slot access to gnutls config\n-      and systemd resolved cache flushing via D-Bus\n-\n- -- Ernest Lotter   Wed, 24 Jul 2024 21:11:59 +0200\n-\n-snapd (2.63) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2061179\n-    - Support for snap services to show the current status of user\n-      services (experimental)\n-    - Refresh app awareness: record snap-run-inhibit notice when\n-      starting app from snap that is busy with refresh (experimental)\n-    - Refresh app awareness: use warnings as fallback for desktop\n-      notifications (experimental)\n-    - Aspect based configuration: make request fields in the aspect-\n-      bundle's rules optional (experimental)\n-    - Aspect based configuration: make map keys conform to the same\n-      format as path sub-keys (experimental)\n-    - Aspect based configuration: make unset and set behaviour similar\n-      to configuration options (experimental)\n-    - Aspect based configuration: limit nesting level for setting value\n-      (experimental)\n-    - Components: use symlinks to point active snap component revisions\n-    - Components: add model assertion support for components\n-    - Components: fix to ensure local component installation always gets\n-      a new revision number\n-    - Add basic support for a CIFS remote filesystem-based home\n-      directory\n-    - Add support for AppArmor profile kill mode to avoid snap-confine\n-      error\n-    - Allow more than one interface to grant access to the same API\n-      endpoint or notice type\n-    - Allow all snapd service's control group processes to send systemd\n-      notifications to prevent warnings flooding the log\n-    - Enable not preseeded single boot install\n-    - Update secboot to handle new sbatlevel\n-    - Fix to not use cgroup for non-strict confined snaps (devmode,\n-      classic)\n-    - Fix two race conditions relating to freedesktop notifications\n-    - Fix missing tunables in snap-update-ns AppArmor template\n-    - Fix rejection of snapd snap udev command line by older host snap-\n-      device-helper\n-    - Rework seccomp allow/deny list\n-    - Clean up files removed by gadgets\n-    - Remove non-viable boot chains to avoid secboot failure\n-    - posix_mq interface: add support for missing time64 mqueue syscalls\n-      mq_timedreceive_time64 and mq_timedsend_time64\n-    - password-manager-service interface: allow kwalletd version 6\n-    - kubernetes-support interface: allow SOCK_SEQPACKET sockets\n-    - system-observe interface: allow listing systemd units and their\n-      properties\n-    - opengl interface: enable use of nvidia container toolkit CDI\n-      config generation\n-\n- -- Ernest Lotter   Wed, 24 Apr 2024 02:00:39 +0200\n-\n-snapd (2.62) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2058277\n-    - Aspects based configuration schema support (experimental)\n-    - Refresh app awareness support for UI (experimental)\n-    - Support for user daemons by introducing new control switches\n-      --user/--system/--users for service start/stop/restart\n-      (experimental)\n-    - Add AppArmor prompting experimental flag (feature currently\n-      unsupported)\n-    - Installation of local snap components of type test\n-    - Packaging of components with snap pack\n-    - Expose experimental features supported/enabled in snapd REST API\n-      endpoint /v2/system-info\n-    - Support creating and removing recovery systems for use by factory\n-      reset\n-    - Enable API route for creating and removing recovery systems using\n-      /v2/systems with action create and /v2/systems/{label} with action\n-      remove\n-    - Lift requirements for fde-setup hook for single boot install\n-    - Enable single reboot gadget update for UC20+\n-    - Allow core to be removed on classic systems\n-    - Support for remodeling on hybrid systems\n-    - Install desktop files on Ubuntu Core and update after snapd\n-      upgrade\n-    - Upgrade sandbox features to account for cgroup v2 device filtering\n-    - Support snaps to manage their own cgroups\n-    - Add support for AppArmor 4.0 unconfined profile mode\n-    - Add AppArmor based read access to /etc/default/keyboard\n-    - Upgrade to squashfuse 0.5.0\n-    - Support useradd utility to enable removing Perl dependency for\n-      UC24+\n-    - Support for recovery-chooser to use console-conf snap\n-    - Add support for --uid/--gid using strace-static\n-    - Add support for notices (from pebble) and expose via the snapd\n-      REST API endpoints /v2/notices and /v2/notice\n-    - Add polkit authentication for snapd REST API endpoints\n-      /v2/snaps/{snap}/conf and /v2/apps\n-    - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps\n-    - Add refresh-inhibited select query to REST API endpoint /v2/snaps\n-    - Take into account validation sets during remodeling\n-    - Improve offline remodeling to use installed revisions of snaps to\n-      fulfill the remodel revision requirement\n-    - Add rpi configuration option sdtv_mode\n-    - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if\n-      present on host\n-    - Fix gadget zero-sized disk mapping caused by not ignoring zero\n-      sized storage traits\n-    - Fix gadget install case where size of existing partition was not\n-      correctly taken into account\n-    - Fix trying to unmount early kernel mount if it does not exist\n-    - Fix restarting mount units on snapd start\n-    - Fix call to udev in preseed mode\n-    - Fix to ensure always setting up the device cgroup for base bare\n-      and core24+\n-    - Fix not copying data from newly set homedirs on revision change\n-    - Fix leaving behind empty snap home directories after snap is\n-      removed (resulting in broken symlink)\n-    - Fix to avoid using libzstd from host by adding to snapd snap\n-    - Fix autorefresh to correctly handle forever refresh hold\n-    - Fix username regex allowed for system-user assertion to not allow\n-      '+'\n-    - Fix incorrect application icon for notification after autorefresh\n-      completion\n-    - Fix to restart mount units when changed\n-    - Fix to support AppArmor running under incus\n-    - Fix case of snap-update-ns dropping synthetic mounts due to\n-      failure to match  desired mount dependencies\n-    - Fix parsing of base snap version to enable pre-seeding of Ubuntu\n-      Core Desktop\n-    - Fix packaging and tests for various distributions\n-    - Add remoteproc interface to allow developers to interact with\n-      Remote Processor Framework which enables snaps to load firmware to\n-      ARM Cortex microcontrollers\n-    - Add kernel-control interface to enable controlling the kernel\n-      firmware search path\n-    - Add nfs-mount interface to allow mounting of NFS shares\n-    - Add ros-opt-data interface to allow snaps to access the host\n-      /opt/ros/ paths\n-    - Add snap-refresh-observe interface that provides refresh-app-\n-      awareness clients access to relevant snapd API endpoints\n-    - steam-support interface: generalize Pressure Vessel root paths and\n-      allow access to driver information, features and container\n-      versions\n-    - steam-support interface: make implicit on Ubuntu Core Desktop\n-    - desktop interface: improved support for Ubuntu Core Desktop and\n-      limit autoconnection to implicit slots\n-    - cups-control interface: make autoconnect depend on presence of\n-      cupsd on host to ensure it works on classic systems\n-    - opengl interface: allow read access to /usr/share/nvidia\n-    - personal-files interface: extend to support automatic creation of\n-      missing parent directories in write paths\n-    - network-control interface: allow creating /run/resolveconf\n-    - network-setup-control and network-setup-observe interfaces: allow\n-      busctl bind as required for systemd 254+\n-    - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-\n-      ro and read access to /var/lib/libvirt/dnsmasq/**\n-    - fwupd interface: allow access to IMPI devices (including locking\n-      of device nodes), sysfs attributes needed by amdgpu and the COD\n-      capsule update directory\n-    - uio interface: allow configuring UIO drivers from userspace\n-      libraries\n-    - serial-port interface: add support for NXP Layerscape SoC\n-    - lxd-support interface: add attribute enable-unconfined-mode to\n-      require LXD to opt-in to run unconfined\n-    - block-devices interface: add support for ZFS volumes\n-    - system-packages-doc interface: add support for reading jquery and\n-      sphinx documentation\n-    - system-packages-doc interface: workaround to prevent autoconnect\n-      failure for snaps using base bare\n-    - microceph-support interface: allow more types of block devices to\n-      be added as an OSD\n-    - mount-observe interface: allow read access to\n-      /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo\n-    - polkit interface: changed to not be implicit on core because\n-      installing policy files is not possible\n-    - upower-observe interface: allow stats refresh\n-    - gpg-public-keys interface: allow creating lock file for certain\n-      gpg operations\n-    - shutdown interface: allow access to SetRebootParameter method\n-    - media-control interface: allow device file locking\n-    - u2f-devices interface: support for Trustkey G310H, JaCarta U2F,\n-      Kensington VeriMark Guard, RSA DS100, Google Titan v2\n-\n- -- Ernest Lotter   Thu, 21 Mar 2024 22:06:09 +0200\n-\n-snapd (2.61.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2039017\n-    - Install systemd files in correct location for 24.04\n-\n- -- Ernest Lotter   Wed, 06 Mar 2024 23:18:11 +0200\n-\n-snapd (2.61.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2039017\n-    - Fix to enable plug/slot sanitization for prepare-image\n-    - Fix panic when device-service.access=offline\n-    - Support offline remodeling\n-    - Allow offline update only remodels without serial\n-    - Fail early when remodeling to old model revision\n-    - Fix to enable plug/slot sanitization for validate-seed\n-    - Allow removal of core snap on classic systems\n-    - Fix network-control interface denial for file lock on /run/netns\n-    - Add well-known core24 snap-id\n-    - Fix remodel snap installation order\n-    - Prevent remodeling from UC18+ to UC16\n-    - Fix cups auto-connect on classic with cups snap installed\n-    - u2f-devices interface support for GoTrust Idem Key with USB-C\n-    - Fix to restore services after unlink failure\n-    - Add libcudnn.so to Nvidia libraries\n-    - Fix skipping base snap download due to false snapd downgrade\n-      conflict\n-\n- -- Ernest Lotter   Fri, 16 Feb 2024 20:22:23 +0200\n-\n-snapd (2.61.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2024007\n-    - Stop requiring default provider snaps on image building and first\n-      boot if alternative providers are included and available\n-    - Fix auth.json access for login as non-root group ID\n-    - Fix incorrect remodelling conflict when changing track to older\n-      snapd version\n-    - Improved check-rerefresh message\n-    - Fix UC16/18 kernel/gadget update failure due volume mismatch with\n-      installed disk\n-    - Stop auto-import of assertions during install modes\n-    - Desktop interface exposes GetIdletime\n-    - Polkit interface support for new polkit versions\n-    - Fix not applying snapd snap changes in tracked channel when remodelling\n-\n- -- Ernest Lotter   Fri, 24 Nov 2023 10:22:55 +0200\n-\n-snapd (2.61) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2039017\n-    - Fix control of activated services in 'snap start' and 'snap stop'\n-    - Correctly reflect activated services in 'snap services'\n-    - Disabled services are no longer enabled again when snap is\n-      refreshed\n-    - interfaces/builtin: added support for Token2 U2F keys\n-    - interfaces/u2f-devices: add Swissbit iShield Key\n-    - interfaces/builtin: update gpio apparmor to match pattern that\n-      contains multiple subdirectories under /sys/devices/platform\n-    - interfaces: add a polkit-agent interface\n-    - interfaces: add pcscd interface\n-    - Kernel command-line can now be edited in the gadget.yaml\n-    - Only track validation-sets in run-mode, fixes validation-set\n-      issues on first boot.\n-    - Added support for using store.access to disable access to snap\n-      store\n-    - Support for fat16 partition in gadget\n-    - Pre-seed authority delegation is now possible\n-    - Support new system-user name  daemon\n-    - Several bug fixes and improvements around remodelling\n-    - Offline remodelling support\n-\n- -- Philip Meulengracht   Fri, 13 Oct 2023 13:06:02 +0200\n-\n-snapd (2.60.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2024007\n-    - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket\n-      permission\n-    - interfaces/builtin: fix custom-device udev KERNEL values\n-    - overlord: allow the firmware-updater snap to install user daemons\n-    - interfaces: allow loopback as a block-device\n-\n- -- Michael Vogt   Fri, 15 Sep 2023 20:46:59 +0200\n-\n-snapd (2.60.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2024007\n-    - i/b/shared-memory: handle \"private\" plug attribute in shared-\n-      memory interface correctly\n-    - i/apparmor: support for home.d tunables from /etc/\n-\n- -- Michael Vogt   Fri, 25 Aug 2023 18:36:50 +0200\n-\n-snapd (2.60.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2024007\n-    - i/builtin: allow directories in private /dev/shm\n-    - i/builtin: add read access to /proc/task/schedstat in system-\n-      observe\n-    - snap-bootstrap: print version information at startup\n-    - go.mod: update gopkg.in/yaml.v3 to v3.0.1 to fix CVE-2022-28948\n-    - snap, store: filter out invalid snap edited links from store info\n-      and persisted state\n-    - o/configcore: write netplan defaults to 00-snapd-config on seeding\n-    - snapcraft.yaml: pull in apparmor_parser optimization patches from\n-      https://gitlab.com/apparmor/apparmor/-/merge_requests/711\n-    - snap-confine: fix missing \\0 after readlink\n-    - cmd/snap: hide append-integrity-data\n-    - interfaces/opengl: add support for ARM Mali\n-\n- -- Michael Vogt   Fri, 04 Aug 2023 12:14:04 +0200\n-\n-snapd (2.60.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2024007\n-    - install: fallback to lazy unmount() in writeFilesystemContent\n-    - data: include \"modprobe.d\" and \"modules-load.d\" in preseeded blob\n-    - gadget: fix install test on armhf\n-    - interfaces: fix typo in network_manager_observe\n-    - sandbox/apparmor: don't let vendored apparmor conflict with system\n-    - gadget/update: set parts in laid out data from the ones matched\n-    - many: move SnapConfineAppArmorDir from dirs to sandbox/apparmor\n-    - many: stop using `-O no-expr-simplify` in apparmor_parser\n-    - go.mod: update secboot to latest uc22 branch\n-\n- -- Michael Vogt   Tue, 04 Jul 2023 21:21:48 +0200\n-\n-snapd (2.60) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2024007\n-    - Support for dynamic snapshot data exclusions\n-    - Apparmor userspace is vendored inside the snapd snap\n-    - Added a default-configure hook that exposes gadget default\n-      configuration options to snaps during first install before\n-      services are started\n-    - Allow install from initrd to speed up the initial installation\n-      for systems that do not have a install-device hook\n-    - New `snap sign --chain` flag that appends the account and\n-      account-key assertions\n-    - Support validation-sets in the model assertion\n-    - Support new \"min-size\" field in gadget.yaml\n-    - New interface: \"userns\"\n-\n- -- Michael Vogt   Thu, 15 Jun 2023 17:14:31 +0200\n-\n-snapd (2.59.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2009946\n-    - Explicitly disallow the use of ioctl + TIOCLINUX\n-      This fixes CVE-2023-1523.\n-\n- -- Michael Vogt   Sat, 27 May 2023 09:44:43 +0200\n-\n-snapd (2.59.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2009946\n-    - Retry when looking for disk label on non-UEFI systems\n-      (LP: #2018977)\n-    - Fix remodel from UC20 to UC22\n-\n- -- Michael Vogt   Fri, 12 May 2023 10:15:57 +0200\n-\n-snapd (2.59.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2009946\n-    - Fix quiet boot\n-    - i/b/physical_memory_observe: allow reading virt-phys page mappings\n-    - gadget: warn instead of returning error if overlapping with GPT\n-      header\n-    - overlord,wrappers: restart always enabled units\n-    - go.mod: update github.com/snapcore/secboot to latest uc22\n-    - boot: make sure we update assets for the system-seed-null role\n-    - many: ignore case for vfat partitions when validating\n-\n- -- Michael Vogt   Wed, 03 May 2023 12:31:00 +0200\n-\n-snapd (2.59.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2009946\n-    - Notify users when a user triggered auto refresh finished\n-\n- -- Michael Vogt   Tue, 18 Apr 2023 19:46:10 +0200\n-\n-snapd (2.59.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2009946\n-    - Add udev rules from steam-devices to steam-support interface\n-    - Bugfixes for layout path checking, dm_crypt permissions,\n-      mount-control interface parameter checking, kernel commandline\n-      parsing, docker-support, refresh-app-awareness\n-\n- -- Michael Vogt   Tue, 28 Mar 2023 20:58:44 +0200\n-\n-snapd (2.59) xenial; urgency=medium\n-\n-  * New upstream release, LP: #2009946\n-    - Support setting extra kernel command line parameters via snap\n-      configuration and under a gadget allow-list\n-    - Support for Full-Disk-Encryption using ICE\n-    - Support for arbitrary home dir locations via snap configuration\n-    - New nvidia-drivers-support interface\n-    - Support for udisks2 snap\n-    - Pre-download of snaps ready for refresh and automatic refresh of\n-      the snap when all apps are closed\n-    - New microovn interface\n-    - Support uboot with `CONFIG_SYS_REDUNDAND_ENV=n`\n-    - Make \"snap-preseed --reset\" re-exec when needed\n-    - Update the fwupd interface to support fully confined fwupd\n-    - The memory,cpu,thread quota options are no longer experimental\n-    - Support debugging snap client requests via the\n-      `SNAPD_CLIENT_DEBUG_HTTP` environment variable\n-    - Support ssh listen-address via snap configuration\n-    - Support for quotas on single services\n-    - prepare-image now takes into account snapd versions going into\n-      the image, including in the kernel initrd, to fetch supported\n-      assertion formats\n-\n- -- Michael Vogt   Fri, 10 Mar 2023 12:51:26 +0100\n-\n-snapd (2.58.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1998462\n-    - interfaces/screen-inhibit-control: Add support for xfce-power-\n-      manager\n-    - interfaces/network-manager: do not show ptrace read\n-      denials\n-    - interfaces: relax rules for mount-control `what` for functionfs\n-    - cmd/snap-bootstrap: add support for snapd_system_disk\n-    - interfaces/modem-manager: add net_admin capability\n-    - interfaces/network-manager: add permission for OpenVPN\n-    - httputil: fix checking x509 certification error on go 1.20\n-    - i/b/fwupd: allow reading host os-release\n-    - boot: on classic+modes `MarkBootSuccessfull` does not need a base\n-    - boot: do not include `base=` in modeenv for classic+modes installs\n-    - tests: add spread test that validates revert on boot for core does\n-      not happen on classic+modes\n-    - snapstate: only take boot participants into account in\n-      UpdateBootRevisions\n-    - snapstate: refactor UpdateBootRevisions() to make it easier to\n-      check for boot.SnapTypeParticipatesInBoot()\n-\n- -- Michael Vogt   Tue, 21 Feb 2023 17:14:50 +0100\n-\n-snapd (2.58.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1998462\n-    - bootloader: fix dirty build by hardcoding copyright year\n-\n- -- Michael Vogt   Wed, 25 Jan 2023 20:02:08 +0100\n-\n-snapd (2.58.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1998462\n-    - secboot: detect lockout mode in CheckTPMKeySealingSupported\n-    - cmd/snap-update-ns: prevent keeping unneeded mountpoints\n-    - o/snapstate: do not infinitely retry when an update fails during\n-      seeding\n-    - interfaces/modem-manager: add permissions for NETLINK_ROUTE\n-    - systemd/emulation.go: use `systemctl --root` to enable/disable\n-    - snap: provide more error context in `NotSnapError`\n-    - interfaces: add read access to /run for cryptsetup\n-    - boot: avoid reboot loop if there is a bad try kernel\n-    - devicestate: retry serial acquire on time based certificate\n-      errors\n-    - o/devicestate: run systemctl daemon-reload after install-device\n-      hook\n-    - cmd/snap,daemon: add 'held' to notes in 'snap list'\n-    - o/snapshotstate: check snapshots are self-contained on import\n-    - cmd/snap: show user+gating hold info in 'snap info'\n-    - daemon: expose user and gating holds at /v2/snaps/{name}\n-\n- -- Michael Vogt   Mon, 23 Jan 2023 18:03:40 +0100\n-\n-snapd (2.58) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1998462\n-    - many: Use /tmp/snap-private-tmp for per-snap private tmps\n-    - data: Add systemd-tmpfiles configuration to create private tmp dir\n-    - cmd/snap: test allowed and forbidden refresh hold values\n-    - cmd/snap: be more consistent in --hold help and err messages\n-    - cmd/snap: error on refresh holds that are negative or too short\n-    - o/homedirs: make sure we do not write to /var on build time\n-    - image: make sure file customizations happen also when we have\n-      defaultscause\n-    - tests/fde-on-classic: set ubuntu-seed label in seed partitions\n-    - gadget: system-seed-null should also have fs label ubuntu-seed\n-    - many: gadget.HasRole, ubuntu-seed can come also from system-seed-\n-      null\n-    - o/devicestate: fix paths for retrieving recovery key on classic\n-    - cmd/snap-confine: do not discard const qualifier\n-    - interfaces: allow python3.10+ in the default template\n-    - o/restart: fix PendingForSystemRestart\n-    - interfaces: allow wayland slot snaps to access shm files created\n-      by Firefox\n-    - o/assertstate: add Sequence() to val set tracking\n-    - o/assertstate: set val set 'Current' to pinned sequence\n-    - tests: tweak the libvirt interface test to work on 22.10\n-    - tests: use system-seed-null role on classic with modes tests\n-    - boot: add directory for data on install\n-    - o/devicestate: change some names from esp to seed/seed-null\n-    - gadget: add system-seed-null role\n-    - o/devicestate: really add error to new error message\n-    - restart,snapstate: implement reboot-required notifications on\n-      classic\n-    - many: avoid automatic system restarts on classic through new\n-      overlord/restart logic\n-    - release: Fix WSL detection in LXD\n-    - o/state: introduce WaitStatus\n-    - interfaces: Fix desktop interface rules for document portal\n-    - client: remove classic check for `snap recovery --show-\n-      keys`\n-    - many: create snapd.mounts targets to schedule mount units\n-    - image: enable sysfs overlay for UC preseeding\n-    - i/b/network-control: add permissions for using AF_XDP\n-    - i/apparmor: move mocking of home and overlay conditions to osutil\n-    - tests/main/degraded: ignore man-db update failures in CentOS\n-    - cmd/snap: fix panic when running snap w/ flag but w/o subcommand\n-    - tests: save snaps generated during image preaparation\n-    - tests: skip building snapd based on new env var\n-    - client: remove misleading comments in ValidateApplyOptions\n-    - boot/seal: add debug traces for bootchains\n-    - bootloader/assets: fix grub.cfg when there are no labels\n-    - cmd/snap: improve refresh hold's output\n-    - packaging: enable BPF in RHEL9\n-    - packaging: do not traverse filesystems in postrm script\n-    - tests: get microk8s from another branch\n-    - bootloader: do not specify Core version in grub entry\n-    - many: refresh --hold follow-up\n-    - many: support refresh hold/unhold to API and CLI\n-    - many: expand fully handling links mapping in all components, in\n-      the API and in snap info\n-    - snap/system_usernames,tests: Azure IoT Edge system usernames\n-    - interface: Allow access to\n-      org.freedesktop.DBus.ListActivatableNames via system-observe\n-      interface\n-    - o/devicestate,daemon: use the expiration date from the assertion\n-      in user-state and REST api (user-removal 4/n)\n-    - gadget: add unit tests for new install functions for FDE on\n-      classic\n-    - cmd/snap-seccomp: fix typo in AF_XDP value\n-    - tests/connected-after-reboot-revert: run also on UC16\n-    - kvm: allow read of AMD-SEV parameters\n-    - data: tweak apt integration config var\n-    - o/c/configcore: add faillock configuration\n-    - tests: use dbus-daemon instead of dbus-launch\n-    - packaging: remove unclean debian-sid patch\n-    - asserts: add keyword 'user-presence' keyword in system-user\n-      assertion (auto-removal 3/n)\n-    - interfaces: steam-support allow pivot /run/media and /etc/nvidia\n-      mount\n-    - aspects: initial code\n-    - overlord: process auto-import assertion at first boot\n-    - release, snapd-apparmor, syscheck: distinguish WSL1 and WSL2\n-    - tests: fix lxd-mount-units in ubuntu kinetic\n-    - tests: new variable used to configure the kernel command line in\n-      nested tests\n-    - go.mod: update to newer secboot/uc22 branch\n-    - autopkgtests: fix running autopkgtest on kinetic\n-    - tests: remove squashfs leftovers in fakeinstaller\n-    - tests: create partition table in fakeinstaller\n-    - o/ifacestate: introduce DebugAutoConnectCheck hook\n-    - tests: use test-snapd-swtpm instead of swtpm-mvo snap in nested\n-      helper\n-    - interfaces/polkit: do not require polkit directory if no file is\n-      needed\n-    - o/snapstate: be consistent not creating per-snap save dirs for\n-      classic models\n-    - inhibit: use hintFile()\n-    - tests: use `snap prepare-image` in fde-on-classic mk-image.sh\n-    - interfaces: add microceph interface\n-    - seccomp: allow opening XDP sockets\n-    - interfaces: allow access to icon subdirectories\n-    - tests: add minimal-smoke test for UC22 and increase minimal RAM\n-    - overlord: introduce hold levels in the snapstate.Hold* API\n-    - o/devicestate: support mounting ubuntu-save also on classic with\n-      modes\n-    - interfaces: steam-support allow additional mounts\n-    - fakeinstaller: format SystemDetails result with %+v\n-    - cmd/libsnap-confine-private: do not panic on chmod failure\n-    - tests: ensure that fakeinstaller put the seed into the right place\n-    - many: add stub services for prompting\n-    - tests: add libfwupd and libfwupdplugin5 to openSUSE dependencies\n-    - o/snapstate: fix snaps-hold pruning/reset in the presence of\n-      system holding\n-    - many: add support for setting up encryption from installer\n-    - many: support classic snaps in the context of classic and extended\n-      models\n-    - cmd/snap,daemon: allow zero values from client to daemon for\n-      journal rate limit\n-    - boot,o/devicestate: extend HasFDESetupHook to consider unrelated\n-      kernels\n-    - cmd/snap: validation set refresh-enforce CLI support + spread test\n-    - many: fix filenames written in modeenv for base/gadget plus drive-\n-      by TODO\n-    - seed: fix seed test to use a pseudo-random byte sequence\n-    - cmd/snap-confine: remove setuid calls from cgroup init code\n-    - boot,o/devicestate: introduce and use MakeRunnableStandaloneSystem\n-    - devicestate,boot,tests: make `fakeinstaller` test work\n-    - store: send Snap-Device-Location header with cloud information\n-    - overlord: fix unit tests after merging master in\n-    - o/auth: move HasUserExpired into UserState and name it HasExpired,\n-      and add unit tests for this\n-    - o/auth: rename NewUserData to NewUserParams\n-    - many: implementation of finish install step handlers\n-    - overlord: auto-resolve validation set enforcement constraints\n-    - i/backends,o/ifacestate: cleanup backends.All\n-    - cmd/snap-confine: move bind-mount setup into separate function\n-    - tests/main/mount-ns: update namespace for 18.04\n-    - o/state: Hold pseudo-error for explicit holding, concept of\n-      pending changes in prune logic\n-    - many: support extended classic models that omit kernel/gadget\n-    - data/selinux: allow snapd to detect WSL\n-    - overlord: add code to remove users that has an expiration date set\n-    - wrappers,snap/quota: clear LogsDirectory= in the service unit for\n-      journal namespaces\n-    - daemon: move user add, remove operations to overlord device state\n-    - gadget: implement write content from gadget information\n-    - {device,snap}state: fix ineffectual assignments\n-    - daemon: support validation set refresh+enforce in API\n-    - many: rename AddAffected* to RegisterAffected*, add\n-      Change|State.Has, fix a comment\n-    - many: reset store session when setting proxy.store\n-    - overlord/ifacestate: fix conflict detection of auto-connection\n-    - interfaces: added read/write access to /proc/self/coredump_filter\n-      for process-control\n-    - interfaces: add read access to /proc/cgroups and\n-      /proc/sys/vm/swappiness to system-observe\n-    - fde: run fde-reveal-key with `DefaultDependencies=no`\n-    - many: don't concatenate non-constant format strings\n-    - o/devicestate: fix non-compiling test\n-    - release, snapd-apparmor: fixed outdated WSL detection\n-    - many: add todos discussed in the review in\n-      tests/nested/manual/fde-on-classic, snapstate cleanups\n-    - overlord: run install-device hook during factory reset\n-    - i/b/mount-control: add optional `/` to umount rules\n-    - gadget/install: split Run in several functions\n-    - o/devicestate: refactor some methods as preparation for install\n-      steps implementation\n-    - tests: fix how snaps are cached in uc22\n-    - tests/main/cgroup-tracking-failure: fix rare failure in Xenial and\n-      Bionic\n-    - many: make {Install,Initramfs}{{,Host},Writable}Dir a  function\n-    - tests/nested/manual/core20: fix manual test after changes to\n-      'tests.nested exec'\n-    - tests: move the unit tests system to 22.04 in github actions\n-      workflow\n-    - tests: fix nested errors uc20\n-    - boot: rewrite switch in SnapTypeParticipatesInBoot()\n-    - gadget: refactor to allow usage from the installer\n-    - overlord/devicestate: support for mounting ubuntu-save before the\n-      install-device hook\n-    - many: allow to install/update kernels/gadgets on classic with\n-      modes\n-    - tests: fix issues related to dbus session and localtime in uc18\n-    - many: support home dirs located deeper under /home\n-    - many: refactor tests to use explicit strings instead of\n-      boot.Install{Initramfs,Host}{Writable,FDEData}Dir\n-    - boot: add factory-reset cases for boot-flags\n-    - tests: disable quota tests on arm devices using ubuntu core\n-    - tests: fix unbound SPREAD_PATH variable on nested debug session\n-    - overlord: start turning restart into a full state manager\n-    - boot: apply boot logic also for classic with modes boot snaps\n-    - tests: fix snap-env test on debug section when no var files were\n-      created\n-    - overlord,daemon: allow returning errors when requesting a restart\n-    - interfaces: login-session-control: add further D-Bus interfaces\n-    - snapdenv: added wsl to userAgent\n-    - o/snapstate: support running multiple ops transactionally\n-    - store: use typed valset keys in store package\n-    - daemon: add `ensureStateSoon()` when calling systems POST api\n-    - gadget: add rules for validating classic with modes gadget.yaml\n-      files\n-    - wrappers: journal namespaces did not honor journal.persistent\n-    - many: stub devicestate.Install{Finish,SetupStorageEncryption}()\n-    - sandbox/cgroup: don't check V1 cgroup if V2 is active\n-    - seed: add support to load auto import assertion\n-    - tests: fix preseed tests for arm systems\n-    - include/lk: update LK recovery environment definition to include\n-      device lock state used by bootloader\n-    - daemon: return `storage-encryption` in /systems/ reply\n-    - tests: start using remote tools from snapd-testing-tools project\n-      in nested tests\n-    - tests: fix non mountable filesystem error in interfaces-udisks2\n-    - client: clarify what InstallStep{SetupStorageEncryption,Finish} do\n-    - client: prepare InstallSystemOptions for real use\n-    - usersession: Remove duplicated struct\n-    - o/snapstate: support specific revisions in UpdateMany/InstallMany\n-    - i/b/system_packages_doc: restore access to Libreoffice\n-      documentation\n-    - snap/quota,wrappers: allow using 0 values for the journal rate\n-      limit\n-    - tests: add kinetic images to the gce bucket for preseed test\n-    - multiple: clear up naming convention for thread quota\n-    - daemon: implement stub `\"action\": \"install\"`\n-    - tests/main/snap-quota-{install/journal}: fix unstable spread tests\n-    - tests: remove code for old systems not supported anymore\n-    - tests: third part of the nested helper cleanup\n-    - image: clean snapd mount after preseeding\n-    - tests: use the new ubuntu kinetic image\n-    - i/b/system_observe: honour root dir when checking for\n-      /boot/config-*\n-    - tests: restore microk8s test on 16.04\n-    - tests: run spread tests on arm64 instances in google cloud\n-    - tests: skip interfaces-udisks2 in fedora\n-    - asserts,boot,secboot: switch to a secboot version measuring\n-      classic\n-    - client: add API for GET /systems/\n-    - overlord: frontend for --quota-group support (2/2)\n-    - daemon: add GET support for `/systems/`\n-    - i/b/system-observe: allow reading processes security label\n-    - many: support '--purge' when removing multiple snaps\n-    - snap-confine: remove obsolete code\n-    - interfaces: rework logic of unclashMountEntries\n-    - data/systemd/Makefile: add comment warning about \"snapd.\" prefix\n-    - interfaces: grant access to speech-dispatcher socket (bug 1787245)\n-    - overlord/servicestate: disallow removal of quota group with any\n-      limits set\n-    - data: include snapd/mounts in preseeded blob\n-    - many: Set SNAPD_APPARMOR_REEXEC=1\n-    - store/tooling,tests: support UBUNTU_STORE_URL override env var\n-    - multiple: clear up naming convention for cpu-set quota\n-    - tests: improve and standardize debug section on tests\n-    - device: add new DeviceManager.encryptionSupportInfo()\n-    - tests: check snap download with snapcraft v7+ export-login auth\n-      data\n-    - cmd/snap-bootstrap: changes to be able to boot classic rootfs\n-    - tests: fix debug section for test uc20-create-partitions\n-    - overlord: --quota-group support (1/2)\n-    - asserts,cmd/snap-repair: drop not pursued\n-      AuthorityDelegation/signatory-id\n-    - snap-bootstrap: add CVM mode* snap-bootstrap: add classic runmode\n-    - interfaces: make polkit implicit on core if /usr/libexec/polkitd\n-      exists\n-    - multiple: move arguments for auth.NewUser into a struct (auto-\n-      removal 1/n)\n-    - overlord: track security profiles for non-active snaps\n-    - tests: remove NESTED_IMAGE_ID from nested manual tests\n-    - tests: add extra space to ubuntu bionic\n-    - store/tooling: support using snapcraft v7+ base64-encoded auth\n-      data\n-    - overlord: allow seeding in the case of classic with modes system\n-    - packaging/*/tests/integrationtests: reload ssh.service, not\n-      sshd.service\n-    - tests: rework snap-logs-journal test and add missing cleanup\n-    - tests: add spread test for journal quotas\n-    - tests: run spread tests in ubuntu kinetic\n-    - o/snapstate: extend support for holding refreshes\n-    - devicestate: return an error in checkEncryption() if KernelInfo\n-      fails\n-    - tests: fix sbuild test on debian sid\n-    - o/devicestate: do not run tests in this folder twice\n-    - sandbox/apparmor: remove duplicate hook into testing package\n-    - many: refactor store code to be able to use simpler form of auth\n-      creds\n-    - snap,store: drop support/consideration for anonymous download urls\n-    - data/selinux: allow snaps to read certificates\n-    - many: add Is{Core,Classic}Boot() to DeviceContext\n-    - o/assertstate: don't refresh enforced validation sets during check\n-    - go.mod: replace maze.io/x/crypto with local repo\n-    - many: fix unnecessary use of fmt.Sprintf\n-    - bootloader,systemd: fix `don't use Yoda conditions (ST1017)`\n-    - HACKING.md: extend guidelines with common review comments\n-    - many: progress bars should use the overridable stdouts\n-    - tests: remove ubuntu 21.10 from sru validation\n-    - tests: import remote tools\n-    - daemon,usersession: switch from HeaderMap to Header in tests\n-    - asserts: add some missing `c.Check()` in the asserts test\n-    - strutil: fix VersionCompare() to allow multiple `-` in the version\n-    - testutil: remove unneeded `fmt.Sprintf`\n-    - boot: remove some unneeded `fmt.Sprintf()` calls\n-    - tests: implement prepare_gadget and prepare_base and unify all the\n-      version\n-    - o/snapstate: refactor managed refresh schedule logic\n-    - o/assertstate, snapasserts: implementation of\n-      assertstate.TryEnforceValidationSets function\n-    - interfaces: add kconfig paths to system-observe\n-    - dbusutil: move debian patch into dbustest\n-    - many: change name and input of CheckProvenance to clarify usage\n-    - tests: Fix a missing parameter in command to wait for device\n-    - tests: Work-around non-functional --wait on systemctl\n-    - tests: unify the way the snapd/core and kernel are repacked in\n-      nested helper\n-    - tests: skip interfaces-ufisks2 on centos-9\n-    - i/b/mount-control: allow custom filesystem types\n-    - interfaces,metautil: make error handling in getPaths() more\n-      targeted\n-    - cmd/snap-update-ns: handle mountpoint removal failures with EBUSY\n-    - tests: fix pc-kernel repacking\n-    - systemd: add `WantedBy=default.target` to snap mount units\n-    - tests: disable microk8s test on 16.04\n-\n- -- Michael Vogt   Thu, 01 Dec 2022 09:52:23 +0100\n-\n-snapd (2.57.6) xenial; urgency=medium\n-\n-  * SECURITY UPDATE: Local privilege escalation\n-    - snap-confine: Fix race condition in snap-confine when preparing a\n-      private tmp mount namespace for a snap\n-    - CVE-2022-3328\n-\n- -- Michael Vogt   Tue, 15 Nov 2022 16:13:59 +0100\n-\n-snapd (2.57.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1983035\n-    - image: clean snapd mount after preseeding\n-    - wrappers,snap/quota: clear LogsDirectory= in the service unit\n-      for journal namespaces\n-    - cmd/snap,daemon: allow zero values from client to daemon for\n-      journal rate-limit\n-    - interfaces: steam-support allow pivot /run/media and /etc/nvidia\n-      mount\n-    - o/ifacestate: introduce DebugAutoConnectCheck hook\n-    - release, snapd-apparmor, syscheck: distinguish WSL1 and WSL2\n-    - autopkgtests: fix running autopkgtest on kinetic\n-    - interfaces: add microceph interface\n-    - interfaces: steam-support allow additional mounts\n-    - many: add stub services\n-    - interfaces: add kconfig paths to system-observe\n-    - i/b/system_observe: honour root dir when checking for\n-      /boot/config-*\n-    - interfaces: grant access to speech-dispatcher socket\n-    - interfaces: rework logic of unclashMountEntries\n-\n- -- Michael Vogt   Mon, 17 Oct 2022 18:25:18 +0200\n-\n-snapd (2.57.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1983035\n-    - release, snapd-apparmor: fixed outdated WSL detection\n-    - overlord/ifacestate: fix conflict detection of auto-connection\n-    - overlord: run install-device hook during factory reset\n-    - image/preseed/preseed_linux: add missing new line\n-    - boot: add factory-reset cases for boot-flags.\n-    - interfaces: added read/write access to /proc/self/coredump_filter\n-      for process-control\n-    - interfaces: add read access to /proc/cgroups and\n-      /proc/sys/vm/swappiness to system-observe\n-    - fde: run fde-reveal-key with `DefaultDependencies=no`\n-    - snapdenv: added wsl to userAgent\n-    - tests: fix restore section for persistent-journal-namespace\n-    - i/b/mount-control: add optional `/` to umount rules\n-    - cmd/snap-bootstrap: changes to be able to boot classic rootfs\n-    - cmd/snap-bootstrap: add CVM mode\n-\n- -- Michael Vogt   Thu, 29 Sep 2022 09:54:21 +0200\n-\n-snapd (2.57.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1983035\n-    - wrappers: journal namespaces did not honor journal.persistent\n-    - snap/quota,wrappers: allow using 0 values for the journal rate to\n-      override the system default values\n-    - multiple: clear up naming convention for cpu-set quota\n-    - i/b/mount-control: allow custom filesystem types\n-    - i/b/system-observe: allow reading processes security label\n-    - sandbox/cgroup: don't check V1 cgroup if V2 is active\n-    - asserts,boot,secboot: switch to a secboot version measuring\n-      classic\n-\n- -- Michael Vogt   Thu, 15 Sep 2022 12:37:30 +0200\n-\n-snapd (2.57.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1983035\n-    - store/tooling,tests: support UBUNTU_STORE_URL override env var\n-    - packaging/*/tests/integrationtests: reload ssh.service, not\n-      sshd.service\n-    - tests: check snap download with snapcraft v7+ export-login auth\n-      data\n-    - store/tooling: support using snapcraft v7+ base64-encoded auth\n-      data\n-    - many: progress bars should use the overridable stdouts\n-    - many: refactor store code to be able to use simpler form of auth\n-      creds\n-    - snap,store: drop support/consideration for anonymous download urls\n-    - data: include snapd/mounts in preseeded blob\n-    - many: Set SNAPD_APPARMOR_REEXEC=1\n-    - overlord: track security profiles for non-active snaps\n-\n- -- Michael Vogt   Fri, 02 Sep 2022 17:56:46 +0200\n-\n-snapd (2.57.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1983035\n-    - cmd/snap-update-ns: handle mountpoint removal failures with EBUSY\n-    - cmd/snap-update-ns: print current mount entries\n-    - cmd/snap-update-ns: check the unused mounts with a cleaned path\n-    - snap-confine: disable -Werror=array-bounds in __overflow tests to\n-      fix build error on Ubuntu 22.10\n-    - systemd: add `WantedBy=default.target` to snap mount units\n-      (LP: #1983528)\n-\n- -- Samuele Pedroni (Canonical Services Ltd.)   Wed, 10 Aug 2022 09:30:50 +0300\n-\n-snapd (2.57) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1983035\n-    - tests: Fix calls to systemctl is-system-running\n-    - osutil/disks: handle GPT for 4k disk and too small tables\n-    - packaging: import change from the 2.54.3-1.1 upload\n-    - many: revert \"features: disable refresh-app-awarness by default\n-      again\"\n-    - tests: improve robustness of preparation for regression/lp-1803542\n-    - tests: get the ubuntu-image binary built with test keys\n-    - tests: remove commented code from lxd test\n-    - interfaces/builtin: add more permissions for steam-support\n-    - tests: skip interfaces-network-control on i386\n-    - tests: tweak the \"tests/nested/manual/connections\" test\n-    - interfaces: posix-mq: allow specifying message queue paths as an\n-      array\n-    - bootloader/assets: add ttyS0,115200n8 to grub.cfg\n-    - i/b/desktop,unity7: remove name= specification on D-Bus signals\n-    - tests: ensure that microk8s does not produce DENIED messages\n-    - many: support non-default provenance snap-revisions in\n-      DeriveSideInfo\n-    - tests: fix `core20-new-snapd-does-not-break-old-initrd` test\n-    - many: device and provenance revision authority cross checks\n-    - tests: fix nested save-data test on 22.04\n-    - sandbox/cgroup: ignore container slices when tracking snaps\n-    - tests: improve 'ignore-running' spread test\n-    - tests: add `debug:` section to `tests/nested/manual/connections`\n-    - tests: remove leaking `pc-kernel.snap` in `repack_kernel_snap`\n-    - many: preparations for revision authority cross checks including\n-      device scope\n-    - daemon,overlord/servicestate: followup changes from PR #11960 to\n-      snap logs\n-    - cmd/snap: fix visual representation of 'AxB%' cpu quota modifier.\n-    - many: expose and support provenance from snap.yaml metadata\n-    - overlord,snap: add support for per-snap storage on ubuntu-save\n-    - nested: fix core-early-config nested test\n-    - tests: revert lxd change to support nested lxd launch\n-    - tests: add invariant check for leftover cgroup scopes\n-    - daemon,systemd: introduce support for namespaces in 'snap logs'\n-    - cmd/snap: do not track apps that wish to stay outside of the life-\n-      cycle system\n-    - asserts: allow classic + snaps models and add distribution to\n-      model\n-    - cmd/snap: add snap debug connections/connection commands\n-    - data: start snapd after time-set.target\n-    - tests: remove ubuntu 21.10 from spread tests due to end of life\n-    - tests: Update the whitebox word to avoid inclusive naming issues\n-    - many: mount gadget in run folder\n-    - interfaces/hardware-observe: clean up reading access to sysfs\n-    - tests: use overlayfs for interfaces-opengl-nvidia test\n-    - tests: update fake-netplan-apply test for 22.04\n-    - tests: add executions for ubuntu 22.04\n-    - tests: enable centos-9\n-    - tests: make more robust the files check in preseed-core20 test\n-    - bootloader/assets: add fallback entry to grub.cfg\n-    - interfaces/apparmor: add permissions for per-snap directory on\n-      ubuntu-save partition\n-    - devicestate: add more path to `fixupWritableDefaultDirs()`\n-    - boot,secboot: reset DA lockout counter after successful boot\n-    - many: Revert \"overlord,snap: add support for per-snap storage on\n-      ubuntu-save\"\n-    - overlord,snap: add support for per-snap storage on ubuntu-save\n-    - tests: exclude centos-7 from kernel-module-load test\n-    - dirs: remove unused SnapAppArmorAdditionalDir\n-    - boot,device: extract SealedKey helpers from boot to device\n-    - boot,gadget: add new `device.TpmLockoutAuthUnder()` and use it\n-    - interfaces/display-control: allow changing brightness value\n-    - asserts: add more context to key expiry error\n-    - many: introduce IsUndo flag in LinkContext\n-    - i/apparmor: allow calling which.debianutils\n-    - tests: new profile id for apparmor in test preseed-core20\n-    - tests: detect 403 in apt-hooks and skip test in this case\n-    - overlord/servicestate: restart the relevant journald service when\n-      a journal quota group is modified\n-    - client,cmd/snap: add journal quota frontend (5/n)\n-    - gadget/device: introduce package which provides helpers for\n-      locations of things\n-    - features: disable refresh-app-awarness by default again\n-    - many: install bash completion files in writable directory\n-    - image: fix handling of var/lib/extrausers when preseeding\n-      uc20\n-    - tests: force version 2.48.3 on xenial ESM\n-    - tests: fix snap-network-erros on uc16\n-    - cmd/snap-confine: be compatible with a snap rootfs built as a\n-      tmpfs\n-    - o/snapstate: allow install of unasserted gadget/kernel on\n-      dangerous models\n-    - interfaces: dynamic loading of kernel modules\n-    - many: add optional primary key provenance to snap-revision, allow\n-      delegating via snap-declaration revision-authority\n-    - tests: fix boringcripto errors in centos7\n-    - tests: fix snap-validate-enforce in opensuse-tumbleweed\n-    - test: print User-Agent on failed checks\n-    - interfaces: add memory stats to system_observe\n-    - interfaces/pwm: Remove implicitOnCore/implicitOnClassic\n-    - spread: add openSUSE Leap 15.4\n-    - tests: disable core20-to-core22 nested test\n-    - tests: fix nested/manual/connections test\n-    - tests: add spread test for migrate-home command\n-    - overlord/servicestate: refresh security profiles when services are\n-      affected by quotas\n-    - interfaces/apparmor: add missing apparmor rules for journal\n-      namespaces\n-    - tests: add nested test variant that adds 4k sector size\n-    - cmd/snap: fix test failing due to timezone differences\n-    - build-aux/snap: build against the snappy-dev/image PPA\n-    - daemon: implement api handler for refresh with enforced validation\n-      sets\n-    - preseed: suggest to install \"qemu-user-static\"\n-    - many: add migrate-home debug command\n-    - o/snapstate: support passing validation sets to storehelpers via\n-      RevisionOptions\n-    - cmd/snapd-apparmor: fix unit tests on distros which do not support\n-      reexec\n-    - o/devicestate: post factory reset ensure, spread test update\n-    - tests/core/basic20: Enable on uc22\n-    - packaging/arch: install snapd-apparmor\n-    - o/snapstate: support migrating snap home as change\n-    - tests: enable snapd.apparmor service in all the opensuse systems\n-    - snapd-apparmor: add more integration-ish tests\n-    - asserts: store required revisions for missing snaps in\n-      CheckInstalledSnaps\n-    - overlord/ifacestate: fix path for journal redirect\n-    - o/devicestate: factory reset with encryption\n-    - cmd/snapd-apparmor: reimplement snapd-apparmor in Go\n-    - squashfs: improve error reporting when `unsquashfs` fails\n-    - o/assertstate: support multiple extra validation sets in\n-      EnforcedValidationSets\n-    - tests: enable mount-order-regression test for arm devices\n-    - tests: fix interfaces network control\n-    - interfaces: update AppArmor template to allow read the memory \u2026\n-    - cmd/snap-update-ns: add /run/systemd to unrestricted paths\n-    - wrappers: fix LogNamespace being written to the wrong file\n-    - boot: release the new PCR handles when sealing for factory reset\n-    - tests: add support fof uc22 in test uboot-unpacked-assets\n-    - boot: post factory reset cleanup\n-    - tests: add support for uc22 in listing test\n-    - spread.yaml: add ubuntu-22.04-06 to qemu-nested\n-    - gadget: check also mbr type when testing for implicit data\n-      partition\n-    - interfaces/system-packages-doc: allow read-only access to\n-      /usr/share/cups/doc-root/ and /usr/share/gimp/2.0/help/\n-    - tests/nested/manual/core20-early-config: revert changes that\n-      disable netplan checks\n-    - o/ifacestate: warn if the snapd.apparmor service is disabled\n-    - tests: add spread execution for fedora 36\n-    - overlord/hookstate/ctlcmd: fix timestamp coming out of sync in\n-      unit tests\n-    - gadget/install: do not assume dm device has same block size as\n-      disk\n-    - interfaces: update network-control interface with permissions\n-      required by resolvectl\n-    - secboot: stage and transition encryption keys\n-    - secboot, boot: support and use alternative PCR handles during\n-      factory reset\n-    - overlord/ifacestate: add journal bind-mount snap layout when snap\n-      is in a journal quota group (4/n)\n-    - secboot/keymgr, cmd/snap-fde-keymgr: two step encryption key\n-      change\n-    - cmd/snap: cleanup and make the code a bit easier to read/maintain\n-      for quota options\n-    - overlord/hookstate/ctlcmd: add 'snapctl model' command (3/3)\n-    - cmd/snap-repair: fix snap-repair tests silently failing\n-    - spread: drop openSUSE Leap 15.2\n-    - interfaces/builtin: remove the name=org.freedesktop.DBus\n-      restriction in cups-control AppArmor rules\n-    - wrappers: write journald config files for quota groups with\n-      journal quotas (3/n)\n-    - o/assertstate: auto aliases for apps that exist\n-    - o/state: use more detailed NoStateError in state\n-    - tests/main/interfaces-browser-support: verify jupyter notebooks\n-      access\n-    - o/snapstate: exclude services from refresh app awareness hard\n-      running check\n-    - tests/main/nfs-support: be robust against umount failures\n-    - tests: update centos images and add new centos 9 image\n-    - many: print valid/invalid status on snap validate --monitor\n-    - secboot, boot: TPM provisioning mode enum, introduce\n-      reprovisioning\n-    - tests: allow to re-execute aborted tests\n-    - cmd/snapd-apparmor: add explicit WSL detection to\n-      is_container_with_internal_policy\n-    - tests: avoid launching lxd inside lxd on cloud images\n-    - interfaces: extra htop apparmor rules\n-    - gadget/install: encrypted system factory reset support\n-    - secboot: helpers for dealing with PCR handles and TPM resources\n-    - systemd: improve error handling for systemd-sysctl command\n-    - boot, secboot: separate the TPM provisioning and key sealing\n-    - o/snapstate: fix validation sets restoring and snap revert on\n-      failed refresh\n-    - interfaces/builtin/system-observe: extend access for htop\n-    - cmd/snap: support custom apparmor features dir with snap prepare-\n-      image\n-    - interfaces/mount-observe: Allow read access to /run/mount/utab\n-    - cmd/snap: add help strings for set-quota options\n-    - interfaces/builtin: add README file\n-    - cmd/snap-confine: mount support cleanups\n-    - overlord: execute snapshot cleanup in task\n-    - i/b/accounts_service: fix path of introspectable objects\n-    - interfaces/opengl: update allowed PCI accesses for RPi\n-    - configcore: add core.system.ctrl-alt-del-action config option\n-    - many: structured startup timings\n-    - spread: switch back to building ubuntu-image from source\n-    - many: optional recovery keys\n-    - tests/lib/nested: fix unbound variable\n-    - run-checks: fail on equality checks w/ ErrNoState\n-    - snap-bootstrap: Mount as private\n-    - tests: Test for gadget connections\n-    - tests: set `br54.dhcp4=false` in the netplan-cfg test\n-    - tests: core20 preseed/nested spread test\n-    - systemd: remove the systemctl stop timeout handling\n-    - interfaces/shared-memory: Update AppArmor permissions for\n-      mmap+link\n-    - many: replace ErrNoState equality checks w/ errors.Is()\n-    - cmd/snap: exit w/ non-zero code on missing snap\n-    - systemd: fix snapd systemd-unit stop progress notifications\n-    - .github: Trigger daily riscv64 snapd edge builds\n-    - interfaces/serial-port: add ttyGS to serial port allow list\n-    - interfaces/modem-manager: Don't generate DBus plug policy\n-    - tests: add spread test to test upgrade from release snapd to\n-      current\n-    - wrappers: refactor EnsureSnapServices\n-    - testutil: add ErrorIs test checker\n-    - tests: import spread shellcheck changes\n-    - cmd/snap-fde-keymgr: best effort idempotency of add-recovery-key\n-    - interfaces/udev: refactor handling of udevadm triggers for input\n-    - secboot: support for changing encryption keys via keymgr\n-\n- -- Michael Vogt   Thu, 28 Jul 2022 16:59:39 +0200\n-\n-snapd (2.56.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1974147\n-    - devicestate: add more path to `fixupWritableDefaultDirs()`\n-    - many: introduce IsUndo flag in LinkContext\n-    - i/apparmor: allow calling which.debianutils\n-    - interfaces: update AppArmor template to allow reading snap's\n-      memory statistics\n-    - interfaces: add memory stats to system_observe\n-    - i/b/{mount,system}-observe: extend access for htop\n-    - features: disable refresh-app-awarness by default again\n-    - image: fix handling of var/lib/extrausers when preseeding\n-      uc20\n-    - interfaces/modem-manager: Don't generate DBus policy for plugs\n-    - interfaces/modem-manager: Only generate DBus plug policy on\n-      Core\n-    - interfaces/serial_port_test: fix static-checks errors\n-    - interfaces/serial-port: add USB gadget serial devices (ttyGSX) to\n-      allowed list\n-    - interface/serial_port_test: adjust variable IDs\n-\n- -- Michael Vogt   Wed, 13 Jul 2022 09:26:57 +0200\n-\n-snapd (2.56.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1974147\n-    - o/snapstate: exclude services from refresh app awareness hard\n-      running check\n-    - cmd/snap: support custom apparmor features dir with snap\n-      prepare-image\n-\n- -- Michael Vogt   Wed, 15 Jun 2022 14:22:31 +0200\n-\n-snapd (2.56.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1974147\n-    - gadget/install: do not assume dm device has same block size as\n-      disk\n-    - gadget: check also mbr type when testing for implicit data\n-      partition\n-    - interfaces: update network-control interface with permissions\n-      required by resolvectl\n-    - interfaces/builtin: remove the name=org.freedesktop.DBus\n-      restriction in cups-control AppArmor rules\n-    - many: print valid/invalid status on snap validate --monitor ...\n-    - o/snapstate: fix validation sets restoring and snap revert on\n-      failed refresh\n-    - interfaces/opengl: update allowed PCI accesses for RPi\n-    - interfaces/shared-memory: Update AppArmor permissions for\n-      mmap+linkpaths\n-\n- -- Michael Vogt   Wed, 15 Jun 2022 09:57:54 +0200\n-\n-snapd (2.56) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1974147\n-    - portal-info: Add CommonID Field\n-    - asserts/info,mkversion.sh: capture max assertion formats in\n-      snapd/info\n-    - tests: improve the unit testing workflow to run in parallel\n-    - interfaces: allow map and execute permissions for files on\n-      removable media\n-    - tests: add spread test to verify that connections are preserved if\n-      snap refresh fails\n-    - tests: Apparmor sandbox profile mocking\n-    - cmd/snap-fde-keymgr: support for multiple devices and\n-      authorizations for add/remove recovery key\n-    - cmd/snap-bootstrap: Listen to keyboard added after start and\n-      handle switch root\n-    - interfaces,overlord: add support for adding extra mount layouts\n-    - cmd/snap: replace existing code for 'snap model' to use shared\n-      code in clientutil (2/3)\n-    - interfaces: fix opengl interface on RISC-V\n-    - interfaces: allow access to the file locking for cryptosetup in\n-      the dm-crypt interface\n-    - interfaces: network-manager: add AppArmor rule for configuring\n-      bridges\n-    - i/b/hardware-observe.go: add access to the thermal sysfs\n-    - interfaces: opengl: add rules for NXP i.MX GPU drivers\n-    - i/b/mount_control: add an optional \"/\" to the mount target rule\n-    - snap/quota: add values for journal quotas (journal quota 2/n)\n-    - tests: spread test for uc20 preseeding covering snap prepare-image\n-    - o/snapstate: remove deadcode breaking static checks\n-    - secboot/keymgr: extend unit tests, add helper for identify keyslot\n-      used error\n-    - tests: use new snaps.name and snaps.cleanup tools\n-    - interfaces: tweak getPath() slightly and add some more tests\n-    - tests: update snapd testing tools\n-    - client/clientutil: add shared code for printing model assertions\n-      as yaml or json (1/3)\n-    - debug-tools: list all snaps\n-    - cmd/snap: join search terms passed in the command line\n-    - osutil/disks: partition UUID lookup\n-    - o/snapshotstate: refactor snapshot read/write logic\n-    - interfaces: Allow locking in block-devices\n-    - daemon: /v2/system-recovery-keys remove API\n-    - snapstate: do not auto-migrate to ~/Snap for core22 just yet\n-    - tests: run failed tests by default\n-    - o/snapshotstate: check installed snaps before running 'save' tasks\n-    - secboot/keymgr: remove recovery key, authorize with existing key\n-    - deps: bump libseccomp to include build fixes, run unit tests using\n-      CC=clang\n-    - cmd/snap-seccomp: only compare the bottom 32-bits of the flags arg\n-      of copy_file_range\n-    - osutil/disks: helper for obtaining the UUID of a partition which\n-      is a mount point source\n-    - image/preseed: umount the base snap last after writable paths\n-    - tests: new set of nested tests for uc22\n-    - tests: run failed tests on nested suite\n-    - interfaces: posix-mq: add new interface\n-    - tests/main/user-session-env: remove openSUSE-specific tweaks\n-    - tests: skip external backend in mem-cgroup-disabled test\n-    - snap/quota: change the journal quota period to be a time.Duration\n-    - interfaces/apparmor: allow executing /usr/bin/numfmt in the base\n-      template\n-    - tests: add lz4 dependency for jammy to avoid issues repacking\n-      kernel\n-    - snap-bootstrap, o/devicestate: use seed parallelism\n-    - cmd/snap-update-ns: correctly set sticky bit on created\n-      directories where applicable\n-    - tests: install snapd while restoring in snap-mgmt\n-    - .github: skip misspell and ineffassign on go 1.13\n-    - many: use UC20+/pre-UC20 in user messages as needed\n-    - o/devicestate: use snap handler for copying and checksuming\n-      preseeded snaps\n-    - image, cmd/snap-preseed: allow passing custom apparmor features\n-      path\n-    - o/assertstate: fix handling of validation set tracking update in\n-      enforcing mode\n-    - packaging: restart our units only after the upgrade\n-    - interfaces: add a steam-support interface\n-    - gadget/install, o/devicestate: do not create recovery and\n-      reinstall keys during installation\n-    - many: move recovery key responsibility to devicestate/secboot,\n-      prepare for a future with just optional recovery key\n-    - tests: do not run mem-cgroup-disabled on external backends\n-    - snap: implement \"star\" developers\n-    - o/devicestate: fix install tests on systems with\n-      /var/lib/snapd/snap\n-    - cmd/snap-fde-keymgr, secboot: followup cleanups\n-    - seed: let SnapHandler provided a different final path for snaps\n-    - o/devicestate: implement maybeApplyPreseededData function to apply\n-      preseed artifact\n-    - tests/lib/tools: add piboot to boot_path()\n-    - interfaces/builtin: shared-memory drop plugs allow-installation:\n-      true\n-    - tests/main/user-session-env: for for opensuse\n-    - cmd/snap-fde-keymgr, secboot: add a tiny FDE key manager\n-    - tests: re-execute the failed tests when \"Run failed\" label is set\n-      in the PR\n-    - interfaces/builtin/custom-device: fix unit tests on hosts with\n-      different libexecdir\n-    - sandbox: move profile load/unload to sandbox/apparmor\n-    - cmd/snap: handler call verifications for cmd_quota_tests\n-    - secboot/keys: introduce a package for secboot key types, use the\n-      package throughout the code base\n-    - snap/quota: add journal quotas to resources.go\n-    - many: let provide a SnapHandler to Seed.Load*Meta*\n-    - osutil: allow setting desired mtime on the AtomicFile, preserve\n-      mtime on copy\n-    - systemd: add systemd.Run() wrapper for systemd-run\n-    - tests: test fresh install of core22-based snap (#11696)\n-    - tests: initial set of tests to uc22 nested execution\n-    - o/snapstate: migration overwrites existing snap dir\n-    - tests: fix interfaces-location-control tests leaking provider.py\n-      process\n-    - tests/nested: fix custom-device test\n-    - tests: test migration w/ revert, refresh and XDG dir creation\n-    - asserts,store: complete support for optional primary key headers\n-      for assertions\n-    - seed: support parallelism when loading/verifying snap metadata\n-    - image/preseed, cmd/snap-preseed: create and sign preseed assertion\n-    - tests: Initial changes to run nested tests on uc22\n-    - o/snapstate: fix TestSnapdRefreshTasks test after two r-a-a PRs\n-    - interfaces: add ACRN hypervisor support\n-    - o/snapstate: exclude TypeSnapd and TypeOS snaps from refresh-app-\n-      awareness\n-    - features: enable refresh-app-awareness by default\n-    - libsnap-confine-private: show proper error when aa_change_onexec()\n-      fails\n-    - i/apparmor: remove leftover comment\n-    - gadget: drop unused code in unit tests\n-    - image, store: move ToolingStore to store/tooling package\n-    - HACKING: update info for snapcraft remote build\n-    - seed: return all essential snaps found if no types are given to\n-      LoadEssentialMeta\n-    - i/b/custom_device: fix generation of udev rules\n-    - tests/nested/manual/core20-early-config: disable netplan checks\n-    - bootloader/assets, tests: add factory-reset mode, test non-\n-      encrypted factory-reset\n-    - interfaces/modem-manager: add support for Cinterion modules\n-    - gadget: fully support multi-volume gadget asset updates in\n-      Update() on UC20+\n-    - i/b/content: use slot.Lookup() as suggested by TODO comment\n-    - tests: install linux-tools-gcp on jammy to avoid bpftool\n-      dependency error\n-    - tests/main: add spread tests for new cpu and thread quotas\n-    - snap-debug-info: print validation sets and validation set\n-      assertions\n-    - many: renaming related to inclusive language part 2\n-    - c/snap-seccomp: update syscalls to match libseccomp 2657109\n-    - github: cancel workflows when pushing to pull request branches\n-    - .github: use reviewdog action from woke tool\n-    - interfaces/system-packages-doc: allow read-only access to\n-      /usr/share/gtk-doc\n-    - interfaces: add max_map_count to system-observe\n-    - o/snapstate: print pids of running processes on BusySnapError\n-    - .github: run woke tool on PR's\n-    - snapshots: follow-up on exclusions PR\n-    - cmd/snap: add check switch for snap debug state\n-    - tests: do not run mount-order-regression test on i386\n-    - interfaces/system-packages-doc: allow read-only access to\n-      /usr/share/xubuntu-docs\n-    - interfaces/hardware_observe: add read access for various devices\n-    - packaging: use latest go to build spread\n-    - tests: Enable more tests for UC22\n-    - interfaces/builtin/network-control: also allow for mstp and bchat\n-      devices too\n-    - interfaces/builtin: update apparmor profile to allow creating\n-      mimic over /usr/share*\n-    - data/selinux: allow snap-update-ns to mount on top of /var/snap\n-      inside the mount ns\n-    - interfaces/cpu-control: fix apparmor rules of paths with CPU ID\n-    - tests: remove the file that configures nm as default\n-    - tests: fix the change done for netplan-cfg test\n-    - tests: disable netplan-cfg test\n-    - cmd/snap-update-ns: apply content mounts before layouts\n-    - overlord/state: add a helper to detect cyclic dependencies between\n-      tasks in change\n-    - packaging/ubuntu-16.04/control: recommend `fuse3 | fuse`\n-    - many: change \"transactional\" flag to a \"transaction\" option\n-    - b/piboot.go: check EEPROM version for RPi4\n-    - snap/quota,spread: raise lower memory quota limit to 640kb\n-    - boot,bootloader: add missing grub.cfg assets mocks in some tests\n-    - many: support --ignore-running with refresh many\n-    - tests: skip the test interfaces-many-snap-provided in\n-      trusty\n-    - o/snapstate: rename XDG dirs during HOME migration\n-    - cmd/snap,wrappers: fix wrong implementation of zero count cpu\n-      quota\n-    - i/b/kernel_module_load: expand $SNAP_COMMON in module options\n-    - interfaces/u2f-devices: add Solo V2\n-    - overlord: add missing grub.cfg assets mocks in manager_tests.go\n-    - asserts: extend optional primary keys support to the in-memory\n-      backend\n-    - tests: update the lxd-no-fuse test\n-    - many: fix failing golangci checks\n-    - seed,many: allow to limit LoadMeta to snaps of a precise mode\n-    - tests: allow ubuntu-image to be built with a compatible snapd tree\n-    - o/snapstate: account for repeat migration in ~/Snap undo\n-    - asserts: start supporting optional primary keys in fs backend,\n-      assemble and signing\n-    - b/a: do not set console in kernel command line for arm64\n-    - tests/main/snap-quota-groups: fix spread test\n-    - sandbox,quota: ensure cgroup is available when creating mem\n-      quotas\n-    - tests: add debug output what keeps `/home` busy\n-    - sanity: rename \"sanity.Check\" to \"syscheck.CheckSystem\"\n-    - interfaces: add pkcs11 interface\n-    - o/snapstate: undo migration on 'snap revert'\n-    - overlord: snapshot exclusions\n-    - interfaces: add private /dev/shm support to shared-memory\n-      interface\n-    - gadget/install: implement factory reset for unencrypted system\n-    - packaging: install Go snap from 1.17 channel in the integration\n-      tests\n-    - snap-exec: fix detection if `cups` interface is connected\n-    - tests: extend gadget-config-defaults test with refresh.retain\n-    - cmd/snap,strutil: move lineWrap to WordWrapPadded\n-    - bootloader/piboot: add support for armhf\n-    - snap,wrappers: add `sigint{,-all}` to supported stop-modes\n-    - packaging/ubuntu-16.04/control: depend on fuse3 | fuse\n-    - interfaces/system-packages-doc: allow read-only access to\n-      /usr/share/libreoffice/help\n-    - daemon: add a /v2/accessories/changes/{ID} endpoint\n-    - interfaces/appstream-metadata: Re-create app-info links to\n-      swcatalog\n-    - debug-tools: add script to help debugging GCE instances which fail\n-      to boot\n-    - gadget/install, kernel: more ICE helpers/support\n-    - asserts: exclude empty snap id from duplicates lookup with preseed\n-      assert\n-    - cmd/snap, signtool: move key-manager related helpers to signtool\n-      package\n-    - tests/main/snap-quota-groups: add 219 as possible exit code\n-    - store: set validation-sets on actions when refreshing\n-    - github/workflows: update golangci-lint version\n-    - run-check: use go install instead of go get\n-    - tests: set as manual the interfaces-cups-control test\n-    - interfaces/appstream-metadata: Support new swcatalog directory\n-      names\n-    - image/preseed: migrate tests from cmd/snap-preseed\n-    - tests/main/uc20-create-partitions: update the test for new Go\n-      versions\n-    - strutil: move wrapGeneric function to strutil as WordWrap\n-    - many: small inconsequential tweaks\n-    - quota: detect/error if cpu-set is used with cgroup v1\n-    - tests: moving ubuntu-image to candidate to fix uc16 tests\n-    - image: integrate UC20 preseeding with image.Prepare\n-    - cmd/snap,client: frontend for cpu/thread quotas\n-    - quota: add test for `Resource.clone()`\n-    - many: replace use of \"sanity\" with more inclusive naming (part 2)\n-    - tests: switch to \"test-snapd-swtpm\"\n-    - i/b/network-manager: split rule with more than one peers\n-    - tests: fix restore of the BUILD_DIR in failover test on uc18\n-    - cmd/snap/debug: sort changes by their spawn times\n-    - asserts,interfaces/policy: slot-snap-id allow-installation\n-      constraints\n-    - o/devicestate: factory reset mode, no encryption\n-    - debug-tools/snap-debug-info.sh: print message if no gadget snap\n-      found\n-    - overlord/devicestate: install system cleanups\n-    - cmd/snap-bootstrap: support booting into factory-reset mode\n-    - o/snapstate, ifacestate: pass preseeding flag to\n-      AddSnapdSnapServices\n-    - o/devicestate: restore device key and serial when assertion is\n-      found\n-    - data: add static preseed.json file\n-    - sandbox: improve error message from `ProbeCgroupVersion()`\n-    - tests: fix the nested remodel tests\n-    - quota: add some more unit tests around Resource.Change()\n-    - debug-tools/snap-debug-info.sh: add debug script\n-    - tests: workaround lxd issue lp:10079 (function not implemented) on\n-      prep-snapd-in-lxd\n-    - osutil/disks: blockdev need not be available in the PATH\n-    - cmd/snap-preseed: address deadcode linter\n-    - tests/lib/fakestore/store: return snap base in details\n-    - tests/lib/nested.sh: rm core18 snap after download\n-    - systemd: do not reload system when enabling/disabling services\n-    - i/b/kubernetes_support: add access to Java certificates\n-\n- -- Michael Vogt   Thu, 19 May 2022 09:57:33 +0200\n-\n-snapd (2.55.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1965808\n-    - snapstate: do not auto-migrate to ~/Snap for core22 just yet\n-    - cmd/snap-seccomp: add copy_file_range to\n-      syscallsWithNegArgsMaskHi32\n-    - cmd/snap-update-ns: correctly set sticky bit on created\n-      directories where applicable\n-    - .github: Skip misspell and ineffassign on go 1.13\n-    - tests: add lz4 dependency for jammy to avoid issues repacking\n-      kernel\n-    - interfaces: posix-mq: add new interface\n-\n- -- Michael Vogt   Wed, 11 May 2022 06:38:24 +0200\n-\n-snapd (2.55.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1965808\n-    - tests: do not run mount-order-regression test on i386\n-    - c/snap-seccomp: update syscalls\n-    - o/snapstate: overwrite ~/.snap subdir when migrating\n-    - o/assertstate: fix handling of validation set tracking update in\n-      enforcing mode\n-    - packaging: restart our units only after the upgrade\n-    - interfaces: add a steam-support interface\n-    - features: enable refresh-app-awareness by default\n-    - i/b/custom_device: fix generation of udev rules\n-    - interfaces/system-packages-doc: allow read-only access to\n-      /usr/share/gtk-doc\n-    - interfaces/system-packages-doc: allow read-only access to\n-      /usr/share/xubuntu-docs\n-    - interfaces/builtin/network-control: also allow for mstp and bchat\n-      devices too\n-    - interfaces/builtin: update apparmor profile to allow creating\n-      mimic over /usr/share\n-    - data/selinux: allow snap-update-ns to mount on top of /var/snap\n-      inside the mount ns\n-    - interfaces/cpu-control: fix apparmor rules of paths with CPU ID\n-\n- -- Michael Vogt   Sat, 30 Apr 2022 10:04:39 +0200\n-\n-snapd (2.55.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1965808\n-    - cmd/snap-update-ns: apply content mounts before layouts\n-    - many: change \"transactional\" flag to a \"transaction\" option\n-    - b/piboot.go: check EEPROM version for RPi4\n-    - snap/quota,spread: raise lower memory quota limit to 640kb\n-    - boot,bootloader: add missing grub.cfg assets mocks in some\n-      tests\n-    - many: support --ignore-running with refresh many\n-    - cmd/snap,wrappers: fix wrong implementation of zero count cpu\n-      quota\n-    - quota: add some more unit tests around Resource.Change()\n-    - quota: detect/error if cpu-set is used with cgroup v1\n-    - quota: add test for `Resource.clone()\n-    - cmd/snap,client: frontend for cpu/thread quotas\n-    - tests: update spread test to check right XDG dirs\n-    - snap: set XDG env vars to new dirs\n-    - o/snapstate: initialize XDG dirs in HOME migration\n-    - i/b/kernel_module_load: expand $SNAP_COMMON in module options\n-    - overlord: add missing grub.cfg assets mocks in manager_tests.go\n-    - o/snapstate: account for repeat migration in ~/Snap undo\n-    - b/a: do not set console in kernel command line for arm64\n-    - sandbox: improve error message from `ProbeCgroupVersion()`\n-    - tests/main/snap-quota-groups: fix spread test\n-    - interfaces: add pkcs11 interface\n-    - o/snapstate: undo migration on 'snap revert'\n-    - overlord: snapshot exclusions\n-    - interfaces: add private /dev/shm support to shared-memory\n-      interface\n-    - packaging: install Go snap from 1.17 channel in the integration\n-      tests\n-    - snap-exec: fix detection if `cups` interface is connected\n-    - bootloader/piboot: add support for armhf\n-    - interfaces/system-packages-doc: allow read-only access to\n-      /usr/share/libreoffice/help\n-    - daemon: add a /v2/accessories/changes/{ID} endpoint\n-    - interfaces/appstream-metadata: Re-create app-info links to\n-      swcatalog\n-    - tests/main/snap-quota-groups: add 219 as possible exit code\n-    - store: set validation-sets on actions when refreshing\n-    - interfaces/appstream-metadata: Support new swcatalog directory\n-      names\n-    - asserts,interfaces/policy: slot-snap-id allow-installation\n-      constraints\n-    - i/b/network-manager: change rule for ResolveAddress to check only\n-      label\n-    - cmd/snap-bootstrap: support booting into factory-reset mode\n-    - systemd: do not reload system when enabling/disabling services\n-\n- -- Michael Vogt   Fri, 08 Apr 2022 16:48:35 +0200\n-\n-snapd (2.55.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1965808\n-    - cmd/snap-update-ns: actually use entirely non-existent dirs\n-\n- -- Ian Johnson   Mon, 21 Mar 2022 22:16:54 -0500\n-\n-snapd (2.55.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1965808\n-    - cmd/snap-update-ns/change_test.go: use non-exist name foo-runtime\n-      instead\n-\n- -- Ian Johnson   Mon, 21 Mar 2022 20:45:56 -0500\n-\n-snapd (2.55) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1965808\n-    - kernel/fde: add PartitionName to various structs\n-    - osutil/disks: calculate the last usable LBA instead of reading it\n-    - snap/quota: additional validation in resources.go\n-    - o/snapstate: avoid setting up single reboot when update includes\n-      base, kernel and gadget\n-    - overlord/state: add helper for aborting unready lanes\n-    - snap-bootstrap: Partially revert simplifications of mount\n-      dependencies\n-    - cmd/snap-update-ns/change.go: sort needed, desired and not reused\n-      mount entries\n-    - cmd/snap-preseed, image: move preseeding code to image/preseed\n-    - interfaces/docker-support: make generic rules not conflict with\n-      snap-confine\n-    - i/b/modem-manager: provide access to ObjectManager\n-    - i/b/network_{control,manager}.go: add more access to resolved\n-    - overlord/state: drop unused lanes field\n-    - cmd/snap: make 1.18 vet happy\n-    - o/snapstate: allow installing the snapd-desktop-integration snap\n-      even if the user-daemons feature is otherwise disabled\n-    - snap/quota: fix bug in quota group tree validation code\n-    - o/snapstate: make sure that snapd is a prerequisite for updating\n-      base snaps\n-    - bootloader: add support for piboot\n-    - i/seccomp/template.go: add close_range to the allowed syscalls\n-    - snap: add new cpu quotas\n-    - boot: support factory-reset when sealing and resealing\n-    - tests: fix test to avoid editing the test-snapd-tools snap.yaml\n-      file\n-    - dirs: remove unused SnapMetaDir variable\n-    - overlord: extend single reboot test to include a non-base, non-\n-      kernel snap\n-    - github: replace \"sanity check\" with \"quick check\" in workflow\n-    - fde: add new DeviceUnlock() call\n-    - many: replace use of \"sanity\" with more inclusive naming in\n-      comments\n-    - asserts: minimal changes to disable authority-delegation before\n-      full revert\n-    - tests: updating the test-snapd-cups-control-consumer snap to\n-      core20 based\n-    - many: replace use of \"sanity\" for interface implementation checks\n-    - cmd/snap-preseed: support for core20 preseeding\n-    - cmd: set core22 migration related env vars and update spread test\n-    - interface/opengl: allow read on\n-      /proc/sys/dev/i915/perf_stream_paranoid\n-    - tests/lib/tools/report-mongodb: fix typo in help text\n-    - tests: Include the source github url as part of the mongo db\n-      issues\n-    - o/devicestate: split mocks to separate calls for creating a model\n-      and a gadget\n-    - snap: Add missing zlib\n-    - cmd/snap: add support for rebooting to factory-reset\n-    - interfaces/apparmor: Update base template for systemd-machined\n-    - i/a/template.go: add ld path for jammy\n-    - o/devicestate, daemon: introduce factory-reset mode, allow\n-      switching\n-    - o/state: fix undo with independent tasks in same change and lane\n-    - tests: validate tests tools just on google and qemu backends\n-    - tests/lib/external/snapd-testing-tools: update from upstream\n-    - tests: skip interfaces-cups-control from debian-sid\n-    - Increase the times in snapd-sigterm for arm devices\n-    - interfaces/browser-support: allow RealtimeKit's\n-      MakeThreadRealtimeWithPID\n-    - cmd: misc analyzer fixes\n-    - interfaces/builtin/account-control: allow to execute pam_tally2\n-    - tests/main/user-session-env: special case bash profile on\n-      Tumbleweed\n-    - o/snapstate: implement transactional lanes for prereqs\n-    - o/snapstate: add core22 migration logic\n-    - tests/main/mount-ns: unmount /run/qemu\n-    - release: 2.54.4 changelog to master\n-    - gadget: add buildVolumeStructureToLocation,\n-      volumeStructureToLocationMap\n-    - interfaces/apparmor: add missing unit tests for special devmode\n-      rules/behavior\n-    - cmd/snap-confine: coverity fixes\n-    - interfaces/systemd: use batch systemd operations\n-    - tests: small adjustments to fix vuln spread tests\n-    - osutil/disks: trigger udev on the partition device node\n-    - interfaces/network-control: add D-Bus rules for resolved too\n-    - interfaces/cpu-control: add extra idleruntime data/reset files to\n-      cpu-control\n-    - packaging/ubuntu-16.04/rules: don't run unit tests on riscv64\n-    - data/selinux: allow the snap command to run systemctl\n-    - boot: mock amd64 arch for mabootable 20 suite\n-    - testutil: add Backup helper to save/restore values, usually for\n-      mocking\n-    - tests/nested/core/core20-reinstall-partitions: update test summary\n-    - asserts: return an explicit error when key cannot be found\n-    - interfaces: custom-device\n-    - Fix snap-run-gdbserver test by retrying the check\n-    - overlord, boot: fix unit tests on arches other than amd64\n-    - Get lxd snap from candidate channel\n-    - bootloader: allow different names for the grub binary in different\n-      archs\n-    - cmd/snap-mgmt, packaging: trigger daemon reload after purging unit\n-      files\n-    - tests: add test to ensure consecutive refreshes do garbage\n-      collection of old revs\n-    - o/snapstate: deal with potentially invalid type of refresh.retain\n-      value due to lax validation\n-    - seed,image: changes necessary for ubuntu-image to support\n-      preseeding extra snaps in classic images\n-    - tests: add debugging to snap-confine-tmp-mount\n-    - o/snapstate: add ~/Snap init related to backend\n-    - data/env: cosmetic tweak for fish\n-    - tests: include new testing tools and utils\n-    - wrappers: do not reload the deamon or restart snapd services when\n-      preseeding on core\n-    - Fix smoke/install test for other architectures than pc\n-    - tests: skip boot loader check during testing preparation on s390x\n-    - t/m/interfaces-network-manager: use different channel depending on\n-      system\n-    - o/devicestate: pick system from seed systems/ for preseeding (1/N)\n-    - asserts: add preseed assertion type\n-    - data/env: more workarounds for even older fish shells, provide\n-      reasonable defaults\n-    - tests/main/snap-run-devmode-classic: reinstall snapcraft to clean\n-      up\n-    - gadget/update.go: add buildNewVolumeToDeviceMapping for existing\n-      devices\n-    - tests: allow run spread tests using a private ppaTo validate it\n-    - interfaces/{cpu,power}-control: add more accesses for commercial\n-      device tuning\n-    - gadget: add searchForVolumeWithTraits + tests\n-    - gadget/install: measure and save disk volume traits during\n-      install.Run()\n-    - tests: fix \"undo purging\" step in snap-run-devmode-classic\n-    - many: move call to shutdown to the boot package\n-    - spread.yaml: add core22 version of rsync to skip\n-    - overlord, o/snapstate: fix mocking on systems without /snap\n-    - many: move boot.Device to snap.Device\n-    - tests: smoke test support for core22\n-    - tests/nested/snapd-removes-vulnerable-snap-confine-revs: use newer\n-      snaps\n-    - snapstate: make \"remove vulnerable version\" message more\n-      friendly\n-    - o/devicestate/firstboot_preseed_test.go: remove deadcode\n-    - o/devicestate: preseeding test cleanup\n-    - gadget: refactor StructureEncryption to have a concrete type\n-      instead of map\n-    - tests: add created_at timestamp to mongo issues\n-    - tests: fix security-udev-input-subsystem test\n-    - o/devicestate/handlers_install.go: use --all to get binary data\n-      too for logs\n-    - o/snapstate: rename \"corecore\" -> \"core\"\n-    - o/snapstate: implement transactional flag\n-    - tests: skip ~/.snap migration test on openSUSE\n-    - asserts,interfaces/policy: move and prepare DeviceScopeConstraint\n-      for reuse\n-    - asserts: fetching code should fetch authority-delegation\n-      assertions with signing keys as needed\n-    - tests: prepare and restore nested tests\n-    - asserts: first-class support for formatting/encoding signatory-id\n-    - asserts: remove unused function, fix for linter\n-    - gadget: identify/match encryption parts, include in traits info\n-    - asserts,cmd/snap-repair: support delegation when validating\n-      signatures\n-    - many: fix leftover empty snap dirs\n-    - libsnap-confine-private: string functions simplification\n-    - tests/nested/manual/core20-cloud-init-maas-signed-seed-data: add\n-      gadget variant\n-    - interfaces/u2f-devices: add U2F-TOKEN\n-    - tests/core/mem-cgroup-disabled: minor fixups\n-    - data/env: fix fish env for all versions of fish, unexport local\n-      vars, export XDG_DATA_DIRS\n-    - tests: reboot test running remodel\n-    - Add extra disk space to nested images to \"avoid No space left on\n-      device\" error\n-    - tests: add regression tests for disabled memory cgroup operation\n-    - many: fix issues flagged by golangci and configure it to fail\n-      build\n-    - docs: fix incorrect link\n-    - cmd/snap: rename the verbose logging flag in snap run\n-    - docs: cosmetic cleanups\n-    - cmd/snap-confine: build const data structures at compile-\n-      time\n-    - o/snapstate: reduce maxInhibition for raa by 1s to avoid confusing\n-      notification\n-    - snap-bootstrap: Cleanup dependencies in systemd mounts\n-    - interfaces/seccomp: Add rseq to base seccomp template\n-    - cmd/snap-confine: remove mention of \"legacy mode\" from comment\n-    - gadget/gadget_test.go: fix variable type\n-    - gadget/gadget.go: add AllDiskVolumeDeviceTraits\n-    - spread: non-functional cleanup of go1.6 legacy\n-    - cmd/snap-confine: update ambiguous comment\n-    - o/snapstate: revert migration on refresh if flag is disabled\n-    - packaging/fedora: sync with downstream, packaging improvements\n-    - tests: updated the documentation to run spread tests using\n-      external backend\n-    - osutil/mkfs: Expose more fakeroot flags\n-    - interfaces/cups: add cups-socket-directory attr, use to specify\n-      mount rules in backend\n-    - tests/main/snap-system-key: reset-failed snapd and snapd.socket\n-    - gadget/install: add unit tests for install.Run()\n-    - tests/nested/manual/remodel-cross-store,remodel-simple: wait for\n-      serial\n-    - vscode: added integrated support for MS VSCODE\n-    - cmd/snap/auto-import: use osutil.LoadMountInfo impl instead\n-    - gadget/install: add unit tests for makeFilesystem, allow mocking\n-      mkfs.Make()\n-    - systemd: batched operations\n-    - gadget/install/partition.go: include DiskIndex in synthesized\n-      OnDiskStructure\n-    - gadget/install: rm unused support for writing non-filesystem\n-      structures\n-    - cmd/snap: close refresh notifications after trying to run a snap\n-      while inhibited\n-    - o/servicestate: revert #11003 checking for memory cgroup being\n-      disabled\n-    - tests/core/failover: verify failover handling with the kernel snap\n-    - snap-confine: allow numbers in hook security tag\n-    - cmd/snap-confine: mount bpffs under /sys/fs/bpf if needed\n-    - spread: switch to CentOS 8 Stream image\n-    - overlord/servicestate: disallow mixing snaps and subgroups.\n-    - cmd/snap: add --debug to snap run\n-    - gadget: mv modelCharateristics to gadgettest.ModelCharacteristics\n-    - cmd/snap: remove use of zenity, use notifications for snap run\n-      inhibition\n-    - o/devicestate: verify that the new model is self contained before\n-      remodeling\n-    - usersession/userd: query xdg-mime to check for fallback handlers\n-      of a given scheme\n-    - gadget, gadgettest: reimplement tests to use new gadgettest\n-      examples.go file\n-    - asserts: start implementing authority-delegationTODO in later PRs:\n-    - overlord: skip manager tests on riscv for now\n-    - o/servicestate: quota group error should be more explanative when\n-      memory cgroup is disabled\n-    - i/builtin: allow modem-manager interface to access some files in\n-      sysfs\n-    - tests: ensure that interface hook works with hotplug plug\n-    - tests: fix repair test failure when run in a loop\n-    - o/snapstate: re-write state after undo migration\n-    - interfaces/opengl: add support for ARM Mali\n-    - tests: enable snap-userd-reexec on ubuntu and debian\n-    - tests: skip bind mount in snapd-snap test when the core snap in\n-      not repacked\n-    - many: add transactional flag to snapd API\n-    - tests: new Jammy image for testing\n-    - asserts: start generalizing attrMatcherGeneralization is along\n-    - tests: ensure the ca-certificates package is installed\n-    - devicestate: ensure permissions of /var/lib/snapd/void are\n-      correct\n-    - many: add altlinux support\n-    - cmd/snap-update-ns: convert some unexpected decimal file mode\n-      constants to octal.\n-    - tests: use system ubuntu-21.10-64 in nested tests\n-    - tests: skip version check on lp-1871652 for sru validation\n-    - snap/quota: add positive tests for the quota.Resources logic\n-    - asserts: start splitting out attrMatcher for reuse to\n-      constraint.go\n-    - systemd: actually test the function passed as a parameter\n-    - tests: fix snaps-state test for sru validation\n-    - many: add Transactional to snapstate.Flags\n-    - gadget: rename DiskVolume...Opts to DiskVolume...Options\n-    - tests: Handle PPAs being served from ppa.launchpadcontent.net\n-    - tests/main/cgroup-tracking-failure: Make it pass when run alone\n-    - tests: skip migration test on centOS\n-    - tests: add back systemd-timesyncd to newer debian distros\n-    - many: add conversion for interface attribute values\n-    - many: unit test fix when SNAPD_DEBUG=1 is set\n-    - gadget/install/partition.go: use device rescan trick only when\n-      gadget says to\n-    - osutil: refactoring the code exporting mocking APIs to other\n-      packages\n-    - mkversion: check that snapd is a git source tree before guessing\n-      the version\n-    - overlord: small refactoring of group quota implementation in\n-      preparation of multiple quota values\n-    - tests: drop 21.04 tests (it's EOL)\n-    - osutil/mkfs: Expose option for --lib flag in fakeroot call\n-    - cmd/snapd-apparmor: fix bad variable initialization\n-    - packaging, systemd: fix socket (re-)start race\n-    - tests: fix running tests.invariant on testflinger systems\n-    - tests: spread test snap dir migration\n-    - interfaces/shared-memory: support single wild-cards in the\n-      read/write paths\n-    - tests: cross store remodel\n-    - packaging,tests: fix running autopkgtest\n-    - spread-shellcheck: add a caching layer\n-    - tests: add jammy to spread executions\n-    - osutils: deal with ENOENT in UserMaybeSudoUser()\n-    - packaging/ubuntu-16.04/control: adjust libfuse3 dependency as\n-      suggested\n-    - gadget/update.go: add DiskTraitsFromDeviceAndValidate\n-    - tests/lib/prepare.sh: add debug kernel command line params via\n-      gadget on UC20\n-    - check-commit-email: do not fail when current dir is not under git\n-    - configcore: implement netplan write support via dbus\n-    - run-checks, check-commit-email.py: check commit email addresses\n-      for validity\n-    - tests: setup snapd remodel testing bits\n-    - cmd/snap: adjust /cmd to migration changes\n-    - systemd: enable batched calls for systemd calls operation on units\n-    - o/ifacestate: add convenience Active() method to ConnectionState\n-      struct\n-    - o/snapstate: migrate to hidden dir on refresh/install\n-    - store: fix flaky test\n-    - i/builtin/xilinx-dma: add interface for Xilinx DMA driver\n-    - go.mod: tidy up\n-    - overlord/h/c/umount: remove handling of required parameter\n-    - systemd: add NeedDaemonReload to the unit state\n-    - mount-control: step 3\n-    - tests/nested/manual/minimal-smoke: bump mem to 512 for unencrypted\n-      case too\n-    - gadget: fix typo with filesystem message\n-    - gadget: misc helper fixes for implicit system-data role handling\n-    - tests: fix uses of fakestore new-snap-declaration\n-    - spread-shellcheck: use safe_load rather than load with a loder\n-    - interfaces: allow access to new at-spi socket location in desktop-\n-      legacy\n-    - cmd/snap: setup tracking cgroup when invoking a service directly\n-      as a user\n-    - tests/main/snap-info: use yaml.safe_load rather than yaml.load\n-    - cmd/snap: rm unnecessary validation\n-    - tests: fix `tests/core/create-user` on testflinger pi3\n-    - tests: fix parallel-install-basic on external UC16 devices\n-    - tests: ubuntu-image 2.0 compatibility fixes\n-    - tests/lib/prepare-restore: use go install rather than go get\n-    - cmd/snap, daemon: add debug command for getting OnDiskVolume\n-      dump\n-    - gadget: resolve index ambiguity between OnDiskStructure and\n-      LaidOutStructuretype: bare structures).\n-    - tests: workaround missing bluez snap\n-    - HACKING.md: add dbus-x11 to packages needed to run unit tests\n-    - spread.yaml: add debian-{10,11}, drop debian-9\n-    - cmd/snap/quota: fix typo in the help message\n-    - gadget: allow gadget struct with unspecified filesystem to match\n-      part with fs\n-    - tests: re-enable kernel-module-load tests on arm\n-    - tests/lib/uc20-create-partitions/main.go: setup a logger for\n-      messages\n-    - cmd: support installing multiple local snaps\n-    - usersession: implement method to close notifications via\n-      usersession REST API\n-    - data/env: treat XDG_DATA_DIRS like PATH for fish\n-    - cmd/snap, cmd/snap-confine: extend manpage, update links\n-    - tests: fix fwupd interface test in debian sid\n-    - tests: do not run k8s smoke test on 32 bit systems\n-    - tests: fix testing in trusty qemu\n-    - packaging: merge 2.54.2 changelog back to master\n-    - overlord: fix issue with concurrent execution of two snapd\n-      processes\n-    - interfaces: add a polkit interface\n-    - gadget/install/partition.go: wait for udev settle when creating\n-      partitions too\n-    - tests: exclude interfaces-kernel-module load on arm\n-    - tests: ensure that test-snapd-kernel-module-load is\n-      removed\n-    - tests: do not test microk8s-smoke on arm\n-    - packaging, bloader, github: restore cleanliness of snapd info\n-      file; check in GA workflow\n-    - tests/lib/tools/tests.invariant: simplify check\n-    - tests/nested/manual/core20-to-core22: wait for device to be\n-      initialized before starting a remodel\n-    - build-aux/snap/snapcraft.yaml: use build-packages, don't fail\n-      dirty builds\n-    - tests/lib/tools/tests.invariant: add invariant for detecting\n-      broken snaps\n-    - tests/core/failover: replace boot-state with snap debug boot-vars\n-    - tests: fix remodel-kernel test when running on external devices\n-    - data/selinux: allow poking /proc/xen\n-    - gadget: do not crash if gadget.yaml has an empty Volumes section\n-    - i/b/mount-control: support creating tmpfs mounts\n-    - packaging: Update openSUSE spec file with apparmor-parser and\n-      datadir for fish\n-    - cmd/snap-device-helper: fix variable name typo in the unit tests\n-    - tests: fixed an issue with retrieval of the squashfuse repo\n-    - release: 2.54.1\n-    - tests: tidy up the top-level of ubuntu-seed during tests\n-    - build-aux: detect/fix dirty git revisions while snapcraft\n-      building\n-    - release: 2.54\n-\n- -- Ian Johnson   Mon, 21 Mar 2022 15:55:16 -0500\n-\n-snapd (2.54.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1955137\n-    - t/m/interfaces-network-manager: use different channel depending on\n-      system\n-    - many: backport attrer interface changes to 2.54\n-    - tests: skip version check on lp-1871652 for sru validation\n-    - i/builtin: allow modem-manager interface to access some files in\n-      sysfs\n-    - snapstate: make \"remove vulnerable version\" message more\n-      friendly\n-    - tests: fix \"undo purging\" step in snap-run-devmode-classic\n-    - o/snapstate: deal with potentially invalid type of refresh.retain\n-      value due to lax validation\n-    - interfaces: custom-device\n-    - packaging/ubuntu-16.04/control: adjust libfuse3 dependency\n-    - data/env: fix fish env for all versions of fish\n-    - packaging/ubuntu-16.04/snapd.postinst: start socket and service\n-      first\n-    - interfaces/u2f-devices: add U2F-TOKEN\n-    - interfaces/seccomp: Add rseq to base seccomp template\n-    - tests: remove disabled snaps before calling save_snapd_state\n-    - overlord: skip manager tests on riscv for now\n-    - interfaces/opengl: add support for ARM Mali\n-    - devicestate: ensure permissions of /var/lib/snapd/void are\n-      correct\n-    - cmd/snap-update-ns: convert some unexpected decimal file mode\n-      constants to octal.\n-    - interfaces/shared-memory: support single wild-cards in the\n-      read/write paths\n-    - packaging: fix running autopkgtest\n-    - i/builtin/xilinx-dma-host: add interface for Xilinx DMA driver\n-    - tests: fix `tests/core/create-user` on testflinger pi3\n-    - tests: fix parallel-install-basic on external UC16 devices\n-    - tests: re-enable kernel-module-load tests on arm\n-    - tests: do not run k8s smoke test on 32 bit systems\n-\n- -- Michael Vogt   Thu, 03 Mar 2022 09:44:21 +0100\n-\n-snapd (2.54.3) xenial; urgency=medium\n-\n-  * SECURITY UPDATE: Local privilege escalation\n-    - snap-confine: Add validations of the location of the snap-confine\n-      binary within snapd.\n-    - snap-confine: Fix race condition in snap-confine when preparing a\n-      private mount namespace for a snap.\n-    - CVE-2021-44730\n-    - CVE-2021-44731\n-  * SECURITY UPDATE: Data injection from malicious snaps\n-    - interfaces: Add validations of snap content interface and layout\n-      paths in snapd.\n-    - CVE-2021-4120\n-    - LP: #1949368\n-\n- -- Michael Vogt   Tue, 15 Feb 2022 17:45:13 +0100\n-\n-snapd (2.54.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1955137\n-    - tests: exclude interfaces-kernel-module load on arm\n-    - tests: ensure that test-snapd-kernel-module-load is\n-      removed\n-    - tests: do not test microk8s-smoke on arm\n-    - tests/core/failover: replace boot-state with snap debug boot-vars\n-    - tests: use snap info|awk to extract tracking channel\n-    - tests: fix remodel-kernel test when running on external devices\n-    - .github/workflows/test.yaml: also check internal snapd version for\n-      cleanliness\n-    - packaging/ubuntu-16.04/rules: eliminate seccomp modification\n-    - bootloader/assets/grub_*cfg_asset.go: update Copyright\n-    - build-aux/snap/snapcraft.yaml: adjust comment about get-version\n-    - .github/workflows/test.yaml: add check in github actions for dirty\n-      snapd snaps\n-    - build-aux/snap/snapcraft.yaml: use build-packages, don't fail\n-      dirty builds\n-    - data/selinux: allow poking /proc/xen\n-\n- -- Ian Johnson   Thu, 06 Jan 2022 15:25:16 -0600\n-\n-snapd (2.54.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1955137\n-    - buid-aux: set version before calling ./generate-packaging-dir\n-      This fixes the \"dirty\" suffix in the auto-generated version\n-\n- -- Michael Vogt   Mon, 20 Dec 2021 10:06:09 +0100\n-\n-snapd (2.54) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1955137\n-    - interfaces/builtin/opengl.go: add boot_vga sys/devices file\n-    - o/configstate/configcore: add tmpfs.size option\n-    - tests: moving to manual opensuse 15.2\n-    - cmd/snap-device-helper: bring back the device type identification\n-      behavior, but for remove action fallback only\n-    - cmd/snap-failure: use snapd from the snapd snap if core is not\n-      present\n-    - tests/core/failover: enable the test on core18\n-    - o/devicestate: ensure proper order when remodel does a simple\n-      switch-snap-channel\n-    - builtin/interfaces: add shared memory interface\n-    - overlord: extend kernel/base success and failover with bootenv\n-      checks\n-    - o/snapstate: check disk space w/o store if possible\n-    - snap-bootstrap: Mount snaps read only\n-    - gadget/install: do not re-create partitions using OnDiskVolume\n-      after deletion\n-    - many: fix formatting w/ latest go version\n-    - devicestate,timeutil: improve logging of NTP sync\n-    - tests/main/security-device-cgroups-helper: more debugs\n-    - cmd/snap: print a placeholder for version of broken snaps\n-    - o/snapstate: mock system with classic confinement support\n-    - cmd: Fixup .clangd to use correct syntax\n-    - tests: run spread tests in fedora-35\n-    - data/selinux: allow snapd to access /etc/modprobe.d\n-    - mount-control: step 2\n-    - daemon: add multiple snap sideload to API\n-    - tests/lib/pkgdb: install dbus-user-session during prepare, drop\n-      dbus-x11\n-    - systemd: provide more detailed errors for unimplemented method in\n-      emulation mode\n-    - tests: avoid checking TRUST_TEST_KEYS on restore on remodel-base\n-      test\n-    - tests: retry umounting /var/lib/snapd/seed on uc20 on fsck-on-boot\n-      test\n-    - o/snapstate: add hide/expose snap data to backend\n-    - interfaces: kernel-module-load\n-    - snap: add support for `snap watch\n-      --last={revert,enable,disable,switch}`\n-    - tests/main/security-udev-input-subsystem: drop info from udev\n-    - tests/core/kernel-and-base-single-reboot-failover,\n-      tests/lib/fakestore: verify failover scenario\n-    - tests/main/security-device-cgroups-helper: collect some debug info\n-      when the test fails\n-    - tests/nested/manual/core20-remodel: wait for device to have a\n-      serial before starting a remodel\n-    - tests/main/generic-unregister: test re-registration if not blocked\n-    - o/snapstate, assertsate: validation sets/undo on partial failure\n-    - tests: ensure snapd can be downloaded as a module\n-    - snapdtool, many: support additional key/value flags in info file\n-    - data/env: improve fish shell env setup\n-    - usersession/client: provide a way for client to send messages to a\n-      subset of users\n-    - tests: verify that simultaneous refresh of kernel and base\n-      triggers a single reboot only\n-    - devicestate: Unregister deletes the device key pair as well\n-    - daemon,tests: support forgetting device serial via API\n-    - asserts: change behavior of alternative attribute matcher\n-    - configcore: relax validation rules for hostname\n-    - cmd/snap-confine: do not include libglvnd libraries from the host\n-      system\n-    - overlord, tests: add managers and a spread test for UC20 to UC22\n-      remodel\n-    - HACKING.md: adjust again for building the snapd snap\n-    - systemd: add support for systemd unit alias names\n-    - o/snapstate: add InstallPathMany\n-    - gadget: allow EnsureLayoutCompatibility to ensure disk has all\n-      laid out structsnow reject/fail:\n-    - packaging/ubuntu, packaging/debian: depend on dbus-session-bus\n-      provider (#11111)\n-    - interfaces/interfaces/scsi_generic: add interface for scsi generic\n-      de\u2026 (#10936)\n-    - osutil/disks/mockdisk.go: add MockDevicePathToDiskMapping\n-    - interfaces/microstack-support: set controlsDeviceCgroup to true\n-    - network-setup-control: add netplan generate D-Bus rules\n-    - interface/builtin/log_observe: allow to access /dev/kmsg\n-    - .github/workflows/test.yaml: restore failing of spread tests on\n-      errors (nested)\n-    - gadget: tweaks to DiskStructureDeviceTraits + expand test cases\n-    - tests/lib/nested.sh: allow tests to use their own core18 in extra-\n-      snaps-path\n-    - interfaces/browser-support: Update rules for Edge\n-    - o/devicestate: during remodel first check pending download tasks\n-      for snaps\n-    - polkit: add a package to validate polkit policy files\n-    - HACKING.md: document building the snapd snap and splicing it into\n-      the core snap\n-    - interfaces/udev: fix installing snaps inside lxd in 21.10\n-    - o/snapstate: refactor disk space checks\n-    - tests: add (strict) microk8s smoke test\n-    - osutil/strace: try to enable strace on more arches\n-    - cmd/libsnap-confine-private: fix snap-device-helper device allow\n-      list modification on cgroup v2\n-    - tests/main/snapd-reexec-snapd-snap: improve debugging\n-    - daemon: write formdata file parts to snaps dir\n-    - systemd: add support for .target units\n-    - tests: run snap-disconnect on uc16\n-    - many: add experimental setting to allow using ~/.snap/data instead\n-      of ~/snap\n-    - overlord/snapstate: perform a single reboot when updating boot\n-      base and kernel\n-    - kernel/fde: add DeviceUnlockKernelHookDeviceMapperBackResolver,\n-      use w/ disks pkg\n-    - o/devicestate: introduce DeviceManager.Unregister\n-    - interfaces: allow receiving PropertiesChanged on the mpris plug\n-    - tests: new tool used to retrieve data from mongo db\n-    - daemon: amend ssh keys coming from the store\n-    - tests: Include the tools from snapd-testing-tools project in\n-      \"$TESTSTOOLS\"\n-    - tests: new workflow step used to report spread error to mongodb\n-    - interfaces/builtin/dsp: update proc files for ambarella flavor\n-    - gadget: replace ondisk implementation with disks package, refactor\n-      part calcs\n-    - tests: Revert \"tests: disable flaky uc18 tests until systemd is\n-      fixed\"\n-    - Revert: \"many: Vendor apparmor-3.0.3 into the snapd snap\"\n-    - asserts: rename \"white box\" to \"clear box\" (woke checker)\n-    - many: Vendor apparmor-3.0.3 into the snapd snap\n-    - tests: reorganize the debug-each on the spread.yaml\n-    - packaging: sync with downstream packaging in Fedora and openSUSE\n-    - tests: disable flaky uc18 tests until systemd is fixed\n-    - data/env: provide profile setup for fish shell\n-    - tests: use ubuntu-image 1.11 from stable channel\n-    - gadget/gadget.go: include disk schema in the disk device volume\n-      traits too\n-    - tests/main/security-device-cgroups-strict-enforced: extend the\n-      comments\n-    - README.md: point at bugs.launchpad.net/snapd instead of snappy\n-      project\n-    - osutil/disks: introduce RegisterDeviceMapperBackResolver + use for\n-      crypt-luks2\n-    - packaging: make postrm script robust against `rm` failures\n-    - tests: print extra debug on auto-refresh-gating test failure\n-    - o/assertstate, api: move enforcing/monitoring from api to\n-      assertstate, save history\n-    - tests: skip the test-snapd-timedate-control-consumer.date to avoid\n-      NTP sync error\n-    - gadget/install: use disks functions to implement deviceFromRole,\n-      also rename\n-    - tests: the `lxd` test is failing right now on 21.10\n-    - o/snapstate: account for deleted revs when undoing install\n-    - interfaces/builtin/block_devices: allow blkid to print block\n-      device attributes\n-    - gadget: include size + sector-size in DiskVolumeDeviceTraits\n-    - cmd/libsnap-confine-private: do not deny all devices when reusing\n-      the device cgroup\n-    - interfaces/builtin/time-control: allow pps access\n-    - o/snapstate/handlers: propagate read errors on \"copy-snap-data\"\n-    - osutil/disks: add more fields to Partition, populate them during\n-      discovery\n-    - interfaces/u2f-devices: add Trezor and Trezor v2 keys\n-    - interfaces: timezone-control, add permission for ListTimezones\n-      DBus call\n-    - o/snapstate: remove repeated test assertions\n-    - tests: skip `snap advise-command` test if the store is overloaded\n-    - cmd: create ~/snap dir with 0700 perms\n-    - interfaces/apparmor/template.go: allow udevadm from merged usr\n-      systems\n-    - github: leave a comment documenting reasons for pipefail\n-    - github: enable pipefail when running spread\n-    - osutil/disks: add DiskFromPartitionDeviceNode\n-    - gadget, many: add model param to Update()\n-    - cmd/snap-seccomp: add riscv64 support\n-    - o/snapstate: maintain a RevertStatus map in SnapState\n-    - tests: enable lxd tests on impish system\n-    - tests: (partially) revert the memory limits PR#r10241\n-    - o/assertstate: functions for handling validation sets tracking\n-      history\n-    - tests: some improvements for the spread log parser\n-    - interfaces/network-manager-observe: Update for libnm / dart\n-      clients\n-    - tests: add ntp related debug around \"auto-refresh\" test\n-    - boot: expand on the fact that reseal taking modeenv is very\n-      intentional\n-    - cmd/snap-seccomp/syscalls: update syscalls to match libseccomp\n-      abad8a8f4\n-    - data/selinux: update the policy to allow snapd to talk to\n-      org.freedesktop.timedate1\n-    - o/snapstate: keep old revision if install doesn't add new one\n-    - overlord/state: add a unit test for a kernel+base refresh like\n-      sequence\n-    - desktop, usersession: observe notifications\n-    - osutil/disks: add AllPhysicalDisks()\n-    - timeutil,deviceutil: fix unit tests on systems without dbus or\n-      without ntp-sync\n-    - cmd/snap-bootstrap/README: explain all the things (well most of\n-      them anyways)\n-    - docs: add run-checks dependency install instruction\n-    - o/snapstate: do not prune refresh-candidates if gate-auto-refresh-\n-      hook feature is not enabled\n-    - o/snapstate: test relink remodel helpers do a proper subset of\n-      doInstall and rework the verify*Tasks helpers\n-    - tests/main/mount-ns: make the test run early\n-    - tests: add `--debug` to netplan apply\n-    - many: wait for up to 10min for NTP synchronization before\n-      autorefresh\n-    - tests: initialize CHANGE_ID in _wait_autorefresh\n-    - sandbox/cgroup: freeze and thaw cgroups related to services and\n-      scopes only\n-    - tests: add more debug around qemu-nbd\n-    - o/hookstate: print cohort with snapctl refresh --pending (#10985)\n-    - tests: misc robustness changes\n-    - o/snapstate: improve install/update tests (#10850)\n-    - tests: clean up test tools\n-    - spread.yaml: show `journalctl -e` for all suites on debug\n-    - tests: give interfaces-udisks2 more time for the loop device to\n-      appear\n-    - tests: set memory limit for snapd\n-    - tests: increase timeout/add debug around nbd0 mounting (up, see\n-      LP:#1949513)\n-    - snapstate: add debug message where a snap is mounted\n-    - tests: give nbd0 more time to show up in preseed-lxd\n-    - interfaces/dsp: add more ambarella things\n-    - cmd/snap: improve snap disconnect arg parsing and err msg\n-    - tests: disable nested lxd snapd testing\n-    - tests: disable flaky \"interfaces-udisks2\" on ubuntu-18.04-32\n-    - o/snapstate: avoid validationSetsSuite repeating snapmgrTestSuite\n-    - sandbox/cgroup: wait for start transient unit job to finish\n-    - o/snapstate: fix task order, tweak errors, add unit tests for\n-      remodel helpers\n-    - osutil/disks: re-org methods for end of usable region, size\n-      information\n-    - build-aux: ensure that debian packaging matches build-base\n-    - docs: update HACKING.md instructions for snapd 2.52 and later\n-    - spread: run lxd tests with version from latest/edge\n-    - interfaces: suppress denial of sys_module capability\n-    - osutil/disks: add methods to replace gadget/ondisk functions\n-    - tests: split test tools - part 1\n-    - tests: fix nested tests on uc20\n-    - data/selinux: allow snap-confine to read udev's database\n-    - i/b/common_test: refactor AppArmor features test\n-    - tests: run spread tests on debian 11\n-    - o/devicestate: copy timesyncd clock timestamp during install\n-    - interfaces/builtin: do not probe parser features when apparmor\n-      isn't available\n-    - interface/modem-manager: allow connecting to the mbim/qmi proxy\n-    - tests: fix error message in run-checks\n-    - tests: spread test for validation sets enforcing\n-    - cmd/snap-confine: lazy set up of device cgroup, only when devices\n-      were assigned\n-    - o/snapstate: deduplicate snap names in remove/install/update\n-    - tests/main/selinux-data-context: use session when performing\n-      actions as test user\n-    - packaging/opensuse: sync with openSUSE packaging, enable AppArmor\n-      on 15.3+\n-    - interfaces: skip connection of netlink interface on older\n-      systems\n-    - asserts, o/snapstate: honor IgnoreValidation flag when checking\n-      installed snaps\n-    - tests/main/apparmor-batch-reload: fix fake apparmor_parser to\n-      handle --preprocess\n-    - sandbox/apparmor, interfaces/apparmor: detect bpf capability,\n-      generate snippet for s-c\n-    - release-tools/repack-debian-tarball.sh: fix c-vendor dir\n-    - tests: test for enforcing with prerequisites\n-    - tests/main/snapd-sigterm: fix race conditions\n-    - spread: run lxd tests with version from latest/stable\n-    - run-checks: remove --spread from help message\n-    - secboot: use latest secboot with tpm legacy platform and v2 fully\n-      optional\n-    - tests/lib/pkgdb: install strace on Debian 11 and Sid\n-    - tests: ensure systemd-timesyncd is installed on debian\n-    - interfaces/u2f-devices: add Nitrokey 3\n-    - tests: update the ubuntu-image channel to candidate\n-    - osutil/disks/labels: simplify decoding algorithm\n-    - tests: not testing lxd snap anymore on i386 architecture\n-    - o/snapstate, hookstate: print remaining hold time on snapctl\n-      --hold\n-    - cmd/snap: support --ignore-validation with snap install client\n-      command\n-    - tests/snapd-sigterm: be more robust against service restart\n-    - tests: simplify mock script for apparmor_parser\n-    - o/devicestate, o/servicestate: update gadget assets and cmdline\n-      when remodeling\n-    - tests/nested/manual/refresh-revert-fundamentals: re-enable\n-      encryption\n-    - osutil/disks: fix bug in BlkIDEncodeLabel, add BlkIDDecodeLabel\n-    - gadget, osutil/disks: fix some bugs from prior PR'sin the dir.\n-    - secboot: revert move to new version (revert #10715)\n-    - cmd/snap-confine: die when snap process is outside of snap\n-      specific cgroup\n-    - many: mv MockDeviceNameDisksToPartitionMapping ->\n-      MockDeviceNameToDiskMapping\n-    - interfaces/builtin: Add '/com/canonical/dbusmenu' path access to\n-      'unity7' interface\n-    - interfaces/builtin/hardware-observer: add /proc/bus/input/devices\n-      too\n-    - osutil/disks, many: switch to defining Partitions directly for\n-      MockDiskMapping\n-    - tests: remove extra-snaps-assertions test\n-    - interface/modem-manager: add accept for MBIM/QMI proxy clients\n-    - tests/nested/core/core20-create-recovery: fix passing of data to\n-      curl\n-    - daemon: allow enabling enforce mode\n-    - daemon: use the syscall connection to get the socket credentials\n-    - i/builtin/kubernetes_support: add access to Calico lock file\n-    - osutil: ensure parent dir is opened and sync'd\n-    - tests: using test-snapd-curl snap instead of http snap\n-    - overlord: add managers unit test demonstrating cyclic dependency\n-      between gadget and kernel updates\n-    - gadget/ondisk.go: include the filesystem UUID in the returned\n-      OnDiskVolume\n-    - packaging: fixes for building on openSUSE\n-    - o/configcore: allow hostnames up to 253 characters, with dot-\n-      delimited elements\n-    - gadget/ondisk.go: add listBlockDevices() to get all block devices\n-      on a system\n-    - gadget: add mapping trait types + functions to save/load\n-    - interfaces: add polkit security backend\n-    - cmd/snap-confine/snap-confine.apparmor.in: update ld rule for\n-      s390x impish\n-    - tests: merge coverage results\n-    - tests: remove \"features\" from fde-setup.go example\n-    - fde: add new device-setup support to fde-setup\n-    - gadget: add `encryptedDevice` and add encryptedDeviceLUKS\n-    - spread: use `bios: uefi` for uc20\n-    - client: fail fast on non-retryable errors\n-    - tests: support running all spread tests with experimental features\n-    - tests: check that a snap that doesn't have gate-auto-refresh hook\n-      can call --proceed\n-    - o/snapstate: support ignore-validation flag when updating to a\n-      specific snap revision\n-    - o/snapstate: test prereq update if started by old version\n-    - tests/main: disable cgroup-devices-v1 and freezer tests on 21.10\n-    - tests/main/interfaces-many: run both variants on all possible\n-      Ubuntu systems\n-    - gadget: mv ensureLayoutCompatibility to gadget proper, add\n-      gadgettest pkg\n-    - many: replace state.State restart support with overlord/restart\n-    - overlord: fix generated snap-revision assertions in remodel unit\n-      tests\n-\n- -- Michael Vogt   Fri, 17 Dec 2021 15:49:18 +0100\n-\n-snapd (2.53.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - devicestate: mock devicestate.MockTimeutilIsNTPSynchronized to\n-      avoid host env leaking into tests\n-    - timeutil: return NoTimedate1Error if it can't connect to the\n-      system bus\n-\n- -- Ian Johnson   Thu, 02 Dec 2021 17:16:48 -0600\n-\n-snapd (2.53.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - devicestate: Unregister deletes the device key pair as well\n-    - daemon,tests: support forgetting device serial via API\n-    - configcore: relax validation rules for hostname\n-    - o/devicestate: introduce DeviceManager.Unregister\n-    - packaging/ubuntu, packaging/debian: depend on dbus-session-bus\n-      provider\n-    - many: wait for up to 10min for NTP synchronization before\n-      autorefresh\n-    - interfaces/interfaces/scsi_generic: add interface for scsi generic\n-      devices\n-    - interfaces/microstack-support: set controlsDeviceCgroup to true\n-    - interface/builtin/log_observe: allow to access /dev/kmsg\n-    - daemon: write formdata file parts to snaps dir\n-    - spread: run lxd tests with version from latest/edge\n-    - cmd/libsnap-confine-private: fix snap-device-helper device allow\n-      list modification on cgroup v2\n-    - interfaces/builtin/dsp: add proc files for monitoring Ambarella\n-      DSP firmware\n-    - interfaces/builtin/dsp: update proc file accordingly\n-\n- -- Ian Johnson   Thu, 02 Dec 2021 11:42:15 -0600\n-\n-snapd (2.53.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1946127\n-    - interfaces/builtin/block_devices: allow blkid to print block\n-      device attributes/run/udev/data/b{major}:{minor}\n-    - cmd/libsnap-confine-private: do not deny all devices when reusing\n-      the device cgroup\n-    - interfaces/builtin/time-control: allow pps access\n-    - interfaces/u2f-devices: add Trezor and Trezor v2 keys\n-    - interfaces: timezone-control, add permission for ListTimezones\n-      DBus call\n-    - interfaces/apparmor/template.go: allow udevadm from merged usr\n-      systems\n-    - interface/modem-manager: allow connecting to the mbim/qmi proxy\n-    - interfaces/network-manager-observe: Update for libnm client\n-      library\n-    - cmd/snap-seccomp/syscalls: update syscalls to match libseccomp\n-      abad8a8f4\n-    - sandbox/cgroup: freeze and thaw cgroups related to services and\n-      scopes only\n-    - o/hookstate: print cohort with snapctl refresh --pending\n-    - cmd/snap-confine: lazy set up of device cgroup, only when devices\n-      were assigned\n-    - tests: ensure systemd-timesyncd is installed on debian\n-    - tests/lib/pkgdb: install strace on Debian 11 and Sid\n-    - tests/main/snapd-sigterm: flush, use retry\n-    - tests/main/snapd-sigterm: fix race conditions\n-    - release-tools/repack-debian-tarball.sh: fix c-vendor dir\n-    - data/selinux: allow snap-confine to read udev's database\n-    - interfaces/dsp: add more ambarella things* interfaces/dsp: add\n-      more ambarella things\n-\n- -- Ian Johnson   Mon, 15 Nov 2021 16:09:09 -0600\n-\n-snapd (2.53.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1946127\n-    - spread: run lxd tests with version from latest/stable\n-    - secboot: use latest secboot with tpm legacy platform and v2 fully\n-      optional (#10946)\n-    - cmd/snap-confine: die when snap process is outside of snap\n-      specific cgroup (2.53)\n-    - interfaces/u2f-devices: add Nitrokey 3\n-    - Update the ubuntu-image channel to candidate\n-    - Allow hostnames up to 253 characters, with dot-delimited elements \n-      (as suggested by man 7 hostname).\n-    - Disable i386 until it is possible to build snapd using lxd\n-    - o/snapstate, hookstate: print remaining hold time on snapctl\n-      --hold\n-    - tests/snapd-sigterm: be more robust against service restart\n-    - tests: add a regression test for snapd hanging on SIGTERM\n-    - daemon: use the syscall connection to get the socket\n-      credentials\n-    - interfaces/builtin/hardware-observer: add /proc/bus/input/devices\n-      too\n-    - cmd/snap-confine/snap-confine.apparmor.in: update ld rule for\n-      s390x impish\n-    - interface/modem-manager: add accept for MBIM/QMI proxy clients\n-    - secboot: revert move to new version\n-\n- -- Ian Johnson   Thu, 21 Oct 2021 11:55:31 -0500\n-\n-snapd (2.53) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1946127\n-    - overlord: fix generated snap-revision assertions in remodel unit\n-      tests\n-    - snap-bootstrap: wait in `mountNonDataPartitionMatchingKernelDisk`\n-    - interfaces/modem-manager: add access to PCIe modems\n-    - overlord/devicestate: record recovery capable system on a\n-      successful remodel\n-    - o/snapstate: use device ctx in prerequisite install/update\n-    - osutil/disks: support filtering by mount opts in\n-      MountPointsForPartitionRoot\n-    - many: support an API flag system-restart-immediate to make snap\n-      ops proceed immediately with system restarts\n-    - osutil/disks: add RootMountPointsForPartition\n-    - overlord/devicestate, tests: enable UC20 remodel, add spread tests\n-    - cmd/snap: improve snap run help message\n-    - o/snapstate: support ignore validation flag on install/update\n-    - osutil/disks: add Disk.FindMatchingPartitionWith{Fs,Part}Label\n-    - desktop: implement gtk notification backend and provide minimal\n-      notification api\n-    - tests: use the latest cpu family for nested tests execution\n-    - osutil/disks: add Partition struct and Disks.Partitions()\n-    - o/snapstate: prevent install hang if prereq install fails\n-    - osutil/disks: add Disk.KernelDevice{Node,Path} methods\n-    - disks: add `Size(path)` helper\n-    - tests: reset some mount units failing on ubuntu impish\n-    - osutil/disks: add DiskFromDevicePath, other misc changes\n-    - interfaces/apparmor: do not fail during initialization when there\n-      is no AppArmor profile for snap-confine\n-    - daemon: implement access checkers for themes API\n-    - interfaces/seccomp: add clone3 to default template\n-    - interfaces/u2f-devices: add GoTrust Idem Key\n-    - o/snapstate: validation sets enforcing on update\n-    - o/ifacestate: don't fail remove if disconnect hook fails\n-    - tests: fix error trying to create the extra-snaps dir which\n-      already exists\n-    - devicestate: use EncryptionType\n-    - cmd/libsnap-confine-private: workaround BPF memory accounting,\n-      update apparmor profile\n-    - tests: skip system-usernames-microk8s when TRUST_TEST_KEYS is\n-      false\n-    - interfaces/dsp: add a usb rule to the ambarella flavor\n-    - interfaces/apparmor/template.go: allow inspection of dbus\n-      mediation level\n-    - tests/main/security-device-cgroups: fix when both variants run on\n-      the same host\n-    - cmd/snap-confine: update s-c apparmor profile to allow versioned\n-      ld.so\n-    - many: rename systemd.Kind to Backend for a bit more clarity\n-    - cmd/libsnap-confine-private: fix set but unused variable in the\n-      unit tests\n-    - tests: fix netplan test on i386 architecture\n-    - tests: fix lxd-mount-units test which is based on core20 in ubuntu\n-      focal system\n-    - osutil/disks: add new `CreateLinearMapperDevice` helper\n-    - cmd/snap: wait while inhibition file is present\n-    - tests: cleanup the job workspace as first step of the actions\n-      workflow\n-    - tests: use our own image for ubuntu impish\n-    - o/snapstate: update default provider if missing required content\n-    - o/assertstate, api: update validation set assertions only when\n-      updating all snaps\n-    - fde: add HasDeviceUnlock() helper\n-    - secboot: move to new version\n-    - o/ifacestate: don't lose connections if snaps are broken\n-    - spread: display information about current device cgroup in debug\n-      dump\n-    - sysconfig: set TMPDIR in tests to avoid cluttering the real /tmp\n-    - tests, interfaces/builtin: introduce 21.10 cgroupv2 variant, tweak\n-      tests for cgroupv2, update builtin interfaces\n-    - sysconfig/cloud-init: filter MAAS c-i config from ubuntu-seed on\n-      grade signed\n-    - usersession/client: refactor doMany() method\n-    - interfaces/builtin/opengl.go: add libOpenGL.so* too\n-    - o/assertstate: check installed snaps when refreshing validation\n-      set assertions\n-    - osutil: helper for injecting run time faults in snapd\n-    - tests: update test nested tool part 2\n-    - libsnap-confine: use the pid parameter\n-    - gadget/gadget.go: LaidOutSystemVolumeFromGadget ->\n-      LaidOutVolumesFromGadget\n-    - tests: update the time tolerance to fix the snapd-state test\n-    - .github/workflows/test.yaml: revert #10809\n-    - tests: rename interfaces-hooks-misbehaving spread test to install-\n-      hook-misbehaving\n-    - data/selinux: update the policy to allow s-c to manipulate BPF map\n-      and programs\n-    - overlord/devicestate: make settle wait longer in remodel tests\n-    - kernel/fde: mock systemd-run in unit test\n-    - o/ifacestate: do not create stray task in batchConnectTasks if\n-      there are no connections\n-    - gadget: add VolumeName to Volume and VolumeStructure\n-    - cmd/libsnap-confine-private: use root when necessary for BPF\n-      related operations\n-    - .github/workflows/test.yaml: bump action-build to 1.0.9\n-    - o/snapstate: enforce validation sets/enforce on InstallMany\n-    - asserts, snapstate: return full validation set keys from\n-      CheckPresenceRequired and CheckPresenceInvalid\n-    - cmd/snap: only log translation warnings in debug/testing\n-    - tests/main/preseed: update for new base snap of the lxd snap\n-    - tests/nested/manual: use loop for checking for initialize-system\n-      task done\n-    - tests: add a local snap variant to testing prepare-image gating\n-      support\n-    - tests/main/security-device-cgroups-strict-enforced: demonstrate\n-      device cgroup being enforced\n-    - store: one more tweak for the test action timeout\n-    - github: do not fail when codecov upload fails\n-    - o/devicestate: fix flaky test remodel clash\n-    - o/snapstate: add ChangeID to conflict error\n-    - tests: fix regex of TestSnapActionTimeout test\n-    - tests: fix tests for 21.10\n-    - tests: add test for store.SnapAction() request timeout\n-    - tests: print user sessions info on debug-each\n-    - packaging: backports of golang-go 1.13 are good enough\n-    - sysconfig/cloudinit: add cloudDatasourcesInUseForDir\n-    - cmd: build gdb shims as static binaries\n-    - packaging/ubuntu: pass GO111MODULE to dh_auto_test\n-    - cmd/libsnap-confine-private, tests, sandbox: remove warnings about\n-      cgroup v2, drop forced devmode\n-    - tests: increase memory quota in quota-groups-systemd-accounting\n-    - tests: be more robust against a new day stepping in\n-    - usersession/xdgopenproxy: move PortalLauncher class to own package\n-    - interfaces/builtin: fix microstack unit tests on distros using\n-      /usr/libexec\n-    - cmd/snap-confine: handle CURRENT_TAGS on systems that support it\n-    - cmd/libsnap-confine-private: device cgroup v2 support\n-    - o/servicestate: Update task summary for restart action\n-    - packaging, tests/lib/prepare-restore: build packages without\n-      network access, fix building debs with go modules\n-    - systemd: add AtLeast() method, add mocking in systemdtest\n-    - systemd: use text.template to generate mount unit\n-    - o/hookstate/ctlcmd: Implement snapctl refresh --show-lock command\n-    - o/snapstate: optimize conflicts around snaps stored on\n-      conditional-auto-refresh task\n-    - tests/lib/prepare.sh: download core20 for UC20 runs via\n-      BASE_CHANNEL\n-    - mount-control: step 1\n-    - go: update go.mod dependencies\n-    - o/snapstate: enforce validation sets on snap install\n-    - tests: revert revert manual lxd removal\n-    - tests: pre-cache snaps in classic and core systems\n-    - tests/lib/nested.sh: split out additional helper for adding files\n-      to VM imgs\n-    - tests: update nested tool - part1\n-    - image/image_linux.go: add newline\n-    - interfaces/block-devices: support to access the state of block\n-      devices\n-    - o/hookstate: require snap-refresh-control interface for snapctl\n-      refresh --proceed\n-    - build-aux: stage libgcc1 library into snapd snap\n-    - configcore: add read-only netplan support\n-    - tests: fix fakedevicesvc service already exists\n-    - tests: fix interfaces-libvirt test\n-    - tests: remove travis leftovers\n-    - spread: bump delta ref to 2.52\n-    - packaging: ship the `snapd.apparmor.service` unit in debian\n-    - packaging: remove duplicated `golang-go` build-dependency\n-    - boot: record recovery capable systems in recovery bootenv\n-    - tests: skip overlord tests on riscv64 due to timeouts.\n-    - overlord/ifacestate: fix arguments in unit tests\n-    - ifacestate: undo repository connection if doConnect fails\n-    - many: remove unused parameters\n-    - tests: failure of prereqs on content interface doesn't prevent\n-      install\n-    - tests/nested/manual/refresh-revert-fundamentals: fix variable use\n-    - strutil: add Intersection()\n-    - o/ifacestate: special-case system-files and force refreshing its\n-      static attributes\n-    - interface/builtin: add qualcomm-ipc-router interface for\n-      AF_QIPCRTR socket protocol\n-    - tests:  new snapd-state tool\n-    - codecov: fix files pathnames\n-    - systemd: add mock systemd helper\n-    - tests/nested/core/extra-snaps-assertions: fix the match pattern\n-    - image,c/snap,tests: support enforcing validations in prepare-image\n-      via --customize JSON validation enforce(|ignore)\n-    - o/snapstate: enforce validation sets assertions when removing\n-      snaps\n-    - many: update deps\n-    - interfaces/network-control: additional ethernet rule\n-    - tests: use host-scaled settle timeout for hookstate tests\n-    - many: move to go modules\n-    - interfaces: no need for snapRefreshControlInterface struct\n-    - interfaces: introduce snap-refresh-control interface\n-    - tests: move interfaces-libvirt test back to 16.04\n-    - tests: bump the number of retries when waiting for /dev/nbd0p1\n-    - tests: add more space on ubuntu xenial\n-    - spread: add 21.10 to qemu, remove 20.10 (EOL)\n-    - packaging: add libfuse3-dev build dependency\n-    - interfaces: add microstack-support interface\n-    - wrappers: fix a bunch of duplicated service definitions in tests\n-    - tests: use host-scaled timeout to avoid riscv64 test failure\n-    - many: fix run-checks gofmt check\n-    - tests: spread test for snapctl refresh --pending/--proceed from\n-      the snap\n-    - o/assertstate,daemon: refresh validation sets assertions with snap\n-      declarations\n-    - tests: migrate tests that are only executed on xenial to bionic\n-    - tests: remove opensuse-15.1 and add opensuse-15.3 from spread runs\n-    - packaging: update master changelog for 2.51.7\n-    - sysconfig/cloudinit: fix bug around error state of cloud-init\n-    - interfaces, o/snapstate: introduce AffectsPlugOnRefresh flag\n-    - interfaces/interfaces/ion-memory-control: add: add interface for\n-      ion buf\n-    - interfaces/dsp: add /dev/ambad into dsp interface\n-    - tests: new spread log parser\n-    - tests: check files and dirs are cleaned for each test\n-    - o/hookstate/ctlcmd: unify the error message when context is\n-      missing\n-    - o/hookstate: support snapctl refresh --pending from snap\n-    - many: remove unused/dead code\n-    - cmd/libsnap-confine-private: add BPF support helpers\n-    - interfaces/hardware-observe: add some dmi properties\n-    - snapstate: abort kernel refresh if no gadget update can be found\n-    - many: shellcheck fixes\n-    - cmd/snap: add Size column to refresh --list\n-    - packaging: build without dwarf debugging data\n-    - snapstate: fix misleading `assumes` error message\n-    - tests: fix restore in snapfuse spread tests\n-    - o/assertstate: fix missing 'scheduled' header when auto refreshing\n-      assertions\n-    - o/snapstate: fail remove with invalid snap names\n-    - o/hookstate/ctlcmd: correct err message if missing root\n-    - .github/workflows/test.yaml: fix logic\n-    - o/snapstate: don't hold some snaps if not all snaps can be held by\n-      the given gating snap\n-    - c-vendor.c: new c-vendor subdir\n-    - store: make sure expectedZeroFields in tests gets updated\n-    - overlord: add manager test for \"assumes\" checking\n-    - store: deal correctly with \"assumes\" from the store raw yaml\n-    - sysconfig/cloudinit.go: add functions for filtering cloud-init\n-      config\n-    - cgroup-support: allow to hide cgroupv2 warning via ENV\n-    - gadget: Export mkfs functions for use in ubuntu-image\n-    - tests: set to 10 minutes the kill timeout for tests failing on\n-      slow boards\n-    - .github/workflows/test.yaml: test github.events key\n-    - i18n/xgettext-go: preserve already escaped quotes\n-    - cmd/snap-seccomp/syscalls: update syscalls list to libseccomp\n-      v2.2.0-428-g5c22d4b\n-    - github: do not try to upload coverage when working with cached run\n-    - tests/main/services-install-hook-can-run-svcs: shellcheck issue\n-      fix\n-    - interfaces/u2f-devices: add Nitrokey FIDO2\n-    - testutil: add DeepUnsortedMatches Checker\n-    - cmd, packaging: import BPF headers from kernel, detect whether\n-      host headers are usable\n-    - tests: fix services-refresh-mode test\n-    - tests: clean snaps.sh helper\n-    - tests: fix timing issue on security-dev-input-event-denied test\n-    - tests: update systems for sru validation\n-    - .github/workflows: add codedov again\n-    - secboot: remove duplicate import\n-    - tests: stop the service when is active in test interfaces-\n-      firewall-control test\n-    - packaging: remove TEST_GITHUB_AUTOPKGTEST support\n-    - packaging: merge 2.51.6 changelog back to master\n-    - secboot: use half the mem for KDF in AddRecoveryKey\n-    - secboot: switch main key KDF memory cost to 32KB\n-    - tests: remove the test user just when it was installed on create-\n-      user-2 test\n-    - spread: temporarily fix the ownership of /home/ubuntu/.ssh on\n-      21.10\n-    - daemon, o/snapstate: handle IgnoreValidation flag on install (2/3)\n-    - usersession/agent: refactor common JSON validation into own\n-      function\n-    - o/hookstate: allow snapctl refresh --proceed from snaps\n-    - cmd/libsnap-confine-private: fix issues identified by coverity\n-    - cmd/snap: print logs in local timezone\n-    - packaging: changelog for 2.51.5 to master\n-    - build-aux: build with go-1.13 in the snapcraft build too\n-    - config: rename \"virtual\" config to \"external\" config\n-    - devicestate: add `snap debug timings --ensure=install-system`\n-    - interfaces/builtin/raw_usb: fix platform typo, fix access to usb\n-      devices accessible through platform\n-    - o/snapstate: remove commented out code\n-    - cmd/snap-device-helper: reimplement snap-device-helper\n-    - cmd/libsnap-confine-private: fix coverity issues in tests, tweak\n-      uses of g_assert()\n-    - o/devicestate/handlers_install.go: add workaround to create dirs\n-      for install\n-    - o/assertstate: implement ValidationSetAssertionForEnforce helper\n-    - clang-format: stop breaking my includes\n-    - o/snapstate: allow auto-refresh limited to snaps affected by a\n-      specific gating snap\n-    - tests: fix core-early-config test to use tests.nested tool\n-    - sysconfig/cloudinit.go: measure (but don't use) gadget cloud-init\n-      datasource\n-    - c/snap,o/hookstate/ctlcmd: add JSON/string strict processing flags\n-      to snap/snapctl\n-    - corecfg: add \"system.hostname\" setting to the system settings\n-    - wrappers: measure time to enable services in StartServices()\n-    - configcore: fix early config timezone handling\n-    - tests/nested/manual: enable serial assertions on testkeys nested\n-      VM's\n-    - configcore: fix a bunch of incorrect error returns\n-    - .github/workflows/test.yaml: use snapcraft 4.x to build the snapd\n-      snap\n-    - packaging: merge 2.51.4 changelog back to master\n-    - {device,snap}state: skip kernel extraction in seeding\n-    - vendor: move to snapshot-4c814e1 branch and set fixed KDF options\n-    - tests: use bigger storage on ubuntu 21.10\n-    - snap: support links map in snap.yaml (and later from the store\n-      API)\n-    - o/snapstate: add AffectedByRefreshCandidates helper\n-    - configcore: register virtual config for timezone reading\n-    - cmd/libsnap-confine-private: move device cgroup files, add helper\n-      to deny a device\n-    - tests: fix cached-results condition in github actions workflow\n-    - interfaces/tee: add support for Qualcomm qseecom device node\n-    - packaging: fix build failure on bionic and simplify rules\n-    - o/snapstate: affectedByRefresh tweaks\n-    - tests: update nested wait for snapd command\n-    - interfaces/builtin: allow access to per-user GTK CSS overrides\n-    - tests/main/snapd-snap: install 4.x snapcraft to build the snapd\n-      snap\n-    - snap/squashfs: handle squashfs-tools 4.5+\n-    - asserts/snapasserts: CheckPresenceInvalid and\n-      CheckPresenceRequired methods\n-    - cmd/snap-confine: refactor device cgroup handling to enable easier\n-      v2 integration\n-    - tests: skip udp protocol on latest ubuntus\n-    - cmd/libsnap-confine-private: g_spawn_check_exit_status is\n-      deprecated since glib 2.69\n-    - interfaces: s/specifc/specific/\n-    - github: enable gofmt for Go 1.13 jobs\n-    - overlord/devicestate: UC20 specific set-model, managers tests\n-    - o/devicestate, sysconfig: refactor cloud-init config permission\n-      handling\n-    - config: add \"virtual\" config via config.RegisterVirtualConfig\n-    - packaging: switch ubuntu to use golang-1.13\n-    - snap: change `snap login --help` to not mention \"buy\"\n-    - tests: removing Ubuntu 20.10, adding 21.04 nested in spread\n-    - tests/many: remove lxd systemd unit to prevent unexpected\n-      leftovers\n-    - tests/main/services-install-hook-can-run-svcs: make variants more\n-      obvious\n-    - tests: force snapd-session-agent.socket to be re-generated\n-\n- -- Michael Vogt   Tue, 05 Oct 2021 20:29:14 +0200\n-\n-snapd (2.52.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1942646\n-    - snap-bootstrap: wait in `mountNonDataPartitionMatchingKernelDisk`\n-      for the disk (if not present already)\n-    - many: support an API flag system-restart-immediate to make snap\n-      ops proceed immediately with system restarts\n-    - cmd/libsnap-confine-private: g_spawn_check_exit_status is\n-      deprecated since glib 2.69\n-    - interfaces/seccomp: add clone3 to default template\n-    - interfaces/apparmor/template.go: allow inspection of dbus\n-      mediation level\n-    - interfaces/dsp: add a usb rule to the ambarella flavor\n-    - cmd/snap-confine: update s-c apparmor profile to allow versioned\n-      ld.so\n-    - o/ifacestate: don't lose connections if snaps are broken\n-    - interfaces/builtin/opengl.go: add libOpenGL.so* too\n-    - interfaces/hardware-observe: add some dmi properties\n-    - build-aux: stage libgcc1 library into snapd snap\n-    - interfaces/block-devices: support to access the state of block\n-      devices\n-    - packaging: ship the `snapd.apparmor.service` unit in debian\n-\n- -- Michael Vogt   Tue, 05 Oct 2021 13:29:25 +0200\n-\n-snapd (2.52) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1942646\n-    - interface/builtin: add qualcomm-ipc-router interface for\n-      AF_QIPCRTR socket protocol\n-    - o/ifacestate: special-case system-files and force refreshing its\n-      static attributes\n-    - interfaces/network-control: additional ethernet rule\n-    - packaging: update 2.52 changelog with 2.51.7\n-    - interfaces/interfaces/ion-memory-control: add: add interface for\n-      ion buf\n-    - packaging: merge 2.51.6 changelog back to 2.52\n-    - secboot: use half the mem for KDF in AddRecoveryKey\n-    - secboot: switch main key KDF memory cost to 32KB\n-    - many: merge release/2.51 change to release/2.52\n-    - .github/workflows/test.yaml: use snapcraft 4.x to build the snapd\n-      snap\n-    - o/servicestate: use snap app names for ExplicitServices of\n-      ServiceAction\n-    - tests/main/services-install-hook-can-run-svcs: add variant w/o\n-      --enable\n-    - o/servicestate: revert only start enabled services\n-    - tests: adding Ubuntu 21.10 to spread test suite\n-    - interface/modem-manager: add support for MBIM/QMI proxy clients\n-    - cmd/snap/model: support storage-safety and snaps headers too\n-    - o/assertstate: Implement EnforcedValidationSets helper\n-    - tests: using retry tool for nested tests\n-    - gadget: check for system-save with multi volumes if encrypting\n-      correctly\n-    - interfaces: make the service naming entirely internal to systemd\n-      BE\n-    - tests/lib/reset.sh: fix removing disabled snaps\n-    - store/store_download.go: use system snap provided xdelta3 priority\n-      + fallback\n-    - packaging: merge changelog from 2.51.3 back to master\n-    - overlord: only start enabled services\n-    - interfaces/builtin: add sd-control interface\n-    - tests/nested/cloud-init-{never-used,nocloud}-not-vuln: fix tests,\n-      use 2.45\n-    - tests/lib/reset.sh: add workaround from refresh-vs-services tests\n-      for all tests\n-    - o/assertstate: check for conflicts when refreshing and committing\n-      validation set asserts\n-    - devicestate: add support to save timings from install mode\n-    - tests: new tests.nested commands copy and wait-for\n-    - install: add a bunch of nested timings\n-    - tests: drop any-python wrapper\n-    - store: set ResponseHeaderTimeout on the default transport\n-    - tests: fix test-snapd-user-service-sockets test removing snap\n-    - tests: moving nested_exec to nested.tests exec\n-    - tests: add tests about services vs snapd refreshes\n-    - client, cmd/snap, daemon: refactor REST API for quotas to match\n-      CLI org\n-    - c/snap,asserts: create/delete-key external keypair manager\n-      interaction\n-    - tests: revert disable of the delta download tests\n-    - tests/main/system-usernames-microk8s: disable on centos 7 too\n-    - boot: support device change\n-    - o/snapstate: remove unused refreshSchedule argument for\n-      isRefreshHeld helper\n-    - daemon/api_quotas.go: handle conflicts, returning conflict\n-      response\n-    - tests: test for gate-auto-refresh hook error resulting in hold\n-    - release: 2.51.2\n-    - snapstate/check_snap: add snap_microk8s to shared system-\n-      usernames\n-    - snapstate: remove temporary snap file for local revisions early\n-    - interface: allows reading sd cards internal info from block-\n-      devices interface\n-    - tests: Renaming tool nested-state to tests.nested\n-    - testutil: fix typo in json checker unit tests\n-    - tests: ack assertions by default, add --noack option\n-    - overlord/devicestate: try to pick alternative recovery labels\n-      during remodel\n-    - bootloader/assets: update recovery grub to allow system labels\n-      generated by snapd\n-    - tests: print serial log just once for nested tests\n-    - tests: remove xenial 32 bits\n-    - sandbox/cgroup: do not be so eager to fail when paths do not exist\n-    - tests: run spread tests in ubuntu bionic 32bits\n-    - c/snap,asserts: start supporting ExternalKeypairManager in the\n-      snap key-related commands\n-    - tests: refresh control spread test\n-    - cmd/libsnap-confine-private: do not fail on ENOENT, better getline\n-      error handling\n-    - tests: disable delta download tests for now until the store is\n-      fixed\n-    - tests/nested/manual/preseed: fix for cloud images that ship\n-      without core18\n-    - boot: properly handle tried system model\n-    - tests/lib/store.sh: revert #10470\n-    - boot, seed/seedtest: tweak test helpers\n-    - o/servicestate: TODO and fix preexisting typo\n-    - o/servicestate: detect conflicts for quota group operations\n-    - cmd/snap/quotas: adjust help texts for quota commands\n-    - many/quotas: little adjustments\n-    - tests: add spread test for classic snaps content slots\n-    - o/snapstate: fix check-rerefresh task summary when refresh control\n-      is used\n-    - many: use changes + tasks for quota group operations\n-    - tests: fix test snap-quota-groups when checking file\n-      cgroupProcsFile\n-    - asserts: introduce ExternalKeypairManager\n-    - o/ifacestate: do not visit same halt tasks in waitChainSearch to\n-      avoid cycles\n-    - tests/lib/store.sh: fix make_snap_installable_with_id()\n-    - overlord/devicestate, overlord/assertstate: use a temporary DB\n-      when creating recovery systems\n-    - corecfg: allow using `# snapd-edit: no` header to disable pi-\n-      config# snapd-edit: no\n-    - tests/main/interfaces-ssh-keys: tweak checks for openSUSE\n-      Tumbleweed\n-    - cmd/snap: prevent cycles in waitChainSearch with snap debug state\n-    - o/snapstate: fix populating of affectedSnapInfo.AffectingSnaps for\n-      marking self as affecting\n-    - tests: new parameter used by retry tool to set env vars\n-    - tests: support parameters for match-log on journal-state tool\n-    - configcore: ignore system.pi-config.* setting on measured kernels\n-    - sandbox/cgroup: support freezing groups with unified\n-      hierarchy\n-    - tests: fix preseed test to used core20 snap on latest systems\n-    - testutil: introduce a checker which compares the type after having\n-      passed them through a JSON marshaller\n-    - store: tweak error message when store.Sections() download fails\n-    - o/servicestate: stop setting DoneStatus prematurely for quota-\n-      control\n-    - cmd/libsnap-confine-private: bump max depth of groups hierarchy to\n-      32\n-    - many: turn Contact into an accessor\n-    - store: make the log with download size a debug one\n-    - cmd/snap-update-ns: Revert \"cmd/snap-update-ns: add SRCDIR to\n-      include search path\"\n-    - o/devicestate: move SystemMode method before first usage\n-    - tests: skip tests when the sections cannot be retrieved\n-    - boot: support resealing with a try model\n-    - o/hookstate: dedicated handler for gate-auto-refresh hook\n-    - tests: make sure the /root/snap dir is backed up on test snap-\n-      user-dir-perms-fixed\n-    - cmd/snap-confine: make mount ns use check cgroup v2 compatible\n-    - snap: fix TestInstallNoPATH unit test failure when SUDO_UID is set\n-    - cmd/libsnap-confine-private/cgroup-support.c: Fix typo\n-    - cmd/snap-confine, cmd/snapd-generator: fix issues identified by\n-      sparse\n-    - o/snapstate: make conditional-auto-refresh conflict with other\n-      tasks via affected snaps\n-    - many: pass device/model info to configcore via sysconfig.Device\n-      interface\n-    - o/hookstate: return bool flag from Error function of hook handler\n-      to ignore hook errors\n-    - cmd/snap-update-ns: add SRCDIR to include search path\n-    - tests: fix for tests/main/lxd-mount-units test and enable\n-      ubuntu-21.04\n-    - overlord, o/devicestate: use a single test helper for resetting to\n-      a post boot state\n-    - HACKING.md: update instructions for go1.16+\n-    - tests: fix restore for security-dev-input-event-denied test\n-    - o/servicestate: move SetStatus to doQuotaControl\n-    - tests: fix classic-prepare-image test\n-    - o/snapstate: prune gating information and refresh-candidates on\n-      snap removal\n-    - o/svcstate/svcstatetest, daemon/api_quotas: fix some tests, add\n-      mock helper\n-    - cmd: a bunch of tweaks and updates\n-    - o/servicestate: refactor meter handling, eliminate some common\n-      parameters\n-    - o/hookstate/ctlcmd: allow snapctl refresh --pending --proceed\n-      syntax.\n-    - o/snapstate: prune refresh candidates in check-rerefresh\n-    - osutil: pass --extrausers option to groupdel\n-    - o/snapstate: remove refreshed snap from snaps-hold in\n-      snapstate.doInstall\n-    - tests/nested: add spread test for uc20 cloud.conf from gadgets\n-    - boot: drop model from resealing and boostate\n-    - o/servicestate, snap/quota: eliminate workaround for buggy\n-      systemds, add spread test\n-    - o/servicestate: introduce internal and servicestatetest\n-    - o/servicestate/quota_control.go: enforce minimum of 4K for quota\n-      groups\n-    - overlord/servicestate: avoid unnecessary computation of disabled\n-      services\n-    - o/hookstate/ctlcmd: do not call ProceedWithRefresh immediately\n-      from snapctl\n-    - o/snapstate: prune hold state during autoRefreshPhase1\n-    - wrappers/services.go: do not restart disabled or inactive\n-      services\n-    - sysconfig/cloudinit.go: allow installing both gadget + ubuntu-seed\n-      config\n-    - spread: switch LXD back to latest/candidate channel\n-    - interfaces/opengl: add support for Imagination PowerVR\n-    - boot: decouple model from seal/reseal handling via an auxiliary\n-      type\n-    - spread, tests/main/lxd: no longer manual, switch to latest/stable\n-    - github: try out golangci-lint\n-    - tests: set lxd test to manual until failures are fixed\n-    - tests: connect 30% of the interfaces on test interfaces-many-core-\n-      provided\n-    - packaging/debian-sid: update snap-seccomp patches for latest\n-      master\n-    - many: fix imports order (according to gci)\n-    - o/snapstate: consider held snaps in autoRefreshPhase2\n-    - o/snapstate: unlock the state before calling backend in\n-      undoStartSnapServices\n-    - tests: replace \"not MATCH\" by NOMATCH in tests\n-    - README.md: refer to new IRC server\n-    - cmd/snap-preseed: provide more error info if snap-preseed fails\n-      early on mount\n-    - daemon: add a Daemon argument to AccessChecker.CheckAccess\n-    - c/snap-bootstrap: add bind option with tests\n-    - interfaces/builtin/netlink_driver_test.go: add test snippet\n-    - overlord/devicestate: set up recovery system tasks when attempting\n-      a remodel\n-    - osutil,strutil,testutil: fix imports order (according to gci)\n-    - release: merge 2.51.1 changelog\n-    - cmd: fix imports order (according to gci)\n-    - tests/lib/snaps/test-snapd-policy-app-consumer: remove dsp-control\n-      interface\n-    - o/servicestate: move handlers tests to quota_handlers_test.go file\n-      instead\n-    - interfaces: add netlink-driver interface\n-    - interfaces: remove leftover debug print\n-    - systemd: refactor property parsers for int values in\n-      CurrentTasksCount, etc.\n-    - tests: fix debug section for postrm-purge test\n-    - tests/many: change all cloud-init passwords for ubuntu to use\n-      plain_test_passwd\n-    - asserts,interfaces,snap: fix imports order (according to gci)\n-    - o/servicestate/quota_control_test.go: test the handlers directly\n-    - tests: fix issue when checking the udev tag on test security-\n-      device-cgroups\n-    - many: introduce Store.SnapExists and use it in\n-      /v2/accessories/themes\n-    - o/snapstate: update LastRefreshTime in doLinkSnap handler\n-    - o/hookstate: handle snapctl refresh --proceed and --hold\n-    - boot: fix model inconsistency check in modeenv, extend unit tests\n-    - overlord/servicestate: improve test robustness with locking\n-    - tests: first part of the cleanup\n-    - tests: new note in HACKING file to clarify about\n-      yamlordereddictloader dependency\n-    - daemon: make CheckAccess return an apiError\n-    - overlord: fix imports ordering (according to gci)\n-    - o/servicestate: add quotastate handlers\n-    - boot: track model's sign key ID, prepare infra for tracking\n-      candidate model\n-    - daemon: have apiBaseSuite.errorReq return *apiError directly\n-    - o/servicestate/service_control.go: add comment about\n-      ExplicitServices\n-    - interfaces: builtin: add dm-crypt interface to support external\n-      storage encryption\n-    - daemon: split out error response code from response*.go to\n-      errors*.go\n-    - interfaces/dsp: fix typo in udev rule\n-    - daemon,o/devicestate: have DeviceManager.SystemMode take an\n-      expectation on the system\n-    - o/snapstate: add helpers for setting and querying holding time for\n-      snaps\n-    - many: fix quota groups for centos 7, amazon linux 2 w/ workaround\n-      for buggy systemd\n-    - overlord/servicestate: mv ensureSnapServicesForGroup to new file\n-    - overlord/snapstate: lock the mutex before returning from stop snap\n-      services undo\n-    - daemon: drop resp completely in favor of using respJSON\n-      consistently\n-    - overlord/devicestate: support for snap downloads in recovery\n-      system handlers\n-    - daemon: introduce a separate findResponse, simplify SyncRespone\n-      and drop Meta\n-    - overlord/snapstate, overlord/devicestate: exclusive change\n-      conflict check\n-    - wrappers, packaging, snap-mgmt: handle removing slices on purge\n-      too\n-    - services: remember if acting on the entire snap\n-    - store: extend context and action objects of SnapAction with\n-      validation-sets\n-    - o/snapstate: refresh control - autorefresh phase2\n-    - cmd/snap/quota: refactor quota CLI as per new design\n-    - interfaces: opengl: change path for Xilinx zocl driver\n-    - tests: update spread images for ubuntu-core-20 and ubuntu-21.04\n-    - o/servicestate/quota_control_test.go: change helper escaping\n-    - o/configstate/configcore: support snap set system swap.size=...\n-    - o/devicestate: require serial assertion before remodeling can be\n-      started\n-    - systemd: improve systemctl error reporting\n-    - tests/core/remodel: use model assertions signed with valid keys\n-    - daemon: use apiError for more of the code\n-    - store: fix typo in snapActionResult struct json tag\n-    - userd: mock `systemd --version` in privilegedDesktopLauncherSuite\n-    - packaging/fedora: sync with downstream packaging\n-    - daemon/api_quotas.go: include current memory usage information in\n-      results\n-    - daemon: introduce StructuredResponse and apiError\n-    - o/patch: check if we have snapd snap with correct snap type\n-      already in snapstate\n-    - tests/main/snapd-snap: build the snapd snap on all platforms with\n-      lxd\n-    - tests: new commands for snaps-state tool\n-    - tests/main/snap-quota-groups: add functional spread test for quota\n-      groups\n-    - interfaces/dsp: add /dev/cavalry into dsp interface\n-    - cmd/snap/cmd_info_test.go: make test robust against TZ changes\n-    - tests: moving to tests directories snaps built locally - part 2\n-    - usersession/userd: fix unit tests on systems using /var/lib/snapd\n-    - sandbox/cgroup: wait for pid to be moved to the desired cgroup\n-    - tests: fix snap-user-dir-perms-fixed vs format checks\n-    - interfaces/desktop-launch: support confined snaps launching other\n-      snaps\n-    - features: enable dbus-activation by default\n-    - usersession/autostart: change ~/snap perms to 0700 on startup\n-    - cmd/snap-bootstrap/initramfs-mounts: mount ubuntu-data nosuid\n-    - tests: new test static checker\n-    - release-tool/changelog.py: misc fixes from real world usage\n-    - release-tools/changelog.py: add function to generate github\n-      release template\n-    - spread, tests: Fedora 32 is EOL, drop it\n-    - o/snapstate: bump max postponement from 60 to 95 days\n-    - interfaces/apparmor: limit the number of jobs when running with a\n-      single CPU\n-    - packaging/fedora/snapd.spec: correct date format in changelog\n-    - packaging: merge 2.51 changelog back to master\n-    - packaging/ubuntu-16.04/changelog: add 2.50 and 2.50.1 changelogs,\n-      placeholder for 2.51\n-    - interfaces: allow read access to /proc/tty/drivers to modem-\n-      manager and ppp/dev/tty\n-\n- -- Ian Johnson   Fri, 03 Sep 2021 16:06:15 -0500\n-\n-snapd (2.51.7) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - cmd/snap-seccomp/syscalls: update syscalls list to libseccomp\n-      v2.2.0-428-g5c22d4b1\n-    - tests: cherry-pick shellcheck fix `bd730fd4`\n-    - interfaces/dsp: add /dev/ambad into dsp interface\n-    - many: shellcheck fixes\n-    - snapstate: abort kernel refresh if no gadget update can be found\n-    - overlord: add manager test for \"assumes\" checking\n-    - store: deal correctly with \"assumes\" from the store raw yaml\n-\n- -- Ian Johnson   Fri, 27 Aug 2021 15:26:46 -0500\n-\n-snapd (2.51.6) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - secboot: use half the mem for KDF in AddRecoveryKey\n-    - secboot: switch main key KDF memory cost to 32KB\n-\n- -- Ian Johnson   Thu, 19 Aug 2021 15:49:47 -0500\n-\n-snapd (2.51.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - snap/squashfs: handle squashfs-tools 4.5+\n-    - tests/core20-install-device-file-install-via-hook-hack: adjust\n-      test for 2.51\n-    - o/devicestate/handlers_install.go: add workaround to create dirs\n-      for install\n-    - tests: fix linter warning\n-    - tests: update other spread tests for new behaviour\n-    - tests: ack assertions by default, add --noack option\n-    - release-tools/changelog.py: also fix opensuse changelog date\n-      format\n-    - release-tools/changelog.py: fix typo in function name\n-    - release-tools/changelog.py: fix fedora date format\n-    - release-tools/changelog.py: handle case where we don't have a TZ\n-    - release-tools/changelog.py: fix line length check\n-    - release-tools/changelog.py: specify the LP bug for the release as\n-      an arg too\n-    - interface/modem-manager: add support for MBIM/QMI proxy\n-      clients\n-    - .github/workflows/test.yaml: use snapcraft 4.x to build the snapd\n-      snap\n-\n- -- Ian Johnson   Mon, 16 Aug 2021 15:02:40 -0500\n-\n-snapd (2.51.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - {device,snap}state: skip kernel extraction in seeding\n-    - vendor: move to snapshot-4c814e1 branch and set fixed KDF options\n-    - tests/interfaces/tee: fix HasLen check for udev snippets\n-    - interfaces/tee: add support for Qualcomm qseecom device node\n-    - gadget: check for system-save with multi volumes if encrypting\n-      correctly\n-    - gadget: drive-by: drop unnecessary/supported passthrough in test\n-      gadget.yaml\n-\n- -- Ian Johnson   Mon, 09 Aug 2021 18:56:18 -0500\n-\n-snapd (2.51.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - interfaces/builtin: add sd-control interface\n-    - store: set ResponseHeaderTimeout on the default transport\n-\n- -- Ian Johnson   Wed, 14 Jul 2021 15:26:54 -0500\n-\n-snapd (2.51.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - snapstate: remove temporary snap file for local revisions early\n-    - interface: allows reading sd cards internal info from block-\n-      devices interface\n-    - o/ifacestate: do not visit same halt tasks in waitChainSearch to\n-      avoid slow convergence (or unlikely cycles)\n-    - corecfg: allow using `# snapd-edit: no` header to disable pi-\n-      config\n-    - configcore: ignore system.pi-config.* setting on measured kernels\n-    - many: pass device/model info to configcore via sysconfig.Device\n-      interface\n-    - o/configstate/configcore: support snap set system swap.size=...\n-    - store: make the log with download size a debug one\n-    - interfaces/opengl: add support for Imagination PowerVR\n-\n- -- Michael Vogt   Wed, 07 Jul 2021 15:35:46 +0200\n-\n-snapd (2.51.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - interfaces: add netlink-driver interface\n-    - interfaces: builtin: add dm-crypt interface to support external\n-      storage encryption\n-    - interfaces/dsp: fix typo in udev rule\n-    - overlord/snapstate: lock the mutex before returning from stop\n-      snap services undo\n-    - interfaces: opengl: change path for Xilinx zocl driver\n-    - interfaces/dsp: add /dev/cavalry into dsp interface\n-    - packaging/fedora/snapd.spec: correct date format in changelog\n-\n- -- Michael Vogt   Tue, 15 Jun 2021 12:45:08 +0200\n-\n-snapd (2.51) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1929842\n-    - cmd/snap: stacktraces debug endpoint\n-    - secboot: deactivate volume again when model checker fails\n-    - store: extra log message, a few minor cleanups\n-    - packaging/debian-sid: update systemd patch\n-    - snapstate: adjust update-gadget-assets user visible message\n-    - tests/nested/core/core20-create-recovery: verify that recovery\n-      system can be created at runtime\n-    - gadget: support creating vfat partitions during bootstrap\n-    - daemon/api_quotas.go: support updating quotas with ensure action\n-    - daemon: tighten access to a couple of POST endpoints that should\n-      be really be root-only\n-    - seed/seedtest, overlord/devicestate: move seed validation helper\n-      to seedtest\n-    - overlord/hookstate/ctlcmd: remove unneeded parameter\n-    - snap/quota: add CurrentMemoryUsage for current memory usage of a\n-      quota group\n-    - systemd: add CurrentMemoryUsage to get current memory usage for a\n-      unit\n-    - o/snapstate: introduce minimalInstallInfo interface\n-    - o/hookstate: print pending info (ready, inhibited or none)\n-    - osutil: a helper to find out the total amount of memory in the\n-      system\n-    - overlord, overlord/devicestate: allow for reloading modeenv in\n-      devicemgr when testing\n-    - daemon: refine access testing\n-    - spread: disable unattended-upgrades on debian\n-    - tests/lib/reset: make nc exit after a while when connection is\n-      idle\n-    - daemon: replace access control flags on commands with access\n-      checkers\n-    - release-tools/changelog.py: refactor regexp + file reading/writing\n-    - packaging/debian-sid: update locale patch for the latest master\n-    - overlord/devicestate: tasks for creating recovery systems at\n-      runtime\n-    - release-tools/changelog.py: implement script to update all the\n-      changelog files\n-    - tests: change machine type used for nested testsPrices:\n-    - cmd/snap: include locale when linting description being lower case\n-    - o/servicestate: add RemoveSnapFromQuota\n-    - interfaces/serial-port: add Qualcomm serial port devices to\n-      allowed list\n-    - packaging: merge 2.50.1 changelog back\n-    - interfaces/builtin: introduce raw-input interface\n-    - tests: remove tests.cleanup prepare from nested test\n-    - cmd/snap-update-ns: fix linter errors\n-    - asserts: fix errors reported by linter\n-    - o/hookstate/ctlcmd: allow system-mode for non-root\n-    - overlord/devicestate: comment why explicit system mode check is\n-      needed in ensuring tried recovery systems (#10275)\n-    - overlord/devicesate: observe snap writes when creating recovery\n-      systems\n-    - packaging/ubuntu-16.04/changelog: add placeholder for 2.50.1\n-    - tests: moving to tests directories snaps built locally - part 1\n-    - seed/seedwriter: fail early when system seed directory exists\n-    - o/snapstate: autorefresh phase1 for refresh-control\n-    - c/snap: more precise message for ErrorKindSystemRestart op !=\n-      reboot\n-    - tests: simplify the tests.cleanup tool\n-    - boot: helpers for manipulating current and good recovery systems\n-      list\n-    - o/hookstate, o/snapstate: print revision, version, channel with\n-      snapctl --pending\n-    - overlord:  unit test tweaks, use well known snap IDs, setup snap\n-      declarations for most common snaps\n-    - tests/nested/manual: add test for install-device + snapctl reboot\n-    - o/servicestate: restart slices + services on modifications\n-    - tests: update mount-ns test to support changes in the distro\n-    - interfaces: fix linter issues\n-    - overlord: mock logger in managers unit tests\n-    - tests: adding support for fedora-34\n-    - tests: adding support for debian 10 on gce\n-    - boot: reseal given keys when the respective boot chain has changed\n-    - secboot: switch encryption key size to 32 byte (thanks to Chris)\n-    - interfaces/dbus: allow claiming 'well-known' D-Bus names with a\n-      wildcard suffix\n-    - spread: bump delta reference version\n-    - interfaces: builtin: update permitted paths to be compatible with\n-      UC20\n-    - overlord: fix errors reported by linter\n-    - tests: remove old fedora systems from tests\n-    - tests: update spread url\n-    - interfaces/camera: allow devices in /sys/devices/platform/**/usb*\n-    - interfaces/udisks2: Allow access to the login manager via dbus\n-    - cmd/snap: exit normally if \"snap changes\" has no changes\n-      (LP #1823974)\n-    - tests: more fixes for spread suite on openSUSE\n-    - tests: fix tests expecting cgroup v1/hybrid on openSUSE Tumbleweed\n-    - daemon: fix linter errors\n-    - spread: add Fedora 34, leave a TODO about dropping Fedora 32\n-    - interfaces: fix linter errors\n-    - tests: use op.paths tools instead of dirs.sh helper - part 2\n-    - client: Fix linter errors\n-    - cmd/snap: Fix errors reported by linter\n-    - cmd/snap-repair: fix linter issues\n-    - cmd/snap-bootstrap: Fix linter errors\n-    - tests: update permission denied message for test-snapd-event on\n-      ubuntu 2104\n-    - cmd/snap: small tweaks based on previous reviews\n-    - snap/snaptest: helper that mocks both the squashfs file and a snap\n-      directory\n-    - overlord/devicestate: tweak comment about creating recovery\n-      systems, formatting tweaks\n-    - overlord/devicestate: move devicemgr base suite helpers closer to\n-      test suite struct\n-    - overlord/devicestate: keep track of tried recovery system\n-    - seed/seedwriter: clarify in the diagram when SetInfo is called\n-    - overlord/devicestate: add helper for creating recovery systems at\n-      runtime\n-    - snap-seccomp: update syscalls.go list\n-    - boot,image: support image.Customizations.BootFlags\n-    - overlord: support snapctl --halt|--poweroff in gadget install-\n-      device\n-    - features,servicestate: add experimental.quota-groups flag\n-    - o/servicestate: address comments from previous PR\n-    - tests: basic spread test for snap quota commands\n-    - tests: moving the snaps which are not locally built to the store\n-      directory\n-    - image,c/snap: implement prepare-image --customize\n-    - daemon: implement REST API for quota groups (create / list / get)\n-    - cmd/snap, client: snap quotas command\n-    - o/devicestate,o/hookstate/ctlcmd: introduce SystemModeInfo methods\n-      and snapctl system-mode\n-    - o/servicestate/quota_control.go: introduce (very) basic group\n-      manipulation methods\n-    - cmd/snap, client: snap remove-quota command\n-    - wrappers, quota: implement quota groups slice generation\n-    - snap/quotas: followups from previous PR\n-    - cmd/snap: introduce 'snap quota' command\n-    - o/configstate/configcore/picfg.go: use ubuntu-seed config.txt in\n-      uc20 run mode\n-    - o/servicestate: test has internal ordering issues, consider both\n-      cases\n-    - o/servicestate/quotas: add functions for getting and setting\n-      quotas in state\n-    - tests: new buckets for snapd-spread project on gce\n-    - spread.yaml: update the gce project to start using snapd-spread\n-    - quota: new package for managing resource groups\n-    - many: bind and check keys against models when using FDE hooks v2\n-    - many: move responsibilities down seboot -> kernel/fde and boot ->\n-      secboot\n-    - packaging: add placeholder changelog\n-    - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap\n-      bug\n-    - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu\n-      Core system\n-    - many: hide EncryptionKey size and refactors for fde hook v2 next\n-      steps\n-    - tests: adding debug info for create user tests\n-    - o/hookstate: add \"refresh\" command to snapctl (hidden, not\n-      complete yet)\n-    - systemd: wait for zfs mounts (LP #1922293)\n-    - testutil: support referencing files in FileEquals checker\n-    - many: refactor to kernel/fde and allow `fde-setup initial-setup`\n-      to return json\n-    - o/snapstate: store refresh-candidates in the state\n-    - o/snapstate: helper for creating gate-auto-refresh hooks\n-    - bootloader/bootloadertest: provide interface implementation as\n-      mixins, provide a mock for recovery-aware-trusted-asses bootloader\n-    - tests/lib/nested: do not compress images, return early when\n-      restored from pristine image\n-    - boot: split out a helper for making recovery system bootable\n-    - tests: update os.query check to match new bullseye codename used\n-      on sid images\n-    - o/snapstate: helper for getting snaps affected by refresh, define\n-      new hook\n-    - wrappers: support in EnsureSnapServices a callback to observe\n-      changes (#10176)\n-    - gadget: multi line support in gadget's cmdline file\n-    - daemon: test that requesting restart from (early) Ensure works\n-    - tests: use op.paths tools instead of dirs.sh helper - part 1\n-    - tests: add new command to snaps-state to get current core, kernel\n-      and gadget\n-    - boot, gadget: move opening the snap container into the gadget\n-      helper\n-    - tests, overlord: extend unit tests, extend spread tests to cover\n-      full command line support\n-    - interfaces/builtin: introduce dsp interface\n-    - boot, bootloader, bootloader/assets: support for full command line\n-      override from gadget\n-    - overlord/devicestate, overlord/snapstate: add task for updating\n-      kernel command lines from gadget\n-    - o/snapstate: remove unused DeviceCtx argument of\n-      ensureInstallPreconditions\n-    - tests/lib/nested: proper status return for tpm/secure boot checks\n-    - cmd/snap, boot: add snapd_full_cmdline_args to dumped boot vars\n-    - wrappers/services.go: refactor helper lambda function to separate\n-      function\n-    - boot/flags.go: add HostUbuntuDataForMode\n-    - boot: handle updating of components that contribute to kernel\n-      command line\n-    - tests: add 20.04 to systems for nested/core\n-    - daemon: add new accessChecker implementations\n-    - boot, overlord/devicestate: consider gadget command lines when\n-      updating boot config\n-    - tests: fix prepare-image-grub-core18 for arm devices\n-    - tests: fix gadget-kernel-refs-update-pc test on arm and when\n-      $TRUST_TEST_KEY is false\n-    - tests: enable help test for all the systems\n-    - boot: set extra command line arguments when preparing run mode\n-    - boot: load bits of kernel command line from gadget snaps\n-    - tests: update layout for tests - part 2\n-    - tests: update layout for tests - part 1\n-    - tests: remove the snap profiler from the test suite\n-    - boot: drop gadget snap yaml which is already defined elsewhere in\n-      the tests\n-    - boot: set extra kernel command line arguments when making a\n-      recovery system bootable\n-    - boot: pass gadget path to command line helpers, load gadget from\n-      seed\n-    - tests: new os.paths tool\n-    - daemon: make ucrednetGet() return a *ucrednet structure\n-    - boot: derive boot variables for kernel command lines\n-    - cmd/snap-bootstrap/initramfs-mounts: fix boot-flags location from\n-      initramfs\n-\n- -- Ian Johnson   Thu, 27 May 2021 11:15:20 -0500\n-\n-snapd (2.50.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1926005\n-    - interfaces: update permitted /lib/.. paths to be compatible with \n-      UC20\n-    - interfaces: builtin: update permitted paths to be compatible with\n-      UC20\n-    - interfaces/greengrass-support: delete white spaces at the end of\n-      lines\n-    - snap-seccomp: update syscalls.go list\n-    - many: backport kernel command line for 2.50\n-    - interfaces/dbus: allow claiming 'well-known' D-Bus names with a\n-      wildcard suffix\n-    - interfaces/camera: allow devices in /sys/devices/platform/**/usb*\n-    - interfaces/builtin: introduce dsp interface\n-\n- -- Ian Johnson   Wed, 19 May 2021 10:46:02 -0500\n-\n-snapd (2.50) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1926005\n-    - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu\n-      Core system\n-    - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap bug\n-    - o/servicestate/servicemgr.go: add ensure loop for snap service\n-      units\n-    - wrappers/services.go: introduce EnsureSnapServices()\n-    - snapstate: add \"kernel-assets\" to featureSet\n-    - systemd: wait for zfs mounts\n-    - overlord: make servicestate responsible to compute\n-      SnapServiceOptions\n-    - boot,tests: move where we write boot-flags one level up\n-    - o/configstate: don't pass --root=/ when\n-      masking/unmasking/enabling/disabling services\n-    - cmd/snap-bootstrap/initramfs-mounts: write active boot-flags to\n-      /run\n-    - gadget: be more flexible with kernel content resolving\n-    - boot, cmd/snap: include extra cmdline args in debug boot-vars\n-      output\n-    - boot: support read/writing boot-flags from userspace/initramfs\n-    - interfaces/pwm: add PWM interface\n-    - tests/lib/prepare-restore.sh: clean out snapd changes and snaps\n-      before purging\n-    - systemd: enrich UnitStatus returned by systemd.Status() with\n-      Installed flag\n-    - tests: updated restore phase of spread tests - part 1\n-    - gadget: add support for kernel command line provided by the gadget\n-    - tests: Using GO111MODULE: \"off\" in spread.yaml\n-    - features: add gate-auto-refresh-hook feature flag\n-    - spread: ignore linux kernel upgrade in early stages for arch\n-      preparation\n-    - tests: use snaps-state commands and remove them from the snaps\n-      helper\n-    - o/configstate: fix panic with a sequence of config unset ops over\n-      same path\n-    - api: provide meaningful error message on connect/disconnect for\n-      non-installed snap\n-    - interfaces/u2f-devices: add HyperFIDO Pro\n-    - tests: add simple sanity check for systemctl show\n-      --property=UnitFileState for unknown service\n-    - tests: use tests.session tool on interfaces-desktop-document-\n-      portal test\n-    - wrappers: install D-Bus service activation files for snapd session\n-      tools on core\n-    - many: add x-gvfs-hide option to mount units\n-    - interfaces/builtin/gpio_test.go: actually test the generated gpio\n-      apparmor\n-    - spread: tentative workaround for arch failure caused by libc\n-      upgrade and cgroups v2\n-    - tests: add spread test for snap validate against store assertions\n-    - tests: remove snaps which are not used in any test\n-    - ci: set the accept-existing-contributors parameter for the cla-\n-      check action\n-    - daemon: introduce apiBaseSuite.(json|sync|async|error)Req (and\n-      some apiBaseSuite cosmetics)\n-    - o/devicestate/devicemgr: register install-device hook, run if\n-      present in install\n-    - o/configstate/configcore: simple refactors in preparation for new\n-      function\n-    - tests: unifying the core20 nested suite with the core nested suite\n-    - tests: uboot-unpacked-assets updated to reflect the real path used\n-      to find the kernel\n-    - daemon: switch api_test.go to daemon_test and various other\n-      cleanups\n-    - o/configstate/configcore/picfg.go: add hdmi_cvt support\n-    - interfaces/apparmor: followup cleanups, comments and tweaks\n-    - boot: cmd/snap-bootstrap: handle a candidate recovery system v2\n-    - overlord/snapstate: skip catalog refresh when snappy testing is\n-      enabled\n-    - overlord/snapstate, overlord/ifacestate: move late security\n-      profile removal to ifacestate\n-    - snap-seccomp: fix seccomp test on ppc64el\n-    - interfaces, interfaces/apparmor, overlord/snapstate: late removal\n-      of snap-confine apparmor profiles\n-    - cmd/snap-bootstrap/initramfs-mounts: move time forward using\n-      assertion times\n-    - tests: reset the system while preparing the test suite\n-    - tests: fix snap-advise-command check for 429\n-    - gadget: policy for gadget/kernel refreshes\n-    - o/configstate: deal with no longer valid refresh.timer=managed\n-    - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4\n-    - cla-check: Use has-signed-canonical-cla GitHub Action\n-    - tests: validation sets spread test\n-    - tests: simplify the reset.sh logic by removing not needed command\n-    - overlord/snapstate: make sure that snapd current symlink is not\n-      removed during refresh\n-    - tests/core/fsck-on-boot: unmount /run/mnt/snapd directly on uc20\n-    - tests/lib/fde-setup-hook: also verify that fde-reveal-key key data\n-      is base64\n-    - o/devicestate: split off ensuring next boot goes to run mode into\n-      new task\n-    - tests: fix cgroup-tracking test\n-    - boot: export helper for clearing tried system state, add tests\n-    - cmd/snap: use less aggressive client timeouts in unit tests\n-    - daemon: fix signing key validity timestamp in unit tests\n-    - o/{device,hook}state: encode fde-setup-request key as base64\n-      string\n-    - packaging: drop dh-systemd from build-depends on ubuntu-16.04+\n-    - cmd/snap/pack: unhide the compression option\n-    - boot: extend set try recovery system unit tests\n-    - cmd/snap-bootstrap: refactor handling of ubuntu-save, do not use\n-      secboot's implicit fallback\n-    - o/configstate/configcore: add hdmi_timings to pi-config\n-    - snapstate: reduce reRefreshRetryTimeout to 1/2 second\n-    - interfaces/tee: add TEE/OPTEE interface\n-    - o/snapstate: update validation sets assertions with auto-refresh\n-    - vendor: update go-tpm2/secboot to latest version\n-    - seed: ReadSystemEssentialAndBetterEarliestTime\n-    - tests: replace while commands with the retry tool\n-    - interfaces/builtin: update unit tests to use proper distro's\n-      libexecdir\n-    - tests: run the reset.sh helper and check test invariants while the\n-      test is restored\n-    - daemon: switch preexisting daemon_test tests to apiBaseSuite and\n-      .req\n-    - boot, o/devicestate: split makeBootable20 into two parts\n-    - interfaces/docker-support: add autobind unix rules to docker-\n-      support\n-    - interfaces/apparmor: allow reading\n-      /proc/sys/kernel/random/entropy_avail\n-    - tests: use retry tool instead a loops\n-    - tests/main/uc20-create-partitions: fix tests cleanup\n-    - asserts: mode where Database only assumes cur time >= earliest\n-      time\n-    - daemon: validation sets/api tests cleanup\n-    - tests: improve tests self documentation for nested test suite\n-    - api: local assertion fallback when it's not in the store\n-    - api: validation sets monitor mode\n-    - tests: use fs-state tool in interfaces tests\n-    - daemon:  move out /v2/login|logout and errToResponse tests from\n-      api_test.go\n-    - boot: helper for inspecting the outcome of a recovery system try\n-    - o/configstate, o/snapshotstate: fix handling of nil snap config on\n-      snapshot restore\n-    - tests: update documentation and checks for interfaces tests\n-    - snap-seccomp: add new `close_range` syscall\n-    - boot: revert #10009\n-    - gadget: remove `device-tree{,-origin}` from gadget tests\n-    - boot: simplify systems test setup\n-    - image: write resolved-content from snap prepare-image\n-    - boot: reseal the run key for all recovery systems, but recovery\n-      keys only for the good ones\n-    - interfaces/builtin/network-setup-{control,observe}: allow using\n-      netplan directly\n-    - tests: improve sections prepare and restore - part 1\n-    - tests: update details on task.yaml files\n-    - tests: revert os.query usage in spread.yaml\n-    - boot: export bootAssetsMap as AssetsMap\n-    - tests/lib/prepare: fix repacking of the UC20 kernel snap for with\n-      ubuntu-core-initramfs 40\n-    - client: protect against reading too much data from stdin\n-    - tests: improve tests documentation - part 2\n-    - boot: helper for setting up a try recover system\n-    - tests: improve tests documentation - part 1\n-    - tests/unit/go: use tests.session wrapper for running tests as a\n-      user\n-    - tests: improvements for snap-seccomp-syscalls\n-    - gadget: simplify filterUpdate (thanks to Maciej)\n-    - tests/lib/prepare.sh: use /etc/group and friends from the core20\n-      snap\n-    - tests: fix tumbleweed spread tests part 2\n-    - tests: use new commands of os.query tool on tests\n-    - o/snapshotstate: create snapshots directory on import\n-    - tests/main/lxd/prep-snapd-in-lxd.sh: dump contents of sources.list\n-    - packaging: drop 99-snapd.conf via dpkg-maintscript-helper\n-    - osutil: add SetTime() w/ 32-bit and 64-bit implementations\n-    - interfaces/wayland: rm Xwayland Xauth file access from wayland\n-      slot\n-    - packaging/ubuntu-16.04/rules: turn modules off explicitly\n-    - gadget,devicestate: perform kernel asset update for $kernel: style\n-      refs\n-    - cmd/recovery: small fix for `snap recovery` tab output\n-    - bootloader/lkenv: add recovery systems related variables\n-    - tests: fix new tumbleweed image\n-    - boot: fix typo, should be systems\n-    - o/devicestate: test that users.create.automatic is configured\n-      early\n-    - asserts: use Fetcher in AddSequenceToUpdate\n-    - daemon,o/c/configcore: introduce users.create.automatic\n-    - client, o/servicestate: expose enabled state of user daemons\n-    - boot: helper for checking and marking tried recovery system status\n-      from initramfs\n-    - asserts: pool changes for validation-sets (#9930)\n-    - daemon: move the last api_foo_test.go to daemon_test\n-    - asserts: include the assertion timestamp in error message when\n-      outside of signing key validity range\n-    - ovelord/snapshotstate: keep a few of the last line tar prints\n-      before failing\n-    - gadget/many: rm, delay sector size + structure size checks to\n-      runtime\n-    - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors\n-    - interfaces: add allegro-vcu and media-control interfaces\n-    - interfaces: opengl: add Xilinx zocl bits\n-    - mkversion: check that version from changelog is set before\n-      overriding the output version\n-    - many: fix new ineffassign warnings\n-    - .github/workflows/labeler.yaml: try work-around to not sync\n-      labels\n-    - cmd/snap, boot: add debug set-boot-vars\n-    - interfaces: allow reading the Xauthority file KDE Plasma writes\n-      for Wayland sessions\n-    - tests/main/snap-repair: test running repair assertion w/ fakestore\n-    - tests: disable lxd tests for 21.04 until the lxd images are\n-      published for the system\n-    - tests/regression/lp-1910456: cleanup the /snap symlink when done\n-    - daemon: move single snap querying and ops to api_snaps.go\n-    - tests: fix for preseed and dbus tests on 21.04\n-    - overlord/snapshotstate: include the last message printed by tar in\n-      the error\n-    - interfaces/system-observe: Allow reading /proc/zoneinfo\n-    - interfaces: remove apparmor downgrade feature\n-    - snap: fix unit tests on Go 1.16\n-    - spread: disable Go modules support in environment\n-    - tests: use new path to find kernel.img in uc20 for arm devices\n-    - tests: find files before using cat command when checking broadcom-\n-      asic-control interface\n-    - boot: introduce good recovery systems, provide compatibility\n-      handling\n-    - overlord: add manager gadget refresh test\n-    - tests/lib/fakestore: support repair assertions too\n-    - github: temporarily disable action labeler due to issues with\n-      labels being removed\n-    - o/devicestate,many: introduce DeviceManager.preloadGadget for\n-      EarlyConfig\n-    - tests: enable ubuntu 21.04 for spread tests\n-    - snap: provide a useful error message if gdbserver is not installed\n-    - data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1\n-    - tests/lib/prepare.sh: split reflash.sh into two parts\n-    - packaging/opensuse: sync with openSUSE packaging\n-    - packaging: disable Go modules in snapd.mk\n-    - snap: add deprecation noticed to \"snap run --gdb\"\n-    - daemon: add API for checking and installing available theme snaps\n-    - tests: using labeler action to add automatically a label to run\n-      nested tests\n-    - gadget: improve error handling around resolving content sources\n-    - asserts: repeat the authority cross-check in CheckSignature as\n-      well\n-    - interfaces/seccomp/template.go: allow copy_file_range\n-    - o/snapstate/check_snap.go: add support for many subversions in\n-      assumes snapdX..\n-    - daemon: move postSnap and inst.dispatch tests to api_snaps_test.go\n-    - wrappers: use proper paths for mocked mount units in tests\n-    - snap: rename gdbserver option to `snap run --gdbserver`\n-    - store: support validation sets with fetch-assertions action\n-    - snap-confine.apparmor.in: support tmp and log dirs on Yocto/Poky\n-    - packaging/fedora: sync with downstream packaging in Fedora\n-    - many: add Delegate=true to generated systemd units for special\n-      interfaces (master)\n-    - boot: use a common helper for mocking boot assets in cache\n-    - api: validate snaps against validation set assert from the store\n-    - wrappers: don't generate an [Install] section for timer or dbus\n-      activated services\n-    - tests/nested/core20/boot-config-update: skip when snapd was not\n-      built with test features\n-    - o/configstate,o/devicestate: introduce devicestate.EarlyConfig\n-      implemented by configstate.EarlyConfig\n-    - cmd/snap-bootstrap/initramfs-mounts: fix typo in func name\n-    - interfaces/builtin: mock distribution in fontconfig cache unit\n-      tests\n-    - tests/lib/prepare.sh: add another console= to the reflash magic\n-      grub entry\n-    - overlord/servicestate: expose dbus activators of a service\n-    - desktop/notification: test against a real session bus and\n-      notification server implementation\n-    - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for\n-      recover+install\n-    - HACKING.md: explain how to run UC20 spread tests with QEMU\n-    - asserts: introduce AtSequence\n-    - overlord/devicestate: task for updating boot configs, spread test\n-    - gadget: fix documentation/typos\n-    - gadget: cleanup MountedFilesystem{Writer,Updater}\n-    - gadget: use ResolvedSource in MountedFilesystemWriter\n-    - snap/info.go: add doc-comment for SortServices\n-    - interfaces: add an optional mount-host-font-cache plug attribute\n-      to the desktop interface\n-    - osutil: skip TestReadBuildGo inside sbuild\n-    - o/hookstate/ctlcmd: add optional --pid and --apparmor-label\n-      arguments to \"snapctl is-connected\"\n-    - data/env/snapd: use quoting in case PATH contains spaces\n-    - boot: do not observe successful boot assets if not in run mode\n-    - tests: fix umount for snapd snap on fsck-on-boot testumount:\n-      /run/mnt/ubuntu-seed/systems/*/snaps/snapd_*.snap: no mount\n-    - misc: little tweaks\n-    - snap/info.go: ignore unknown daemons in SortSnapServices\n-    - devicestate: keep log from install-mode on installed system\n-    - seed: add LoadEssentialMeta to seed16 and allow all of its\n-      implementations to be called multiple times\n-    - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in\n-      seeds\n-    - tests/core/uc20-recovery: move recover mode helpers to generic\n-      testslib script\n-    - interfaces/fwupd: allow any distros to access fw files via fwupd\n-    - store: method for fetching validation set assertion\n-    - store: switch to v2/assertions api\n-    - gadget: add new ResolvedContent and populate from LayoutVolume()\n-    - spread: use full format when listing processes\n-    - osutil/many: make all test pkgs osutil_test instead of \"osutil\"\n-    - tests/unit/go: drop unused environment variables, skip coverage\n-    - OpenGL interface: Support more Tegra libs\n-    - gadget,overlord: pass kernelRoot to install.Run()\n-    - tests: run unit tests in Focal instead of Xenial\n-    - interfaces/browser-support: allow sched_setaffinity with browser-\n-      sandbox: true\n-    - daemon: move query /snaps/ tests to api_snaps_test.go\n-    - cmd/snap-repair/runner.go: add SNAP_SYSTEM_MODE to env of repair\n-      runner\n-    - systemd/systemd.go: support journald JSON messages with arrays for\n-      values\n-    - cmd: make string/error code more robust against errno leaking\n-    - github, run-checks: do not collect coverage data on subsequent\n-      test runs\n-    - boot: boot config update & reseal\n-    - o/snapshotstate: handle conflicts between snapshot forget, export\n-      and import\n-    - osutil/stat.go: add RegularFileExists\n-    - cmd/snapd-generator: don't create mount overrides for snap-try\n-      snaps inside lxc\n-    - gadget/gadget.go: rename ubuntu-* to system-* in doc-comment\n-    - tests: use 6 spread workers for centos8\n-    - bootloader/assets: support injecting bootloader assets in testing\n-      builds of snapd\n-    - gadget: enable multi-volume uc20 gadgets in\n-      LaidOutSystemVolumeFromGadget; rename too\n-    - overlord/devicestate, sysconfig: do nothing when cloud-init is not\n-      present\n-    - cmd/snap-repair: filter repair assertions based on bases + modes\n-    - snap-confine: make host /etc/ssl available for snaps on classic\n-\n- -- Michael Vogt   Sat, 24 Apr 2021 12:17:45 +0200\n-\n-snapd (2.49.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1915248\n-    - interfaces/tee: add TEE/OPTEE interface\n-    - o/configstate/configcore: add hdmi_timings to pi-config\n-    - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4\n-    - snap-seccomp: fix seccomp test on ppc64el\n-    - interfaces{,/apparmor}, overlord/snapstate:\n-      late removal of snap-confine apparmor profiles\n-    - overlord/snapstate, wrappers: add dependency on usr-lib-\n-      snapd.mount for services on core with snapd snap\n-    - o/configstate: deal with no longer valid refresh.timer=managed\n-    - overlord/snapstate: make sure that snapd current symlink is not\n-      removed during refresh\n-    - packaging: drop dh-systemd from build-depends on ubuntu-16.04+\n-    - o/{device,hook}state: encode fde-setup-request key as base64\n-    - snapstate: reduce reRefreshRetryTimeout to 1/2 second\n-    - tests/main/uc20-create-partitions: fix tests cleanup\n-    - o/configstate, o/snapshotstate: fix handling of nil snap config on\n-      snapshot restore\n-    - snap-seccomp: add new `close_range` syscall\n-\n- -- Michael Vogt   Fri, 26 Mar 2021 16:49:46 +0100\n-\n-snapd (2.49.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1915248\n-    - tests: turn modules off explicitly in spread go unti test\n-    - o/snapshotstate: create snapshots directory on import\n-    - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors\n-    - interfaces: add allegro-vcu and media-control interfaces\n-    - interfaces: opengl: add Xilinx zocl bits\n-    - many: fix new ineffassign warnings\n-    - interfaces/seccomp/template.go: allow copy_file_range\n-    - interfaces: allow reading the Xauthority file KDE Plasma writes\n-      for Wayland sessions\n-    - data/selinux: allow system dbus to watch\n-      /var/lib/snapd/dbus-1\n-    - Remove apparmor downgrade feature\n-    - Support tmp and log dirs on Yocto/Poky\n-\n- -- Michael Vogt   Mon, 08 Mar 2021 10:47:30 +0100\n-\n-snapd (2.49) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1915248\n-    - many: add Delegate=true to generated systemd units for special\n-      interfaces\n-    - cmd/snap-bootstrap: rename ModeenvFromModel to\n-      EphemeralModeenvForModel\n-    - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for\n-      recover+install\n-    - osutil: skip TestReadBuildGo inside sbuild\n-    - tests: fix umount for snapd snap on fsck-on-boot test\n-    - snap/info_test.go: add unit test cases for bug\n-    - tests/main/services-after-before: add regression spread test\n-    - snap/info.go: ignore unknown daemons in SortSnapServices\n-    - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in\n-      seeds\n-    - OpenGL interface: Support more Tegra libs\n-    - interfaces/browser-support: allow sched_setaffinity with browser-\n-      sandbox: true\n-    - cmd: make string/error code more robust against errno leaking\n-    - o/snapshotstate: handle conflicts between snapshot forget, export\n-      and import\n-    - cmd/snapd-generator: don't create mount overrides for snap-try\n-      snaps inside lxc\n-    - tests: update test pkg for fedora and centos\n-    - gadget: pass sector size in to mkfs family of functions, use to\n-      select block sz\n-    - o/snapshotstate: fix returning of snap names when duplicated\n-      snapshot is detected\n-    - tests/main/snap-network-errors: skip flushing dns cache on\n-      centos-7\n-    - interfaces/builtin: Allow DBus property access on\n-      org.freedesktop.Notifications\n-    - cgroup-support.c: fix link to CGROUP DELEGATION\n-    - osutil: update go-udev package\n-    - packaging: fix arch-indep build on debian-sid\n-    - {,sec}boot: pass \"key-name\" to the FDE hooks\n-    - asserts: sort by revision with Sort interface\n-    - gadget: add gadget.ResolveContentPaths()\n-    - cmd/snap-repair: save base snap and mode in device info; other\n-      misc cleanups\n-    - tests: cleanup the run-checks script\n-    - asserts: snapasserts method to validate installed snaps against\n-      validation sets\n-    - tests: normalize test tools - part 1\n-    - snapshotstate: detect duplicated snapshot imports\n-    - interfaces/builtin: fix unit test expecting snap-device-helper at\n-      /usr/lib/snapd\n-    - tests: apply workaround done for snap-advise-command to apt-hooks\n-      test\n-    - tests: skip main part of snap-advise test if 429 error is\n-      encountered\n-    - many: clarify gadget role-usage consistency checks for UC16/18 vs\n-      UC20\n-    - sandbox/cgroup, tess/main: fix unit tests on v2 system, disable\n-      broken tests on sid\n-    - interfaces/builtin: more drive by fixes, import ordering, removing\n-      dead code\n-    - tests: skip interfaces-openvswitch spread test on debian sid\n-    - interfaces/apparmor: drive by comment fix\n-    - cmd/libsnap-confine-private/cleanup-funcs-test.c: rm g_autofree\n-      usage\n-    - cmd/libsnap-confine-private: make unit tests execute happily in a\n-      container\n-    - interfaces, wrappers: misc comment fixes, etc.\n-    - asserts/repair.go: add \"bases\" and \"modes\" support to the repair\n-      assertion\n-    - interfaces/opengl: allow RPi MMAL video decoding\n-    - snap: skip help output tests for go-flags v1.4.0\n-    - gadget: add validation for \"$kernel:ref\" style content\n-    - packaging/deb, tests/main/lxd-postrm-purge: fix purge inside\n-      containers\n-    - spdx: update to SPDX license list version: 3.11 2020-11-25\n-    - tests: improve hotplug test setup on classic\n-    - tests: update check to verify is the current system is arm\n-    - tests: use os-query tool to check debian, trusty and tumbleweed\n-    - daemon: start moving implementation to api_snaps.go\n-    - tests/main/snap-validate-basic: disable test on Fedora due to go-\n-      flags panics\n-    - tests: fix library path used for tests.pkgs\n-    - tests/main/cohorts: replace yq with a Python snippet\n-    - run-checks: update to match new argument syntax of ineffassign\n-    - tests: use apiBaseSuite for snapshots tests, fix import endpoint\n-      path\n-    - many: separate consistency/content validation into\n-      gadget.Validate|Content\n-    - o/{device,snap}state: enable devmode snaps with dangerous model\n-      assertions\n-      secboot: add test for when systemd-run does not honor\n-      RuntimeMaxSec\n-    - secboot: add workaround for snapcore/core-initrd issue #13\n-    - devicestate: log checkEncryption errors via logger.Noticef\n-    - o/daemon: validation sets api and basic spread test\n-    - gadget: move BuildPartitionList to install and make it unexported\n-    - tests: add nested spread end-to-end test for fde-hooks\n-    - devicestate: implement checkFDEFeatures()\n-    - boot: tweak resealing with fde-setup hooks\n-    - tests: add os query commands for subsystems and architectures\n-    - o/snapshotstate: don't set auto flag in the snapshot file\n-    - tests: use os.query tool instead of comparing the system var\n-    - testutil: use the original environment when calling shellcheck\n-    - sysconfig/cloudinit.go: add \"manual_cache_clean: true\" to cloud-\n-      init restrict file\n-    - gadget,o/devicestate,tests: drop EffectiveFilesystemLabel and\n-      instead set the implicit labels when loading the yaml\n-    - secboot: add new LockSealedKeys() that uses either TPM/fde-reveal-\n-      key\n-    - gadget/quantity: introduce Offset, start using it for offset\n-      related fields in the gadget\n-    - gadget: use \"sealed-keys\" to determine what method to use for\n-      reseal\n-    - tests/main/fake-netplan-apply: disable test on xenial for now\n-    - daemon: start splitting snaps op tests out of api_test.go\n-    - testutil: make DBusTest use a custom bus configuration file\n-    - tests: replace pkgdb.sh (library) with tests.pkgs (program)\n-    - gadget: prepare gadget kernel refs (0/N)\n-    - interfaces/builtin/docker-support: allow /run/containerd/s/...\n-    - cmd/snap-preseed: reset run inhibit locks on --reset.\n-    - boot: add sealKeyToModeenvUsingFdeSetupHook()\n-    - daemon: reorg snap.go and split out sections and icons support\n-      from api.go\n-    - sandbox/seccomp: use snap-seccomp's stdout for getting version\n-      info\n-    - daemon: split find support to its own api_*.go files and move some\n-      helpers\n-    - tests: move snapstate config defaults tests to a separate file.\n-    - bootloader/{lk,lkenv}: followups from #9695\n-    - daemon: actually move APIBaseSuite to daemon_test.apiBaseSuite\n-    - gadget,o/devicestate: set implicit values for schema and role\n-      directly instead of relying on Effective* accessors\n-    - daemon: split aliases support to its own api_*.go files\n-    - gadget: start separating rule/convention validation from basic\n-      soundness\n-    - cmd/snap-update-ns: add better unit test for overname sorting\n-    - secboot: use `fde-reveal-key` if available to unseal key\n-    - tests: fix lp-1899664 test when snapd_x1 is not installed in the\n-      system\n-    - tests: fix the scenario when the \"$SRC\".orig file does not exist\n-    - cmd/snap-update-ns: fix sorting of overname mount entries wrt\n-      other entries\n-    - devicestate: add runFDESetupHook() helper\n-    - bootloader/lk: add support for UC20 lk bootloader with V2 lkenv\n-      structs\n-    - daemon: split unsupported buy implementation to its own api_*.go\n-      files\n-    - tests: download timeout spread test\n-    - gadget,o/devicestate: hybrid 18->20 ready volume setups should be\n-      valid\n-    - o/devicestate: save model with serial in the device save db\n-    - bootloader: add check for prepare-image time and more tests\n-      validating options\n-    - interfaces/builtin/log_observe.go: allow controlling apparmor\n-      audit levels\n-    - hookstate: refactor around EphemeralRunHook\n-    - cmd/snap: implement 'snap validate' command\n-    - secboot,devicestate: add scaffoling for \"fde-reveal-key\" support\n-    - boot: observe successful command line update, provide a default\n-    - tests: New queries for the os tools\n-    - bootloader/lkenv: specify backup file as arg to NewEnv(), use \"\"\n-      as path+\"bak\"\n-    - osutil/disks: add FindMatchingPartitionUUIDWithPartLabel to Disk\n-      iface\n-    - daemon: split out snapctl support and snap configuration support\n-      to their own api_*.go files\n-    - snapshotstate: improve handling of multiple errors\n-    - tests: sign new nested-18|20* models to allow for generic serials\n-    - bootloader: remove installableBootloader interface and methods\n-    - seed: cleanup/drop some no longer valid TODOS, clarify some other\n-      points\n-    - boot: set kernel command line in modeenv during install\n-    - many: rename disks.FindMatching... to FindMatching...WithFsLabel\n-      and err type\n-    - cmd/snap: suppress a case of spurious stdout logging from tests\n-    - hookstate: add new HookManager.EphemeralRunHook()\n-    - daemon: move some more api tests from daemon to daemon_test\n-    - daemon: split apps and logs endpoints to api_apps.go and tests\n-    - interfaces/utf: Add Ledger to U2F devices\n-    - seed/seedwriter: consider modes when checking for deps\n-      availability\n-    - o/devicestate,daemon: fix reboot system action to not require a\n-      system label\n-    - cmd/snap-repair,store: increase initial retry time intervals,\n-      stalling TODOs\n-    - daemon: split interfacesCmd to api_interfaces.go\n-    - github: run nested suite when commit is pushed to release branch\n-    - client: reduce again the /v2/system-info timeout\n-    - tests: reset fakestore unit status\n-    - update-pot: fix typo in plural keyword spec\n-    - tests: remove workarounds that add \"ubuntu-save\" if missing\n-    - tests: add unit test for auto-refresh with validate-snap failure\n-    - osutil: add helper for getting the kernel command line\n-    - tests/main/uc20-create-partitions: verify ubuntu-save encryption\n-      keys, tweak not MATCH\n-    - boot: add kernel command lines to the modeenv file\n-    - spread: bump delta ref, tweak repacking to make smaller delta\n-      archives\n-    - bootloader/lkenv: add v2 struct + support using it\n-    - snapshotstate: add cleanup of abandonded snapshot imports\n-    - tests: fix uc20-create-parition-* tests for updated gadget\n-    - daemon: split out /v2/interfaces tests to api_interfaces_test.go\n-    - hookstate: implement snapctl fde-setup-{request,result}\n-    - wrappers, o/devicestate: remove EnableSnapServices\n-    - tests: enable nested on 20.10\n-    - daemon: simplify test helpers Get|PostReq into Req\n-    - daemon: move general api to api_general*.go\n-    - devicestate: make checkEncryption fde-setup hook aware\n-    - client/snapctl, store: fix typos\n-    - tests/main/lxd/prep-snapd-in-lxd.sh: wait for valid apt files\n-      before doing apt ops\n-    - cmd/snap-bootstrap: update model cross-check considerations\n-    - client,snapctl: add naive support for \"stdin\"\n-    - many: add new \"install-mode: disable\" option\n-    - osutil/disks: allow building on mac os\n-    - data/selinux: update the policy to allow operations on non-tmpfs\n-      /tmp\n-    - boot: add helper for generating candidate kernel lines for\n-      recovery system\n-    - wrappers: generate D-Bus service activation files\n-    - bootloader/many: rm ConfigFile, add Present for indicating\n-      presence of bloader\n-    - osutil/disks: allow mocking DiskFromDeviceName\n-    - daemon: start cleaning up api tests\n-    - packaging/arch: sync with AUR packaging\n-    - bootloader: indicate when boot config was updated\n-    - tests: Fix snap-debug-bootvars test to make it work on arm devices\n-      and core18\n-    - tests/nested/manual/core20-save: verify handling of ubuntu-save\n-      with different system variants\n-    - snap: use the boot-base for kernel hooks\n-    - devicestate: support \"storage-safety\" defaults during install\n-    - bootloader/lkenv: mv v1 to separate file,\n-      include/lk/snappy_boot_v1.h: little fixups\n-    - interfaces/fpga: add fpga interface\n-    - store: download timeout\n-    - vendor: update secboot repo to avoid including secboot.test binary\n-    - osutil: add KernelCommandLineKeyValue\n-    - gadget/gadget.go: allow system-recovery-{image,select} as roles in\n-      gadget.yaml\n-    - devicestate: implement boot.HasFDESetupHook\n-    - osutil/disks: add DiskFromName to get a disk using a udev name\n-    - usersession/agent: have session agent connect to the D-Bus session\n-      bus\n-    - o/servicestate: preserve order of services on snap restart\n-    - o/servicestate: unlock state before calling wrappers in\n-      doServiceControl\n-    - spread: disable unattended-upgrades on ubuntu\n-    - tests: testing new fedora 33 image\n-    - tests: fix fsck on boot on arm devices\n-    - tests: skip boot state test on arm devices\n-    - tests: updated the systems to run prepare-image-grub test\n-    - interfaces/raw_usb: allow read access to /proc/tty/drivers\n-    - tests: unmount /boot/efi in fsck-on-boot test\n-    - strutil/shlex,osutil/udev/netlink: minimally import go-check\n-    - tests: fix basic20 test on arm devices\n-    - seed: make a shared seed system label validation helper\n-    - tests/many: enable some uc20 tests, delete old unneeded tests or\n-      TODOs\n-    - boot/makebootable.go: set snapd_recovery_mode=install at image-\n-      build time\n-    - tests: migrate test from boot.sh helper to boot-state tool\n-    - asserts: implement \"storage-safety\" in uc20 model assertion\n-    - bootloader: use ForGadget when installing boot config\n-    - spread: UC20 no longer needs 2GB of mem\n-    - cmd/snap-confine: implement snap-device-helper internally\n-    - bootloader/grub: replace old reference to Managed...Blr... with\n-      Trusted...Blr...\n-    - cmd/snap-bootstrap: add readme for snap-bootstrap + real state\n-      diagram\n-    - interfaces: fix greengrass attr namingThe flavor attribute names\n-      are now as follows:\n-    - tests/lib/nested: poke the API to get the snap revisions\n-    - tests: compare options of mount units created by snapd and snapd-\n-      generator\n-    - o/snapstate,servicestate: use service-control task for service\n-      actions\n-    - sandbox: track applications unconditionally\n-    - interfaces/greengrass-support: add additional \"process\" flavor for\n-      1.11 update\n-    - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test\n-\n- -- Michael Vogt   Wed, 10 Feb 2021 10:47:17 +0100\n-\n-snapd (2.48.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1906690\n-    - tests: sign new nested-18|20* models to allow for generic serials\n-    - secboot: add extra paranoia when waiting for that fde-reveal-key\n-    - tests: backport netplan workarounds from #9785\n-    - secboot: add workaround for snapcore/core-initrd issue #13\n-    - devicestate: log checkEncryption errors via logger.Noticef\n-    - tests: add nested spread end-to-end test for fde-hooks\n-    - devicestate: implement checkFDEFeatures()\n-    - boot: tweak resealing with fde-setup hooks\n-    - sysconfig/cloudinit.go: add \"manual_cache_clean: true\" to cloud-\n-      init restrict file\n-    - secboot: add new LockSealedKeys() that uses either TPM or\n-      fde-reveal-key\n-    - gadget: use \"sealed-keys\" to determine what method to use for\n-      reseal\n-    - boot: add sealKeyToModeenvUsingFdeSetupHook()\n-    - secboot: use `fde-reveal-key` if available to unseal key\n-    - cmd/snap-update-ns: fix sorting of overname mount entries wrt\n-      other entries\n-    - o/devicestate: save model with serial in the device save db\n-    - devicestate: add runFDESetupHook() helper\n-    - secboot,devicestate: add scaffoling for \"fde-reveal-key\" support\n-    - hookstate: add new HookManager.EphemeralRunHook()\n-    - update-pot: fix typo in plural keyword spec\n-    - store,cmd/snap-repair: increase initial expontential time\n-      intervals\n-    - o/devicestate,daemon: fix reboot system action to not require a\n-      system label\n-    - github: run nested suite when commit is pushed to release branch\n-    - tests: reset fakestore unit status\n-    - tests: fix uc20-create-parition-* tests for updated gadget\n-    - hookstate: implement snapctl fde-setup-{request,result}\n-    - devicestate: make checkEncryption fde-setup hook aware\n-    - client,snapctl: add naive support for \"stdin\"\n-    - devicestate: support \"storage-safety\" defaults during install\n-    - snap: use the boot-base for kernel hooks\n-    - vendor: update secboot repo to avoid including secboot.test binary\n-\n- -- Michael Vogt   Tue, 15 Dec 2020 20:21:44 +0100\n-\n-snapd (2.48.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1906690\n-    - gadget: disable ubuntu-boot role validation check\n-\n- -- Michael Vogt   Thu, 03 Dec 2020 17:43:30 +0100\n-\n-snapd (2.48) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1904098\n-    - osutil: add KernelCommandLineKeyValue\n-    - devicestate: implement boot.HasFDESetupHook\n-    - boot/makebootable.go: set snapd_recovery_mode=install at image-\n-      build time\n-    - bootloader: use ForGadget when installing boot config\n-    - interfaces/raw_usb: allow read access to /proc/tty/drivers\n-    - boot: add scaffolding for \"fde-setup\" hook support for sealing\n-    - tests: fix basic20 test on arm devices\n-    - seed: make a shared seed system label validation helper\n-    - snap: add new \"fde-setup\" hooktype\n-    - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test\n-    - secboot,cmd/snap-bootstrap: fix degraded mode cases with better\n-      device handling\n-    - boot,dirs,c/snap-bootstrap: avoid InstallHost* at the cost of some\n-      messiness\n-    - tests/nested/manual/refresh-revert-fundamentals: temporarily\n-      disable secure boot\n-    - snap-bootstrap,secboot: call BlockPCRProtectionPolicies in all\n-      boot modes\n-    - many: address degraded recover mode feedback, cleanups\n-    - tests: Use systemd-run on tests part2\n-    - tests: set the opensuse tumbleweed system as manual in spread.yaml\n-    - secboot: call BlockPCRProtectionPolicies even if the TPM is\n-      disabled\n-    - vendor: update to current secboot\n-    - cmd/snap-bootstrap,o/devicestate: use a secret to pair data and\n-      save\n-    - spread.yaml: increase number of workers on 20.10\n-    - snap: add new `snap recovery --show-keys` option\n-    - tests: minor test tweaks suggested in the review of 9607\n-    - snapd-generator: set standard snapfuse options when generating\n-      units for containers\n-    - tests: enable lxd test on ubuntu-core-20 and 16.04-32\n-    - interfaces: share /tmp/.X11-unix/ from host or provider\n-    - tests: enable main lxd test on 20.10\n-    - cmd/s-b/initramfs-mounts: refactor recover mode to implement\n-      degraded mode\n-    - gadget/install: add progress logging\n-    - packaging: keep secboot/encrypt_dummy.go in debian\n-    - interfaces/udev: use distro specific path to snap-device-helper\n-    - o/devistate: fix chaining of tasks related to regular snaps when\n-      preseeding\n-    - gadget, overlord/devicestate: validate that system supports\n-      encrypted data before install\n-    - interfaces/fwupd: enforce the confined fwupd to align Ubuntu Core\n-      ESP layout\n-    - many: add /v2/system-recovery-keys API and client\n-    - secboot, many: return UnlockMethod from Unlock* methods for future\n-      usage\n-    - many: mv keys to ubuntu-boot, move model file, rename keyring\n-      prefix for secboot\n-    - tests: using systemd-run instead of manually create a systemd unit\n-      - part 1\n-    - secboot, cmd/snap-bootstrap: enable or disable activation with\n-      recovery key\n-    - secboot: refactor Unlock...IfEncrypted to take keyfile + check\n-      disks first\n-    - secboot: add LockTPMSealedKeys() to lock access to keys\n-      independently\n-    - gadget: correct sfdisk arguments\n-    - bootloader/assets/grub: adjust fwsetup menuentry label\n-    - tests: new boot state tool\n-    - spread: use the official image for Ubuntu 20.10, no longer an\n-      unstable system\n-    - tests/lib/nested: enable snapd logging to console for core18\n-    - osutil/disks: re-implement partition searching for disk w/ non-\n-      adjacent parts\n-    - tests: using the nested-state tool in nested tests\n-    - many: seal a fallback object to the recovery boot chain\n-    - gadget, gadget/install: move helpers to install package, refactor\n-      unit tests\n-    - dirs: add \"gentoo\" to altDirDistros\n-    - update-pot: include file locations in translation template, and\n-      extract strings from desktop files\n-    - gadget/many: drop usage of gpt attr 59 for indicating creation of\n-      partitions\n-    - gadget/quantity: tweak test name\n-    - snap: fix failing unittest for quantity.FormatDuration()\n-    - gadget/quantity: introduce a new package that captures quantities\n-    - o/devicestate,a/sysdb: make a backup of the device serial to save\n-    - tests: fix rare interaction of tests.session and specific tests\n-    - features: enable classic-preserves-xdg-runtime-dir\n-    - tests/nested/core20/save: check the bind mount and size bump\n-    - o/devicetate,dirs: keep device keys in ubuntu-save/save for UC20\n-    - tests: rename hasHooks to hasInterfaceHooks in the ifacestate\n-      tests\n-    - o/devicestate: unit test tweaks\n-    - boot: store the TPM{PolicyAuthKey,LockoutAuth}File in ubuntu-save\n-    - testutil, cmd/snap/version: fix misc little errors\n-    - overlord/devicestate: bind mount ubuntu-save under\n-      /var/lib/snapd/save on startup\n-    - gadget/internal: tune ext4 setting for smaller filesystems\n-    - tests/nested/core20/save: a test that verifies ubuntu-save is\n-      present and set up\n-    - tests: update google sru backend to support groovy\n-    - o/ifacestate: handle interface hooks when preseeding\n-    - tests: re-enable the apt hooks test\n-    - interfaces,snap: use correct type: {os,snapd} for test data\n-    - secboot: set metadata and keyslots sizes when formatting LUKS2\n-      volumes\n-    - tests: improve uc20-create-partitions-reinstall test\n-    - client, daemon, cmd/snap: cleanups from #9489 + more unit tests\n-    - cmd/snap-bootstrap: mount ubuntu-save during boot if present\n-    - secboot: fix doc comment on helper for unlocking volume with key\n-    - tests: add spread test for refreshing from an old snapd and core18\n-    - o/snapstate: generate snapd snap wrappers again after restart on\n-      refresh\n-    - secboot: version bump, unlock volume with key\n-    - tests/snap-advise-command: re-enable test\n-    - cmd/snap, snapmgr, tests: cleanups after #9418\n-    - interfaces: deny connected x11 plugs access to ICE\n-    - daemon,client: write and read a maintenance.json file for when\n-      snapd is shut down\n-    - many: update to secboot v1 (part 1)\n-    - osutil/disks/mockdisk: panic if same mountpoint shows up again\n-      with diff opts\n-    - tests/nested/core20/gadget,kernel-reseal: add sanity checks to the\n-      reseal tests\n-    - many: implement snap routine console-conf-start for synchronizing\n-      auto-refreshes\n-    - dirs, boot: add ubuntu-save directories and related locations\n-    - usersession: fix typo in test name\n-    - overlord/snapstate: refactor ihibitRefresh\n-    - overlord/snapstate: stop warning about inhibited refreshes\n-    - cmd/snap: do not hardcode snapshot age value\n-    - overlord,usersession: initial notifications of pending refreshes\n-    - tests: add a unit test for UpdateMany where a single snap fails\n-    - o/snapstate/catalogrefresh.go: don't refresh catalog in install\n-      mode uc20\n-    - tests: also check snapst.Current in undo-unlink tests\n-    - tests: new nested tool\n-    - o/snapstate: implement undo handler for unlink-snap\n-    - tests: clean systems.sh helper and migrate last set of tests\n-    - tests: moving the lib section from systems.sh helper to os.query\n-      tool\n-    - tests/uc20-create-partitions: don't check for grub.cfg\n-    - packaging: make sure that static binaries are indeed static, fix\n-      openSUSE\n-    - many: have install return encryption keys for data and save,\n-      improve tests\n-    - overlord: add link participant for linkage transitions\n-    - tests: lxd smoke test\n-    - tests: add tests for fsck; cmd/s-b/initramfs-mounts: fsck ubuntu-\n-      seed too\n-    - tests: moving main suite from systems.sh to os.query tool\n-    - tests: moving the core test suite from systems.sh to os.query tool\n-    - cmd/snap-confine: mask host's apparmor config\n-    - o/snapstate: move setting updated SnapState after error paths\n-    - tests: add value to INSTANCE_KEY/regular\n-    - spread, tests: tweaks for openSUSE\n-    - cmd/snap-confine: update path to snap-device-helper in AppArmor\n-      profile\n-    - tests: new os.query tool\n-    - overlord/snapshotstate/backend: specify tar format for snapshots\n-    - tests/nested/manual/minimal-smoke: use 384MB of RAM for nested\n-      UC20\n-    - client,daemon,snap: auto-import does not error on managed devices\n-    - interfaces: PTP hardware clock interface\n-    - tests: use tests.backup tool\n-    - many: verify that unit tests work with nosecboot tag and without\n-      secboot package\n-    - wrappers: do not error out on read-only /etc/dbus-1/session.d\n-      filesystem on core18\n-    - snapshots: import of a snapshot set\n-    - tests: more output for sbuild test\n-    - o/snapstate: re-order remove tasks for individual snap revisions\n-      to remove current last\n-    - boot: skip some unit tests when running as root\n-    - o/assertstate: introduce\n-      ValidationTrackingKey/ValidationSetTracking and basic methods\n-    - many: allow ignoring running apps for specific request\n-    - tests: allow the searching test to fail under load\n-    - overlord/snapstate: inhibit startup while unlinked\n-    - seed/seedwriter/writer.go: check DevModeConfinement for dangerous\n-      features\n-    - tests/main/sudo-env: snap bin is available on Fedora\n-    - boot, overlord/devicestate: list trusted and managed assets\n-      upfront\n-    - gadget, gadget/install: support for ubuntu-save, create one during\n-      install if needed\n-    - spread-shellcheck: temporary workaround for deadlock, drop\n-      unnecessary test\n-    - snap: support different exit-code in the snap command\n-    - logger: use strutil.KernelCommandLineSplit in\n-      debugEnabledOnKernelCmdline\n-    - logger: fix snapd.debug=1 parsing\n-    - overlord: increase refresh postpone limit to 14 days\n-    - spread-shellcheck: use single thread pool executor\n-    - gadget/install,secboot: add debug messages\n-    - spread-shellcheck: speed up spread-shellcheck even more\n-    - spread-shellcheck: process paths from arguments in parallel\n-    - tests: tweak error from tests.cleanup\n-    - spread: remove workaround for openSUSE go issue\n-    - o/configstate: create /etc/sysctl.d when applying early config\n-      defaults\n-    - tests: new tests.backup tool\n-    - tests: add tests.cleanup pop sub-command\n-    - tests: migration of the main suite to snaps-state tool part 6\n-    - tests: fix journal-state test\n-    - cmd/snap-bootstrap/initramfs-mounts: split off new helper for misc\n-      recover files\n-    - cmd/snap-bootstrap/initramfs-mounts: also copy /etc/machine-id for\n-      same IP addr\n-    - packaging/{ubuntu,debian}: add liblzo2-dev as a dependency for\n-      building snapd\n-    - boot, gadget, bootloader: observer preserves managed bootloader\n-      configs\n-    - tests/nested/manual: add uc20 grade signed cloud-init test\n-    - o/snapstate/autorefresh.go: eliminate race when launching\n-      autorefresh\n-    - daemon,snapshotstate: do not return \"size\" from Import()\n-    - daemon: limit reading from snapshot import to Content-Length\n-    - many: set/expect Content-Length header when importing snapshots\n-    - github: switch from ::set-env command to environment file\n-    - tests: migration of the main suite to snaps-state tool part 5\n-    - client: cleanup the Client.raw* and Client.do* method families\n-    - tests: moving main suite to snaps-state tool part 4\n-    - client,daemon,snap: use constant for snapshot content-type\n-    - many: fix typos and repeated \"the\"\n-    - secboot: fix tpm connection leak when it's not enabled\n-    - many: scaffolding for snapshots import API\n-    - run-checks: run spread-shellcheck too\n-    - interfaces: update network-manager interface to allow\n-      ObjectManager access from unconfined clients\n-    - tests: move core and regression suites to snaps-state tool\n-    - tests: moving interfaces tests to snaps-state tool\n-    - gadget: preserve files when indicated by content change observer\n-    - tests: moving smoke test suite and some tests from main suite to\n-      snaps-state tool\n-    - o/snapshotstate: pass set id to backend.Open, update tests\n-    - asserts/snapasserts: introduce ValidationSets\n-    - o/snapshotstate: improve allocation of new set IDs\n-    - boot: look at the gadget for run mode bootloader when making the\n-      system bootable\n-    - cmd/snap: allow snap help vs --all to diverge purposefully\n-    - usersession/userd: separate bus name ownership from defining\n-      interfaces\n-    - o/snapshotstate: set snapshot set id from its filename\n-    - o/snapstate: move remove-related tests to snapstate_remove_test.go\n-    - desktop/notification: switch ExpireTimeout to time.Duration\n-    - desktop/notification: add unit tests\n-    - snap: snap help output refresh\n-    - tests/nested/manual/preseed: include a system-usernames snap when\n-      preseeding\n-    - tests: fix sudo-env test\n-    - tests: fix nested core20 shellcheck bug\n-    - tests/lib: move to new directory when restoring PWD, cleanup\n-      unpacked unpacked snap directories\n-    - desktop/notification: add bindings for FDO notifications\n-    - dbustest: fix stale comment references\n-    - many: move ManagedAssetsBootloader into TrustedAssetsBootloader,\n-      drop former\n-    - snap-repair: add uc20 support\n-    - tests: print all the serial logs for the nested test\n-    - o/snapstate/check_snap_test.go: mock osutil.Find{U,G}id to avoid\n-      bug in test\n-    - cmd/snap/auto-import: stop importing system user assertions from\n-      initramfs mnts\n-    - osutil/group.go: treat all non-nil errs from user.Lookup{Group,}\n-      as Unknown*\n-    - asserts: deserialize grouping only once in Pool.AddBatch if needed\n-    - gadget: allow content observer to have opinions about a change\n-    - tests: new snaps-state command - part1\n-    - o/assertstate: support refreshing any number of snap-declarations\n-    - boot: use test helpers\n-    - tests/core/snap-debug-bootvars: also check snap_mode\n-    - many/apparmor: adjust rules for reading profile/ execing new\n-      profiles for new kernel\n-    - tests/core/snap-debug-bootvars: spread test for snap debug boot-\n-      vars\n-    - tests/lib/nested.sh: more little tweaks\n-    - tests/nested/manual/grade-signed-above-testkeys-boot: enable kvm\n-    - cmd/s-b/initramfs-mounts: use ConfigureTargetSystem for install,\n-      recover modes\n-    - overlord: explicitly set refresh-app-awareness in tests\n-    - kernel: remove \"edition\" from kernel.yaml and add \"update\"\n-    - spread: drop vendor from the packed project archive\n-    - boot: fix debug bootloader variables dump on UC20 systems\n-    - wrappers, systemd: allow empty root dir and conditionally do not\n-      pass --root to systemctl\n-    - tests/nested/manual: add test for grades above signed booting with\n-      testkeys\n-    - tests/nested: misc robustness fixes\n-    - o/assertstate,asserts: use bulk refresh to refresh snap-\n-      declarations\n-    - tests/lib/prepare.sh: stop patching the uc20 initrd since it has\n-      been updated now\n-    - tests/nested/manual/refresh-revert-fundamentals: re-enable test\n-    - update-pot: ignore .go files inside .git when running xgettext-go\n-    - tests: disable part of the lxd test completely on 16.04.\n-    - o/snapshotstate: tweak comment regarding snapshot filename\n-    - o/snapstate: improve snapshot iteration\n-    - bootloader: lk cleanups\n-    - tests: update to support nested kvm without reboots on UC20\n-    - tests/nested/manual/preseed: disable system-key check for 20.04\n-      image\n-    - spread.yaml: add ubuntu-20.10-64 to qemu\n-    - store: handle v2 error when fetching assertions\n-    - gadget: resolve device mapper devices for fallback device lookup\n-    - tests/nested/cloud-init-many: simplify tests and unify\n-      helpers/seed inputs\n-    - tests: copy /usr/lib/snapd/info to correct directory\n-    - check-pr-title.py * : allow \"*\" in the first part of the title\n-    - many: typos and small test tweak\n-    - tests/main/lxd: disable cgroup combination for 16.04 that is\n-      failing a lot\n-    - tests: make nested signing helpers less confusing\n-    - tests: misc nested changes\n-    - tests/nested/manual/refresh-revert-fundamentals: disable\n-      temporarily\n-    - tests/lib/cla_check: default to Python 3, tweaks, formatting\n-    - tests/lib/cl_check.py: use python3 compatible code\n-\n- -- Michael Vogt   Thu, 19 Nov 2020 17:51:02 +0100\n-\n-snapd (2.47.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1895929\n-    - o/configstate: create /etc/sysctl.d when applying early config\n-      defaults\n-    - cmd/snap-bootstrap/initramfs-mounts: also copy /etc/machine-id for\n-      same IP addr\n-    - packaging/{ubuntu,debian}: add liblzo2-dev as a dependency for\n-      building snapd\n-    - cmd/snap: allow snap help vs --all to diverge purposefully\n-    - snap: snap help output refresh\n-\n- -- Michael Vogt   Thu, 08 Oct 2020 09:30:44 +0200\n-\n-snapd (2.47) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1895929\n-    - tests: fix nested core20 shellcheck bug\n-    - many/apparmor: adjust rule for reading apparmor profile for new\n-      kernel\n-    - snap-repair: add uc20 support\n-    - cmd/snap/auto-import: stop importing system user assertions from\n-      initramfs mnts\n-    - cmd/s-b/initramfs-mounts: use ConfigureTargetSystem for install,\n-      recover modes\n-    - gadget: resolve device mapper devices for fallback device lookup\n-    - secboot: add boot manager profile to pcr protection profile\n-    - sysconfig,o/devicestate: mv DisableNoCloud to\n-      DisableAfterLocalDatasourcesRun\n-    - tests: make gadget-reseal more robust\n-    - tests: skip nested images pre-configuration by default\n-    - tests: fix for basic20 test running on external backend and rpi\n-    - tests: improve kernel reseal test\n-    - boot: adjust comments, naming, log success around reseal\n-    - tests/nested, fakestore: changes necessary to run nested uc20\n-      signed/secured tests\n-    - tests: add nested core20 gadget reseal test\n-    - boot/modeenv: track unknown keys in Read and put back into modeenv\n-      during Write\n-    - interfaces/process-control: add sched_setattr to seccomp\n-    - boot: with unasserted kernels reseal if there's a hint modeenv\n-      changed\n-    - client: bump the default request timeout to 120s\n-    - configcore: do not error in console-conf.disable for install mode\n-    - boot: streamline bootstate20.go reseal and tests changes\n-    - boot: reseal when changing kernel\n-    - cmd/snap/model: specify grade in the model command output\n-    - tests: simplify\n-      repack_snapd_snap_with_deb_content_and_run_mode_first_boot_tweaks\n-    - test: improve logging in nested tests\n-    - nested: add support to telnet to serial port in nested VM\n-    - secboot: use the snapcore/secboot native recovery key type\n-    - tests/lib/nested.sh: use more focused cloud-init config for uc20\n-    - tests/lib/nested.sh: wait for the tpm socket to exist\n-    - spread.yaml, tests/nested: misc changes\n-    - tests: add more checks to disk space awareness spread test\n-    - tests: disk space awareness spread test\n-    - boot: make MockUC20Device use a model and MockDevice more\n-      realistic\n-    - boot,many: reseal only when meaningful and necessary\n-    - tests/nested/core20/kernel-failover: add test for failed refresh\n-      of uc20 kernel\n-    - tests: fix nested to work with qemu and kvm\n-    - boot: reseal when updating boot assets\n-    - tests: fix snap-routime-portal-info test\n-    - boot: verify boot chain file in seal and reseal tests\n-    - tests: use full path to test-snapd-refresh.version binary\n-    - boot: store boot chains during install, helper for checking\n-      whether reseal is needed\n-    - boot: add call to reseal an existing key\n-    - boot: consider boot chains with unrevisioned kernels incomparable\n-    - overlord: assorted typos and miscellaneous changes\n-    - boot: group SealKeyModelParams by model, improve testing\n-    - secboot: adjust parameters to buildPCRProtectionProfile\n-    - strutil: add SortedListsUniqueMergefrom the doc comment:\n-    - snap/naming: upgrade TODO to TODO:UC20\n-    - secboot: add call to reseal an existing key\n-    - boot: in seal.go adjust error message and function names\n-    - o/snapstate: check available disk space in RemoveMany\n-    - boot: build bootchains data for sealing\n-    - tests: remove \"set -e\" from function only shell libs\n-    - o/snapstate: disk space check on UpdateMany\n-    - o/snapstate: disk space check with snap update\n-    - snap: implement new `snap reboot` command\n-    - boot: do not reorder boot assets when generating predictable boot\n-      chains and other small tweaks\n-    - tests: some fixes and improvements for nested execution\n-    - tests/core/uc20-recovery: fix check for at least specific calls to\n-      mock-shutdown\n-    - boot: be consistent using bootloader.Role* consts instead of\n-      strings\n-    - boot: helper for generating secboot load chains from a given boot\n-      asset sequence\n-    - boot: tweak boot chains to support a list of kernel command lines,\n-      keep track of model and kernel boot file\n-    - boot,secboot: switch to expose and use snapcore/secboot load event\n-      trees\n-    - tests: use `nested_exec` in core{20,}-early-config test\n-    - devicestate: enable cloud-init on uc20 for grade signed and\n-      secured\n-    - boot: add \"rootdir\" to baseBootenvSuite and use in tests\n-    - tests/lib/cla_check.py: don't allow users.noreply.github.com\n-      commits to pass CLA\n-    - boot: represent boot chains, helpers for marshalling and\n-      equivalence checks\n-    - boot: mark successful with boot assets\n-    - client, api: handle insufficient space error\n-    - o/snapstate: disk space check with single snap install\n-    - configcore: \"service.console-conf.disable\" is gadget defaults only\n-    - packaging/opensuse: fix for /usr/libexec on TW, do not hardcode\n-      AppArmor profile path\n-    - tests: skip udp protocol in nfs-support test on ubuntu-20.10\n-    - packaging/debian-sid: tweak code preparing _build tree\n-    - many: move seal code from gadget/install to boot\n-    - tests: remove workaround for cups on ubuntu-20.10\n-    - client: implement RebootToSystem\n-    - many: seed.Model panics now if called before LoadAssertions\n-    - daemon: add /v2/systems \"reboot\" action API\n-    - github: run tests also on push to release branches\n-    - interfaces/bluez: let slot access audio streams\n-    - seed,c/snap-bootstrap: simplify snap-bootstrap seed reading with\n-      new seed.ReadSystemEssential\n-    - interfaces: allow snap-update-ns to read /proc/cmdline\n-    - tests: new organization for nested tests\n-    - o/snapstate, features: add feature flags for disk space awareness\n-    - tests: workaround for cups issue on 20.10 where default printer is\n-      not configured.\n-    - interfaces: update cups-control and add cups for providing snaps\n-    - boot: keep track of the original asset when observing updates\n-    - tests: simplify and fix tests for disk space checks on snap remove\n-    - sysconfig/cloudinit.go: add AllowCloudInit and use GadgetDir for\n-      cloud.conf\n-    - tests/main: mv core specific tests to core suite\n-    - tests/lib/nested.sh: reset the TPM when we create the uc20 vm\n-    - devicestate: rename \"mockLogger\" to \"logbuf\"\n-    - many: introduce ContentChange for tracking gadget content in\n-      observers\n-    - many: fix partion vs partition typo\n-    - bootloader: retrieve boot chains from bootloader\n-    - devicestate: add tests around logging in RequestSystemAction\n-    - boot: handle canceled update\n-    - bootloader: tweak doc comments (thanks Samuele)\n-    - seed/seedwriter: test local asserted snaps with UC20 grade signed\n-    - sysconfig/cloudinit.go: add DisableNoCloud to\n-      CloudInitRestrictOptions\n-    - many: use BootFile type in load sequences\n-    - boot,bootloader: clarifications after the changes to introduce\n-      bootloader.Options.Role\n-    - boot,bootloader,gadget: apply new bootloader.Options.Role\n-    - o/snapstate, features: add feature flag for disk space check on\n-      remove\n-    - testutil: add checkers for symbolic link target\n-    - many: refactor tpm seal parameter setting\n-    - boot/bootstate20: reboot to rollback to previous kernel\n-    - boot: add unit test helpers\n-    - boot: observe update & rollback of trusted assets\n-    - interfaces/utf: Add MIRKey to u2f devices\n-    - o/devicestate/devicestate_cloudinit_test.go: test cleanup for uc20\n-      cloud-init tests\n-    - many: check that users of BaseTest don't forget to consume\n-      cleanups\n-    - tests/nested/core20/tpm: verify trusted boot assets tracking\n-    - github: run macOS job with Go 1.14\n-    - many: misc doc-comment changes and typo fixes\n-    - o/snapstate: disk space check with InstallMany\n-    - many: cloud-init cleanups from previous PR's\n-    - tests: running tests on opensuse leap 15.2\n-    - run-checks: check for dirty build tree too\n-    - vendor: run ./get-deps.sh to update the secboot hash\n-    - tests: update listing test for \"-dirty\" versions\n-    - overlord/devicestate: do not release the state lock when updating\n-      gadget assets\n-    - secboot: read kernel efi image from snap file\n-    - snap: add size to the random access file return interface\n-    - daemon: correctly parse Content-Type HTTP header.\n-    - tests: account for apt-get on core18\n-    - cmd/snap-bootstrap/initramfs-mounts: compute string outside of\n-      loop\n-    - mkversion.sh: simple hack to include dirty in version if the tree\n-      is dirty\n-    - cgroup,snap: track hooks on system bus only\n-    - interfaces/systemd: compare dereferenced Service\n-    - run-checks: only check files in git for misspelling\n-    - osutil: add a package doc comment (via doc.go)\n-    - boot: complain about reused asset name during initial install\n-    - snapstate: installSize helper that calculates total size of snaps\n-      and their prerequisites\n-    - snapshots: export of snapshots\n-    - boot/initramfs_test.go: reset boot vars on the bootloader for each\n-      iteration\n-\n- -- Michael Vogt   Tue, 29 Sep 2020 17:19:13 +0200\n-\n-snapd (2.46.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1891134\n-    - interfaces: allow snap-update-ns to read\n-      /proc/cmdline\n-    - github: run macOS job with Go 1.14\n-    - o/snapstate, features: add feature flag for disk space check on\n-      remove\n-    - tests: account for apt-get on core18\n-    - mkversion.sh: include dirty in version if the tree\n-      is dirty\n-    - interfaces/systemd: compare dereferenced Service\n-    - vendor.json: update mysterious secboot SHA again\n-\n- -- Michael Vogt   Fri, 04 Sep 2020 17:42:54 +0200\n-\n-snapd (2.46) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1891134\n-    - logger: add support for setting snapd.debug=1 on kernel cmdline\n-    - o/snapstate: check disk space before creating automatic snapshot\n-      on remove\n-    - boot, o/devicestate: observe existing recovery bootloader trusted\n-      boot assets\n-    - many: use transient scope for tracking apps and hooks\n-    - features: add HiddenSnapFolder feature flag\n-    - tests/lib/nested.sh: fix partition typo, unmount the image on uc20\n-      too\n-    - runinhibit: open the lock file in read-only mode in IsLocked\n-    - cmd/s-b/initramfs-mounts: make recover -> run mode transition\n-      automatic\n-    - tests: update spread test for unknown plug/slot with snapctl is-\n-      connected\n-    - osutil: add OpenExistingLockForReading\n-    - kernel: add kernel.Validate()\n-    - interfaces: add vcio interface\n-    - interfaces/{docker,kubernetes}-support: load overlay and support\n-      systemd cgroup driver\n-    - tests/lib/nested.sh: use more robust code for finding what loop\n-      dev we mounted\n-    - cmd/snap-update-ns: detach all bind-mounted file\n-    - snap/snapenv: set SNAP_REAL_HOME\n-    - packaging: umount /snap on purge in containers\n-    - interfaces: misc policy updates xlvi\n-    - secboot,cmd/snap-bootstrap: cross-check partitions before\n-      unlocking, mounting\n-    - boot: copy boot assets cache to new root\n-    - gadget,kernel: add new kernel.{Info,Asset} struct and helpers\n-    - o/hookstate/ctlcmd: make is-connected check whether the plug or\n-      slot exists\n-    - tests: find -ignore_readdir_race when scanning cgroups\n-    - interfaces/many: deny arbitrary desktop files and misc from\n-      /usr/share\n-    - tests: use \"set -ex\" in prep-snapd-in-lxd.sh\n-    - tests: re-enable udisks test on debian-sid\n-    - cmd/snapd-generator: use PATH fallback if PATH is not set\n-    - tests: disable udisks2 test on arch linux\n-    - github: use latest/stable go, not latest/edge\n-    - tests: remove support for ubuntu 19.10 from spread tests\n-    - tests: fix lxd test wrongly tracking 'latest'\n-    - secboot: document exported functions\n-    - cmd: compile snap gdbserver shim correctly\n-    - many: correctly calculate the desktop file prefix everywhere\n-    - interfaces: add kernel-crypto-api interface\n-    - corecfg: add \"system.timezone\" setting to the system settings\n-    - cmd/snapd-generator: generate drop-in to use fuse in container\n-    - cmd/snap-bootstrap/initramfs-mounts: tweak names, add comments\n-      from previous PR\n-    - interfaces/many: miscellaneous updates for strict microk8s\n-    - secboot,cmd/snap-bootstrap: don't import boot package from secboot\n-    - cmd/snap-bootstrap/initramfs-mounts: call systemd-mount instead of\n-      the-tool\n-    - tests: work around broken update of systemd-networkd\n-    - tests/main/install-fontconfig-cache-gen: enhance test by\n-      verifying, add fonts to test\n-    - o/devicestate: wrap asset update observer error\n-    - boot: refactor such that bootStateUpdate20 mainly carries Modeenv\n-    - mkversion.sh: disallow changelog versions that have git in it, if\n-      we also have git version\n-    - interfaces/many: miscellaneous updates for strict microk8s\n-    - snap: fix repeated \"cannot list recovery system\" and add test\n-    - boot: track trusted assets during initial install, assets cache\n-    - vendor: update secboot to fix key data validation\n-    - tests: unmount FUSE file-systems from XDG runtime dir\n-    - overlord/devicestate: workaround non-nil interface with nil struct\n-    - sandbox/cgroup: remove temporary workaround for multiple cgroup\n-      writers\n-    - sandbox/cgroup: detect dangling v2 cgroup\n-    - bootloader: add helper for creating a bootloader based on gadget\n-    - tests: support different images on nested execution\n-    - many: reorg cmd/snapinfo.go into snap and new client/clientutil\n-    - packaging/arch: use external linker when building statically\n-    - tests: cope with ghost cgroupv2\n-    - tests: fix issues related to restarting systemd-logind.service\n-    - boot, o/devicestate: TrustedAssetUpdateObserver stubs, hook up to\n-      gadget updates\n-    - vendor: update github.com/kr/pretty to fix diffs of values with\n-      pointer cycles\n-    - boot: move bootloaderKernelState20 impls to separate file\n-    - .github/workflows: move snap building to test.yaml as separate\n-      cached job\n-    - tests/nested/manual/minimal-smoke: run core smoke tests in a VM\n-      meeting minimal requirements\n-    - osutil: add CommitAs to atomic file\n-    - gadget: introduce content update observer\n-    - bootloader: introduce TrustedAssetsBootloader, implement for grub\n-    - o/snapshotstate: helpers for calculating disk space needed for an\n-      automatic snapshot\n-    - gadget/install: retrieve command lines from bootloader\n-    - boot/bootstate20: unify commit method impls, rm\n-      bootState20MarkSuccessful\n-    - tests: add system information and image information when debug\n-      info is displayed\n-    - tests/main/cgroup-tracking: try to collect some information about\n-      cgroups\n-    - boot: introduce current_boot_assets and\n-      current_recovery_boot_assets to modeenv\n-    - tests: fix for timing issues on journal-state test\n-    - many: remove usage and creation of hijacked pid cgroup\n-    - tests: port regression-home-snap-root-owned to tests.session\n-    - tests: run as hightest via tests.session\n-    - github: run CLA checks on self-hosted workers\n-    - github: remove Ubuntu 19.10 from actions workflow\n-    - tests: remove End-Of-Life opensuse/fedora releases\n-    - tests: remove End-Of-Life releases from spread.yaml\n-    - tests: fix debug section of appstream-id test\n-    - interfaces: check !b.preseed earlier\n-    - tests: work around bug in systemd/debian\n-    - boot: add deepEqual, Copy helpers for Modeenv to simplify\n-      bootstate20 refactor\n-    - cmd: add new \"snap recovery\" command\n-    - interfaces/systemd: use emulation mode when preseeding\n-    - interfaces/kmod: don't load kernel modules in kmod backend when\n-      preseeding\n-    - interfaces/udev: do not reload udevadm rules when preseeding\n-    - cmd/snap-preseed: use snapd from the deb if newer than from seeds\n-    - boot: fancy marshaller for modeenv values\n-    - gadget, osutil: use atomic file copy, adjust tests\n-    - overlord: use new tracking cgroup for refresh app awareness\n-    - github: do not skip gofmt with Go 1.9/1.10\n-    - many: introduce content write observer, install mode glue, initial\n-      seal stubs\n-    - daemon,many: switch to use client.ErrorKind and drop the local\n-      errorKind...\n-    - tests: new parameters for nested execution\n-    - client: move all error kinds into errors.go and add doc strings\n-    - cmd/snap: display the error in snap debug seeding if seeding is in\n-      error\n-    - cmd/snap/debug/seeding: use unicode for proper yaml\n-    - tests/cmd/snap-bootstrap/initramfs-mounts: add test case for empty\n-      recovery_mode\n-    - osutil/disks: add mock disk and tests for happy path of mock disks\n-    - tests: refresh/revert snapd in uc20\n-    - osutil/disks: use a dedicated error to indicate a fs label wasn't\n-      found\n-    - interfaces/system-key: in WriteSystemKey during tests, don't call\n-      ParserFeatures\n-    - boot: add current recovery systems to modeenv\n-    - bootloader: extend managed assets bootloader interface to compose\n-      a candidate command line\n-    - interfaces: make the unmarshal test match more the comment\n-    - daemon/api: use pointers to time.Time for debug seeding aspect\n-    - o/ifacestate: update security profiles in connect undo handler\n-    - interfaces: add uinput interface\n-    - cmd/snap-bootstrap/initramfs-mounts: add doSystemdMount + unit\n-      tests\n-    - o/devicestate: save seeding/preseeding times for use with debug\n-      seeding api\n-    - cmd/snap/debug: add \"snap debug seeding\" command for preseeding\n-      debugging\n-    - tests/main/selinux-clean: workaround SELinux denials triggered by\n-      linger setup on Centos8\n-    - bootloader: compose command line with mode and extra arguments\n-    - cmd/snap, daemon: detect and bail purge on multi-snap\n-    - o/ifacestate: fix bug in snapsWithSecurityProfiles\n-    - interfaces/builtin/multipass: replace U+00A0 no-break space with\n-      simple space\n-    - bootloader/assets: generate bootloader assets from files\n-    - many/tests/preseed: reset the preseeded images before preseeding\n-      them\n-    - tests: drop accidental accents from e\n-    - secboot: improve key sealing tests\n-    - tests: replace _wait_for_file_change with retry\n-    - tests: new fs-state which replaces the files.sh helper\n-    - sysconfig/cloudinit_test.go: add test for initramfs case, rm \"/\"\n-      from path\n-    - cmd/snap: track started apps and hooks\n-    - tests/main/interfaces-pulseaudio: disable start limit checking for\n-      pulseaudio service\n-    - api: seeding debug api\n-    - .github/workflows/snap-build.yaml: build the snapd snap via GH\n-      Actions too\n-    - tests: moving journalctl.sh to a new journal-state tool\n-    - tests/nested/manual: add spread tests for cloud-init vuln\n-    - bootloader/assets: helpers for registering per-edition snippets,\n-      register snippets for grub\n-    - data,packaging,wrappers: extend D-Bus service activation search\n-      path\n-    - spread: add opensuse 15.2 and tumbleweed for qemu\n-    - overlord,o/devicestate: restrict cloud-init on Ubuntu Core\n-    - sysconfig/cloudinit: add RestrictCloudInit\n-    - cmd/snap-preseed: check that target path exists and is a directory\n-      on --reset\n-    - tests: check for pids correctly\n-    - gadget,gadget/install: refactor partition table update\n-    - sysconfig/cloudinit: add CloudInitStatus func + CloudInitState\n-      type\n-    - interface/fwupd: add more policies for making fwupd upstream\n-      strict\n-    - tests: new to-one-line tool which replaces the strings.sh helper\n-    - interfaces: new helpers to get and compare system key, for use\n-      with seeding debug api\n-    - osutil, many: add helper for checking whether the process is a go\n-      test binary\n-    - cmd/snap-seccomp/syscalls: add faccessat2\n-    - tests: adjust xdg-open after launcher changes\n-    - tests: new core config helper\n-    - usersession/userd: do not modify XDG_DATA_DIRS when calling xdg-\n-      open\n-    - cmd/snap-preseed: handle relative chroot path\n-    - snapshotstate: move sizer to osutil.Sizer()\n-    - tests/cmd/snap-bootstrap/initramfs-mounts: rm duplicated env ref\n-      kernel tests\n-    - gadget/install,secboot: use snapcore/secboot luks2 api\n-    - boot/initramfs_test.go: add Commentf to more Assert()'s\n-    - tests/lib: account for changes in arch package file name extension\n-    - bootloader/bootloadertest: fix comment typo\n-    - bootloader: add helper for getting recovery system environment\n-      variables\n-    - tests: preinstall shellcheck and run tests on focal\n-    - strutil: add a helper for parsing kernel command line\n-    - osutil: add CheckFreeSpace helper\n-    - secboot: update tpm connection error handling\n-    - packaging, cmd/snap-mgmt, tests: remove modules files on purge\n-    - tests: add tests.cleanup helper\n-    - packaging: add \"ca-certificates\" to build-depends\n-    - tests: more checks in core20 early config spread test\n-    - tests: fix some snapstate tests to use pointers for\n-      snapmgrTestSuite\n-    - boot: better naming of helpers for obtaining kernel command line\n-    - many: use more specific check for unit test mocking\n-    - systemd/escape: fix issues with \"\" and \"\\t\" handling\n-    - asserts: small improvements and corrections for sequence-forming\n-      assertions' support\n-    - boot, bootloader: query kernel command line of run mod and\n-      recovery mode systems\n-    - snap/validate.go: disallow snap layouts with new top-level\n-      directories\n-    - tests: allow to add a new label to run nested tests as part of PR\n-      validation\n-    - tests/core/gadget-update-pc: port to UC20\n-    - tests: improve nested tests flexibility\n-    - asserts: integer headers: disallow prefix zeros and make parsing\n-      more uniform\n-    - asserts: implement Database.FindSequence\n-    - asserts: introduce SequenceMemberAfter in the asserts backstores\n-    - spread.yaml: remove tests/lib/tools from PATH\n-    - overlord: refuse to install snaps whose activatable D-Bus services\n-      conflict with installed snaps\n-    - tests: shorten lxd-state undo-mount-changes\n-    - snap-confine: don't die if a device from sysfs path cannot be\n-      found by udev\n-    - tests: fix argument handling of apt-state\n-    - tests: rename lxd-tool to lxd-state\n-    - tests: rename user-tool to user-state, fix --help\n-    - interfaces: add gconf interface\n-    - sandbox/cgroup: avoid parsing security tags twice\n-    - tests: rename version-tool to version-compare\n-    - cmd/snap-update-ns: handle anomalies better\n-    - tests: fix call to apt.Package.mark_install(auto_inst=True)\n-    - tests: rename mountinfo-tool to mountinfo.query\n-    - tests: rename memory-tool to memory-observe-do\n-    - tests: rename invariant-tool to tests.invariant\n-    - tests: rename apt-tool to apt-state\n-    - many: managed boot config during run mode setup\n-    - asserts: introduce the concept of sequence-forming assertion types\n-    - tests: tweak comments/output in uc20-recovery test\n-    - tests/lib/pkgdb: do not use quiet when purging debs\n-    - interfaces/apparmor: allow snap-specific /run/lock\n-    - interfaces: add system-source-code for access to /usr/src\n-    - sandbox/cgroup: extend SnapNameFromPid with tracking cgroup data\n-    - gadget/install: move udev trigger to gadget/install\n-    - many: make nested spread tests more reliable\n-    - tests/core/uc20-recovery: apply hack to get gopath in recover mode\n-      w/ external backend\n-    - tests: enable tests on uc20 which now work with the real model\n-      assertion\n-    - tests: enable system-snap-refresh test on uc20\n-    - gadget, bootloader: preserve managed boot assets during gadget\n-      updates\n-    - tests: fix leaked dbus-daemon in selinux-clean\n-    - tests: add servicestate.Control tests\n-    - tests: fix \"restart.service\"\n-    - wrappers: helper for enabling services - extract and move enabling\n-      of services into a helper\n-    - tests: new test to validate refresh and revert of kernel and\n-      gadget on uc20\n-    - tests/lib/prepare-restore: collect debug info when prepare purge\n-      fails\n-    - bootloader: allow managed bootloader to update its boot config\n-    - tests: Remove unity test from nightly test suite\n-    - o/devicestate: set mark-seeded to done in the task itself\n-    - tests: add spread test for disconnect undo caused by failing\n-      disconnect hook\n-    - sandbox/cgroup: allow discovering PIDs of given snap\n-    - osutil/disks: support IsDecryptedDevice for mountpoints which are\n-      dm devices\n-    - osutil: detect autofs mounted in /home\n-    - spread.yaml: allow amazon-linux-2-64 qemu with\n-      ec2-user/ec2-user\n-    - usersession: support additional zoom URL schemes\n-    - overlord: mock timings.DurationThreshold in TestNewWithGoodState\n-    - sandbox/cgroup: add tracking helpers\n-    - tests: detect stray dbus-daemon\n-    - overlord: refuse to install snaps providing user daemons on Ubuntu\n-      14.04\n-    - many: move encryption and installer from snap-boostrap to gadget\n-    - o/ifacestate: fix connect undo handler\n-    - interfaces: optimize rules of multiple connected iio/i2c/spi plugs\n-    - bootloader: introduce managed bootloader, implement for grub\n-    - tests: fix incorrect check in smoke/remove test\n-    - asserts,seed: split handling of essential/not essential model\n-      snaps\n-    - gadget: fix typo in mounted filesystem updater\n-    - gadget: do only one mount point lookup in mounted fs updater\n-    - tests/core/snap-auto-mount: try to make the test more robust\n-    - tests: adding ubuntu-20.04 to google-sru backend\n-    - o/servicestate: add updateSnapstateServices helper\n-    - bootloader: pull recovery grub config from internal assets\n-    - tests/lib/tools: apply linger workaround when needed\n-    - overlord/snapstate: graceful handling of denied \"managed\" refresh\n-      schedule\n-    - snapstate: fix autorefresh from classic->strict\n-    - overlord/configstate: add system.kernel.printk.console-loglevel\n-      option\n-    - tests: fix assertion disk handling for nested UC systems\n-    - snapstate: use testutil.HostScaledTimeout() in snapstate tests\n-    - tests: extra worker for google-nested backend to avoid timeout\n-      error on uc20\n-    - snapdtool: helper to check whether the current binary is reexeced\n-      from a snap\n-    - tests: mock servicestate in api tests to avoid systemctl checks\n-    - many: rename back snap.Info.GetType to Type\n-    - tests/lib/cla_check: expect explicit commit range\n-    - osutil/disks: refactor diskFromMountPointImpl a bit\n-    - o/snapstate: service-control task handler\n-    - osutil: add disks pkg for associating mountpoints with\n-      disks/partitions\n-    - gadget,cmd/snap-bootstrap: move partitioning to gadget\n-    - seed: fix LoadEssentialMeta when gadget is not loaded\n-    - cmd/snap: Debian does not allow $SNAP_MOUNT_DIR/bin in sudo\n-      secure_path\n-    - asserts: introduce new assertion validation-set\n-    - asserts,daemon: add support for \"serials\" field in system-user\n-      assertion\n-    - data/sudo: drop a failed sudo secure_path workaround\n-    - gadget: mv encodeLabel to osutil/disks.EncodeHexBlkIDFormat\n-    - boot, snap-bootstrap: move initramfs-mounts logic to boot pkg\n-    - spread.yaml: update secure boot attribute name\n-    - interfaces/block_devices: add NVMe subsystem devices, support\n-      multipath paths\n-    - tests: use the \"jq\" snap from the edge channel\n-    - tests: simplify the tpm test by removing the test-snapd-mokutil\n-      snap\n-    - boot/bootstate16.go: clean snap_try_* vars when not in Trying\n-      status too\n-    - tests/main/sudo-env: check snap path under sudo\n-    - tests/main/lxd: add test for snaps inside nested lxd containers\n-      not working\n-    - asserts/internal: expand errors about invalid serialized grouping\n-      labels\n-    - usersession/userd: add msteams url support\n-    - tests/lib/prepare.sh: adjust comment about sgdisk\n-    - tests: fix how gadget pc is detected when the snap does not exist\n-      and ls fails\n-    - tests: move a few more tests to snapstate_update_test.go\n-    - tests/main: add spread test for running svc from install hook\n-    - tests/lib/prepare: increase the size of the uc16/uc18 partitions\n-    - tests/special-home-can-run-classic-snaps: re-enable\n-    - workflow: test PR title as part of the static checks again\n-    - tests/main/xdg-open-compat: backup and restore original xdg-open\n-    - tests: move update-related tests to snapstate_update_test.go\n-    - cmd,many: move Version and bits related to snapd tools to\n-      snapdtool, merge cmdutil\n-    - tests/prepare-restore.sh: reset-failed systemd-journald before\n-      restarting\n-    - interfaces: misc small interface updates\n-    - spread: use find rather than recursive ls, skip mounted snaps\n-    - tests/lib/prepare-restore.sh: if we failed to purge snapd deb, ls\n-      /var/lib/snapd\n-    - tests: enable snap-auto-mount test on core20\n-    - cmd/snap: do not show $PATH warning when executing under sudo on a\n-      known distro\n-    - asserts/internal: add some iteration benchmarks\n-    - sandbox/cgroup: improve pid parsing code\n-    - snap: add new `snap run --experimental-gdbserver` option\n-    - asserts/internal: limit Grouping size switching to a bitset\n-      representationWe don't always use the bit-set representation\n-      because:\n-    - snap: add an activates-on property to apps for D-Bus activation\n-    - dirs: delete unused Cloud var, fix typo\n-    - sysconfig/cloudinit: make callers of DisableCloudInit use\n-      WritableDefaultsDir\n-    - tests: fix classic ubuntu core transition auth\n-    - tests: fail in setup_reflash_magic() if there is snapd state left\n-    - tests: port interfaces-many-core-provided to tests.session\n-    - tests: wait after creating partitions with sfdisk\n-    - bootloader: introduce bootloarder assets, import grub.cfg with an\n-      edition marker\n-    - riscv64: bump timeouts\n-    - gadget: drop dead code, hide exports that are not used externally\n-    - tests: port 2 uc20 part1\n-    - tests: fix bug waiting for snap command to be ready\n-    - tests: move try-related tests to snapstate_try_test.go\n-    - tests: add debug for 20.04 prepare failure\n-    - travis.yml: removed, all our checks run in GH actions now\n-    - tests: clean up up the use of configcoreSuite in the configcore\n-      tests\n-    - sandbox/cgroup: remove redundant pathOfProcPidCgroup\n-    - sandbox/cgroup: add tests for ParsePids\n-    - tests: fix the basic20 test for uc20 on external backend\n-    - tests: use configcoreSuite in journalSuite and remove some\n-      duplicated code\n-    - tests: move a few more tests to snapstate_install_test\n-    - tests: assorted small patches\n-    - dbusutil/dbustest: separate license from package\n-    - interfaces/builtin/time-control: allow POSIX clock API\n-    - usersession/userd: add \"slack\" to the white list of URL schemes\n-      handled by xdg-open\n-    - tests: check that host settings like hostname are settable on core\n-    - tests: port xdg-settings test to tests.session\n-    - tests: port snap-handle-link test to tests.session\n-    - arch: add riscv64\n-    - tests: core20 early defaults spread test\n-    - tests: move install tests from snapstate_test.go to\n-      snapstate_install_test.go\n-    - github: port macOS sanity checks from travis\n-    - data/selinux: allow checking /var/cache/app-info\n-    - o/devicestate: core20 early config from gadget defaults\n-    - tests: autoremove after removing lxd in preseed-lxd test\n-    - secboot,cmd/snap-bootstrap: add tpm sealing support to secboot\n-    - sandbox/cgroup: move FreezerCgroupDir from dirs.go\n-    - tests: update the file used to detect the boot path on uc20\n-    - spread.yaml: show /var/lib/snapd in debug\n-    - cmd/snap-bootstrap/initramfs-mounts: also copy systemd clock +\n-      netplan files\n-    - snap/naming: add helpers to parse app and hook security tags\n-    - tests: modernize retry tool\n-    - tests: fix and trim debug section in xdg-open-portal\n-    - tests: modernize and use snapd.tool\n-    - vendor: update to latest github.com/snapcore/bolt for riscv64\n-    - cmd/snap-confine: add support for libc6-lse\n-    - interfaces: miscellaneous policy updates xlv\n-    - interfaces/system-packages-doc: fix typo in variable names\n-    - tests: port interfaces-calendar-service to tests.session\n-    - tests: install/run the lzo test snap too\n-    - snap: (small) refactor of `snap download` code for\n-      testing/extending\n-    - data: fix shellcheck warnings in snapd.sh.in\n-    - packaging: disable buildmode=pie for riscv64\n-    - tests: install test-snapd-rsync snap from edge channel\n-    - tests: modernize tests.session and port everything using it\n-    - tests: add ubuntu 20.10 to spread tests\n-    - cmd/snap/remove: mention snap restore/automatic snapshots\n-    - dbusutil: move all D-Bus helpers and D-Bus test helpers\n-    - wrappers: pass 'disable' flag to StopServices wrapper\n-    - osutil: enable riscv64 build\n-    - snap/naming: add ParseSecurityTag and friends\n-    - tests: port document-portal-activation to session-tool\n-    - bootloader: rename test helpers to reflect we are mocking EFI boot\n-      locations\n-    - tests: disable test of nfs v3 with udp proto on debian-sid\n-    - tests: plan to improve the naming and uniformity of utilities\n-    - tests: move *-tool tests to their own suite\n-    - snap-bootstrap: remove sealed key file on reinstall\n-    - bootloader/ubootenv: don't panic with an empty uboot env\n-    - systemd: rename actualFsTypeAndMountOptions to\n-      hostFsTypeAndMountOptions\n-    - daemon: fix filtering of service-control changes for snap.app\n-    - tests: spread test for preseeding in lxd container\n-    - tests: fix broken snapd.session agent.socket\n-    - wrappers: add RestartServices function and ReloadOrRestart to\n-      systemd\n-    - o/cmdstate: handle ignore flag on exec-command tasks\n-    - gadget: make ext4 filesystems with or without metadata checksum\n-    - tests: update statx test to run on all LTS releases\n-    - configcore: show better error when disabling services\n-    - interfaces: add hugepages-control\n-    - interfaces-ssh-keys: Support reading /etc/ssh/ssh_config.d/\n-    - tests: run ubuntu-20.04-* tests on all ubuntu-2* releases\n-    - tests: skip interfaces-openvswitch for centos 8 in nightly suite\n-    - tests: reload systemd --user for root, if present\n-    - tests: reload systemd after editing /etc/fstab\n-    - tests: add missing dependencies needed for sbuild test on debian\n-    - tests: reload systemd after removing pulseaudio\n-    - image, tests: core18 early config.\n-    - interfaces: add system-packages-doc interface\n-    - cmd/snap-preseed, systemd: fix handling of fuse.squashfuse when\n-      preseeding\n-    - interfaces/fwupd: allow bind mount to /boot on core\n-    - tests: improve oom-vitality tests\n-    - tests: add fedora 32 to spread.yaml\n-    - config: apply vitality-hint immediately when the config changes\n-    - tests: port snap-routine-portal-info to session-tool\n-    - configcore: add \"service.console-conf.disable\" config option\n-    - tests: port xdg-open to session-tool\n-    - tests: port xdg-open-compat to session-tool\n-    - tests: port interfaces-desktop-* to session-tool\n-    - spread.yaml: apply yaml formatter/linter\n-    - tests: port interfaces-wayland to session-tool\n-    - o/devicestate: refactor current system handling\n-    - snap-mgmt: perform cleanup of user services\n-    - snap/snapfile,squashfs: followups from 8729\n-    - boot, many: require mode in modeenv\n-    - data/selinux: update policy to allow forked processes to call\n-      getpw*()\n-    - tests: log stderr from dbus-monitor\n-    - packaging: build cmd/snap and cmd/snap-bootstrap with nomanagers\n-      tag\n-    - snap/squashfs: also symlink snap Install with uc20 seed snap dir\n-      layout\n-    - interfaces/builtin/desktop: do not mount fonts cache on distros\n-      with quirks\n-    - data/selinux: allow snapd to remove/create the its socket\n-    - testutil/exec.go: set PATH after running shellcheck\n-    - tests: silence stderr from dbus-monitor\n-    - snap,many: mv Open to snapfile pkg to support add'l options to\n-      Container methods\n-    - devicestate, sysconfig: revert support for cloud.cfg.d/ in the\n-      gadget\n-    - github: remove workaround for bug 133 in actions/cache\n-    - tests: remove dbus.sh\n-    - cmd/snap-preseed: improve mountpoint checks of the preseeded\n-      chroot\n-    - spread.yaml: add ps aux to debug section\n-    - github: run all spread systems in a single go with cached results\n-    - test: session-tool cli tweaks\n-    - asserts: rest of the Pool API\n-    - tests: port interfaces-network-status-classic to session-tool\n-    - packaging: remove obsolete 16.10,17.04 symlinks\n-    - tests: setup portals before starting user session\n-    - o/devicestate: typo fix\n-    - interfaces/serial-port: add NXP SC16IS7xx (ttySCX) to allowed\n-      devices\n-    - cmd/snap/model: support store, system-user-authority keys in\n-      --verbose\n-    - o/devicestate: raise conflict when requesting system action while\n-      seeding\n-    - tests: detect signs of crashed snap-confine\n-    - tests: sign kernel and gadget to run nested tests using current\n-      snapd code\n-    - tests: remove gnome-online-accounts we install\n-    - tests: fix the issue where all the tests were executed on secboot\n-      system\n-    - tests: port interfaces-accounts-service to session-tool\n-    - interfaces/network-control: bring /var/lib/dhcp from host\n-    - image,cmd/snap,tests: add support for store-wide cohort keys\n-    - configcore: add nomanagers buildtag for conditional build\n-    - tests: port interfaces-password-manager-service to session-tool\n-    - o/devicestate: cleanup system actions supported by recover mode\n-    - snap-bootstrap: remove create-partitions and update tests\n-    - tests: fix nested tests\n-    - packaging/arch: update PKGBUILD to match one in AUR\n-    - tests: port interfaces-location-control to session-tool\n-    - tests: port interfaces-contacts-service to session-tool\n-    - state: log task errors in the journal too\n-    - o/devicestate: change how current system is reported for different\n-      modes\n-    - devicestate: do not report \"ErrNoState\" for seeded up\n-    - tests: add a note about broken test sequence\n-    - tests: port interfaces-autopilot-introspection to session-tool\n-    - tests: port interfaces-dbus to session-tool\n-    - packaging: update sid packaging to match 16.04+\n-    - tests: enable degraded test on uc20\n-    - c/snaplock/runinhibit: add run inhibition operations\n-    - tests: detect and report root-owned files in /home\n-    - tests: reload root's systemd --user after snapd tests\n-    - tests: test registration with serial-authority: [generic]\n-    - cmd/snap-bootstrap/initramfs-mounts: copy auth.json and macaroon-\n-      key in recover\n-    - tests/mount-ns: stop binfmt_misc mount unit\n-    - cmd/snap-bootstrap/initramfs-mounts: use booted kernel partition\n-      uuid if available\n-    - daemon, tests: indicate system mode, test switching to recovery\n-      and back to run\n-    - interfaces/desktop: silence more /var/lib/snapd/desktop/icons\n-      denials\n-    - tests/mount-ns: update to reflect new UEFI boot mode\n-    - usersession,tests: clean ups for userd/settings.go and move\n-      xdgopenproxy under usersession\n-    - tests: disable mount-ns test\n-    - tests: test user belongs to systemd-journald, on core20\n-    - tests: run core/snap-set-core-config on uc20 too\n-    - tests: remove generated session-agent units\n-    - sysconfig: use new _writable_defaults dir to create cloud config\n-    - cmd/snap-bootstrap/initramfs-mounts: cosmetic changes in prep for\n-      future work\n-    - asserts: make clearer that with label we mean a serialized label\n-    - cmd/snap-bootstrap: tweak recovery trigger log messages\n-    - asserts: introduce PoolTo \n-    - userd: allow setting default-url-scheme-handler\n-    - secboot: append uuid to ubuntu-data when decrypting\n-    - o/configcore: pass extra options to FileSystemOnlyApply\n-    - tests: add dbus-user-session to bionic and reorder package names\n-    - boot, bootloader: adjust comments, expand tests\n-    - tests: improve debugging of user session agent tests\n-    - packaging: add the inhibit directory\n-    - many: add core.resiliance.vitality-hint config setting\n-    - tests: test adjustments and fixes for recently published images\n-    - cmd/snap: coldplug auto-import assertions from all removable\n-      devices\n-    - secboot,cmd/snap-bootstrap: move initramfs-mounts tpm access to\n-      secboot\n-    - tests: not fail when boot dir cannot be determined\n-    - tests: new directory used to store the cloud images on gce\n-    - tests: inject snapd from edge into seeds of the image in manual\n-      preseed test\n-    - usersession/agent,wrappers: fix races between Shutdown and Serve\n-    - tests: add dependency needed for next upgrade of bionic\n-    - tests: new test user is used for external backend\n-    - cmd/snap: fix the order of positional parameters in help output\n-    - tests: don't create root-owned things in ~test\n-    - tests/lib/prepare.sh: delete patching of the initrd\n-    - cmd/snap-bootstrap/initramfs-mounts: add sudoers to dirs to copy\n-      as well\n-    - progress: tweak multibyte label unit test data\n-    - o/devicestate,cmd/snap-bootstrap: seal to recover mode cmdline\n-    - gadget: fix fallback device lookup for 'mbr' type structures\n-    - configcore: only reload journald if systemd is new enough\n-    - cmd/snap-boostrap, boot: use /run/mnt/data instead of ubuntu-data\n-    - wrappers: allow user mode systemd daemons\n-    - progress: fix progress bar with multibyte duration units\n-    - tests: fix raciness in pulseaudio test\n-    - asserts/internal: introduce Grouping and Groupings\n-    - tests: remove user.sh\n-    - tests: pair of follow-ups from earlier reviews\n-    - overlord/snapstate: warn of refresh/postpone events\n-    - configcore,tests: use daemon-reexec to apply watchdog config\n-    - c/snap-bootstrap: check mount states via initramfsMountStates\n-    - store: implement DownloadAssertions\n-    - tests: run smoke test with different bases\n-    - tests: port user-mounts test to session-tool\n-    - store: handle error-list in fetch-assertions results\n-    - tests: port interfaces-audio-playback-record to session-tool\n-    - data/completion: add `snap` command completion for zsh\n-    - tests/degraded: ignore failure in systemd-vconsole-setup.service\n-    - image: stub implementation of image.Prepare for darwin\n-    - tests: session-tool --restore -u stops user-$UID.slice\n-    - o/ifacestate/handlers.go: fix typo\n-    - tests: port pulseaudio test to session-tool\n-    - tests: port user-session-env to session-tool\n-    - tests: work around journald bug in core16\n-    - tests: add debug to core-persistent-journal test\n-    - tests: port selinux-clean to session-tool\n-    - tests: port portals test to session-tool, fix portal tests on sid\n-    - tests: adding option --no-install-recommends option also when\n-      install all the deps\n-    - tests: add session-tool --has-systemd-and-dbus\n-    - packaging/debian-sid: add gcc-multilib to build deps\n-    - osutil: expand FileLock to support shared locks and more\n-    - packaging: stop depending on python-docutils\n-    - store,asserts,many: support the new action fetch-assertions\n-    - tests: port snap-session-agent-* to session-tool\n-    - packaging/fedora: disable FIPS compliant crypto for static\n-      binaries\n-    - tests: fix for preseeding failures\n-\n- -- Michael Vogt   Tue, 25 Aug 2020 17:26:21 +0200\n-\n-snapd (2.45.3.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1875071\n-    - o/ifacestate: fix bug in snapsWithSecurityProfiles\n-    - tests/main/selinux-clean: workaround SELinux denials triggered by\n-      linger setup on Centos8\n-\n- -- Samuele Pedroni   Tue, 28 Jul 2020 21:43:38 +0200\n-\n-snapd (2.45.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1875071\n-    - many: backport _writable_defaults dir changes\n-    - tests: fix incorrect check in smoke/remove test\n-    - cmd/snap-bootstrap,seed: backport of uc20 PRs\n-    - tests: avoid exit when nested type var is not defined\n-    - cmd/snap-preseed: backport fixes\n-    - interfaces: optimize rules of multiple connected iio/i2c/spi plugs\n-    - many: cherry-picks for 2.45, gh-action, test fixes\n-    - tests/lib: account for changes in arch package file name extension\n-    - postrm, snap-mgmt: cleanup modules and other cherry-picks\n-    - snap-confine: don't die if a device from sysfs path cannot be\n-      found by udev\n-    - data/selinux: update policy to allow forked processes to call\n-      getpw*()\n-    - tests/main/interfaces-time-control: exercise setting time via date\n-    - interfaces/builtin/time-control: allow POSIX clock API\n-    - usersession/userd: add \"slack\" to the white list of URL schemes\n-      handled by xdg-open\n-\n- -- Zygmunt Krynicki   Mon, 27 Jul 2020 12:01:14 +0200\n-\n-snapd (2.45.2) xenial; urgency=medium\n-\n-  * SECURITY UPDATE: sandbox escape vulnerability on snapctl xdg-open\n-    implementation\n-    - usersession/userd/launcher.go: remove XDG_DATA_DIRS environment\n-      variable modification when calling the system xdg-open. Patch\n-      thanks to James Henstridge\n-    - packaging/ubuntu-16.04/snapd.postinst: ensure \"snap userd\" is\n-      restarted. Patch thanks to Michael Vogt\n-    - CVE-2020-11934\n-    - LP: #1880085\n-  * SECURITY UPDATE: arbitrary code execution vulnerability on core\n-    devices with access to physical removable media\n-    - devicestate: Disable/restrict cloud-init after seeding.\n-    - CVE-2020-11933\n-    - LP: #1879530\n-\n- -- Michael Vogt   Fri, 10 Jul 2020 20:06:29 +0200\n-\n-snapd (2.45.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1875071\n-    - data/selinux: allow checking /var/cache/app-info\n-    - cmd/snap-confine: add support for libc6-lse\n-    - interfaces: miscellaneous policy updates xlv\n-    - snap-bootstrap: remove sealed key file on reinstall\n-    - interfaces-ssh-keys: Support reading /etc/ssh/ssh_config.d/\n-    - gadget: make ext4 filesystems with or without metadata checksum\n-    - interfaces/fwupd: allow bind mount to /boot on core\n-    - tests: cherry-pick test fixes from master\n-    - snap/squashfs: also symlink snap Install with uc20 seed snap dir\n-      layout\n-    - interfaces/serial-port: add NXP SC16IS7xx (ttySCX) to allowed\n-      devices\n-    - snap,many: mv Open to snapfile pkg to support add'l options to\n-      Container methods\n-    - interfaces/builtin/desktop: do not mount fonts cache on distros\n-      with quirks\n-    - devicestate, sysconfig: revert support for cloud.cfg.d/ in the\n-      gadget\n-    - data/completion, packaging: cherry-pick zsh completion\n-    - state: log task errors in the journal too\n-    - devicestate: do not report \"ErrNoState\" for seeded up\n-    - interfaces/desktop: silence more /var/lib/snapd/desktop/icons\n-      denials\n-    - packaging/fedora: disable FIPS compliant crypto for static\n-      binaries\n-    - packaging: stop depending on python-docutils\n-\n- -- Michael Vogt   Fri, 05 Jun 2020 15:13:49 +0200\n-\n-snapd (2.45) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1875071\n-    - o/devicestate: support doing system action reboots from recover\n-      mode\n-    - vendor: update to latest secboot\n-    - tests: not fail when boot dir cannot be determined\n-    - configcore: only reload journald if systemd is new enough\n-    - cmd/snap-bootstrap/initramfs-mounts: append uuid to ubuntu-data\n-      when decrypting\n-    - tests/lib/prepare.sh: delete patching of the initrd\n-    - cmd/snap: coldplug auto-import assertions from all removable\n-      devices\n-    - cmd/snap: fix the order of positional parameters in help output\n-    - c/snap-bootstrap: port mount state mocking to the new style on\n-      master\n-    - cmd/snap-bootstrap/initramfs-mounts: add sudoers to dirs to copy\n-      as well\n-    - o/devicestate,cmd/snap-bootstrap: seal to recover mode cmdline,\n-      unlock in recover mode initramfs\n-    - progress: tweak multibyte label unit test data\n-    - gadget: fix fallback device lookup for 'mbr' type structures\n-    - progress: fix progress bar with multibyte duration units\n-    - many: use /run/mnt/data over /run/mnt/ubuntu-data for uc20\n-    - many: put the sealed keys in a directory on seed for tidiness\n-    - cmd/snap-bootstrap: measure epoch and model before unlocking\n-      encrypted data\n-    - o/configstate: core config handler for persistent journal\n-    - bootloader/uboot: use secondary ubootenv file boot.sel for uc20\n-    - packaging: add \"$TAGS\" to dh_auto_test for debian packaging\n-    - tests: ensure $cache_dir is actually available\n-    - secboot,cmd/snap-bootstrap: add model to pcr protection profile\n-    - devicestate: do not use snap-boostrap in devicestate to install\n-    - tests: fix a typo in nested.sh helper\n-    - devicestate: add support for cloud.cfg.d config from the gadget\n-    - cmd/snap-bootstrap: cleanups, naming tweaks\n-    - testutil: add NewDBusTestConn\n-    - snap-bootstrap: lock access to sealed keys\n-    - overlord/devicestate: preserve the current model inside ubuntu-\n-      boot\n-    - interfaces/apparmor: use differently templated policy for non-core\n-      bases\n-    - seccomp: add get_tls, io_pg* and *time64/*64 variants for existing\n-      syscalls\n-    - cmd/snap-bootstrap/initramfs-mounts: mount ubuntu-seed first,\n-      other misc changes\n-    - o/snapstate: tweak \"waiting for restart\" message\n-    - boot: store model model and grade information in modeenv\n-    - interfaces/firewall-control: allow -legacy and -nft for core20\n-    - boot: enable makeBootable20RunMode for EnvRefExtractedKernel\n-      bootloaders\n-    - boot/bootstate20: add EnvRefExtractedKernelBootloader bootstate20\n-      implementation\n-    - daemon: fix error message from `snap remove-user foo` on classic\n-    - overlord: have a variant of Mock that can take a state.State\n-    - tests: 16.04 and 18.04 now have mediating pulseaudio (again)\n-    - seed: clearer errors for missing essential snapd or core snap\n-    - cmd/snap-bootstrap/initramfs-mounts: support\n-      EnvRefExtractedKernelBootloader's\n-    - gadget, cmd/snap-bootstrap: MBR schema support\n-    - image: improve/adjust DownloadSnap doc comment\n-    - asserts: introduce ModelGrade.Code\n-    - tests: ignore user-12345 slice and service\n-    - image,seed/seedwriter: support redirect channel aka default\n-      tracks\n-    - bootloader: use binary.Read/Write\n-    - tests: uc20 nested suite part II\n-    - tests/boot: refactor to make it easier for new\n-      bootloaderKernelState20 impl\n-    - interfaces/openvswitch: support use of ovs-appctl\n-    - snap-bootstrap: copy auth data from real ubuntu-data in recovery\n-      mode\n-    - snap-bootstrap: seal and unseal encryption key using tpm\n-    - tests: disable special-home-can-run-classic-snaps due to jenkins\n-      repo issue\n-    - packaging: fix build on Centos8 to support BUILDTAGS\n-    - boot/bootstate20: small changes to bootloaderKernelState20\n-    - cmd/snap: Implement a \"snap routine file-access\" command\n-    - spread.yaml: switch back to latest/candidate for lxd snap\n-    - boot/bootstate20: re-factor kernel methods to use new interface\n-      for state\n-    - spread.yaml,tests/many: use global env var for lxd channel\n-    - boot/bootstate20: fix bug in try-kernel cleanup\n-    - config: add system.store-certs.[a-zA-Z0-9] support\n-    - secboot: key sealing also depends on secure boot enabled\n-    - httputil: fix client timeout retry tests\n-    - cmd/snap-update-ns: handle EBUSY when unlinking files\n-    - cmd/snap/debug/boot-vars: add opts for setting dir and/or uc20\n-      vars\n-    - secboot: add tpm support helpers\n-    - tests/lib/assertions/developer1-pi-uc20.model: use 20/edge for\n-      kernel and gadget\n-    - cmd/snap-bootstrap: switch to a 64-byte key for unlocking\n-    - tests: preserve size for centos images on spread.yaml\n-    - github: partition the github action workflows\n-    - run-checks: use consistent \"Checking ...\" style messages\n-    - bootloader: add efi pkg for reading efi variables\n-    - data/systemd: do not run snapd.system-shutdown if finalrd is\n-      available\n-    - overlord: update tests to work with latest go\n-    - cmd/snap: do not hide debug boot-vars on core\n-    - cmd/snap-bootstrap: no error when not input devices are found\n-    - snap-bootstrap: fix partition numbering in create-partitions\n-    - httputil/client_test.go: add two TLS version tests\n-    - tests: ignore user@12345.service hierarchy\n-    - bootloader, gadget, cmd/snap-bootstrap: misc cosmetic things\n-    - tests: rewrite timeserver-control test\n-    - tests: fix racy pulseaudio tests\n-    - many: fix loading apparmor profiles on Ubuntu 20.04 with ZFS\n-    - tests: update snap-preseed --reset logic to accommodate for 2.44\n-      change\n-    - cmd/snap: don't wait for system key when stopping\n-    - sandbox/cgroup: avoid making arrays we don't use\n-    - osutil: mock proc/self/mountinfo properly everywhere\n-    - selinux: export MockIsEnforcing; systemd: use in tests\n-    - tests: add 32 bit machine to GH actions\n-    - tests/session-tool: kill cron session, if any\n-    - asserts: it should be possible to omit many snap-ids if allowed,\n-      fix\n-    - boot: cleanup more things, simplify code\n-    - github: skip spread jobs when corresponding label is set\n-    - dirs: don't depend on osutil anymore, mv apparmor vars to apparmor\n-      pkg\n-    - tests/session-tool: add session-tool --dump\n-    - github: allow cached debian downloads to restore\n-    - tests/session-tool: session ordering is non-deterministic\n-    - tests: enable unit tests on debian-sid again\n-    - github: move spread to self-hosted workers\n-    - secboot: import secboot on ubuntu, provide dummy on !ubuntu\n-    - overlord/devicestate: support for recover and run modes\n-    - snap/naming: add validator for snap security tag\n-    - interfaces: add case for rootWritableOverlay + NFS\n-    - tests/main/uc20-create-partitions: tweaks, renames, switch to\n-      20.04\n-    - github: port CLA check to Github Actions\n-    - interfaces/many: miscellaneous policy updates xliv\n-    - configcore,tests: fix setting watchdog options on UC18/20\n-    - tests/session-tool: collect information about services on startup\n-    - tests/main/uc20-snap-recovery: unbreak, rename to uc20-create-\n-      partitions\n-    - state: add state.CopyState() helper\n-    - tests/session-tool: stop anacron.service in prepare\n-    - interfaces: don't use the owner modifier for files shared via\n-      document portal\n-    - systemd: move the doc comments to the interface so they are\n-      visible\n-    - cmd/snap-recovery-chooser: tweaks\n-    - interfaces/docker-support: add overlayfs file access\n-    - packaging: use debian/not-installed to ignore snap-preseed\n-    - travis.yml: disable unit tests on travis\n-    - store: start splitting store.go and store_test.go into subtopic\n-      files\n-    - tests/session-tool: stop cron/anacron from meddling\n-    - github: disable fail-fast as spread cannot be interrupted\n-    - github: move static checks and spread over\n-    - tests: skip \"/etc/machine-id\" in \"writablepaths\" test\n-    - snap-bootstrap: store encrypted partition recovery key\n-    - httputil: increase testRetryStrategy max timelimit to 5s\n-    - tests/session-tool: kill leaking closing session\n-    - interfaces: allow raw access to USB printers\n-    - tests/session-tool: reset failed session-tool units\n-    - httputil: increase httpclient timeout in\n-      TestRetryRequestTimeoutHandling\n-    - usersession: extend timerange in TestExitOnIdle\n-    - client: increase timeout in client tests to 100ms\n-    - many: disentagle release and snapdenv from sandbox/*\n-    - boot: simplify modeenv mocking to always write a modeenv\n-    - snap-bootstrap: expand data partition on install\n-    - o/configstate: add backlight option for core config\n-    - cmd/snap-recovery-chooser: add recovery chooser\n-    - features: enable robust mount ns updates\n-    - snap: improve TestWaitRecovers test\n-    - sandbox/cgroup: add ProcessPathInTrackingCgroup\n-    - interfaces/policy: fix comment in recent new test\n-    - tests: make session tool way more robust\n-    - interfaces/seccomp: allow passing an address to setgroups\n-    - o/configcore: introduce core config handlers (3/N)\n-    - interfaces: updates to login-session-observe, network-manager and\n-      modem-manager interfaces\n-    - interfaces/policy/policy_test.go: add more tests'allow-\n-      installation: false' and we grant based on interface attributes\n-    - packaging: detect/disable broken seed in the postinst\n-    - cmd/snap-confine/mount-support-nvidia.c: add libnvoptix as nvidia\n-      library\n-    - tests: remove google-tpm backend from spread.yaml\n-    - tests: install dependencies with apt using --no-install-recommends\n-    - usersession/userd: add zoommtg url support\n-    - snap-bootstrap: fix disk layout sanity check\n-    - snap: add `snap debug state --is-seeded` helper\n-    - devicestate: generate warning if seeding fails\n-    - config, features: move and rename config.GetFeatureFlag helper to\n-      features.Flag\n-    - boot, overlord/devicestate, daemon:  implement requesting boot\n-      into a given recovery system\n-    - xdgopenproxy: forward requests to the desktop portal\n-    - many: support immediate reboot\n-    - store: search v2 tweaks\n-    - tests: fix cross build tests when installing dependencies\n-    - daemon: make POST /v2/systems/ root only\n-    - tests/lib/prepare.sh: use only initrd from the kernel snap\n-    - cmd/snap,seed: validate full seeds (UC 16/18)\n-    - tests/main/user-session-env: stop the user session before deleting\n-      the test-zsh user\n-    - overlord/devicestate, daemon: record the seed current system was\n-      installed from\n-    - gadget: SystemDefaults helper function to convert system defaults\n-      config into a flattened map suitable for FilesystemOnlyApply.\n-    - many: comment or avoid cryptic snap-ids in tests\n-    - tests: add LXD_CHANNEL environment\n-    - store: support for search API v2\n-    - .github: register a problem matcher to detect spread failures\n-    - seed: add Info() method for seed.Snap\n-    - github: always run the \"Discard spread workers\" step, even if the\n-      job fails\n-    - github: offload self-hosted workers\n-    - cmd/snap: the model command needs just a client, no waitMixin\n-    - github: combine tests into one workflow\n-    - github: fix order of go get caches\n-    - tests: adding more workers for ubuntu 20.04\n-    - boot,overlord: rename operating mode to system mode\n-    - config: add new Transaction.GetPristine{,Maybe}() function\n-    - o/devicestate: rename readMaybe* to maybeRead*\n-    - github: cache Debian dependencies for unit tests\n-    - wrappers: respect pre-seeding in error path\n-    - seed: validate UC20 seed system label\n-    - client, daemon, overlord/devicestate: request system action API\n-      and stubs\n-    - asserts,o/devicestate: support model specified alternative serial-\n-      authority\n-    - many: introduce naming.WellKnownSnapID\n-    - o/configcore: FilesystemOnlyApply method for early configuration\n-      of core (1/N)\n-    - github: run C unit tests\n-    - github: run spread tests on PRs only\n-    - interfaces/docker-support: make containerd abstract socket more\n-      generic\n-    - tests: cleanup security-private-tmp properly\n-    - overlord/devicestate,boot: do not hold to the originally read\n-      modeenv\n-    - dirs: rm RunMnt; boot: add vars for early boot env layout;\n-      sysconfig: take targetdir arg\n-    - cmd/snap-bootstrap/initramfs-mounts/tests: use dirs.RunMnt over\n-      s.runMnt\n-    - tests: add regression test for MAAS refresh bug\n-    - errtracker: add missing mocks\n-    - github: apt-get update before installing build-deps\n-    - github: don't fail-fast\n-    - github: run spread via github actions\n-    - boot,many: add modeenv.WriteTo, make Write take no args\n-    - wrappers: fix timer schedules that are days only\n-    - tests/main/snap-seccomp-syscalls: install gperf\n-    - github: always checkout to snapcore/snapd\n-    - github: add prototype workflow running unit tests\n-    - many: improve comments, naming, a possible TODO\n-    - client: use Assert when checking for error\n-    - tests: ensure sockets target is ready in session agent spread\n-      tests\n-    - osutil: do not leave processes behind after the test run\n-    - tests: update proxy-no-core to match latest CDN changes\n-    - devicestate,sysconfig: support \"cloud.cfg.d\" in uc20 for grade:\n-      dangerous\n-    - cmd/snap-failure,tests: try to make snap-failure more robust\n-    - many: fix packages having mistakenly their copyright as doc\n-    - many: enumerate system seeds, return them on the /v2/systems API\n-      endpoint\n-    - randutil: don't consume kernel entropy at init, just mix more info\n-      to try to avoid fleet collisions\n-    - snap-bootstrap: add creationSupported predicate for partition\n-      types\n-    - tests: umount partitions which are not umounted after remount\n-      gadget\n-    - snap: run gofmt -s\n-    - many: improve environment handling, fixing duplicate entries\n-    - boot_test: add many boot robustness tests for UC20 kernel\n-      MarkBootSuccessul and SetNextBoot\n-    - overlord: remove unneeded overlord.MockPruneInterval() mocks\n-    - interfaces/greengrass-support: fix typo\n-    - overlord,timings,daemon: separate timings from overlord/state\n-    - tests: enable nested on core20 and test current branch\n-    - snap-bootstrap: remove created partitions on reinstall\n-    - boot: apply Go 1.10 formatting\n-    - apparmor: use rw for uuidd request to default and remove from\n-      elsewhere\n-    - packaging: add README.source for debian\n-    - tests: cleanup various uc20 boot tests from previous PR\n-    - devicestate: disable cloud-init by default on uc20\n-    - run-checks: tweak formatting checks\n-    - packaging,tests: ensure debian-sid builds without vendor/\n-    - travis.yml: run unit tests with go/master as well* travis.yml: run\n-      unit tests with go/master as well\n-    - seed: make Brand() part of the Seed interface\n-    - cmd/snap-update-ns: ignore EROFS from rmdir/unlink\n-    - daemon: do a forceful server shutdown if we hit a deadline\n-    - tests/many: don't use StartLimitInterval anymore, unify snapd-\n-      failover variants, build snapd snap for UC16 tests\n-    - snap-seccomp: robustness improvements\n-    - run-tests: disable -v for go test to avoid spaming the logs\n-    - snap: whitelist lzo as support compression for snap pack\n-    - snap: tweak comment in Install() for overlayfs detection\n-    - many: introduce snapdenv.Preseeding instead of release.PreseedMode\n-    - client, daemon, overlord/devicestate: structures and stubs for\n-      systems API\n-    - o/devicestate: delay the creation of mark-seeded task until\n-      asserts are loaded\n-    - data/selinux, tests/main/selinux: cleanup tmpfs operations in the\n-      policy, updates\n-    - interfaces/greengrass-support: add new 1.9 access\n-    - snap: do not hardlink on overlayfs\n-    - boot,image: ARM kernel extract prepare image\n-    - interfaces: make gpio robust against not-existing gpios in /sys\n-    - cmd/snap-preseed: handle --reset flag\n-    - many: introduce snapdenv to present common snapd env options\n-    - interfaces/kubernetes-support: allow autobind to journald socket\n-    - snap-seccomp: allow mprotect() to unblock the tests\n-    - tests/lib/reset: workaround unicode dot in systemctl output\n-    - interfaces/udisks2: also allow Introspection on\n-      /org/freedesktop/UDisks/**\n-    - snap: introduce Container.RandomAccessFile\n-    - o/ifacestate, api: implementation of snap disconnect --forget\n-    - cmd/snap: make the portal-info command search for the network-\n-      status interface\n-    - interfaces: work around apparmor_parser slowness affecting uio\n-    - tests: fix/improve failing spread tests\n-    - many: clean separation of bootenv mocking vs mock bootloader kinds\n-    - tests: mock prune ticker in overlord tests to reduce wait times\n-    - travis: disable arm64 again\n-    - httputil: add support for extra snapd certs\n-    - travis.yml: run unit tests on arm64 as well\n-    - many: fix a pair of ineffectual assignments\n-    - tests: add uc20 kernel snap upgrade managers test, fix\n-      bootloadertest bugs\n-    - o/snapstate: set base in SnapSetup on snap revert\n-    - interfaces/{docker,kubernetes}-support: updates for lastest k8s\n-    - cmd/snap-exec: add test case for LP bug 1860369\n-    - interfaces: make the network-status interface implicit on\n-      classic\n-    - interfaces: power control interfaceIt is documented in the\n-      kernel\n-    - interfaces: miscellaneous policy updates\n-    - cmd/snap: add a \"snap routine portal-info\" command\n-    - usersession/userd: add \"apt\" to the white list of URL schemes\n-      handled by xdg-open\n-    - interfaces/desktop: allow access to system prompter interface\n-    - devicestate: allow encryption regardless of grade\n-    - tests: run ipv6 network-retry test too\n-    - tests: test that after \"remove-user\" the system is unmanaged\n-    - snap-confine: unconditionally add /dev/net/tun to the device\n-      cgroup\n-    - snapcraft.yaml: use sudo -E and remove workaround\n-    - interfaces/audio_playback: Fix pulseaudio config access\n-    - ovelord/snapstate: update only system wide fonts cache\n-    - wrappers: import /etc/environment in all services\n-    - interfaces/u2f: Add Titan USB-C key\n-    - overlord, taskrunner: exit on task/ensure error when preseeding\n-    - tests: add session-tool, a su / sudo replacement\n-    - wrappers: add mount unit dependency for snapd services on core\n-      devices\n-    - tests: just remove user when the system is not managed on create-\n-      user-2 test\n-    - snap-preseed: support for preseeding of snapd and core18\n-    - boot: misc UC20 changes\n-    - tests: adding arch-linux execution\n-    - packaging: revert \"work around review-tools and snap-confine\"\n-    - netlink: fix panic on arm64 with the new rawsockstop codewith a\n-      nil Timeval panics\n-    - spread, data/selinux: add CentOS 8, update policy\n-    - tests: updating checks to new test account for snapd-test snaps\n-    - spread.yaml: mv opensuse 15.1 to unstable\n-    - cmd/snap-bootstrap,seed: verify only in-play snaps\n-    - tests: use ipv4 in retry-network to unblock failing master\n-    - data/systemd: improve the description\n-    - client: add \"Resume\" to DownloadOptions and new test\n-    - tests: enable snapd-failover on uc20\n-    - tests: add more debug output to the snapd-failure handling\n-    - o/devicestate: unset recovery_system when done seeding\n-\n- -- Michael Vogt   Tue, 12 May 2020 17:17:57 +0200\n-\n-snapd (2.44.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1864808\n-    - spread.yaml: adding more workers for ubuntu 20.04\n-    - packaging: stop depending on python-docutils on opensuse\n-    - spread.yaml: do not run ubuntu-core-20-64 with snapd 2.44, snapd\n-      is not recent enough to drive ubuntu-core-20\n-    - spread.yaml: Preserve size for centos images on spread.yaml\n-    - spread.yaml: use non-uefi enabled image for uc20\n-    - tests: ensure $cache_dir is actually available\n-    - tests: disable preseed tests, they work in master but require too\n-      much cherry-picking here\n-    - travis.yml: remove go/master unit tests from 2.44\n-\n- -- Michael Vogt   Thu, 30 Apr 2020 09:09:22 +0200\n-\n-snapd (2.44.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1864808\n-    - packaging/fedora: disable FIPS compliant crypto for static\n-      binaries\n-    - interfaces/firewall-control: allow -legacy and -nft for core20\n-    - seccomp: add get_tls, io_pg* and *time64/*64 variants for existing\n-      syscalls\n-    - tests: 16.04 and 18.04 now have mediating pulseaudio\n-    - tests: ignore user@12345.service hierarchy\n-\n- -- Michael Vogt   Wed, 29 Apr 2020 08:32:56 +0200\n-\n-snapd (2.44.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1864808\n-    - tests: fix racy pulseaudio tests\n-    - many: fix loading apparmor profiles on Ubuntu 20.04 with ZFS\n-    - tests: update snap-preseed --reset logic\n-    - tests: backport partition fixes\n-    - cmd/snap: don't wait for system key when stopping\n-    - interfaces/many: miscellaneous policy updates xliv\n-    - tests/main/uc20-snap-recovery: use 20.04 system\n-    - tests: skip \"/etc/machine-id\" in \"writablepaths\n-    - interfaces/docker-support: add overlays file access\n-\n- -- Michael Vogt   Fri, 10 Apr 2020 16:57:25 +0200\n-\n-snapd (2.44.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1864808\n-    - packaging: detect/disable broken seeds in the postinst\n-    - cmd/snap,seed: validate full seeds (UC 16/18)\n-    - snap: add `snap debug state --is-seeded` helper\n-    - devicestate: generate warning if seeding fails\n-    - store: support for search API v2\n-    - cmd/snap-seccomp/syscalls: update the list of known syscalls\n-    - snap/cmd: the model command needs just a client, no waitMixin\n-    - tests: cleanup security-private-tmp properly\n-    - wrappers: fix timer schedules that are days only\n-    - tests: update proxy-no-core to match latest CDN changes\n-    - cmd/snap-failure,tests: make snap-failure more robust\n-    - tests, many: don't use StartLimitInterval anymore, unify snapd-\n-      failover variants, build snapd snap for UC16 tests\n-\n- -- Michael Vogt   Thu, 02 Apr 2020 09:51:34 +0200\n-\n-snapd (2.44.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1864808\n-    - randutil: switch back to setting up seed with lower entropy data\n-    - interfaces/greengrass-support: fix typo\n-    - packaging,tests: ensure debian-sid builds without vendor/\n-    - travis.yml: run unit tests with go/master as well\n-    - cmd/snap-update-ns: ignore EROFS from rmdir/unlink\n-\n- -- Michael Vogt   Sat, 21 Mar 2020 18:32:12 +0100\n-\n-snapd (2.44) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1864808\n-    - daemon: do a forceful serer shutdown if we hit a deadline\n-    - snap: whitelist lzo as support compression for snap pack\n-    - data/selinux: update policy to allow more ops\n-    - interfaces/greengrass-support: add new 1.9 access\n-    - snap: do not hardlink on overlayfs\n-    - cmd/snap-preseed: handle --reset flag\n-    - interfaces/kubernetes-support: allow autobind to journald socket\n-    - snap-seccomp: allow mprotect() to unblock the tests\n-    - tests/lib/reset: workaround unicode dot in systemctl output\n-    - interfaces: work around apparmor_parser slowness affecting uio\n-    - interfaces/udisks2: also allow Introspection on\n-      /org/freedesktop/UDisks2/**\n-    - tests: mock prune ticker in overlord tests to reduce wait times\n-    - interfaces/{docker,kubernetes}-support: updates for lastest k8s\n-    - interfaces: miscellaneous policy updates\n-    - interfaces/audio_playback: Fix pulseaudio config access\n-    - overlord: disable Test..AbortShortlyAfterStartOfOperation for 2.44\n-    - ovelord/snapstate: update only system wide fonts cache\n-    - wrappers: import /etc/environment in all services\n-    - interfaces/u2f: Add Titan USB-C key\n-    - overlord, taskrunner: exit on task/ensure error when preseeding\n-    - overlord/snapstate/backend: update snapd services contents in unit\n-      tests\n-    - wrappers: add mount unit dependency for snapd services on core\n-      devices\n-    - Revert \"tests: remove /tmp/snap.* left over by other tests\"\n-    - Revert \"packaging: work around review-tools and snap-confine\"\n-    - netlink: fix panic on arm64 with the new rawsockstop code\n-    - spread, data/selinux: add CentOS 8, update policy\n-    - spread.yaml: mv opensuse tumbleweed to unstable too\n-    - spread.yaml: mv opensuse 15.1 to unstable\n-    - tests: use ipv4 in retry-network to unblock failing master\n-    - data/systemd: improve the description\n-    - tests/lib/prepare.sh: simplify, combine code paths\n-    - tests/main/user-session-env: add test verifying environment\n-      variables inside the user session\n-    - spread.yaml: make qemu ubuntu-core-20-64 use ubuntu-20.04-64\n-    - run-checks: SKIP_GMFMT really skips formatting checks\n-    - tests: enable more tests for UC20/UC18\n-    - tests: remove tmp dir for snap not-test-snapd-sh on security-\n-      private-tmp test\n-    - seed,cmd/snap-bootstrap: introduce seed.Snap.EssentialType,\n-      simplify bootstrap code\n-    - snapstate: do not restart in undoLinkSnap unless on first install\n-    - cmd/snap-bootstrap: subcommand to detect UC chooser trigger\n-    - cmd/snap-bootstrap/initramfs-mounts: mount the snapd snap in run-\n-      mode too\n-    - cmd/libsnap, tests: fix C unit tests failing as non-root\n-    - cmd/snap-bootstrap: verify kernel snap is in modeenv before\n-      mounting it\n-    - tests: adding amazon linux to google backend\n-    - cmd/snap-failure/snapd: rm snapd.socket, reset snapd.socket failed\n-      status\n-    - client: add support for \"ResumeToken\", \"HeaderPeek\" to download\n-    - build: enable type: snapd\n-    - tests: rm -rf /tmp/snap.* in restore\n-    - cmd/snap-confine: deny snap-confine to load nss libs\n-    - snapcraft.yaml: add comments, rename snapd part to snapd-deb\n-    - boot: write current_kernels in bootstate20, makebootable\n-    - packaging: work around review-tools and snap-confine\n-    - tests: skipping interfaces-openvswitch on centos due to package is\n-      not available\n-    - packaging,snap-confine: stop being setgid root\n-    - cmd/snap-confine: bring /var/lib/dhcp from host, if present\n-    - store: rely on CommandFromSystemSnap to find xdelta3\n-    - tests: bump sleep time of the new overlord tests\n-    - cmd/snap-preseed: snapd version check for the target\n-    - netlink: fix/support stopping goroutines reading netlink raw\n-      sockets\n-    - tests: reset PS1 before possibly interactive dash\n-    - overlord, state: don't abort changes if spawn time before\n-      StartOfOperationTime (2/2)\n-    - snapcraft.yaml: add python3-apt, tzdata as build-deps for the\n-      snapd snap\n-    - tests: ask tar to speak English\n-    - tests: using google storage when downloading ubuntu cloud images\n-      from gce\n-    - Coverity produces false positives for code like this:\n-    - many: maybe restart & security backend options\n-    - o/standby: add SNAPD_STANDBY_WAIT to control standby in\n-      development\n-    - snap: use the actual staging snap-id for snapd\n-    - cmd/snap-bootstrap: create a new parser instance\n-    - snapcraft.yaml: use build-base and adopt-info, rm builddeb\n-      plugin\n-    - tests: set StartLimitInterval in snapd failover test\n-    - tests: disable archlinux system\n-    - tests: add preseed test for classic\n-    - many, tests: integrate all preseed bits and add spread tests\n-    - daemon: support resuming downloads\n-    - tests: use Filename() instead of filepath.Base(sn.MountFile())\n-    - tests/core: add swapfiles test\n-    - interfaces/cpu-control: allow to control cpufreq tunables\n-    - interfaces: use commonInteface for desktopInterface\n-    - interfaces/{desktop-legacy,unity7}: adjust for new ibus socket\n-      location\n-    - snap/info: add Filename\n-    - bootloader: make uboot a RecoveryAwareBootloader\n-    - gadget: skip update when mounted filesystem content is identical\n-    - systemd: improve is-active check for 'failed' services\n-    - boot: add current_kernels to modeenv\n-    - o/devicestate: StartOfOperationTime helper for Prune (1/2)\n-    - tests: detect LXD launching i386 containers\n-    - tests: move main/ubuntu-core-* tests to core/ suite\n-    - tests: remove snapd in ubuntu-core-snapd\n-    - boot: enable base snap updates in bootstate20\n-    - tests: Fix core revert channel after 2.43 has been released to\n-      stable\n-    - data/selinux: unify tabs/spaces\n-    - o/ifacestate: move ResolveDisconnect to ifacestate\n-    - spread: move centos to stable systems\n-    - interfaces/opengl: allow datagrams to nvidia-driver\n-    - httputil: add NoNetwork(err) helper, spread test and use in serial\n-      acquire\n-    - store: detect if server does not support http range headers\n-    - test/lib/user: add helper lib for doing things for and as a user\n-    - overlord/snapstate, wrappers: undo of snapd on core\n-    - tests/main/interfaces-pulseaudio: use custom pulseaudio script,\n-      set kill timeout\n-    - store: add support for resume in DownloadStream\n-    - cmd/snap: implement 'snap remove-user'\n-    - overlord/devicestate: fix preseed unit tests on systems not using\n-      /snap\n-    - tests/main/static: ldd in glibc 2.31 logs to stderr now\n-    - run-checks, travis: allow skipping spread jobs by adding a label\n-    - tests: add new backend which includes images with tpm support\n-    - boot: use constants for boot status values\n-    - tests: add \"core\" suite for UC specific tests\n-    - tests/lib/prepare: use a local copy of uc20 initramfs skeleton\n-    - tests: retry mounting the udisk2 device due to timing issue\n-    - usersession/client: add a client library for the user session\n-      agent\n-    - o/devicestate: Handle preseed mode in the firstboot mode (core16\n-      only for now).\n-    - boot: add TryBase and BaseStatus to modeenv; use in snap-bootstrap\n-    - cmd/snap-confine: detect base transitions on core16\n-    - boot: don't use \"kernel\" from the modeenv anymore\n-    - interfaces: add uio interface\n-    - tests: repack the initramfs + kernel snap for UC20 spread tests\n-    - interfaces/greengrass-support: add /dev/null ->\n-      /proc/latency_stats mount\n-    - httputil: remove workaround for redirect handling in go1.7\n-    - httputil: remove go1.6 transport workaround\n-    - snap: add `snap pack --compression=` options\n-    - tests/lib/prepare: fix hardcoded loopback device names for UC\n-      images\n-    - timeutil: add a unit test case for trivial schedule\n-    - randutil,o/snapstate,-mkauthors.sh: follow ups to randutil\n-      introduction\n-    - dirs: variable with distros using alternate snap mount\n-    - many,randutil: centralize and streamline our random value\n-      generation\n-    - tests/lib/prepare-restore: Revert \"Continue on errors updating or\n-      installing dependencies\"\n-    - daemon: Allow clients to call /v2/logout via Polkit\n-    - dirs: manjaro-arm is like manjaro\n-    - data, packaging: Add sudoers snippet to allow snaps to be run with\n-      sudo\n-    - daemon, store: better expose single action errors\n-    - tests: switch mount-ns test to differential data set\n-    - snapstate: refactor things to add the re-refresh task last\n-    - daemon: drop support for the DELETE method\n-    - client: move to /v2/users; implement RemoveUser\n-    - boot: enable UC20 kernel extraction and bootState20 handling\n-    - interfaces/policy: enforce plug-names/slot-names constraints\n-    - asserts: parse plug-names/slot-names constraints\n-    - daemon: make users result more consistent\n-    - cmd/snap-confine,tests: support x.y.z nvidia version\n-    - dirs: fixlet for XdgRuntimeDirGlob\n-    - boot: add bootloader options to coreKernel\n-    - o/auth,daemon: do not remove unknown user\n-    - tests: tweak and enable tests on ubuntu 20.04\n-    - daemon: implement user removal\n-    - cmd/snap-confine: allow snap-confine to link to libpcre2\n-    - interfaces/builtin: Allow NotificationReplied signal on\n-      org.freedesktop.Notifications\n-    - overlord/auth: add RemoveUserByName\n-    - client: move user-related things to their own files\n-    - boot: tweak kernel cmdline helper docstring\n-    - osutil: implement deluser\n-    - gadget: skip update when raw structure content is unchanged\n-    - boot, cmd/snap, cmd/snap-bootstrap: move run mode and system label\n-      detection to boot\n-    - tests: fix revisions leaking from snapd-refresh test\n-    - daemon: refactor create-user to a user action & hide behind a flag\n-    - osutil/tests: check there are no leftover symlinks with\n-      AtomicSymlink\n-    - grub: support atomically renaming kernel symlinks\n-    - osutil: add helpers for creating symlinks and renaming in an\n-      atomic manner\n-    - tests: add marker tag for core 20 test failure\n-    - tests: fix gadget-update-pc test leaking snaps\n-    - tests: remove revision leaking from ubuntu-core-refresh\n-    - tests: remove revision leaking from remodel-kernel\n-    - tests: disable system-usernames test on core20\n-    - travis, tests, run-checks: skip nakedret\n-    - tests: run `uc20-snap-recovery-encrypt` test on 20.04-64 as well\n-    - tests: update mount-ns test tables\n-    - snap: disable auto-import in uc20 install-mode\n-    - tests: add a command-chain service test\n-    - tests: use test-snapd-upower instead of upower\n-    - data/selinux: workaround incorrect fonts cache labeling on RHEL7\n-    - spread.yaml: fix ubuntu 19.10 and 20.04 names\n-    - debian: check embedded keys for snap-{bootstrap,preseed} too\n-    - interfaces/apparmor: fix doc-comments, unnecessary code\n-    - o/ifacestate,o/devicestatate: merge gadget-connect logic into\n-      auto-connect\n-    - bootloader: add ExtractedRunKernelImageBootloader interface,\n-      implement in grub\n-    - tests: add spread test for hook permissions\n-    - cmd/snap-bootstrap: check device size before boostrapping and\n-      produce a meaningful error\n-    - cmd/snap: add ability to register \"snap routine\" commands\n-    - tests: add a test demonstrating that snaps can't access the\n-      session agent socket\n-    - api: don't return connections referring to non-existing\n-      plugs/slots\n-    - interfaces: refactor path() from raw-volume into utils with\n-      comments for old\n-    - gitignore: ignore snap files\n-    - tests: skip interfaces-network-manager on arm devices\n-    - o/devicestate: do not create perfTimings if not needed inside\n-      ensureSeed/Operational\n-    - tests: add ubuntu 20.04 to the tests execution and remove\n-      tumbleweed from unstable\n-    - usersession: add systemd user instance service control to user\n-      session agent\n-    - cmd/snap: print full channel in 'snap list', 'snap info'\n-    - tests: remove execution of ubuntu 19.04 from google backend\n-    - cmd/snap-boostrap: add mocking for fakeroot\n-    - tests/core18/snapd-failover: collect more debug info\n-    - many: run black formatter on all python files\n-    - overlord: increase settle timeout for slow machines\n-    - httputil: use shorter timeout in TestRetryRequestTimeoutHandling\n-    - store, o/snapstate: send default-tracks header, use\n-      RedirectChannel\n-    - overlord/standby: fix possible deadlock in standby test\n-    - cmd/snap-discard-ns: fix pattern for .info files\n-    - boot: add HasModeenv to Device\n-    - devicestate: do not allow remodel between core20 models\n-    - bootloader,snap: misc tweaks\n-    - store, overlord/snapstate, etc: SnapAction now returns a []\u2026Result\n-    - snap-bootstrap: create encrypted partition\n-    - snap: remove \"host\" output from `snap version`\n-    - tests: use snap remove --purge flag in most of the spread tests\n-    - data/selinux, test/main/selinux-clean: update the test to cover\n-      more scenarios\n-    - many: drop NameAndRevision, use snap.PlaceInfo instead\n-    - boot: split MakeBootable tests into their own file\n-    - travis-ci: add go import path\n-    - boot: split MakeBootable implementations into their own file\n-    - tests: enable a lot of the tests of main on uc20\n-    - packaging, tests: stop services in prerm\n-    - tests: enable regression suite on core20\n-    - overlord/snapstate: improve snapd snap backend link unit tests\n-    - boot: implement SetNextBoot in terms of bootState.setNext\n-    - wrappers: write and undo snapd services on core\n-    - boot,o/devicestate: refactor MarkBootSuccessful over bootState\n-    - snap-bootstrap: mount the correct snapd snap to /run/mnt/snapd\n-    - snap-bootstrap: refactor partition creation\n-    - tests: use new snapd.spread-tests-run-mode-tweaks.service unit\n-    - tests: add core20 tests\n-    - boot,o/snapstate: SetNextBoot/LinkSnap return whether to reboot,\n-      use the information\n-    - tests/main/snap-sign: add test for non-stdin signing\n-    - snap-bootstrap: trigger udev after filesystem creation\n-    - boot,overlord: introduce internal abstraction bootState and use it\n-      for InUse/GetCurrentBoot\n-    - overlord/snapstate: tracks are now sticky\n-    - cmd: sign: add filename param\n-    - tests: remove \"test-snapd-tools\" in smoke/sandbox on restore\n-    - cmd/snap, daemon: stop over-normalising channels\n-    - tests: fix classic-ubuntu-core-transition-two-cores after refactor\n-      of MATCH -v\n-    - packaging: ship var/lib/snapd/desktop/applications in the pkg\n-    - spread: drop copr repo with F30 build dependencies\n-    - tests: use test-snapd-sh snap instead of test-snapd-tools - Part 3\n-    - tests: fix partition creation test\n-    - tests: unify/rename services-related spread tests to start with\n-      services- prefix\n-    - test: extract code that modifies \"writable\" for test prep\n-    - systemd: handle preseed mode\n-    - snap-bootstrap: read only stdout when parsing the sfdisk json\n-    - interfaces/browser-support: add more product/vendor paths\n-    - boot: write compat UC16 bootvars in makeBootable20RunMode\n-    - devicestate: avoid adding mockModel to deviceMgrInstallModeSuite\n-    - devicestate: request reboot after successful doSetupRunSystem()\n-    - snapd.core-fixup.sh: do not run on UC20 at all\n-    - tests: unmount automounted snap-bootstrap devices\n-    - devicestate: run boot.MakeBootable in doSetupRunSystem\n-    - boot: copy kernel/base to data partition in makeBootable20RunMode\n-    - tests: also check nested lxd container\n-    - run-checks: complain about MATCH -v\n-    - boot: always return the trivial boot participant in ephemeral mode\n-    - o/devicestate,o/snapstate: move the gadget.yaml checkdrive-by: use\n-      gadget.ReadInfoFromSnapFile in checkGadgetRemodelCompatible\n-    - snap-bootstrap: append new partitions\n-    - snap-bootstrap: mount filesystems after creation\n-    - snapstate: do not try to detect rollback in ephemeral modes\n-    - snap-bootstrap: trigger udev for new partitions\n-    - cmd/snap-bootstrap: xxx todos about kernel cross-checks\n-    - tests: avoid mask rsyslog service in case is not enabled on the\n-      system\n-    - tests: fix use of MATCH -v\n-    - cmd/snap-preseed: update help strings\n-    - cmd/snap-bootstrap: actually parse snapd_recovery_system label\n-    - bootstrap: reduce runmode mounts from 5 to 2 steps.\n-    - lkenv.go: adjust for new location of include file\n-    - snap: improve squashfs.ReadFile() error\n-    - systemd: fix uc20 shutdown\n-    - boot: write modeenv when creating the run mode\n-    - boot,image: add skeleton boot.makeBootable20RunMode\n-    - cmd/snap-preseed: add snap-preseed executable\n-    - overlord,boot: follow ups to #7889 and #7899\n-    - interfaces/wayland: Add access to Xwayland's shm files\n-    - o/hookstate/ctlcmd: fix command name in snapctl -h\n-    - daemon,snap: remove screenshot deprecation notice\n-    - overlord,o/snapstate: make sure we never leave config behind\n-    - many: pass consistently boot.Device state to boot methods\n-    - run-checks: check multiline string blocks in\n-      restore/prepare/execute sections of spread tests\n-    - intrefaces: login-session-control - added missing dbus commands\n-    - tests/main/parallel-install-remove-after: parallel installs should\n-      not break removal\n-    - overlord/snapstate: tweak assumes error hint\n-    - overlord: replace DeviceContext.OldModel with GroundContext\n-    - devicestate: use httputil.ShouldRetryError() in\n-      prepareSerialRequest\n-    - tests: replace \"test-snapd-base-bare\" with real \"bare\" base snap\n-    - many: pass a Model to the gadget info reading functions\n-    - snapstate: relax gadget constraints in ConfigDefaults Et al.\n-    - devicestate: only run ensureBootOk() in \"run\" mode\n-    - tests/many: quiet lxc launching, file pushing\n-    - tests: disable apt-hooks test until it can be properly fixed\n-    - tests: 16.04 and 18.04 now have mediating pulseaudio\n-\n- -- Michael Vogt   Tue, 17 Mar 2020 20:55:47 +0100\n-\n-snapd (2.43.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1856159\n-    - interfaces/opengl: allow datagrams to nvidia-driver\n-    - httputil: add NoNetwork(err) helper, spread test and use\n-      in serial acquire\n-    - interfaces: add uio interface\n-    - interfaces/greengrass-support: 'aws-iot-greengrass' snap fails to\n-      start due to apparmor deny on mounting of \"/proc/latency_stats\".\n-    - data, packaging: Add sudoers snippet to allow snaps to be run with\n-      sudo\n-\n- -- Michael Vogt   Wed, 12 Feb 2020 14:59:15 +0100\n-\n-snapd (2.43.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1856159\n-    - cmd/snap-confine: Revert #7421 (unmount /writable from snap view)\n-    - overlord/snapstate: fix for re-refresh bug\n-    - tests, run-checks, many: fix nakedret issues\n-    - data/selinux: workaround incorrect fonts cache labeling on RHEL7\n-    - tests: use test-snapd-upower instead of upower\n-    - overlord: increase overall settle timeout for slow arm boards\n-\n- -- Michael Vogt   Tue, 28 Jan 2020 15:50:25 +0100\n-\n-snapd (2.43.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1856159\n-    - devicestate: use httputil.ShouldRetryError() in prepareSerialRequest\n-    - overlord/standby: fix possible deadlock in standby test\n-    - cmd/snap-discard-ns: fix pattern for .info files\n-    - overlord,o/snapstate: make sure we never leave config behind\n-    - data/selinux: update policy to cover more cases\n-    - snap: remove \"host\" output from `snap version`\n-\n- -- Michael Vogt   Tue, 14 Jan 2020 20:30:07 +0100\n-\n-snapd (2.43) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1856159\n-    - snap: default to \"--direct\" in `snap known`\n-    - packaging: ship var/lib/snapd/desktop/applications in the\n-      pkg\n-    - tests: cherry-pick fixes for  snap-set-core-config/ubuntu-core-\n-      config-defaults-once\n-    - tests: use test-snapd-sh snap instead of test-snapd-tools\n-    - tests: rename \"test-snapd-sh\" in smoke test to test-snapd-sandbox\n-    - tests: fix partition creation test\n-    - packaging: fix incorrect changelog entry\n-    - Revert \"tests: 16.04 and 18.04 now have mediating pulseaudio\"\n-    - tests: 16.04 and 18.04 now have mediating pulseaudio\n-    - interfaces: include hooks in plug/slot apparmor label\n-    - interfaces: add raw-volume interface for access to partitions\n-    - image: set recovery system label when creating the image\n-    - cmd/snapd-generator: fix unit name for non /snap mount locations\n-    - boot,bootloader: setup the snap recovery system bootenv\n-    - seed: support ModeSnaps(mode) for mode != \"run\"\n-    - seed: fix seed location of local but asserted snaps\n-    - doc: HACKING.md change autopkgtest-trusty-amd64.img name\n-    - interfaces/seccomp: parallelize seccomp backend setup\n-    - cmd/snap-bootstrap: mount ubuntu-data tmpfs, in one go with kernel\n-      & base\n-    - interfaces: add audio-playback/record and pulseaudio spread tests\n-    - apparmor: allow 'r'\n-      /sys/kernel/mm/transparent_hugepage/hpage_pmd_size\n-    - cmd/snap-mgmt, packaging/postrm: stop and remove socket units when\n-      purging\n-    - tests: use test-snapd-sh snap instead of test-snapd-tools\n-    - snap-confine: raise egid before calling setup_private_mount()\n-    - tests: fix fwupd version regular expression\n-    - snap-bootstrap: parse seed if either kernel or base are not\n-      mounted\n-    - tests: check for SELinux denials in interfaces-kvm spread test\n-    - tests: run snap-set-core-config on all core devices\n-    - selinux: update policy to allow modifications related to kmod\n-      backend\n-    - o/hookstate/ctlcmd: snapctl is-connected command\n-    - devicestate: add missing test for failing task setup-run-system\n-    - gadget: add missing test for duplicate detection of roles\n-    - tests/cmd/snapctl: unset SNAP_CONTEXT for the suite\n-    - snap/pack, cmd_pack: 'snap pack --check-skeleton' checks\n-      interfaces\n-    - gitignore: ignore visual studio code directory\n-    - snap-bootstrap: implement \"run\" mode in snap-bootstrap initramfs-\n-      mounts\n-    - interfaces/apparmor: handle pre-seeding mode\n-    - devicestate: implement creating partitions in \"install\" mode\n-    - seed: support extra snaps on top of Core 20 dangerous models\n-    - tests: cache snaps also for ubuntu core and add new snaps to cache\n-    - snap-bootstrap: support auto-detect device in create-partitions\n-    - tests: fix partitioning test debug message\n-    - tests: prevent partitioning test errors\n-    - cmd/snap-bootstrap: stub out snap.SanitizePlugsSlots for real\n-    - gadget: extract and export new DiskFromPartition() helper\n-    - snap-bootstrap: force partition table operations\n-    - HACKING.md: add nvidia options to configure example\n-    - tests: move the watchdog timeout to 2s to make the tests work in\n-      rpi\n-    - tests: demand silence from check_journalctl_log\n-    - tests: fix the channels checks done on nested tests\n-    - tests: reduce the complexity of the test-snapd-sh snap\n-    - snap/squashfs, osutil: verify files/dirs can be accessed by\n-      mksquashfs when building a snap\n-    - boot: add boot.Modeenv.Kernel support\n-    - devicestate: ensure system installation\n-    - tests: apply change on permissions to serial port on hotplug test\n-    - cmd/snap-update-ns: adjust debugging output for usability\n-    - devicestate: add reading of modeenv to uc20 firstboot code\n-    - tests/lib/prepare: drop workarounds for rpmbuild rewriting /bin/sh\n-    - cmd/snap-bootstrap: write /var/lib/snapd/modeenv to the right\n-      place\n-    - boot: add boot.Modeenv.Base support\n-    - overlord/snapstate: install task edges\n-    - cmd/snap-bootstrap: some small naming and code org tweaks\n-    - snap-bootstrap: remove SNAPPY_TESTING check, we use it for real\n-      now\n-    - interfaces: remove leftover reservedForOS\n-    - snap-bootstrap: write /run/mnt/ubuntu-data/var/lib/snapd/modeenv\n-    - osutil/mount: optimize flagOptSearch some more\n-    - devicestate: read modeenv early and store in devicestate\n-    - interfaces: add login-session-observe for who, {fail,last}log and\n-      loginctl\n-    - tests: add Ubuntu Eoan to google-sru backend\n-    - osutil/mount: de-duplicate code to use a list\n-    - interfaces: remove reservedForOS from commonInterface\n-    - interfaces/browser-support: allow reading status of huge pages\n-    - interfaces: update system-backup tests to not check for sanitize\n-      errors related to os\n-    - interfaces: add system-backup interface\n-    - osutil/mount: add {Unm,M}outFlagsToOpts helpers\n-    - snap-bootstrap: make cmdline parsing robust\n-    - overlord/patch: normalize tracking channel in state\n-    - boot: add boot.Modeenv that can read/write the UC20 modeenv files\n-    - bootloader: add new bootloader.InstallBootConfig()\n-    - many: share single implementation to list needed default-providers\n-    - snap-bootstrap: implement \"snap-bootstrap initramfs-mounts\"\n-    - seccomp: allow chown 'snap_daemon:root' and 'root:snap_daemon'\n-    - osutil: handle \"rw\" mount flag in ParseMountEntry\n-    - overlord/ifacestate: report bad plug/slots with warnings on snap\n-      install\n-    - po: sync translations from launchpad\n-    - tests: cleanup most test snaps icons, they were anyway in the\n-      wrong place\n-    - seed: fix confusing pre snapd dates in tests\n-    - many: make ValidateBasesAndProviders signature simpler/canonical\n-    - snap-bootstrap: set expected filesystem labels\n-    - testutil, many: make MockCommand() create prefix of absolute paths\n-    - tests: improve TestDoPrereqRetryWhenBaseInFlight to fix occasional\n-      flakiness.\n-    - seed: proper support for optional snaps for Core 20 models\n-    - many: test various kinds of overriding for the snapd snap in Core\n-      20\n-    - cmd/snap-failure: passthrough snapd logs, add informational\n-      logging\n-    - cmd/snap-failure: fallback to snapd from core, extend tests\n-    - configcore: fix missing error propagation\n-    - devicestate: rename ensureSeedYaml -> ensureSeeded\n-    - tests: adding fedora 31\n-    - tests: restart the snapd service in the snapd-failover test\n-    - seed: Core 20 seeds channel overrides support for grade dangerous\n-    - cmd: fix the get command help message\n-    - tests: enable degraded test on arch linux after latest image\n-      updates\n-    - overlord/snapstate: don't re-enable and start disabled services on\n-      refresh, etc.\n-    - seed: support in Core 20 seeds local unasserted snaps for model\n-      snaps\n-    - snap-bootstrap: add go-flags cmdline parsing and tests\n-    - gadget: skip fakeroot if not needed\n-    - overlord/state: panic in MarkEdge() if task is nil\n-    - spread: fix typo in spread suite\n-    - overlord: mock device serial in gadget remodel unit tests\n-    - tests: fix spread shellcheck and degraded tests to unbreak master\n-    - spread, tests: openSUSE Tumbleweed to unstable systems, update\n-      system-usernames on Amazon Linux 2\n-    - snap: extract printInstallHint in cmd_download.go\n-    - cmd: fix a pair of typos\n-    - release: preseed mode flag\n-    - cmd/snap-confine: tracking processes with classic confinement\n-    - overlord/ifacestate: remove automatic connections if plug/slot\n-      missing\n-    - o/ifacestate,interfaces,interfaces/policy: slots-per-plug: *\n-    - tests/lib/state: snapshot and restore /var/snap during the tests\n-    - overlord: add base->base remodel undo tests and fixes\n-    - seed: test and improve Core 20 seed handling errors\n-    - asserts: add \"snapd\" type to valid types in the model assertion\n-    - snap-bootstrap: check gadget versus disk partitions\n-    - devicestate: add support for gadget->gadget remodel\n-    - snap/snapenv: preserve XDG_RUNTIME_DIR for classic confinement\n-    - daemon: parse and reject invalid channels in snap ops\n-    - overlord: add kernel remodel undo tests and fix undo\n-    - cmd/snap: support (but warn) using deprecated multi-slash channel\n-    - overlord: refactor mgrsSuite and extract kernelSuite\n-    - tests/docker-smoke: add minimal docker smoke test\n-    - interfaces: extend the fwupd slot to be implicit on classic\n-    - cmd/snap: make 'snap list' shorten latest/$RISK to $RISK\n-    - tests: fix for journalctl which is failing to restart\n-    - cmd/snap,image: initial support for Core 20 in prepare-image with\n-      test\n-    - cmd/snap-confine: add support for parallel instances of classic\n-      snaps, global mount ns initialization\n-    - overlord: add kernel rollback across reboots manager test and\n-      fixes\n-    - o/devicestate: the basics of Core 20 firstboot support with test\n-    - asserts: support and parsing for slots-per-plug/plugs-per-slotSee\n-      https://forum.snapcraft.io/t/plug-slot-declaration-rules-greedy-\n-      plugs/12438\n-    - parts/plugins: don't xz-compress a deb we're going to discard\n-    - cmd/snap: make completion skip hidden commands (unless overridden)\n-    - many: load/consume Core 20 seeds (aka recovery systems)\n-    - tests: add netplan test on ubuntu core\n-    - seed/internal: doc comment fix and drop handled TODOs\n-    - o/ifacestate: unify code into\n-      autoConnectChecker.addAutoConnectionsneed to change to support\n-      slots-per-plugs: *\n-    - many: changes to testing in preparation of Core 20 seed consuming\n-      code\n-    - snapstate,devicestate: make OldModel() available in DeviceContext\n-    - tests: opensuse tumbleweed has similar issue than arch linux with\n-      snap --strace\n-    - client,daemon: pass sha3-384 in /v2/download to the client\n-    - builtin/browser_support.go: allow monitoring process memory\n-      utilization (used by chromium)\n-    - overlord/ifacestate: use SetupMany in setupSecurityByBackend\n-    - tests: add 14.04 canonical-livepatch test\n-    - snap: make `snap known --remote` use snapd if available\n-    - seed: share auxInfo20 and makeSystemSnap via internal\n-    - spread: disable secondary compression for deltas\n-    - interfaces/content: workaround for renamed target\n-    - tests/lib/gendevmodel: helper tool for generating developer model\n-      assertions\n-    - tests: tweak wording in mount-ns test\n-    - tests: don't depend on GNU time\n-    - o/snapstate, etc: SnapState.Channel -> TrackingChannel, and a\n-      setter\n-    - seed/seedwriter: support writing Core 20 seeds (aka recovery\n-      systems)\n-    - snap-recovery: rename to \"snap-bootstrap\"\n-    - managers: add remodel undo test for new required snaps case\n-    - client: add xerrors and wrap errors coming from \"client\"\n-    - tests: verify host is not affected by mount-ns tests\n-    - tests: configure the journald service for core systems\n-    - cmd/snap, store: include snapcraft.io page URL in snap info output\n-    - cmd/cmdutil: version helper\n-    - spread: enable bboozzoo/snapd-devel-deps COPR repo for getting\n-      golang-x-xerrors\n-    - interfaces: simplify AddUpdateNS and emit\n-    - interfaces/policy: expand cstrs/cstrs1 to\n-      altConstraints/constraints\n-    - overlord/devicestate: check snap handler for gadget remodel\n-      compatibility\n-    - snap-recovery: deploy gadget content when creating partitions\n-    - gadget: skip structures with MBR role during remodel\n-    - tests: do not use lsblk in uc20-snap-recovery test\n-    - overlord/snapstate: add LastActiveDisabledServices,\n-      missingDisabledServices\n-    - overlord/devicestate: refactor and split into per-functionality\n-      files, drop dead code\n-    - tests: update mount-ns after addition of /etc/systemd/user\n-    - interfaces/pulseaudio: adjust to manually connect by default\n-    - interfaces/u2f-devices: add OnlyKey to devices list\n-    - interfaces: emit update-ns snippets to function\n-    - interfaces/net-setup-{observe,control}: add Info D-Bus method\n-      accesses\n-    - tests: moving ubuntu-19.10-64 from google-unstable to google\n-      backend\n-    - gadget: rename existing and add new helpers for checking\n-      filesystem/partition presence\n-    - gadget, overlord/devicestate: add support for customized update\n-      policy, add remodel policy\n-    - snap-recovery: create filesystems as defined in the gadget\n-    - tests: ignore directories for go modules\n-    - policy: implement CanRemove policy for the snapd type\n-    - overlord/snapstate: skip catalog refresh if unseeded\n-    - strutil: add OrderedSet\n-    - snap-recovery: add minimal binary so that we can use spread on it\n-    - gadget, snap/pack: perform extended validation of gadget metadata\n-      and contents\n-    - timeutil: fix schedules with ambiguous nth weekday spans\n-    - interfaces/many: allow k8s/systemd-run to mount volume subPaths\n-      plus cleanups\n-    - client: add KnownOptions to Know() and support remote assertions\n-    - tests: check the apparmor_parser when the file exists on snap-\n-      confine test\n-    - gadget: helper for volume compatibility checks\n-    - tests: update snap logs to match for multiple lines for \"running\"\n-    - overlord: add checks for bootvars in\n-      TestRemodelSwitchToDifferentKernel\n-    - snap-install: add ext4,vfat creation support\n-    - snap-recovery: remove \"usedPartitions\" from sfdisk.Create()\n-    - image,seed: hide Seed16/Snap16, use seed.Open in image_test.go\n-    - cmd/snap: Sort tasks in snap debug timings output by lanes and\n-      ready-time.\n-    - snap-confine.apparmor.in: harden pivot_root until we have full\n-      mediation\n-    - gadget: refactor ensureVolumeConsistency\n-    - gadget: add a public helper for parsing gadget metadata\n-    - many: address issues related to explicit/implicit channels for\n-      image building\n-    - overlord/many: switch order of check snap parameters\n-    - cmd/snap-confine: remove leftover condition from capability world\n-    - overlord: set fake serial in TestRemodelSwitchToDifferentKernel\n-    - overlord/many: extend check snap callback to take snap container\n-    - recovery-tool: add sfdisk wrapper\n-    - tests: launch the lxd images following the pattern\n-      ubuntu:${VERSION_ID}\n-    - sandbox/cgroup: move freeze/thaw code\n-    - gadget: accept system-seed role and ubuntu-data label\n-    - test/lib/names.sh: make backslash escaping explicit\n-    - spread: generate delta when using google backend\n-    - cmd/snap-confine: remove loads of dead code\n-    - boot,dirs,image: various refinements in the prepare-image code\n-      switched to seedwriter\n-    - spread: include mounts list in task debug output\n-    - .gitignore: pair of trivial changes\n-    - image,seed/seedwriter: switch image to use seedwriter.Writer\n-    - asserts: introduce explicit support for grade for Core 20 models\n-    - usersession: drive by fixes for things flagged by unused or\n-      gosimple\n-    - spread.yaml: exclude vendor dir\n-    - sandbox/cgroup, overlord/snapstate: move helper for listing pids\n-      in group to the cgroup package\n-    - sandbox/cgroup: refactor process cgroup helper to support v2 and\n-      named hierarchies\n-    - snap-repair: error if run as non-root\n-    - snap: when running `snap repair` without arguments, show hint\n-    - interfaces: add cgroup-version to system-key\n-    - snap-repair: add missing check in TestRepairBasicRun\n-    - tests: use `snap model` instead of `snap known model` in tests\n-    - daemon: make /v2/download take snapRevisionOptions\n-    - snap-repair: add additional comment about trust in runner.Verify()\n-    - client: add support to use the new \"download\" API\n-    - interfaces: bump system-key version (and keep on bumping)\n-    - interfaces/mount: account for cgroup version when reporting\n-      supported features\n-    - tests: change regex to validate access to cdn during snap\n-      download\n-    - daemon: change /v2/download API to take \"snap-name\" as input\n-    - release: make forced dev mode look at cgroupv2 support\n-    - seed/seedwriter: support for extra snaps\n-    - wrappers/services.go: add disabled svc list arg to AddSnapServices\n-    - overlord/snapstate: add SetTaskSnapSetup helper + unit tests\n-    - cmd/libsnap: use cgroup.procs instead of tasks\n-    - tests: fix snapd-failover test for core18 tests on boards\n-    - overlord/snapstate/policy, etc: introduce policy, move canRemove\n-      to it\n-    - seed/seedwriter: cleanups and small left over todos* drive-by: use\n-      testutil.FilePresent consistently\n-    - cmd/snap: update 'snap find' help because it's no longer narrow\n-    - seed/seedwriter,snap/naming: support classic models\n-    - cmd/snap-confine: unmount /writable from snap view\n-    - spread.yaml: exclude automake cacheThe error message is looks like\n-      this:dpkg-source: info: local changes detected, the modified files\n-      are:\n-    - interfaces/openvswitch: allow access to other openvswitch sockets\n-    - cmd/model: don't show model with display-name inline w/ opts\n-    - daemon: add a 'prune' debug action\n-    - client: add doTimeout to http.Client{Timeout}\n-    - interfaces/seccomp: query apparmor sandbox helper rather than\n-      aggregate info\n-    - sandbox/cgroup: avoid dependency on dirs\n-    - seed/seedwriter,snap: support local snaps\n-    - overlord/snapstate: fix undo on firstboot seeding.\n-    - usersession: track connections to session agent for exit on idle\n-      and peer credential checks\n-    - tests: fix ubuntu-core-device-reg test for arm devices on core18\n-    - sandbox/seccomp: move the remaining sandbox bits to a\n-      corresponding sandbox package\n-    - osutil: generalize SyncDir with FileState interface\n-    - daemon, client, cmd/snap: include architecture in 'snap version'\n-    - daemon: allow /v2/assertions/{assertType} to query store\n-    - gadget: do not fail the update when old gadget snap is missing\n-      bare content\n-    - sandbox/selinux: move SELinux related bits from 'release' to\n-      'sandbox/selinux'\n-    - tests: add unit test for gadget defaults with a multiline string\n-    - overlord/snapstate: have more context in the errors about\n-      prerequisites\n-    - httputil: set user agent for CONNECT\n-    - seed/seedwriter: resolve channels using channel.Resolve* for snaps\n-    - run-checks: allow overriding gofmt binary, show gofmt diff\n-    - asserts,seed/seedwriter: follow snap type sorting in the model\n-      assertion snap listings\n-    - daemon: return \"snapname_rev.snap\" style when using /v2/download\n-    - tests: when the backend is external skip the loop waiting for snap\n-      version\n-    - many: move AppArmor probing code under sandbox/apparmor\n-    - cmd: add `snap debug boot-vars` that dumps the current bootvars\n-    - tests: skip the ubuntu-core-upgrade on arm devices on core18\n-    - seed/seedwriter: implement WriteMeta and tree16 corresponding code\n-    - interfaces/docker-support,kubernetes-support: misc updates for\n-      strict k8s\n-    - tests: restart the journald service while preparing the test\n-    - tests/cmd/debug_state: make the test output TZ independent\n-    - interfaces/kubernetes-support: allow use of /run/flannel\n-    - seed/seedwriter: start of Writer and internal policy16/tree16\n-    - sandbox/cgroup, usersession/userd: move cgroup related helper to a\n-      dedicated package\n-    - tests: move \"centos-7\" to unstable systems\n-    - snapstate: add missing tests for checkGadgetOrKernel\n-    - docs: Update README.md\n-    - snapcraft: set license to GPL-3.0\n-    - interfaces/wayland: allow a confined server running in a user\n-      session to work with Qt, GTK3 & SDL2 clients\n-    - selinux: move the package under sandbox/selinux\n-    - interfaces/udev: account for cgroup version when reporting\n-      supported features\n-    - store, ..., client: add a \"website\" field\n-    - sanity: sanity check cgroup probing\n-    - snapstate: increase settleTimeout in\n-      TestRemodelSwitchToDifferentKernel\n-    - packaging: remove obsolete usr.lib.snapd.snap-confine in postinst\n-    - data/selinux: allow snapd/snap to do statfs() on the cgroup\n-      mountpoint\n-    - usersession/userd: make sure to export DBus interfaces before\n-      requesting a name\n-    - data/selinux: allow snapd to issue sigkill to journalctl\n-    - docs: Add Code of Conduct\n-    - store: download propagates options to delta download\n-    - tests/main/listing: account for dots in ~pre suffix\n-\n- -- Michael Vogt   Thu, 09 Jan 2020 17:14:51 +0100\n-\n-snapd (2.42.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1853244\n-    - snap-confine: revert, with comment, explicit unix deny for nested\n-      lxd\n-    - Disable mount-ns test on 16.04. It is too flaky currently.\n-\n- -- Michael Vogt   Fri, 06 Dec 2019 14:10:56 +0100\n-\n-snapd (2.42.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1853244\n-    - overlord/snapstate: make sure configuration defaults are applied\n-      only once\n-\n- -- Michael Vogt   Thu, 28 Nov 2019 06:48:26 +0100\n-\n-snapd (2.42.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1853244\n-    - overlord/snapstate: pick up system defaults when seeding the snapd\n-      snap\n-    - cmd/snap-update-ns: fix overlapping, nested writable mimic\n-      handling\n-    - interfaces: misc updates for u2f-devices, browser-support,\n-      hardware-observe, et al\n-    - tests: reset failing \"fwupd-refresh.service\" if needed\n-    - tests/main/gadget-update-pc: use a program to modify gadget yaml\n-    - snap-confine: suppress noisy classic snap file_inherit denials\n-\n- -- Michael Vogt   Wed, 27 Nov 2019 12:41:07 +0100\n-\n-snapd (2.42.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1853244\n-    - interfaces/lxd-support: Fix on core18\n-    - tests/main/system-usernames: Amazon Linux 2 comes with libseccomp\n-      2.4.1 now\n-    - snap-seccomp: add missing clock_getres_time64\n-    - cmd/snap-seccomp/syscalls: update the list of known\n-      syscalls\n-    - sandbox/seccomp: accept build ID generated by Go toolchain\n-    - interfaces: allow access to ovs bridge sockets\n-\n- -- Michael Vogt   Wed, 20 Nov 2019 08:09:15 +0100\n-\n-snapd (2.42.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1846181\n-    - interfaces: de-duplicate emitted update-ns profiles\n-    - packaging: tweak handling of usr.lib.snapd.snap-confine\n-    - interfaces: allow introspecting network-manager on core\n-    - tests/main/interfaces-contacts-service: disable on openSUSE\n-      Tumbleweed\n-    - tests/lib/lxd-snapfuse: restore mount changes introduced by LXD\n-    - snap: fix default-provider in seed validation\n-    - tests: update system-usernames test now that opensuse-15.1 works\n-    - overlord: set fake sertial in TestRemodelSwitchToDifferentKernel\n-    - gadget: rename \"boot{select,img}\" -> system-boot-{select,image}\n-    - tests: listing test, make accepted snapd/core versions consistent\n-\n- -- Michael Vogt   Wed, 30 Oct 2019 13:17:43 +0100\n-\n-snapd (2.42) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1846181\n-    - tests: disable {contacts,calendar}-service tests on debian-sid\n-    - tests/main/snap-run: disable strace test cases on Arch\n-    - cmd/system-shutdown: include correct prototype for die\n-    - snap/naming: add test for hook name connect-plug-i2c\n-    - cmd/snap-confine: allow digits in hook names\n-    - gadget: do not fail the update when old gadget snap is missing\n-      bare content\n-    - tests: disable {contacts,calendar}-service tests on Arch Linux\n-    - tests: move \"centos-7\" to unstable systems\n-    - interfaces/docker-support,kubernetes-support: misc updates for\n-      strict k8s\n-    - packaging: remove obsolete usr.lib.snapd.snap-confine in\n-      postinst\n-    - tests: add test that ensures our snapfuse binary actually works\n-    - packaging: use snapfuse_ll to speed up snapfuse performance\n-    - usersession/userd: make sure to export DBus interfaces before\n-      requesting a name\n-    - data/selinux: allow snapd to issue sigkill to journalctl\n-    - store: download propagates options to delta download\n-    - wrappers: allow snaps to install icon theme icons\n-    - debug: state-inspect debugging utility\n-    - sandbox/cgroup: introduce cgroup wrappers package\n-    - snap-confine: fix return value checks for udev functions\n-    - cmd/model: output tweaks, add'l tests\n-    - wrappers/services: add ServicesEnableState + unit tests\n-    - tests: fix newline and wrong test name pointed out in previous PRs\n-    - tests: extend mount-ns test to handle mimics\n-    - run-checks, tests/main/go: allow gofmt checks to be skipped on\n-      19.10\n-    - tests/main/interfaces-{calendar,contacts}-service: disable on\n-      19.10\n-    - tests: part3 making tests work on ubuntu-core-18\n-    - tests: fix interfaces-timeserver-control on 19.10\n-    - overlord/snapstate: config revision code cleanup and extra tests\n-    - devicestate: allow remodel to different kernels\n-    - overlord,daemon: adjust startup timeout via EXTEND_TIMEOUT_USEC\n-      using an estimate\n-    - tests/main/many: increase kill-timeout to 5m\n-    - interfaces/kubernetes-support: allow systemd-run to ptrace read\n-      unconfined\n-    - snapstate: auto transition on experimental.snapd-snap=true\n-    - tests: retry checking until the written file on desktop-portal-\n-      filechooser\n-    - tests: unit test for a refresh failing on configure hook\n-    - tests: remove mount_id and parent_id from mount-ns test data\n-    - tests: move classic-ubuntu-core-transition* to nightly\n-    - tests/mountinfo-tool: proper formatting of opt_fields\n-    - overlord/configstate: special-case \"null\" in transaction Changes()\n-    - snap-confine: fallback gracefully on a cgroup v2 only system\n-    - tests: debian sid now ships new seccomp, adjust tests\n-    - tests: explicitly restore after using LXD\n-    - snapstate: make progress reporting less granular\n-    - bootloader: little kernel support\n-    - fixme: rename ubuntu*architectures to dpkg*architectures\n-    - tests: run dbus-launch inside a systemd unit\n-    - channel: introduce Resolve and ResolveLocked\n-    - tests: run failing tests on ubuntu eoan due to is now set as\n-      unstable\n-    - systemd: detach rather than unmount .mount units\n-    - cmd/snap-confine: add unit tests for sc_invocation, cleanup memory\n-      leaks in tests\n-    - boot,dirs,image: introduce boot.MakeBootable, use it in image\n-      instead of ad hoc code\n-    - cmd/snap-update-ns: clarify sharing comment\n-    - tests/overlord/snapstate: refactor for cleaner test failures\n-    - cmd/snap-update-ns: don't propagate detaching changes\n-    - interfaces: allow reading mutter Xauthority file\n-    - cmd/snap-confine: fix /snap duplication in legacy mode\n-    - tests: fix mountinfo-tool filtering when used with rewriting\n-    - seed,image,o/devicestate: extract seed loading to seed/seed16.go\n-    - many: pass the rootdir and options to bootloader.Find\n-    - tests: part5 making tests work on ubuntu-core-18\n-    - cmd/snap-confine: keep track of snap instance name and the snap\n-      name\n-    - cmd: unify die() across C programs\n-    - tests: add functions to make an abstraction for the snaps\n-    - packaging/fedora, tests/lib/prepare-restore: helper tool for\n-      packing sources for RPM\n-    - cmd/snap: improve help and error msg for snapshot commands\n-    - hookstate/ctlcmd: fix snapctl set help message\n-    - cmd/snap: don't append / to snap name just because a dir exists\n-    - tests: support fastly-global.cdn.snapcraft.io url on proxy-no-core\n-      test\n-    - tests: add --quiet switch to retry-tool\n-    - tests: add unstable stage for travis execution\n-    - tests: disable interfaces-timeserver-control on 19.10\n-    - tests: don't guess in is_classic_confinement_supported\n-    - boot, etc: simplify BootParticipant (etc) usage\n-    - tests: verify retry-tool not retrying missing commands\n-    - tests: rewrite \"retry\" command as retry-tool\n-    - tests: move debug section after restore\n-    - cmd/libsnap-confine-private, cmd/s-c: use constants for\n-      snap/instance name lengths\n-    - tests: measure behavior of the device cgroup\n-    - boot, bootloader, o/devicestate: boot env manip goes in boot\n-    - tests: enabling ubuntu 19.10-64 on spread.yaml\n-    - tests: fix ephemeral mount table in left over by prepare\n-    - tests: add version-tool for comparing versions\n-    - cmd/libsnap: make feature flag enum 1<  Tue, 01 Oct 2019 11:24:41 +0200\n-\n-snapd (2.41) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1840740\n-    - overlord/snapstate: revert track-risk behavior\n-    - tests: fix snap info test\n-    - httputil: rework protocol error detection\n-    - gadget: do not error on gadget refreshes with multiple volumes\n-    - i18n, vendor, packaging: drop github.com/ojii/gettext.go, use\n-      github.com/snapcore/go-gettext\n-    - snapstate: validate all system-usernames before creating them\n-    - mkversion.sh: fix version from git checkouts\n-    - interfaces/network-{control,manager}: allow 'k' on\n-      /run/resolvconf/**\n-    - interfaces/wayland,x11: allow reading an Xwayland Xauth file\n-    - interfaces: k8s worker node updates\n-    - debian: re-enable systemd environment generator\n-    - many: create system-usernames user/group if both don't exist\n-    - packaging: fix symlink for snapd.session-agent.socket\n-    - tests: change cgroups so that LXD doesn't have to\n-    - interfaces/network-setup-control: allow dbus netplan apply\n-      messages\n-    - tests: add /var/cache/snapd to the snapd state to prevent error on\n-      the store\n-    - tests: add test for services disabled during refresh hook\n-    - many: simpler access to snap-seccomp version-info\n-    - snap: cleanup some tests, clarify some errorsThis is a follow up\n-      from work on system usernames:\n-    - osutil: add osutil.Find{Uid,Gid}\n-    - tests: use a different archive based on the spread backend on go-\n-      build test\n-    - cmd/snap-update-ns: fix pair of bugs affecting refresh of snap\n-      with layouts\n-    - overlord/devicestate: detect clashing concurrent (ongoing, just\n-      finished) remodels or changes\n-    - interfaces/docker-support: declare controls-device-cgroup\n-    - packaging: fix removal of old apparmor profile\n-    - store: use track/risk for \"channel\" name when parsing store\n-      details\n-    - many: allow 'system-usernames' with libseccomp > 2.4 and golang-\n-      seccomp > 0.9.0\n-    - overlord/devicestate, tests: use gadget.Update() proper, spread\n-      test\n-    - overlord/configstate/configcore: allow setting start_x=1 to enable\n-      CSI camera on RPi\n-    - interfaces: remove BeforePrepareSlot from commonInterface\n-    - many: support system-usernames for 'snap_daemon' user\n-    - overlord/devicestate,o/snapstate: queue service commands before\n-      mark-seeded and other final tasks\n-    - interfaces/mount: discard mount ns on backend Remove\n-    - packaging/fedora: build on RHEL8\n-    - overlord/devicestate: support seeding a classic system with the\n-      snapd snap and no core\n-    - interfaces: fix test failure in gpio_control_test\n-    - interfaces, policy: remove sanitize helpers and use minimal policy\n-      check\n-    - packaging: use %systemd_user_* macros to enable session agent\n-      socket according to presets\n-    - snapstate, store: handle 429s on catalog refresh a little bit\n-      better\n-    - tests: part4 making tests work on ubuntu-core-18\n-    - many: drop snap.ReadGadgetInfo wrapper\n-    - xdgopenproxy: update test API to match upstream\n-    - tests: show why sbuild failed\n-    - data/selinux: allow mandb_t to search /var/lib/snapd\n-    - tests: be less verbose when checking service status\n-    - tests: set sbuild test as manual\n-    - overlord: DeviceCtx must find the remodel context for a remodel\n-      change\n-    - tests: use snap info --verbose to check for base\n-    - sanity: unmount squashfs with --lazy\n-    - overlord/snapstate: keep current track if only risk is specified\n-    - interfaces/firewall-control: support nft routing expressions and\n-      device groups\n-    - gadget: support for writing symlinks\n-    - tests: mountinfo-tool fail if there are no matches\n-    - tests: sync journal log before start the test\n-    - cmd/snap, data/completion: improve completion for 'snap debug'\n-    - httputil: retry for http2 PROTOCOL_ERROR\n-    - Errata commit: pulseaudio still auto-connects on classic\n-    - interfaces/misc: updates for k8s 1.15 (and greengrass test)\n-    - tests: set GOTRACEBACK=1 when running tests\n-    - cmd/libsnap: don't leak memory in sc_die_on_error\n-    - tests: improve how the system is restored when the upgrade-\n-      from-2.15 test fails\n-    - interfaces/bluetooth-control: add udev rules for BT_chrdev devices\n-    - interfaces: add audio-playback/audio-record and make pulseaudio\n-      manually connect\n-    - tests: split the sbuild test in 2 depending on the type of build\n-    - interfaces: add an interface granting access to AppStream metadata\n-    - gadget: ensure filesystem labels are unique\n-    - usersession/agent: use background context when stopping the agent\n-    - HACKING.md: update spread section, other updates\n-    - data/selinux: allow snap-confine to read entries on nsfs\n-    - tests: respect SPREAD_DEBUG_EACH on the main suite\n-    - packaging/debian-sid: set GOCACHE to a known writable location\n-    - interfaces: add gpio-control interface\n-    - cmd/snap: use showDone helper with 'snap switch'\n-    - gadget: effective structure role fallback, extra tests\n-    - many: fix unit tests getting stuck\n-    - tests: remove installed snap on restore\n-    - daemon: do not modify test data in user suite\n-    - data/selinux: allow read on sysfs\n-    - packaging/debian: don't md5sum absent files\n-    - tests: remove test-snapd-curl\n-    - tests: remove test-snapd-snapctl-core18 in restore\n-    - tests: remove installed snap in the restore section\n-    - tests: remove installed test snap\n-    - tests: correctly escape mount unit path\n-    - cmd/Makefile.am: support building with the go snap\n-    - tests: work around classic snap affecting the host\n-    - tests: fix typo \"current\"\n-    - overlord/assertstate: add Batch.Precheck to check for the full\n-      validity of the batch before Commit\n-    - tests: restore cpuset clone_children clobbered by lxd\n-    - usersession: move userd package to usersession/userd\n-    - tests: reformat and fix markdown in snapd-state.md\n-    - gadget: select the right updater for given structure\n-    - tests: show stderr only if it exists\n-    - sessionagent: add a REST interface with socket activation\n-    - tests: remove locally installed core in more tests\n-    - tests: remove local revision of core\n-    - packaging/debian-sid: use correct apparmor Depends for Debian\n-    - packaging/debian-sid: merge debian upload changes back into master\n-    - cmd/snap-repair: make sure the goroutine doesn't stick around on\n-      timeout\n-    - packaging/fedora: github.com/cheggaaa/pb is no longer used\n-    - configstate/config: fix crash in purgeNulls\n-    - boot, o/snapst, o/devicest: limit knowledge of boot vars to boot\n-    - client,cmd/snap: stop depending on status/status-code in the JSON\n-      responses in client\n-    - tests: unmount leftover /run/netns\n-    - tests: switch mount-ns test to manual\n-    - overlord,daemon,cmd/snapd:  move expensive startup to dedicated\n-      StartUp methods\n-    - osutil: add EnsureTreeState helper\n-    - tests: measure properties of various  mount namespaces\n-    - tests: part2 making tests work on ubuntu-core-18\n-    - interfaces/policy: minimal policy check for replacing\n-      sanitizeReservedFor helpers (1/2)\n-    - interfaces: add an interface that grants access to the PackageKit\n-      service\n-    - overlord/devicestate: update gadget update handlers and mocks\n-    - tests: add mountinfo-tool --ref-x1000\n-    - tests: remove lxd / lxcfs if pre-installed\n-    - tests: removing support for ubuntu cosmic on spread test suite\n-    - tests: don't leak /run/netns mount\n-    - image: clean up the validateSuite\n-    - bootloader: remove \"Dir()\" from Bootloader interface\n-    - many: retry to reboot if snapd gets restarted before expected\n-      reboot\n-    - overlord: implement re-registration remodeling\n-    - cmd: revert PR#6933 (tweak of GOMAXPROCS)\n-    - cmd/snap: add snap unset command\n-    - many: add Client-User-Agent to \"SnapAction\" install API call\n-    - tests: first part making tests run on ubuntu-core-18\n-    - hookstate/ctlcmd: support hidden commands in snapctl\n-    - many: replace snapd snap name checks with type checks (3/4)\n-    - overlord: mostly stop needing Kernel/CoreInfo, make GadgetInfo\n-      consider a DeviceContext\n-    - snapctl: handle unsetting of config options with \"!\"\n-    - tests: move core migration snaps to tests/lib/snaps dir\n-    - cmd/snap: handle unsetting of config options with \"!\"\n-    - cmd/snap, etc: add health to 'snap list' and 'snap info'\n-    - gadget: use struct field names when intializing data in mounted\n-      updater unit tests\n-    - cmd/snap-confine: bring /lib/firmware from the host\n-    - snap: set snapd snap type (1/4)\n-    - snap: add checks in validate-seed for missing base/default-\n-      provider\n-    - daemon: replace shutdownServer with net/http's native shutdown\n-      support\n-    - interfaces/builtin: add exec \"/bin/runc\" to docker-support\n-    - gadget: mounted filesystem updater\n-    - overlord/patch: simplify conditions for re-applying sublevel\n-      patches for level 6\n-    - seccomp/compiler: adjust test case names and comment for later\n-      changes\n-    - tests: fix error doing snap pack running failover test\n-    - tests: don't preserve size= when rewriting mount tables\n-    - tests: allow reordering of rewrite operations\n-    - gadget: main update routine\n-    - overlord/config: normalize nulls to support config unsetting\n-      semantics\n-    - snap-userd-autostart: don't list as a startup application on the\n-      GUI\n-    - tests: renumber snap revisions as seen via writable\n-    - tests: change allocation for mount options\n-    - tests: re-enable ns-re-associate test\n-    - tests: mountinfo-tool allow many --refs\n-    - overlord/devicestate: implement reregRemodelContext with the\n-      essential re-registration logic\n-    - tests: replace various numeric mount options\n-    - gadget: filesystem image writer\n-    - tests: add more unit tests for mountinfo-tool\n-    - tests: introduce mountinfo-tool --ref feature\n-    - tests: refactor mountinfo-tool rewrite state\n-    - tests: allow renumbering mount namespace identifiers\n-    - snap: refactor and explain layout blacklisting\n-    - tests: renumber snap revisions as seen via hostfs\n-    - daemon, interfaces, travis: workaround build ID with Go 1.9, use\n-      1.9 for travis tests\n-    - cmd/libsnap: add sc_error_init_{simple,api_misuse}\n-    - gadget: make raw updater handle shifted structures\n-    - tests/lib/nested: create WORK_DIR before accessing it\n-    - cmd/libsnap: rename SC_LIBSNAP_ERROR to SC_LIBSNAP_DOMAIN\n-    - cmd,tests: forcibly discard mount namespace when bases change\n-    - many: introduce healthstate, run check-health\n-      post-(install/refresh/try/revert)\n-    - interfaces/optical-drive: add scsi-generic type 4 and 5 support\n-    - cmd/snap-confine: exit from helper when parent dies\n-\n- -- Michael Vogt   Fri, 30 Aug 2019 08:56:16 +0200\n-\n-snapd (2.40) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1836327\n-    - overlord/patch: simplify conditions for re-applying sublevel\n-      patches for level 6\n-    - cmd,tests: forcibly discard mount namespace when bases change\n-    - cmd/snap-confine: handle device cgroup before pivot\n-    - cmd/snap-apparmor-service: quit if there are no profiles\n-    - cmd/snap, image: add --target-directory and --basename to 'snap\n-      download'\n-    - interfaces: add jack1 implicit classic interface\n-    - interfaces: miscellaneous policy updates\n-    - daemon: classic confinement is not supported on core\n-    - interfaces: bluetooth-control: add mtk BT device node\n-    - cmd/snap-seccomp: initial support for negative arguments with\n-      uid/gid caching\n-    - snap-confine: move seccomp load after permanent privilege drop\n-    - tests: new profiler snap used to track cpu and memory for snapd\n-      and snap commands\n-    - debian: make maintainer scripts do nothing on powerpc\n-    - gadget: mounted filesystem writer\n-    - cmd/snap: use padded checkers for snapshot output\n-    - bootloader: switch to bootloader_test style testing\n-    - gadget: add a wrapper for generating partitioned images with\n-      sfdisk\n-    - tests/main/snap-seccomp-syscalls: add description\n-    - tests: continue executing on errors either updating the repo db or\n-      installing dependencies\n-    - cmd/snap-seccomp/syscalls: add io_uring syscalls\n-    - systemd: add InstanceMode enumeration to control which systemd\n-      instance to control\n-    - netutil: extract socket activation helpers from daemon package.\n-    - interfaces: spi: update regex rules to accept spi nodes like\n-      spidev12345.0\n-    - gadget: fallback device lookup\n-    - many: add strutil.ElliptLeft, use it for shortening cohorts\n-    - wrappers: allow sockets under $XDG_RUNTIME_DIR\n-    - gadget: add wrapper for creating and populating filesystems\n-    - gadget: add writer for offset-write\n-    - gadget: support relative symlinks in device lookup\n-    - snap, snapstate: additional validation of base field\n-    - many: fix some races and missing locking, make sure UDevMonitor is\n-      stopped\n-    - boot: move ExtractKernelAssets\n-    - daemon, snap: screenshots _only_ shows the deprecation notice,\n-      from 2.39\n-    - osutil: add a workaround for overlayfs apparmor as it is used on\n-      Manjaro\n-    - snap: introduce GetType() function for snap.Info\n-    - tests: update systems to be used for during sru validation\n-    - daemon: increase `shutdownTimeout` to 25s to deal with slow\n-      HW\n-    - interfaces/network-manager: move deny ptrace to the connected slot\n-    - interfaces: allow locking of pppd files\n-    - cmd/snap-exec: fix snap completion for classic snaps with non\n-      /usr/lib/snapd libexecdir\n-    - daemon: expose pprof endpoints\n-    - travis: disable snap pack on OSX\n-    - client, cmd/snap: expose the new cohort options for snap ops\n-    - overlord/snapstate: tweak switch summaries\n-    - tests: reuse the image created initially for nested tests\n-      execution\n-    - tests/lib/nested: tweak assert disk prepare step\n-    - daemon, overlord/snapstate: support leave-cohort\n-    - tests/main/appstream-id: collect debug info\n-    - store,daemon: add client-user-agent support to store.SnapInfo\n-    - tests: add check for invalid PR titles in the static checks\n-    - tests: add snap-tool for easier access to internal tools\n-    - daemon: unexport file{Response,Stream}\n-    - devicestate: make TestUpdateGadgetOnClassicErrorsOut less racy\n-    - tests: fix test desktop-portal-filechooser\n-    - tests: sort commands from DumpCommands in the dumpDbHook\n-    - cmd/snap: add unit test for \"advise-snap --dump-db\".\n-    - bootloader: remove extra mock bootloader implementation\n-    - daemon: tweak for \"add api endpoint for download\" PR\n-    - packaging: fix reproducible build error\n-    - tests: synchronize journal logs before check logs\n-    - tests: fix snap service watchdog test\n-    - tests: use more readable test directory names\n-    - tests/regression/lp-1805485: update test description\n-    - overlord: make changes conflict with remodel\n-    - tests: make sure the snapshot unit test uses a snapshot time\n-      relative to Now()\n-    - tests: revert \"tests: stop catalog-update/apt-hooks test for now\"\n-    - tests: mountinfo-tool --one prints matches on failure\n-    - data/selinux: fix policy for snaps with bases and classic snaps\n-    - debian: fix building on eoan by tweaking golang build-deps\n-    - packaging/debian-sid: update required golang version to 1.10\n-    - httputil: handle \"no such host\" error explicitly and do not retry\n-      it\n-    - overlord/snapstate, & fallout: give Install a *RevisionOptions\n-    - cmd/snap: don't run install on 'snap --help install'\n-    - gadget: raw/bare structure writer and updater\n-    - daemon, client, cmd/snap: show cohort key in snap info --verbose\n-    - overlord/snapstate: add update-gadget task when needed, block\n-      other changes\n-    - image: turn a missing default content provider into an error\n-    - overlord/devicestate: update-gadget-assets task handler with\n-      stubbed gadget callbacks\n-    - interface: builtin: avahi-observe/control: update label for\n-      implicit slot\n-    - tests/lib/nested: fix multi argument copy_remote\n-    - tests/lib/nested: have mkfs.ext4 use a rootdir instead of mounting\n-      an image\n-    - packaging: fix permissions powerpc docs dir\n-    - overlord: mock store to avoid net requests\n-    - debian: rework how we run autopkgtests\n-    - interface: builtin: avahi-observe/control: allow slots\n-      implementation also by app snap on classic system\n-    - interfaces: builtin: utils: add helper function to identify system\n-      slots\n-    - interfaces: add missing adjtimex to time-control\n-    - overlord/snapstate, snap: support base = \"none\"\n-    - daemon, overlord/snapstate: give RevisionOptions a CohortKey\n-    - data/selinux: permit init_t to remount snappy_snap_t\n-    - cmd/snap: test for a friendly error on 'okay' without 'warnings'\n-    - cmd/snap: support snap debug timings --startup=.. and measure\n-      loadState time\n-    - advise-snap: add --dump-db which dumps the command database\n-    - interfaces/docker-support: support overlayfs on ubuntu core\n-    - cmd/okay: Remove err message when warning file not exist\n-    - devicestate: disallow removal of snaps used in booting early\n-    - packaging: fix build-depends on powerpc\n-    - tests: run spread tests on opensuse leap 15.1\n-    - strutil/shlex: fix ineffassign\n-    - cmd/snapd: ensure GOMAXPROCS is at least 2\n-    - cmd/snap-update-ns: detach unused mount points\n-    - gadget: record gadget root directory used during positioning\n-    - tests: force removal to prevent restore fails when directory\n-      doesn't exist on lp-1801955 test\n-    - overlord: implement store switch remodeling\n-    - tests: stop using ! for naive negation in shell scripts\n-    - snap,store,daemon,client: send new \"Snap-Client-User-Agent\" header\n-      in Search()\n-    - osutil: now that we require golang-1.10, use user.LookupGroup()\n-    - spread.yaml,tests: change MATCH and REBOOT to cmds\n-    - packaging/fedora: force external linker to ensure static linking\n-      and -extldflags use\n-    - timings: tweak the conditional for ensure timings\n-    - timings: always store ensure timings as long as they have an\n-      associated change\n-    - cmd/snap: tweak the output of snap debug timings --ensure=...\n-    - overlord/devicestate: introduce remodel kinds and\n-      contextsregistrationContext:\n-    - snaptest: add helper for mocking snap with contents\n-    - snapstate: allow removal of non-model kernels\n-    - tests: change strace parameters on snap-run test to avoid the test\n-      gets stuck\n-    - gadget: keep track of the index where structure content was\n-      defined\n-    - cmd/snap-update-ns: rename leftover ctx to upCtx\n-    - tests: add \"not\" command\n-    - spread.yaml: use \"snap connections\" in debug\n-    - tests: fix how strings are matched on auto-refresh-retry test\n-    - spread-shellcheck: add support for variants and environment\n-    - gadget: helper for shifting structure start position\n-    - cmd/snap-update-ns: add several TODO comments\n-    - cmd/snap-update-ns: rename ctx to upCtx\n-    - spread.yaml: make HOST: usage shellcheck-clean\n-    - overlord/snapstate, daemon: snapstate.Switch now takes a\n-      RevisionOption\n-    - tests: add mountinfo-tool\n-    - many: make snapstate.Update take *RevisionOptions instead of chan,\n-      rev\n-    - tests/unit/spread-shellcheck: temporary workaround for SC2251\n-    - daemon: refactor user ops to api_users\n-    - cmd/snap, tests: refactor info to unify handling of 'direct' snaps\n-    - cmd/snap-confine: combine sc_make_slave_mount_ns into caller\n-    - cmd/snap-update-ns: use \"none\" for propagation changes\n-    - cmd/snap-confine: don't pass MS_SLAVE along with MS_BIND\n-    - cmd/snap, api, snapstate: implement \"snap remove --purge\"\n-    - tests: new hotplug test executed on ubuntu core\n-    - tests: running tests on fedora 30\n-    - gadget: offset-write: fix validation, calculate absolute position\n-    - data/selinux: allow snap-confine to do search on snappy_var_t\n-      directories\n-    - daemon, o/snapstate, store: support for installing from cohorts\n-    - cmd/snap-confine: do not mount over non files/directories\n-    - tests: validates snapd from ppa\n-    - overlord/configstate: don't panic on invalid configuration\n-    - gadget: improve device lookup, add helper for mount point lookup\n-    - cmd/snap-update-ns: add tests for executeMountProfileUpdate\n-    - overlord/hookstate: don't run handler unless hooksup.Always\n-    - cmd/snap-update-ns: allow changing mount propagation\n-    - systemd: workaround systemctl show quirks on older systemd\n-      versions\n-    - cmd/snap: allow option descriptions to start with the command\n-    - many: introduce a gadget helper for locating device matching given\n-      structure\n-    - cmd/snap-update-ns: fix golint complaints about variable names\n-    - cmd/snap: unit tests for debug timings\n-    - testutil: support sharing-related mount flags\n-    - packaging/fedora: Merge changes from Fedora Dist-Git and drop EOL\n-      Fedora releases\n-    - cmd/snap: support for --ensure argument for snap debug timings\n-    - cmd,sandbox: tweak seccomp version info handling\n-    - gadget: record sector size in positioned volume\n-    - tests: make create-user test support managed devices\n-    - packaging: build empty package on powerpc\n-    - overlord/snapstate: perform hard refresh check\n-    - gadget: add volume level update checks\n-    - cmd/snap: mangle descriptions that have indent > terminal width\n-    - cmd/snap-update-ns: rename applyFstab to executeMountProfileUpdate\n-    - cmd/snap-confine: unshare per-user mount ns once\n-    - tests: retry govendor sync\n-    - tests: avoid removing snaps which are cached to speed up the\n-      prepare on boards\n-    - tests: fix how the base snap are deleted when there are multiple\n-      to deleted on reset\n-    - cmd/snap-update-ns: merge apply functions\n-    - many: introduce assertstest.SigningAccounts and AddMany test\n-      helpers\n-    - interfaces: special-case \"snapd\" in sanitizeSlotReservedForOS*\n-      helpers\n-    - cmd/snap-update-ns: make apply{User,System}Fstab identical\n-    - gadget: introduce checkers for sanitizing structure updates\n-    - cmd/snap-update-ns: move apply{Profile,{User,System}Fstab} to same\n-      file\n-    - overlord/devicestate: introduce registrationContext\n-    - cmd/snap-update-ns: add no-op load/save current user profile logic\n-    - devicestate: set \"new-model\" on the remodel change\n-    - devicestate: use deviceCtx in checkGadgetOrKernel\n-    - many: use a fake assertion model in the device contexts for tests\n-    - gadget: fix handling of positioning constrains for structures of\n-      MBR role\n-    - snap-confine: improve error when running on a not /home homedir\n-    - devicestate: make Remodel() return a state.Change\n-    - many: make which store to use contextualThis reworks\n-      snapstate.Store instead of relying solely on DeviceContext,\n-      because:\n-    - tests: enable tests on centos 7 again\n-    - interfaces: add login-session-control interface\n-    - tests: extra debug for snapshot-basic test\n-    - overlord,overlord/devicestate: do without GadgetInfo/KernelInfo in\n-      devicestate\n-    - gadget: more validation checks for legacy MBR structure type &\n-      role\n-    - osutil: fix TestReadBuildGo test in sbuild\n-    - data: update XDG_DATA_DIRS via the systemd environment.d mechanism\n-      too\n-    - many: do without device state/assertions accessors based on state\n-      only outside of devicestate/tests\n-    - interfaces/dbus: fix unit tests when default snap mount dir is not\n-      /snap\n-    - tests: add security-seccomp to verify seccomp with arg filtering\n-    - snapshotstate: disable automatic snapshots on core for now\n-    - snapstate: auto-install snapd when needed\n-    - overlord/ifacestate: update static attributes of \"content\"\n-      interface\n-    - interfaces: add support for the snapd snap in the dbus backend*\n-    - overlord/snapstate: tweak autorefresh logic if network is not\n-      available\n-    - snapcraft: also include ld.so.conf from libc in the snapcraft.yml\n-    - snapcraft.yaml: fix links ld-linux-x86-64.so.2/ld64.so.2\n-    - overlord: pass a DeviceContext to the checkSnap implementations\n-    - daemon: add RootOnly flag to commands\n-    - many:  make access to the device model assertion etc contextual\n-      via a DeviceCtx hook/DeviceContext interface\n-    - snapcraft.yaml: include libc6 in snapd\n-    - tests: reduce snapcraft leftovers from PROJECT_PATH,  temp disable\n-      centos\n-    - overlord: make the store context composably backed by separate\n-      backends for device asserts/info etc.\n-    - snapstate: revert \"overlord/snapstate: remove PlugsOnly\"\n-    - osutil,cmdutil: move CommandFromCore and make it use the snapd\n-      snap (if available)\n-    - travis: bump Go version to 1.10.x\n-    - cmd/snap-update-ns: remove instanceName argument from applyProfile\n-    - gadget: embed volume in positioned volume, rename fields\n-    - osutil: use go build-id when no gnu build-id is available\n-    - snap-seccomp: add 4th field to version-info for golang-seccomp\n-      features\n-    - cmd/snap-update-ns: merge computeAndSaveSystemChanges into\n-      applySystemFstab\n-    - cmd/snap, client, daemon, store: create-cohort\n-    - tests: give more time until nc returns on appstream test\n-    - tests: run spread tests on ubuntu 19.04\n-    - gadget: layout, smaller fixes\n-    - overlord: update static attrs when reloading connections\n-    - daemon: verify snap instructions for multi-snap requests\n-    - overlord/corecfg: make expiration of automatic snapshots\n-      configurable (4/4)\n-    - cmd/snap-update-ns: pass MountProfileUpdate to\n-      apply{System,User}Fstab\n-    - snap: fix interface bindings on implicit hooks\n-    - tests: improve how snaps are cached\n-    - cmd/snap-update-ns: formatting tweaks\n-    - data/selinux: policy tweaks\n-    - cmd/snap-update-ns: move locking to the common layer\n-    - overlord: use private YAML inside several tests\n-    - cmd/snap, store, image: support for cohorts in \"snap download\"\n-    - overlord/snapstate: add timings to critical task handlers and the\n-      backend\n-    - cmd: add `snap debug validate-seed ` cmd\n-    - state: add possible error return to TaskSet.Edge()\n-    - snap-seccomp: use username regex as defined in osutil/user.go\n-    - osutil: make IsValidUsername public and fix regex\n-    - store: serialize the acquisition of device sessions\n-    - interfaces/builtin/desktop: fonconfig v6/v7 cache handling on\n-      Fedora\n-    - many: move Device/SetDevice to devicestate, start of making them\n-      pluggable in storecontext\n-    - overlord/snapstate: remove PlugsOnly\n-    - interfaces/apparmor: allow running /usr/bin/od\n-    - spread: add qemu:fedora-29-64\n-    - tests: make test parallel-install-interfaces work for boards with\n-      pre-installed snaps\n-    - interfaces/builtin/intel_mei: fix /dev/mei* AppArmor pattern\n-    - spread.yaml: add qemu:centos-7-64\n-    - overlord/devicestate: extra measurements related to\n-      populateStateFromSeed\n-    - cmd/snap-update-ns: move Assumption to {System,User}ProfileUpdate\n-    - cmd/libsnap: remove fringe error function\n-    - gadget: add validation of cross structure overlap and offset\n-      writes\n-    - cmd/snap-update-ns: refactor of profile application (3/N)\n-    - data/selinux: tweak the policy for runuser and s-c, interpret\n-      audit entries\n-    - tests: fix spaces issue in the base snaps names to remove during\n-      reset phase\n-    - tests: wait for man db cache is updated before after install snapd\n-      on Fedora\n-    - tests: extend timeout of sbuild test\n-\n- -- Michael Vogt   Fri, 12 Jul 2019 10:40:08 +0200\n-\n-snapd (2.39.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1827495\n-    - daemon: increase `shutdownTimeout` to 25s to deal with slow HW\n-    - spread: run tests against openSUSE 15.1\n-    - data/selinux: fix policy for snaps with bases and classic snaps\n-\n- -- Michael Vogt   Fri, 21 Jun 2019 09:06:01 +0200\n-\n-snapd (2.39.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1827495\n-    - debian: rework how we run autopkgtests\n-    - interfaces/docker-support: add overlayfs accesses for ubuntu core\n-    - data/selinux: permit init_t to remount snappy_snap_t\n-    - strutil/shlex: fix ineffassign\n-    - packaging: fix build-depends on powerpc\n-\n- -- Michael Vogt   Wed, 05 Jun 2019 08:41:21 +0200\n-\n-snapd (2.39.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1827495\n-    - spread: enable Fedora 30\n-    - cmd/snap-confine, data/selinux: cherry pick Fedora 30 fixes\n-    - tests/unit/spread-shellcheck: temporary workaround for SC2251\n-    - packaging: build empty package on powerpc\n-    - interfaces: special-case \"snapd\" in sanitizeSlotReservedForOS*\n-      helper\n-    - cmd/snap: mangle descriptions that have indent > terminal width\n-    - cmd/snap-confine: unshare per-user mount ns once\n-    - tests: avoid adding spaces to the base snaps names\n-    - systemd: workaround systemctl show quirks on older systemd\n-      versions\n-\n- -- Michael Vogt   Wed, 29 May 2019 12:08:43 +0200\n-\n-snapd (2.39) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1827495\n-    - overlord/ifacestate: update static attributes of \"content\"\n-      interface\n-    - data/selinux: tweak the policy for runuser and s-c, interpret\n-      audit entries\n-    - snapshotstate: disable automatic snapshots on core for now\n-    - overlord/corecfg: make expiration of automatic snapshots\n-      configurable\n-    - snapstate: auto-install snapd when needed\n-    - interfaces: add support for the snapd snap in the dbus backend\n-    - overlord/snapstate: tweak autorefresh logic if network is not\n-      available\n-    - interfaces/apparmor: allow running /usr/bin/od\n-    - osutil,cmdutil: move CommandFromCore and make it use the snapd\n-      snap (if available)\n-    - daemon: also verify snap instructions for multi-snap requests\n-    - data/selinux: allow snap-confine to mount on top of bin\n-    - data/selinux: auto transition /var/snap to snappy_var_t\n-    - cmd: add `snap debug validate-seed ` cmd\n-    - interfaces/builtin/desktop: fonconfig v6/v7 cache handling on\n-      Fedora\n-    - interfaces/builtin/intel_mei: fix /dev/mei* AppArmor pattern\n-    - tests: make snap-connections test work on boards with snaps pre-\n-      installed\n-    - tests: check for /snap/core16/current in core16-provided-by-core\n-    - tests: run livepatch test on 18.04 as well\n-    - devicestate: deal correctly with the \"required\" flag on Remodel\n-    - snapstate,state: add TaskSet.AddAllWithEdges() and use in doUpdate\n-    - snapstate: add new NoReRefresh flag and use in Remodel()\n-    - many: allow core as a fallback for core16\n-    - snapcraft: build static fontconfig in the snapd snap\n-    - cmd/snap-confine: remove unused sc_open_snap_{update,discard}_ns\n-    - data/selinux: allow snapd to execute runuser under snappy_t\n-    - spread, tests: do not leave mislabeled files in restorecon test,\n-      attempt to catch similar files\n-    - interfaces: cleanup internal tool lookup in system-key\n-    - many: move auth.AuthContext to store.DeviceAndAuthContext, the\n-      implemention to a separate storecontext packageThis:\n-    - overlord/devicestate: measurements around ensure and related tasks\n-    - cmd: tweak internal tool lookup to accept more possible locations\n-    - overlord/snapstate,snapshotstate: create snapshot on snap removal\n-    - tests: run smoke tests on (almost) pristine systems\n-    - tests: system disable ssh for config defaults in gadget\n-    - cmd/debug: integrate new task timings with \"snap debug timings\"\n-    - tests/upgrade/basic, packaging/fedoar: restore SELinux context of\n-      /var/cache/fontconfig, patch pre-2.39 mount units\n-    - image: simplify prefer local logic  and fixes\n-    - tests/main/selinux-lxd: make sure LXD from snaps works cleanly\n-      with enforcing SELinux\n-    - tests: deny ioctl - TIOCSTI with garbage in high bits\n-    - overlord: factor out mocking of device service and gadget w.\n-      prepare-device for registration tests\n-    - data/selinux, tests/main/selinux-clean: fine tune the policy, make\n-      sure that no denials are raised\n-    - cmd/libsnap,osutil: fix parsing of mountinfo\n-    - ubuntu: disable -buildmode=pie on armhf to fix memory issue\n-    - overlord/snapstate: inhibit refresh for up to a week\n-    - cmd/snap-confine: prevent cwd restore permission bypass\n-    - overlord/ifacestate: introduce HotplugKey type use short key in\n-      change summaries\n-    - many: make Remodel() download everything first before installing\n-    - tests: fixes discovered debugging refresh-app-awareness\n-    - overlord/snapstate: track time of postponed refreshes\n-    - snap-confine: set rootfs_dir in sc_invocation struct\n-    - tests: run create-user on core devices\n-    - boot: add flag file \"meta/force-kernel-extraction\"\n-    - tests: add regression test for systemctl race fix\n-    - overlord/snapshotstate: helpers for snapshot expirations\n-    - overlord,tests: perform soft refresh check in doInstall\n-    - tests: enable tests that write /etc/{hostname,timezone} on core18\n-    - overlord/ifacestate: implement String() method of\n-      HotplugDeviceInfo for better logs/messages\n-    - cmd/snap-confine: move ubuntu-core fallback checks\n-    - testutil: fix MockCmd for shellcheck 0.5\n-    - snap, gadget: move gadget read/validation into separate package,\n-      tweak naming\n-    - tests: split travis spread execution in 2 jobs for ubuntu and non\n-      ubuntu systems\n-    - testutil: make mocked command work with shellcheck from snaps\n-    - packaging/fedora, tests/upgrade/basic: patch existing mount units\n-      with SELinux context on upgrade\n-    - metautil, snap: extract yaml value normalization to a helper\n-      package\n-    - tests: use apt via eatmydata\n-    - dirs,overlord/snapstate: add Soft and Hard refresh checks\n-    - cmd/snap-confine: allow using tools from snapd snap\n-    - cmd,interfaces: replace local helpers with cmd.InternalToolPath\n-    - tweak: fix \"make hack\" on Fedora\n-    - snap: add validation of gadget.yaml\n-    - cmd/snap-update-ns: refactor of profile application\n-    - cmd/snap,client,daemon,store: layout and sanity tweaks for\n-      find/search options\n-    - tests: add workaround for missing cache reset on older snapd\n-    - interfaces: deal with the snapd snap correctly for apparmor 2.13\n-    - release-tools: add debian-package-builder\n-    - tests: enable opensuse 15 and add force-resolution installing\n-      packages\n-    - timings: AddTag helper\n-    - testutil: run mocked commands through shellcheck\n-    - overlord/snapshotstate: support auto flag\n-    - client, daemon, store: search by common-id\n-    - tests: all the systems for google backend with 6 workers\n-    - interfaces: hotplug nested vm test, updated serial-port interface\n-      for hotplug.\n-    - sanity: use proper SELinux context when mounting squashfs\n-    - cmd/libsnap: neuter variables in cleanup functions\n-    - interfaces/adb-support: account for hubs on sysfs path\n-    - interfaces/seccomp: regenerate changed profiles only\n-    - snap: reject layouts to /lib/{firmware,modules}\n-    - cmd/snap-confine, packaging: support SELinux\n-    - selinux, systemd: support mount contexts for snap images\n-    - interfaces/builtin/opengl: allow access to Tegra X1\n-    - cmd/snap: make 'snap warnings' output yamlish\n-    - tests: add check to detect a broken snap on reset\n-    - interfaces: add one-plus devices to adb-support\n-    - cmd: prevent umask from breaking snap-run chain\n-    - tests/lib/pkgdb: allow downgrade when installing packages in\n-      openSUSE\n-    - cmd/snap-confine: use fixed private tmp directory\n-    - snap: tweak parsing errors of gadget updates\n-    - overlord/ifacemgr: basic measurements\n-    - spread: refresh metadata on openSUSE\n-    - cmd/snap-confine: pass sc_invocation instead of numerous args\n-      around\n-    - snap/gadget: introduce volume update info\n-    - partition,bootloader: rename 'partition' package to 'bootloader'\n-    - interfaces/builtin: add dev/pts/ptmx access to docker_support\n-    - tests: restore sbuild test\n-    - strutil: make SplitUnit public, allow negative numbers\n-    - overlord/snapstate,: retry less for auto-stuff\n-    - interfaces/builtin: add add exec \"/\" to docker-support\n-    - cmd/snap: fix regression of snap saved command\n-    - cmd/libsnap: rename C enum for feature flag\n-    - cmd: typedef mountinfo structures\n-    - tests/main/remodel: clean up before reverting the state\n-    - cmd/snap-confine: umount scratch dir using UMOUNT_NOFOLLOW\n-    - timings: add new helpers, Measurer interface and DurationThreshold\n-    - cmd/snap-seccomp: version-info subcommand\n-    - errortracker: fix panic in Report if db cannot be opened\n-    - sandbox/seccomp: a helper package wrapping calls to snap-seccomp\n-    - many: add /v2/model API, `snap remodel` CLI and spread test\n-    - tests: enable opensuse tumbleweed back\n-    - overlord/snapstate, store: set a header when auto-refreshing\n-    - data/selinux, tests: refactor SELinux policy, add minimal tests\n-    - spread: restore SELinux context when we mess with system files\n-    - daemon/api: filter connections with hotplug-gone=true\n-    - daemon: support returning assertion information as JSON with the\n-      \"json\" query parameter\n-    - cmd/snap: hide 'interfaces' command, show deprecation notice\n-    - timings: base API for recording timings in state\n-    - cmd/snap-confine: drop unused dependency on libseccomp\n-    - interfaces/apparmor: factor out test boilerplate\n-    - daemon: extract assertions api endpoint implementation into\n-      api_asserts.go\n-    - spread.yaml: bump delta reference\n-    - cmd/snap-confine: track per-app and per-hook processes\n-    - cmd/snap-confine: make sc_args helpers const-correct\n-    - daemon: move a function that was between an other struct and its\n-      methods\n-    - overlord/snapstate: fix restoring of \"old-current\" revision config\n-      in undoLinkSnap\n-    - cmd/snap, client, daemon, ifacestate: show a leading attribute of\n-      a connection\n-    - cmd/snap-confine: call sc_should_use_normal_mode once\n-    - cmd/snap-confine: populate enter_non_classic_execution_environment\n-    - daemon: allow downloading snaps blobs via .../file\n-    - cmd/snap-confine: introduce sc_invocation\n-    - devicestate: add initial Remodel support\n-    - snap: remove obsolete license-* fields in the yaml\n-    - cmd/libsnap: add cgroup-pids-support module\n-    - overlord/snapstate/backend: make LinkSnap clean up more\n-    - snapstate: only keep 2 snaps on classic\n-    - ctlcmd/tests: tests tweaks (followup to #6322)\n-\n- -- Michael Vogt   Fri, 03 May 2019 11:29:50 +0200\n-\n-snapd (2.38.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1824394\n-    - tests: add workaround for missing cache reset on older snapd\n-    - ubuntu: disable -buildmode=pie on armhf to fix memory issue\n-\n- -- Michael Vogt   Thu, 11 Apr 2019 18:26:47 +0200\n-\n-snapd (2.38) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1818648\n-    - overlord/snapstate,: retry less for auto-stuff\n-    - cmd/snap: fix regression of snap saved command\n-    - interfaces/builtin: add dev/pts/ptmx access to docker_support\n-    - overlord/snapstate, store: set a header when auto-refreshing\n-    - interfaces/builtin: add add exec \"/\" to docker-support\n-    - cmd/snap, client, daemon, ifacestate: show a leading attribute of\n-      a connection\n-    - interface: avahi-observe: Fixing socket permissions on 4.15\n-      kernels\n-    - tests: check that apt works before using it\n-    - apparmor: support AppArmor 2.13\n-    - snapstate: restart into the snapd snap on classic\n-    - overlord/snapstate: during refresh, re-refresh on epoch bump\n-    - cmd, daemon: split out the common bits of mapLocal and mapRemote\n-    - cmd/snap-confine: chown private /tmp to root.root\n-    - cmd/snap-confine: drop uid from random /tmp name\n-    - overlord/hookstate: apply pending transaction changes onto\n-      temporary configuration for snapctl get\n-    - cmd/snap: `snap connections` command\n-    - interfaces/greengrass_support: update accesses for GGC 1.8\n-    - cmd/snap, daemon: make the connectivity check use GET\n-    - interfaces/builtin,/udev: add spec support to disable udev +\n-      device cgroup and use it for greengrass\n-    - interfaces/intel-mei: small follow up tweaks\n-    - ifacestate/tests: fix/improve udev mon test\n-    - interfaces: add multipass-support interface\n-    - tests/main/high-user-handling: fix the test for Go 1.12\n-    - interfaces: add new intel-mei interface\n-    - systemd: decrease the checker counter before unlocking otherwise\n-      we can get spurious panics\n-    - daemon/tests: fix race in the disconnect conflict test\n-    - cmd/snap-confine: allow moving tasks to pids cgroup\n-    - tests: enable opensuse tumbleweed on spread\n-    - cmd/snap: fix `snap services` completion\n-    - ifacestate/hotplug: integration with udev monitor\n-    - packaging: build snapctl as a static binary\n-    - packaging/opensuse: move most logic to snapd.mk\n-    - overlord: fix ensure before slowness on Retry\n-    - overlord/ifacestate: fix migration of connections on upgrade from\n-      ubuntu-core\n-    - daemon, client, cmd/snap: debug GETs ask aspects, not actions\n-    - tests/main/desktop-portal-*: fix handling of python dependencies\n-    - interfaces/wayland: allow wayland server snaps function on classic\n-      too\n-    - daemon, client, cmd/snap: snap debug base-declaration\n-    - tests: run tests on opensuse leap 15.0 instead of 42.3\n-    - cmd/snap: fix error messages for snapshots commands if ID is not\n-      uint\n-    - interfaces/seccomp: increase filter precision\n-    - interfaces/network-manager: no peer label check for hostname1\n-    - tests: add a tests for xdg-desktop-portal integration\n-    - tests: not checking 'tracking channel' after refresh core on\n-      nested execution\n-    - tests: remove snapweb from tests\n-    - snap, wrappers: support StartTimeout\n-    - wrappers: Add an X-SnapInstanceName field to desktop files\n-    - cmd/snap: produce better output for help on subcommands\n-    - tests/main/nfs-support: use archive mode for creating fstab backup\n-    - many: collect time each task runs and display it with `snap debug\n-      timings `\n-    - tests: add attribution to helper script\n-    - daemon: make ucrednetGet not loop\n-    - squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test\n-    - features,cmd/libsnap: add new feature \"refresh-app-awareness\"\n-    - overlord: fix random typos\n-    - interfaces/seccomp: generate global seccomp profile\n-    - daemon/api: fix error case for disconnect conflict\n-    - overlord/snapstate: add some randomness to the catalog refresh\n-    - tests: disable trusty-proposed for now\n-    - tests: fix upgrade-from-2.15 with kernel 4.15\n-    - interfaces/apparmor: allow sending and receiving signals from\n-      ourselves\n-    - tests: split the test interfaces-many in 2 and remove snaps on\n-      restore\n-    - tests: use snap which takes 15 seconds to install on retryable-\n-      error test\n-    - packaging: avoid race in snapd.postinst\n-    - overlord/snapstate: discard mount namespace when undoing 1st link\n-      snap\n-    - cmd/snap-confine: allow writes to /var/lib/**\n-    - tests: stop catalog-update test for now\n-    - tests/main/auto-refresh-private: make sure to actually download\n-      with the expired macaroon\n-    - many: save media info when installing, show it when listing\n-    - userd: handle help urls which requires prepending XDG_DATA_DIRS\n-    - tests: fix NFS home mocking\n-    - tests: improve snaps-system-env test\n-    - tests: pre-cache core on core18 systems\n-    - interfaces/hotplug: renamed RequestedSlotSpec to ProposedSlot,\n-      removed Specification\n-    - debian: ensure leftover usr.lib.snapd.snap-confine is gone\n-    - image,cmd/snap,tests: introduce support for modern prepare-image\n-      --snap [=]\n-    - overlord/ifacestate: tweak logic for generating unique slot names\n-    - packaging: import debian salsa packaging work, add sbuild test and\n-      use in spead\n-    - overlord/ifacestate: hotplug-add-slot handler\n-    - image,cmd/snap:  simplify --classic-arch to --arch, expose\n-      prepare-image\n-    - tests: run test snap as user in the smoke test\n-    - cmd/snap: tweak man output to have no doubled up .TP lines\n-    - cmd/snap, overlord/snapstate: silently ignore classic flag when a\n-      snap is strictly confined\n-    - snap-confine: remove special handling of /var/lib/jenkins\n-    - cmd/snap-confine: handle death of helper process\n-    - packaging: disable systemd environment generator on 18.04\n-    - snap-confine: fix classic snaps for users with /var/lib/* homedirs\n-    - tests/prepare: prevent console-conf from running\n-    - image: bootstrapToRootDir => setupSeed\n-    - image,cmd/snap,tests:  introduce prepare-image --classic\n-    - tests: update smoke/sandbox test for armhf\n-    - client, daemon: introduce helper for querying snapd API for the\n-      list of slot/plug connections\n-    - cmd/snap-confine: refactor and cleanup of seccomp loading\n-    - snapstate, snap: allow update/switch requests with risk only\n-      channel to DTRT\n-    - interfaces: add network-manager-observe interface\n-    - snap-confine: increase locking timeout to 30s\n-    - snap-confine: fix incorrect \"sanity timeout 3s\" message\n-    - snap-confine: provide proper error message on sc_sanity_timeout\n-    - snapd,state: improve error message on state reading failure\n-    - interfaces/apparmor: deny inet/inet6 in snap-update-ns profile\n-    - snap: fix reexec from the snapd snap for classic snaps\n-    - snap: fix hook autodiscovery for parallel installed snaps\n-    - overlord/snapstate: format the refresh time for the log\n-    - cmd/snap-confine: add special case for Jenkins\n-    - snapcraft.yaml: fix XBuildDeb PATH for go-1.10\n-    - overlord/snapstate: validate instance names early\n-    - overlord/ifacestate: handler for hotplug-update-slot tasks\n-    - polkit: cast pid to uint32 to keep polkit happy for now\n-    - snap/naming: move various name validation helpers to separate\n-      package\n-    - tests: iterate getting journal logs to support delay on boards on\n-      daemon-notify test\n-    - cmd/snap: fix typo in cmd_wait.go\n-    - snap/channel: improve channel parsing\n-    - daemon, polkit: pid_t is signed\n-    - daemon: introduce /v2/connections snapd API endpoint\n-    - cmd/snap: small refactor of cmd_info's channel handling\n-    - overlord/snapstate: use an ad-hoc error when no results\n-    - cmd/snap: wrap \"summary\" better\n-    - tests: workaround missing go dependencies in debian-9\n-    - daemon: try to tidy up the icon stuff a little\n-    - interfaces: add display-control interface\n-    - snapcraft.yaml: fix snap building in launchpad\n-    - tests: update fedora 29 workers to speed up the whole testing time\n-    - interfaces: add u2f-devices interface and allow reading udev\n-      +power_supply:* in hardware-observe\n-    - cmd/snap-update-ns: save errno from strtoul\n-    - tests: interfaces tests normalization\n-    - many: cleanup golang.org/x/net/context\n-    - tests: add spread test for system dbus interface\n-    - tests: remove -o pipefail\n-    - interfaces: add block-devices interface\n-    - spread: enable upgrade suite on fedora\n-    - tests/main/searching: video section got renamed to photo-and-video\n-    - interfaces/home: use dac_read_search instead of dac_override with\n-      'read: all'\n-    - snap: really run the RunSuite\n-    - interfaces/camera: allow reading vendor/etc info from\n-      /run/udev/data/+usb:*\n-    - interfaces/dbus: be less strict about alternations for well-known\n-      names\n-    - interfaces/home: allow dac_override with 'read:\n-      all'\n-    - interfaces/pulseaudio: allow reading subdirectories of\n-      /etc/pulse\n-    - interfaces/system-observe: allow read on\n-      /proc/locks\n-    - run-checks: ensure we use go-1.10 if available\n-    - tests: get test-snapd-dbus-{provider,consumer} from the beta\n-      channel\n-    - interfaces/apparmor: mock presence of overlayfs root\n-    - spread: increase default kill-timeout to 30min\n-    - tests: simplify interfaces-contacts-service test\n-    - packaging/ubuntu: build with golang 1.10\n-    - ifacestate/tests: extra test for hotplug-connect handler\n-    - packaging: make sure that /var/lib/snapd/lib/glvnd is accounted\n-      for\n-    - overlord/snapstate/backend: call fontconfig helpers from the new\n-      'current'\n-    - kvm: load required kernel modules if necessary\n-    - cmd/snap: use a fake user for 'run' tests\n-    - tests: update systems for google sru backend\n-    - tests: fix install-snaps test by changing the snap info regex\n-    - interfaces: helpers for sorting plug/slot/connection refs\n-    - tests: moving core-snap-refresh-on-core test from main to nested\n-      suite\n-    - tests: fix daemon-notify test checking denials considering all the\n-      log lines\n-    - tests: skip lp-1802591 on \"official\" images\n-    - tests: fix listing tests to match \"snap list --unicode=never\"\n-    - debian: fix silly typo in the spread test invocation\n-    - interface: raw-usb: Adding ttyACM ttyACA permissions\n-    - tests: fix enable-disable-unit-gpio test on external boards\n-    - overlord/ifacestate: helper API to obtain the state of connections\n-    - tests: define new \"tests/smoke\" suite and use that for\n-      autopkgtests\n-    - cmd/snap-update-ns: explicitly check for return value from\n-      parse_arg_u\n-    - interfaces/builtin/opengl: allow access to NVIDIA VDPAU library\n-    - tests: auto-clean the test directory\n-    - cmd/snap: further tweak messaging; add a test\n-    - overlord/ifacestate: handler for hotplug-connect task\n-    - cmd/snap-confine: join freezer only after setting up user mount\n-    - cmd/snap-confine: don't preemptively create .mnt files\n-    - cmd/snap-update-ns: manually implement isspace\n-    - cmd/snap-update-ns: let the go parser know we are parsing -u\n-    - cmd/snap-discard-ns: fix name of user fstab files\n-    - snapshotstate: don't task.Log without the lock\n-    - tests: exclude some more slow tests from runs in autopkgtest\n-    - many: remove .user-fstab files from /run/snapd/ns\n-    - cmd/libsnap: pass --from-snap-confine when calling snap-update-ns\n-      as user\n-    - cmd/snap-update-ns: make freezer mockable\n-    - cmd/snap-update-ns: move XDG code to dedicated file\n-    - osutil: add helper for loading fstab from string\n-    - cmd/snap-update-ns: move existing code around, renaming some\n-      functions\n-    - overlord/configstate/configcore: support - and _ in cloud init\n-      field names\n-    - * cmd/snap-confine: use makedev instead of MKDEV\n-    - tests: review/fix the autopkgtest failures in disco\n-    - overlord: drop old v1 store api support from managers test\n-    - tests: new test for snapshots with more than 1 user\n-\n- -- Michael Vogt   Thu, 21 Mar 2019 10:55:27 +0100\n-\n-snapd (2.37.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1817949\n-    - squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test\n-    - overlord/ifacestate: fix migration of connections on upgrade from\n-      ubuntu-core\n-    - tests: fix upgrade-from-2.15 with kernel 4.15\n-    - interfaces/seccomp: increase filter precision\n-    - tests: remove snapweb from tests\n-\n- -- Michael Vogt   Wed, 27 Feb 2019 19:53:36 +0100\n-\n-snapd (2.37.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1811233\n-    - interfaces/seccomp: generate global seccomp profile\n-    - overlord/snapstate: add some randomness to the catalog refresh\n-    - tests: add upgrade test from 2.15.2ubuntu1 -> current snapd\n-    - snap-confine: fix fallback to ubuntu-core\n-    - packaging: avoid race in snapd.postinst\n-    - overlord/snapstate: discard mount namespace when undoing 1st link\n-      snap\n-    - cmd/snap-confine: allow writes to /var/lib/** again\n-    - tests: stop catalog-update/apt-hooks test until the catlog refresh\n-      is randomized\n-    - debian: ensure leftover usr.lib.snapd.snap-confine is gone\n-\n- -- Michael Vogt   Mon, 18 Feb 2019 17:17:33 +0100\n-\n-snapd (2.37.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1811233\n-    - cmd/snap, overlord/snapstate: silently ignore classic flag when a\n-      snap is strictly confined\n-    - snap-confine: remove special handling of /var/lib/jenkins\n-    - cmd/snap-confine: handle death of helper process gracefully\n-    - snap-confine: fix classic snaps for users with /var/lib/* homedirs\n-      like jenkins/postgres\n-    - packaging: disable systemd environment generator on 18.04\n-    - tests: update smoke/sandbox test for armhf\n-    - cmd/snap-confine: refactor and cleanup of seccomp loading\n-    - snap-confine: increase locking timeout to 30s\n-    - snap-confine: fix incorrect \"sanity timeout 3s\" message\n-    - snap: fix hook autodiscovery for parallel installed snaps\n-    - tests: iterate getting journal logs to support delay on boards on\n-      daemon-notify test\n-    - interfaces/apparmor: deny inet/inet6 in snap-update-ns profile\n-    - interfaces: add u2f-devices interface\n-\n- -- Michael Vogt   Wed, 06 Feb 2019 10:08:07 +0100\n-\n-snapd (2.37.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1811233\n-    - cmd/snap-confine: add special case for Jenkins\n-    - tests: workaround missing go dependencies in debian-9\n-    - daemon, polkit: pid_t is signed\n-    - interfaces: add display-control interface\n-    - interfaces: add block-devices interface\n-    - tests/main/searching: video section got renamed to photo-and-video\n-    - interfaces/camera: allow reading vendor/etc info from\n-      /run/udev/data/+usb\n-    - interfaces/dbus: be less strict about alternations for well-known\n-      names\n-    - interfaces/home: allow dac_read_search with 'read: all'\n-    - interfaces/pulseaudio: allow reading subdirectories of\n-      /etc/pulse\n-    - interfaces/system-observe: allow read on\n-      /proc/locks\n-    - tests: get test-snapd-dbus-{provider,consumer} from the beta\n-      channel\n-    - interfaces/apparmor: mock presence of overlayfs root\n-    - packaging/{fedora,opensuse,ubuntu}: add /var/lib/snapd/lib/glvnd\n-\n- -- Michael Vogt   Tue, 29 Jan 2019 18:35:36 +0100\n-\n-snapd (2.37) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1811233\n-    - snapd: fix race in TestSanityFailGoesIntoDegradedMode test\n-    - cmd: fix snap-device-helper to deal correctly with hooks\n-    - tests: various fixes for external backend\n-    - interface: raw-usb: Adding ttyACM[0-9]* as many serial devices\n-      have device node /dev/ttyACM[0-9]\n-    - tests: fix enable-disable-unit-gpio test on external boards\n-    - tests: define new \"tests/smoke\" suite and use that for\n-      autopkgtests\n-    - interfaces/builtin/opengl: allow access to NVIDIA VDPAU\n-      library\n-    - snapshotstate: don't task.Log without the lock\n-    - overlord/configstate/configcore: support - and _ in cloud init\n-      field names\n-    - cmd/snap-confine: use makedev instead of MKDEV\n-    - tests: review/fix the autopkgtest failures in disco\n-    - systemd: allow only a single daemon-reload at the same time\n-    - cmd/snap: only auto-enable unicode to a tty\n-    - cmd/snap: right-align revision and size in info's channel map\n-    - dirs, interfaces/builtin/desktop: system fontconfig cache path is\n-      different on Fedora\n-    - tests: fix \"No space left on device\" issue on amazon-linux\n-    - store: undo workaround for timezone-less released-at\n-    - store, snap, cmd/snap: channels have released-at\n-    - snap-confine: fix incorrect use \"src\" var in mount-support.c\n-    - release: support probing SELinux state\n-    - release-tools: display self-help\n-    - interface: add new `{personal,system}-files` interface\n-    - snap: give Epoch an Equal method\n-    - many: remove unused interface code\n-    - interfaces/many: use 'unsafe' with docker-support change_profile\n-      rules\n-    - run-checks: stop running HEAD of staticcheck\n-    - release: use sync.Once around lazy intialized state\n-    - overlord/ifacestate: include interface name in the hotplug-\n-      disconnect task summary\n-    - spread: show free space in debug output\n-    - cmd/snap: attempt to restore SELinux context of snap user\n-      directories\n-    - image: do not write empty etc/cloud\n-    - tests: skip snapd snap on reset for core systems\n-    - cmd/snap-discard-ns: fix umount(2) typo\n-    - overlord/ifacestate: hotplug-remove-slot task handler\n-    - overlord/ifacestate: handler for hotplug-disconnect task\n-    - ifacestate/hotplug: updateDevice helper\n-    - tests: reset snapd state on tests restore\n-    - interfaces: return security setup errors\n-    - overlord: make InstallMany work like UpdateMany, issuing a single\n-      request to get candidates\n-    - systemd/systemd.go: add missing tests for systemd.IsActive\n-    - overlord/ifacestate: addHotplugSeqWaitTask helper\n-    - cmd/snap-confine: refactor call to snap-update-ns --user-mounts\n-    - tests: new backend used to run upgrade test suite\n-    - travis: short circuit failures in static and unit tests travis job\n-    - cmd: automatically fix localized s to \n-    - overlord/configstate,features: expose features to snapd tools\n-    - selinux: package to query SELinux status and verify/restore file\n-      contexts\n-    - wrappers: use new systemd.IsActive in core18 early boot\n-    - cmd: add tests for lintArg and lintDesc\n-    - httputil: retry on temporary net errors\n-    - cmd/snap-confine: remove unused sc_discard_preserved_mount_ns\n-    - wrappers: only restart service in core18 when they are active\n-    - overlord/ifacestate: helpers for serializing hotplug changes\n-    - packaging/{fedora,opensuse}: own /var/lib/snapd/cookie\n-    - systemd: start snapd.autoimport.service in --no-block mode\n-    - data/selinux: fix syntax error in definition of snappy_admin\n-      interface\n-    - snap/info: bind global plugs/slots to implicit hooks\n-    - cmd/snap-confine: remove SC_NS_MNT_FILE\n-    - spread: record each tests/upgrade job\n-    - osutil: do not import dirs\n-    - cmd/snap-confine: fix typo \"a pipe\"\n-    - tests: make security-device-cgroups-{devmode,jailmode} work on arm\n-      devices\n-    - tests: force test-snapd-daemon-notify exit 0 when the interface is\n-      not connected\n-    - overlord/snapstate: run 'remove' hook before 'auto-disconnect'\n-    - centos: enable SELinux support on CentOS 7\n-    - apparmor: allow hard link to snap-specific semaphore files\n-    - tests/lib/pkgdb: disable weak deps on Fedora\n-    - release: detect too old apparmor_parser\n-    - tests: improve how the log is checked to see if the system is\n-      waiting for a reboot\n-    - cmd, dirs, interfaces/apparmor: update distro identification to\n-      support ID=\"archlinux\"\n-    - spread, tests: add Fedora 29\n-    - cmd/snap-confine: refactor calling snapd tools into helper module\n-    - apparmor: allow snap-update-ns access to common devices\n-    - cmd/snap-confine: capture initialized per-user mount ns\n-    - tests: reduce verbosity around package installation\n-    - data: set KillMode=process for snapd\n-    - cmd/snap: handle DNS error gracefully\n-    - spread, tests: use checkpoints when dumping audit log\n-    - tests/lib/prepare: make sure that SELinux context of repacked core\n-      snap is controlled\n-    - testutils: split checkers, tweak tests\n-    - tests: fix for tests test-*-cgroup\n-    - spread: show AVC audits when debugging, start auditd on Fedora\n-    - spread: drop Fedora 27, add Fedora 29\n-    - tests/lib/reset: restore context of removed snapd directories\n-    - testutil: add File{Present,Absent} checkers\n-    - snap: add new `snap run --trace-exec`\n-    - tests: fix for failover test on how logs are checked\n-    - snapctl: add \"services\"\n-    - overlord/snapstate: use file timestamp to initialize timer\n-    - cmd/libsnap: introduce and use sc_strdup\n-    - interfaces: let NM access ifindex/ifupdown files\n-    - overlord/snapstate: on refresh, check new rev can read current\n-    - client, store: don't use store from client (use client from store)\n-    - tests/main/parallel-install-store: verify installation of more\n-      than one instance at a time\n-    - overlord: don't write system key if security setup fails\n-    - packaging/fedora/snapd.spec: fix bogus date in changelog\n-    - snapstate: update fontconfig caches on install\n-    - interfaces/apparmor/backend.go:411:38: regular expression does not\n-      contain any meta characters (SA6004)\n-    - asserts/header_checks.go:199:35: regular expression does not\n-      contain any meta characters (SA6004)\n-    - run staticcheck every time :-)\n-    - tests/lib/systemd-escape/main.go:46:14: printf-style function with\n-      dynamic first argument and no further arguments should use print-\n-      style function instead (SA1006)\n-    - tests/lib/fakestore/cmd/fakestore/cmd_run.go:66:15: the channel\n-      used with signal.Notify should be buffered (SA1017)\n-    - tests/lib/fakedevicesvc/main.go:55:15: the channel used with\n-      signal.Notify should be buffered (SA1017)\n-    - spdx/parser.go:30:1: only the first constant has an explicit type\n-      (SA9004)\n-    - overlord/snapstate/snapmgr.go:553:21: printf-style function with\n-      dynamic first argument and no further arguments should use print-\n-      style function instead (SA1006)\n-    - overlord/patch/patch3.go:44:70: printf-style function with dynamic\n-      first argument and no further arguments should use print-style\n-      function instead (SA1006)\n-    - cmd/snap/cmd_advise.go:200:2: empty branch (SA9003)\n-    - osutil/udev/netlink/conn.go:120:5: ineffective break statement.\n-      Did you mean to break out of the outer loop? (SA4011)\n-    - daemon/api.go:992:22: printf-style function with dynamic first\n-      argument and no further arguments should use print-style function\n-      instead (SA1006)\n-    - cmd/snapd/main.go:94:5: ineffective break statement. Did you mean\n-      to break out of the outer loop? (SA4011)\n-    - cmd/snap/cmd_userd.go:73:15: the channel used with signal.Notify\n-      should be buffered (SA1017)\n-    - cmd/snap/cmd_help.go:102:7: io.Writer.Write must not modify the\n-      provided buffer, not even temporarily (SA1023)\n-    - release: probe apparmor features lazily\n-    - overlord,daemon: mock security backends for testing\n-    - cmd/libsnap: move apparmor-support to libsnap\n-    - cmd: drop cruft from snap-discard-ns build rules\n-    - cmd/snap-confine: use snap-discard-ns ns to discard stale\n-      namespaces\n-    - cmd/snap-confine: handle mounted shared /run/snapd/ns\n-    - many: fix composite literals with unkeyed fields\n-    - dirs, wrappers, overlord/snapstate: make completion + bases work\n-    - tests: revert \"tests: restore in restore, not prepare\"\n-    - many: validate title\n-    - snap: make description maximum in runes, not bytes\n-    - tests: discard mount namespaces in reset.sh\n-    - tests/lib: sync cla check back from snapcraft\n-    - Revert \"cmd/snap, tests/main/snap-info: highlight the current\n-      channel\"\n-    - daemon: remove enableInternalInterfaceActions\n-    - mkversion: use \"test -n\" rather than \"! test -z\"\n-    - run-checks: assorted fixes\n-    - tests: restore in restore, not in prepare\n-    - cmd/snap: fix missing newline in \"snap keys\" error message\n-    - snap: epoch lists must contain no duplicate entries\n-    - interfaces/avahi_observe: Fix typo in comment\n-    - tests: add SPREAD_JOB to the description of\n-      systemd_create_and_start_unit\n-    - daemon, vendor: bump github.com/coreos/go-systemd/activation,\n-      handle API changes\n-    - Revert \"cmd/snap-confine: don't allow mapping lib{uuid,blkid}\"\n-    - packaging/fedora: use %_sysctldir macro\n-    - cmd/snap-confine: remove unneeded unshare\n-    - sanity: extend the kernel version check to cover CentOS/RHEL\n-      kernels\n-    - wrappers: remove all desktop files from a snap on removal\n-    - snap: add an explicit check for `epoch: null` loading\n-    - snap: check max description length in validate\n-    - spread, tests: add CentOS support\n-    - cmd/snap-confine: allow mapping more libc shards\n-    - cmd/snap-discard-ns: add support for --from-snap-confine\n-    - tests: make tinyproxy support systemd notify\n-    - tests: fix shellcheck\n-    - snap, store: rename `snap.Epoch`'s `Unset` to `IsZero`\n-    - store: add a test for a non-zero epoch refresh (with epoch bump)\n-    - store: v1 search doesn't send epoch, stop pretending it does\n-    - snap: make any \"0\" epoch be Unset, and marshalled to {[0],[0]}\n-    - overlord/snapstate: amend test should send local revision\n-    - tests: use mock-gpio.py in enable-disable-units-gpio test\n-    - snap: enforce minimal snap name len of 2\n-    - cmd/libsnap: add sc_verify_snap_lock\n-    - cmd/snap-update-ns: extra debugging of trespassing events\n-    - userd: force zenity width if the text displayed is long\n-    - overlord/snapstate, store: always send epochs\n-    - cmd/snap-confine,snap-update-ns: discard quirks\n-    - cmd/snap: add nanosleep to blacklisted syscalls when running with\n-      --strace\n-    - cmd/snap-update-ns, tests: clean trespassing paths\n-    - nvidia, interfaces/builtin: OpenCL fixes\n-    - ifacestate/hotplug: removeDevice helper\n-    - cmd: install snap-discard-ns in \"make hack\"\n-    - overlord/ifacestate: setup security backends phased by backends\n-      first\n-    - ifacestate/helpers: added SystemSnapName mapper helper method\n-    - overlord/ifacestate: set hotplug-key of the connection when\n-      connecting hotplug slots\n-    - snapd: allow snap-update-ns to read /proc/version\n-    - cmd: handle tumbleweed and leap in autogen.sh\n-    - interfaces/tests: MockHotplugSlot test helper\n-    - store,daemon: make UserInfo,LoginUser part of the store interface\n-    - overlord/ifacestate: use remapper when checking if system snap is\n-      installed\n-    - tests: fix how pinentry is prepared for new gpg v 2.1 and 2.2\n-    - packaging/arch: fix bash completions path\n-    - interfaces/builtin: add device-buttons interface for accessing\n-      events\n-    - tests, fakestore: extend refresh tests with parallel installed\n-      snaps\n-    - snap, store, overlord/snapshotstate: drop epoch pointers\n-    - snap: make Epoch default to {[0],[0]} on load from yaml\n-    - data/completion: pass documented arguments to completion functions\n-    - tests: skip opensuse from interfaces-openvswitch-support test\n-    - tests: simple reproducer for snap try and hooks bug\n-    - snapstate: do not allow classic mode for strict snaps\n-    - snap: make Epoch's MarshalJSON not simplify\n-    - store: remove unused currentSnap and currentSnapJSON\n-    - many: some small doc comment fixes in recent hotplug code\n-    - ifacestate/udevmonitor: added callback to signal end of\n-      enumeration\n-    - cmd/libsnap: add simplified feature flag checker\n-    - interfaces/opengl: add additional accesses for cuda\n-    - tests: add core18 only hooks test and fix running core18 only on\n-      classic\n-    - sanity, release, cmd/snap: refuse to try to do things on WSL.\n-    - cmd: make coreSupportsReExec faster\n-    - overlord/ifacestate: don't remove the dash when generating unique\n-      slot name\n-    - cmd/snap-seccomp: add full complement of ptrace constants\n-    - cmd: update autogen.sh for opensuse\n-    - interfaces/apparmor: allow access to /run/snap.$SNAP_INSTANCE_NAME\n-    - spread.yaml: add more systems to the autopkgtest and qemu backends\n-    - daemon: spool sideloaded snap into blob dir\n-      overlord/snapstate: address review feedback\n-    - packaging/opensuse: stop using golang-packaging\n-    - overlord/snapshots: survive an unknown user\n-    - wrappers: fix generating of service units with multiple `before`\n-      dependencies\n-    - data: run snapd.autoimport.service only after seeding\n-    - cmd/snap: unhide --name parameter to snap install, tweak help\n-      message\n-    - packaging/fedora: Merge changes from Fedora Dist-Git\n-    - tests/main/snap-service-after-before-install: verify after/before\n-      in snap install\n-    - overlord/ifacestate: mark connections disconnected by hotplug with\n-      hotplug-gone\n-    - ifacestate/ifacemgr: don't reload hotplug-gone connections on\n-      startup\n-    - tests: install dependencies during prepare\n-    - tests,store,daemon: ensure proxy settings are honored in\n-      auth/userinfo too\n-    - tests: core 18 does not support classic confinement\n-    - tests: add debug output for degraded test\n-    - strutil: make VersionCompare faster\n-    - overlord/snapshotstate/backend: survive missing directories\n-    - overlord/ifacestate: use map[string]*connState when passing conns\n-      around\n-    - tests: move fedora 28 to manual\n-    - overlord/snapshotstate/backend: be more verbose when\n-      SNAPPY_TESTING=1\n-    - tests: removing fedora 26 system from spread.yaml\n-    - tests: linode execution is not needed anymore\n-    - tests/lib: adjust to changed systemctl behaviour on debian-9\n-    - tests: fixes and new backend for tests on nested suite\n-    - strutil: let MatchCounter work with a nil regexp\n-    - ifacestate/helpers: findConnsForHotplugKey helper\n-    - many: move regexp.(Must)Compile out of non-init functions into\n-      variables\n-    - store: also make snaps downloaded via deltas 0600\n-    - snap: use Lstat to determine snap size, remove\n-      ReadSnapInfoExceptSize\n-    - interfaces/builtin: add adb-support interface\n-    - tests: fail if install_snap_local fails\n-    - strutil: add extra test to CommaSeparatedList as suggested by\n-      mborzecki\n-    - cmd/snap, daemon, strutil: use CommaSeparatedList to split a CSL\n-    - ifacestate: optimize disconnect hooks\n-    - cmd/snap-update-ns: parse the -u  command line option\n-    - cmd/snap, tests: snapshots for all\n-    - client, cmd/daemon: allow disabling keepalive, improve degraded\n-      mode unit tests\n-    - snap: only show \"next\" refresh time if its after the hold time\n-    - overlord/snapstate: run tests for classic snaps even on systems\n-      that don't support classic\n-    - overlord/standby: fix a race between standby goroutine and stop\n-    - cmd/snap-exec: don't fail on some try mode snaps\n-    - cmd/snap, userd, testutil: tweak DBus tests to use private session\n-      bus connection\n-    - cmd: remove remnants of sc_should_populate_mount_ns\n-    - client, daemon, cmd/snap: indicate that services are socket/timer\n-      activated\n-    - cmd/snap-seccomp: only look for PTRACE_GETFPX?REGS where available\n-    - cmd/snap-confine: remove SC_NS_FAIL_GRACEFULLY\n-    - snap/pack, cmd/snap: allow specifying the filename of 'snap pack'\n-    - cmd/snap-discard-ns: add support for per-user mount namespaces\n-    - cmd/snap-confine: remove stale mount profile along stale namespace\n-    - data/apt: close stderr when calling snap in the apt install hook.\n-    - tests/main: fixes for the new shellcheck\n-    - testutil, cmd/snap: introduce and use testutil.EqualsWrapped and\n-      fly\n-    - tests: initial setup for testing current branch on nested vm and\n-      hotplug management\n-    - cmd: refactor IPC and lifecycle of the helper process\n-    - tests/main/parallel-install-store: the store has caught up, do not\n-      expect failures\n-    - overlord/snapstate, snap, wrappers: start services in the right\n-      order during install\n-    - interfaces/browser-support, cmd/snap-seccomp: Allow read-only\n-      ptrace, for the Breakpad crash reporter\n-    - snap,client: use a different exit code for retryable errors\n-    - overlord/ifacestate: don't conflict on own discard-snap tasks when\n-      refreshing & doing garbage collection\n-    - cmd/snap: tweak `snap services` output when there is no services\n-    - interfaces/many: updates to support k8s worker nodes\n-    - cmd/snap: gnome-software install via snap:// handler\n-    - overlord/many: cleanup use of snapName vs. instanceName\n-    - snapstate: add command-chain to supported featureset\n-    - daemon, snap: mark screenshots as deprecated\n-    - interfaces: fix decoding of json numbers for static/dynamic\n-      attributes* ifstate: fix decoding of json numbers\n-    - cmd/snap: try not to panic on error from \"snap try\"\n-    - tests: new cosmic image for spread tests on gce\n-    - interfaces/system-key: add parser mtime and only discover features\n-      on write\n-    - overlord/snapshotstate/backend: detect path to tar in unit tests\n-    - tests/unit/gccgo: drop gccgo unit tests\n-    - cmd: use relative file names in locking APIs\n-    - interfaces: fix NormalizeInterfaceAttributes, add tests\n-    - overlord/snapshotstate/backend: fall back on sudo when no runuser\n-    - cmd/snap-confine: reduce verbosity of debug and error messages\n-    - systemd: extend Status() to work for socket and timer units\n-    - interfaces: typo 'allows' for consistency with other ifaces\n-    - systemd,wrappers: don't start disabled services\n-    - ifacestate: simplify task chaining in ifacestate.Connect\n-    - tests: ensure that goa-daemon is off\n-    - snap/pack, snap/squashfs: remove extra copy before mksquashfs\n-    - cmd/snap: block 'snap help  --all'\n-    - asserts, image: ensure kernel, gadget, base and required-snaps use\n-      valid snap names\n-    - apparmor: add unit test for probeAppArmorParser and simplify code\n-    - interfaces/apparmor: conditionally add explicit deny rules for\n-      ptrace\n-    - po: sync translations from launchpad\n-    - osutil: tweak handling of error adduser errors\n-    - cmd: rename ns_group to mount_ns\n-    - tests/main/interfaces-accounts-service: more debugging\n-    - snap/pack, snap/squashfs: use type to determine mksquashfs args\n-    - data/systemd, wrappers: tweak system-shutdown helper for core18\n-    - tests: show list of processes when ifaces-accounts-service fails\n-    - tests: do not run degraded test in autopkgtest env\n-    - snap: overhaul validation error messages\n-    - ifacestate/hooks: only create interface hook tasks if hooks exist\n-    - osutil: workaround overlayfs on ubuntu 18.10\n-    - interfaces/home: don't allow snaps to write to $HOME/bin\n-    - interfaces: improve Attr error further\n-    - snapstate: tweak GetFeatureFlagBool() to have a default argument\n-    - many: cleanup remaining parallel installs TODOs\n-    - image: improve validation of extra snaps\n-\n- -- Michael Vogt   Wed, 16 Jan 2019 17:16:56 +0100\n-\n-snapd (2.36.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1795590\n-    - wrappers: use new systemd.IsActive in core18 early boot\n-    - httputil: retry on temporary net errors\n-    - wrappers: only restart service in core18 when they are active\n-    - systemd: start snapd.autoimport.service in --no-block mode\n-    - data/selinux: fix syntax error in definition of snappy_admin\n-      interfacewhen installing selinux-policy-devel package.\n-    - centos: enable SELinux support on CentOS 7\n-    - cmd, dirs, interfaces/apparmor: update distro identification to\n-      support ID=\"archlinux\"\n-    - apparmor: allow hard link to snap-specific semaphore files\n-    - overlord,apparmor: new syskey behaviour + non-ignored snap-confine\n-      profile errors\n-    - snap: add new `snap run --trace-exec` call\n-    - interfaces/backends: detect too old apparmor_parser\n-\n- -- Michael Vogt   Fri, 14 Dec 2018 07:30:58 +0100\n-\n-snapd (2.36.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1795590\n-    - daemon, vendor: bump github.com/coreos/go-systemd/activation,\n-      handle API changes\n-    - snapstate: update fontconfig caches on install\n-    - overlord,daemon: mock security backends for testing\n-    - sanity, spread, tests: add CentOS\n-    - Revert \"cmd/snap, tests/main/snap-info: highlight the current\n-      channel\"\n-    - cmd/snap: add nanosleep to blacklisted syscalls when running with\n-      --strace\n-    - tests: add regression test for LP #1803535\n-    - snap-update-ns: fix trailing slash bug on trespassing error\n-    - interfaces/builtin/opengl: allow reading /etc/OpenCL/vendors\n-    - cmd/snap-confine: nvidia: pick up libnvidia-opencl.so\n-    - interfaces/opengl: add additional accesses for cuda\n-\n- -- Michael Vogt   Thu, 29 Nov 2018 10:48:29 +0100\n-\n-snapd (2.36.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1795590\n-    - tests,snap-confine: add core18 only hooks test and fix running\n-      core18 only hooks on classic\n-    - interfaces/apparmor: allow access to\n-      /run/snap.$SNAP_INSTANCE_NAME\n-    - spread.yaml: add more systems to the autopkgtest and qemu backends\n-    - daemon: spool sideloaded snap into blob dir\n-    - wrappers: fix generating of service units with multiple `before`\n-      dependencies\n-    - data: run snapd.autoimport.service only after seeding\n-    - tests,store,daemon: ensure proxy settings are honored in\n-      auth/userinfo too\n-    - packaging/fedora: Merge changes from Fedora Dist-Git\n-    - tests/lib: adjust to changed systemctl behaviour on debian-9\n-    - tests/main/interfces-accounts-service: switch to busctl, more\n-      debugging\n-    - store: also make snaps downloaded via deltas 0600\n-    - cmd/snap-exec: don't fail on some try mode snaps\n-    - cmd/snap, userd, testutil: tweak DBus tests to use private session\n-      bus connection\n-    - tests/main: fixes for the new shellcheck\n-    - cmd/snap-confine: remove stale mount profile along stale namespace\n-    - data/apt: close stderr when calling snap in the apt install hook\n-\n- -- Michael Vogt   Fri, 09 Nov 2018 14:42:28 +0100\n-\n-snapd (2.36) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1795590\n-    - overlord/snapstate, snap, wrappers: start services in the right\n-      order during install\n-    - tests: the store has caught up, drop gccgo test, update cosmic\n-      image\n-    - cmd/snap: try not to panic on error from \"snap try\"`--devmode`\n-    - overlord/ifacestate: don't conflict on own discard-snap tasks when\n-      refreshing & doing garbage collection\n-    - snapstate: add command-chain to supported featureset\n-    - daemon, snap: mark screenshots as deprecated\n-    - interfaces: fix decoding of json numbers for static/dynamic\n-      attributes\n-    - data/systemd, wrappers: tweak system-shutdown helper for core18\n-    - interfaces/system-key: add parser mtime and only discover features\n-      on write\n-    - interfaces: fix NormalizeInterfaceAttributes, add tests\n-    - systemd,wrappers: don't start disabled services\n-    - ifacestate/hooks: only create interface hook tasks if hooks exist\n-    - tests: do not run degraded test in autopkgtest env\n-    - osutil: workaround overlayfs on ubuntu 18.10\n-    - interfaces: include invalid type in Attr error\n-    - many: enable layouts by default\n-    - interfaces/default: don't scrub with change_profile with classic\n-    - cmd/snap: speed up unit tests\n-    - vendor, cmd/snap: refactor to accommodate the new less buggy go-\n-      flags\n-    - daemon: expose snapshots to the API\n-    - interfaces: updates for default, screen-inhibit-control, tpm,\n-      {hardware,system,network}-observe\n-    - interfaces/hotplug: rename HotplugDeviceKey method to HotplugKey,\n-      update test interface\n-    - interfaces/tests: use TestInterface instead of a custom local\n-      helper\n-    - overlord/snapstate: export getFeatureFlagBool.\n-    - osutil,asserts,daemon: support force password change in system-\n-      user assertion\n-    - snap, wrappers: support restart-delay, generate RestartSec=\n-      in service units\n-    - tests/ifacestate: moved asserts-related mocking into helper\n-    - image: fetch device store assertion if available\n-    - many: enable AppArmor on Arch\n-    - interfaces/repo: two helper methods for hotplug\n-    - overlord/ifacestate: add hotplug slots with implicit slots\n-    - interfaces/hotplug: helpers and struct updates\n-    - tests: run the snapd tests on Ubuntu 18.10\n-    - snapstate: only report errors if there is an actual error\n-    - store: speedup unit tests\n-    - spread-shellcheck: fix interleaved error messages, tweaks\n-    - apparmor: create SnapAppArmorDir in setupSnapConfineReexec\n-    - ifacestate: implementation of defaultDeviceKey function for\n-      hotplug\n-    - cmd/snap-update-ns: remove empty placeholders used for mounting\n-    - snapshotstate: restore to current revision\n-    - tests/lib: rework the CLA checker\n-    - many: support and consider store friendly-stores when checking\n-      device scope constraints\n-    - overlord/snapstate: block parallel installs of snapd, core, base,\n-      kernel, gadget snaps\n-    - overlord/patch: patch for static plug/slot attributes\n-    - interfaces: honor static attributes when reloading conns\n-    - osutils: unit tests speedup; introduce \u00abrun-checks --short-\n-      unit\u00bb.\n-    - systemd, wrappers: speed up wrappers unit tests\n-    - client: speedup unit tests\n-    - spread-shellcheck: use threads to parallelise\n-    - snap: validate plug and slot names\n-    - osutil, interfaces/apparmor: add and use of osutil.UnlinkMany\n-    - wrappers: do not depend on network.taget in socket units, tweak\n-      generated units\n-    - interfaces/apparmor: (un)load profiles in one apparmor_parser call\n-    - store: gracefully handle unexpected errors in 'action'\n-      response\n-    - cmd: put our manpages in section 8\n-    - overlord: don't make become-operational interfere with user\n-      requests\n-    - store: tweak unmatched refresh result error log\n-    - snap, client, daemon, store: use and expose \"media\" more\n-    - tests,cmd/snap-update-ns: add test showing mount update bug\n-      cmd/snap-update-ns: better detection of snapd-made tmpfs\n-    - tests: spread tests for aliases with parallel installed snaps\n-    - interfaces/seccomp: allow using statx by default\n-    - store: gracefully handle unexpected errors in 'action' response\n-    - overlord/snapshotstate: chown the tempdir\n-    - cmd/snap: attempt to start the document portal if running with a\n-      session bus\n-    - snap: detect layouts vs layout in snap.yaml\n-    - interfaces/apparmor: handle overlayfs snippet for snap-update-ns\n-    - snapcraft.yaml: set grade to stable\n-    - tests: shellchecks, final round\n-    - interfaces/apparmor: handle overlayfs snippet for snap-update-ns\n-    - snap: detect layouts vs layout in snap.yaml\n-    - overlord/snapshotstate: store epoch in snapshot, check on restore\n-    - cmd/snap: tweak UX of snap refresh --list\n-    - overlord/snapstate: improve consistency, use validateInfoAndFlags\n-      also in InstallPath\n-    - snap: give Epoch a CanRead helper\n-    - overlord/snapshotstate: small refactor of internal helpers\n-    - interfaces/builtin: adding missing permission to create\n-      /run/wpa_supplicant directory\n-    - interfaces/builtin: avahi interface update\n-    - client, daemon: support passing of 'unaliased' option when\n-      installing from local files\n-    - selftest: rename selftest.Run() to sanity.Check()\n-    - interfaces/apparmor: report apparmor support level and policy\n-    - ifacestate: helpers for generating slot names for hotplug\n-    - overlord/ifacestate: make sure to pass in the Model assertion when\n-      enforcing policies\n-    - overlord/snapshotstate: store the SnapID in snapshot, block\n-      restore if changed\n-    - interfaces: generalize writable mimic profile\n-    - asserts,interfaces/policy: add support for on-store/on-brand/on-\n-      model plug/slot rule constraints\n-    - many: fetch the device store assertion together and in the context\n-      of interpreting snap-declarations\n-    - tests: disable gccgo tests on 18.04 for now, until dh-golang vs\n-      gccgo is fixed\n-    - tests/main/parallel-install-services: add spread test for snaps\n-      with services\n-    - tests/main/snap-env: extend to cover parallel installations of\n-      snaps\n-    - tests/main/parallel-install-local: rename from *-sideload, extend\n-      to run snaps\n-    - cmd/snapd,daemon,overlord: without snaps, stop and wait for socket\n-    - cmd/snap: tame the help zoo\n-    - tests/main/parallel-install-store: run installed snap\n-    - cmd/snap: add a bunch of TRANSLATORS notes (and a little more\n-      i18n)\n-    - cmd: fix C formatting\n-    - tests: remove unneeded cleanup from layout tests\n-    - image: warn on missing default-providers\n-    - selftest: add test to ensure selftest.checks is up-to-date\n-    - interfaces/apparmor, interfaces/builtin: tweaks for parallel snap\n-      installs\n-    - userd: extend the list of supported XDG Desktop properties when\n-      autostarting user applications\n-    - cmd/snap-update-ns: enforce trespassing checks\n-    - selftest: actually run the kernel version selftest\n-    - snapd: go into degraded mode when the selftest fails\n-    - tests: add test that runs snapctl with a core18 snap\n-    - tests: add snap install hook with base: core18\n-    - overlord/{snapstate,assertstate}: parallel instances and\n-      refresh validation\n-    - interfaces/docker-support: add rules to read apparmor macros\n-    - tests: make nfs test available for more systems\n-    - tests: cleanup copy/paste dup in interfaces-network-setup-control\n-    - tests: using single sh snap in interface tests\n-    - overlord/snapstate: improve cleaup in mount-snap handler\n-    - tests: don't fail interfaces-bluez test if bluez is already\n-      installed\n-    - tests: find snaps just for edge and beta channels\n-    - daemon, snapstate: consistent snap list [--all] output with broken\n-      snaps\n-    - tests: fix listing to allow extra things in the notes column\n-    - cmd/snap: improve UX when removing specific snap revision\n-    - cmd/snap, tests/main/snap-info: highlight the current channel\n-    - interfaces/testiface: added TestHotplugInterface\n-    - snap: tweak commands\n-    - interfaces/hotplug: hotplug spec takes one slot definition\n-    - overlord/snapstate, snap: handle shared snap directories when\n-      installing/remove snaps with instance key\n-    - interfaces/opengl: misc accesses for VA-API\n-    - client, cmd/snap: expose warnings to the world\n-    - cmd/snap-update-ns: introduce trespassing state tracking\n-    - cmd/snap: commands no longer build their own client\n-    - tests: try to build cmd/snap for darwin\n-    - daemon: make error responders not printf when called with 1\n-      argument\n-    - many: return real snap name in API response\n-    - overlord/state: return latest LastAdded time in WarningsSummary\n-    - many: mount namespace mapping for parallel installs of snaps\n-    - ifacestate/autoconnect: do not self-conflict on setup-profiles if\n-      core-phase-2\n-    - client, cmd/snap: on !linux, exit when the client tries to Do\n-      something\n-    - tests: refactor for nested suite and tests fixed\n-    - tests: use lxd's waitready instead of polling lxd socket\n-    - ifacestate: don't initialize udev monitor until we have a system\n-      snap\n-    - interfaces: extra argument for static attrs in\n-      NewConnectedPlug/NewConnectedSlot\n-    - packaging/arch: sync packaging with AUR\n-    - snapstate/tests: serialize all appends in fake backend\n-    - snap-confine: make /lib/modules optional\n-    - cmd/snap: handle \"snap interfaces core\" better\n-    - store: move download tests into downloadSuite\n-    - tests,interfaces: run interfaces-account-control on UC18\n-    - tests: fix install snaps test by adding link to /snap\n-    - tests: fix for nested test suite\n-    - daemon: fix snap list --all with parallel snap instances\n-    - snapstate: refactor tests to use SetModel*\n-    - wrappers: fix snap services order in tests\n-    - many: provide salt for generating instance-key in store requests\n-    - ifacestate: fix hang when retrying content providers\n-    - snapd-env-generator: fix when PATH is empty or unset\n-    - overlord/assertstate: propagate TaskSnapSetup error\n-    - client: catch and expose logs errors\n-    - overlord: integrate device enumeration with udev monitor\n-    - daemon, overlord/state: warnings pipeline\n-    - tests: add publisher regex to fix the snap-info test pass on sru\n-    - cmd: use systemdsystemgeneratorsdir, cleanup automake complaints,\n-      tweaks\n-    - cmd/snap-update-ns: remove the unused Secure type\n-    - osutil, o/snapshotstate, o/sss/backend: quick fixes\n-    - tests: update the listing expression to support core from\n-      different channels\n-    - store: use stable instance key in store refresh requests\n-    - cmd/snap-update-ns: detach Mk{Prefix,{File,Dir,Symlink{,All}}}\n-    - overlord/patch: support for sublevel patches\n-    - tests: update prepare/restore for nightly suite\n-    - cmd/snap-update-ns: detach BindMount from the Secure type\n-    - cmd/snap-update-ns: re-factor pair of helpers to call fstatfs once\n-    - ifacestate: retry on \"discard-snap\" in autoconnect conflict check\n-    - cmd/snap-update-ns: separate OpenPath from the Secure struct\n-    - wrappers: remove Wants=network-online.target\n-    - tests: add new core16-base test\n-    - store: refactor tests so that they work as store_test package\n-    - many: add refresh.rate-limit core option\n-    - tests: run account-control test with different bases\n-    - tests: port proxy test to use python tinyproxy\n-    - overlord: introduce snapshotstate.\n-    - testutil: allow Fstatfs results to vary over time\n-    - snap-update-ns: add comments about the \"deadcode\" in bootstrap.go\n-    - overlord: add chg.Err() in testUpdateWithAutoconnectRetry\n-    - many: remove deadcode\n-    - tests: also run unit/gccgo in 18.04\n-    - tests: introduce a helper for installing local snaps with --name\n-    - tests: avoid removing core snap on reset\n-    - snap: use snap.SideInfo in test to fix build with gccgo\n-    - partition: remove unused runCommand\n-    - image: fix incorrect error when using local bases\n-    - overlord/snapstate: fix format\n-    - cmd: fix format\n-    - tests: setting \"storage: preserve-size\" just for amazon-linux\n-      system\n-    - tests: test for the hostname interface\n-    - interfaces/modem-manager: allow access to more USB strings\n-    - overlord: instantiate UDevMonitor\n-    - interfaces/apparmor: tweak naming, rename to AddLayout()\n-    - interfaces: take instance name in ifacetest.InstallSnap\n-    - snapcraft: do not use --dirty in mkversion\n-    - cmd: add systemd environment generator\n-    - devicestate: support getting (http) proxy from core config\n-    - many: rename ClientOpts to ClientOptions\n-    - prepare-image-grub-core18: remove image root in restore\n-    - overlord/ifacestate: remove \"old-conn\" from connect/undo connect\n-      handlers\n-    - packaging/fedora: Merge changes from Fedora Dist-Git\n-    - image: handle errors when downloadedSnapsInfoForBootConfig has no\n-      data\n-    - tests: use official core18 model assertion in tests\n-    - snap-confine: map /var/lib/extrausers into snaps mount-namespace\n-    - overlord,store: support proxy settings internally too\n-    - cmd/snap: bring back 'snap version'\n-    - interfaces/mount: tweak naming of things\n-    - strutil: fix MatchCounter to also work with buffer reuse\n-    - cmd,interfaces,tests: add /mnt to removable-media interface\n-    - systemd: do not run \"snapd.snap-repair.service.in on firstboot\n-      bootstrap\n-    - snap/snapenv: drop some instance specific variables, use instance-\n-      specific ones for user locations\n-    - firstboot: sort by type when installing the firstboot snaps\n-    - cmd, cmd/snap: better support for non-linux\n-    - strutil: add new ParseByteSize\n-    - image: detect and error if bases are missing\n-    - interfaces/apparmor: do not downgrade confinement on arch with\n-      linux-hardened 4.17.4+\n-    - daemon: add pokeStateLock helper to the daemon tests\n-    - snap/squashfs: improve error message from Build on mksquashfs\n-      failure\n-    - tests: remove /etc/alternatives from dirs-not-shared-with-host\n-    - cmd: support re-exec into the \"snapd\" snap\n-    - spdx: remove \"Other Open Source\" from the support licenses\n-    - snap: add new type \"TypeSnapd\" and attach to the snapd snap\n-    - interfaces: retain order of inserted security backends\n-    - tests: spread test for parallel-installs desktop file handling\n-    - overlord/devicestate: use OpenSSL's PEM format when generating\n-      keys\n-    - cmd: remove --skip-command-chain from snap run and snap-exec\n-    - selftest: detect if apparmor is unusable and error\n-    - snap,snap-exec: support command-chain for hooks\n-    - tests: significantly reduce execution time for managers test\n-    - snapstate: use new \"snap.ByType\" sorting\n-    - overlord/snapstate: fix UpdateMany() to work with parallel\n-      instances\n-    - testutil: have File* checker produce more useful error output\n-    - overlord/ifacestate: introduce connectOpts\n-    - interfaces: parallel instances support, extend unit tests\n-    - tests: normalize tests\n-    - snapstate: make InstallPath() return *snap.Info too\n-    - snap: add ByType sorting\n-    - interfaces: add cifs-mount interface\n-    - tests: use file based markers in snap-service-stop-mode\n-    - osutil: reorg and stub out things to get it building on darwin\n-    - tests/main/layout: cleanup after the test\n-    - osutil/sys: small tweaks to let it build on darwin\n-    - daemon, overlord/snapstate: set instance name when installing from\n-      snap file\n-    - many: move Uname to osutil, for more DRY and easier porting.\n-    - cmd/snap: create snap user directory when running parallel\n-      installed snaps\n-    - cmd/snap-confine: switch to validation of SNAP_INSTANCE_NAME\n-    - tests: basic test for parallel installs from the store\n-    - image: download the gadget from the model.GadgetTrack()\n-    - snapstate: add support for gadget tracks in model assertion\n-    - image: add support for \"gadget=track\"\n-    - overlord: handle sigterm during shutdown better\n-    - tests: add the original function to fix the errors on new kernels\n-    - tests/main/lxd: pull lxd from candidate; re\u00ebnable i386\n-    - wayland: add extra sockets that are used by older toolkits (e.g.\n-      gtk3)\n-    - asserts: add support for gadget tracks in the model assertion\n-    - overlord/snapstate: improve feature flag validation\n-    - tests/main/lxd: run ubuntu-16.04 only on 64 bit variant\n-    - interfaces: workaround for activated services and newer DBus\n-    - tests: get the linux-image-extra available for the current kernel\n-    - interfaces: add new \"sysfs-name\" to i2c interfaces code\n-    - interfaces: disconnect hooks\n-    - cmd/libsnap: unify detection of core/classic with go\n-    - tests: fix autopkgtest failures in cosmic\n-    - snap: fix advice json\n-    - overlord/snapstate: parallel snap install\n-    - store: backward compatible instance-key handling for non-instance\n-      snaps\n-    - interfaces: add screencast-legacy for video and audio recording\n-    - tests: skip unsupported architectures for fedora-base-smoke test\n-    - tests: avoid using the journalctl cursor when it has not been\n-      created yet\n-    - snapstate: ensure normal snaps wait for the \"snapd\" snap on\n-      refresh\n-    - tests: enable lxd again everywhere\n-    - tests: new test for udisks2 interface\n-    - interfaces: add cpu-control for setting CPU tunables\n-    - overlord/devicestate: fix tests, set seeded in registration\n-      through proxy tests\n-    - debian: add missing breaks on cosmic\n-    - devicestate: only run device-hook when fully seeded\n-    - seccomp: conditionally add socketcall() based on system and base\n-    - tests: new test for juju client observe interface\n-    - overlord/devicestate: DTRT w/a snap proxy to reach a serial vault\n-    - snapcraft: set version information for the snapd snap\n-    - cmd/snap, daemon: error out if trying to install a snap using\n-      empty name\n-    - hookstate: simplify some hook tests\n-    - cmd/snap-confine: extend security tag validation to cover instance\n-      names\n-    - snap: fix mocking of systemkey in snap-run tests\n-    - packaging/opensuse: fix static build of snap-update-ns and snap-\n-      exec\n-    - interfaces/builtin: addtl network-manager resolved DBus fix\n-    - udev: skip TestParseUdevEvent on ppc\n-    - interfaces: miscellaneous policy updates\n-    - debian: add tzdata to build-dep to ensure snapd builds correctly\n-    - cmd/libsnap-confine-private: intoduce helpers for validating snap\n-      instance name and instance key\n-    - snap,snap-exec: support command-chain for app\n-    - interfaces/builtin: network-manager resolved DBus changes\n-    - snap: tweak `snap wait` command\n-    - cmd/snap-update-ns: introduce validation of snap instance names\n-    - cmd/snap: fix some corner-case test setup weirdness\n-    - cmd,dirs: fix various issues discovered by a Fedora base snap\n-    - tests/lib/prepare: fix extra snaps test\n-\n- -- Michael Vogt   Wed, 24 Oct 2018 11:30:45 -0600\n-\n-snapd (2.35.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1786438\n-    - interfaces/home: don't allow snaps to write to $HOME/bin\n-    - osutil: workaround overlayfs on ubuntu 18.10\n-\n- -- Michael Vogt   Mon, 15 Oct 2018 22:23:02 +0200\n-\n-snapd (2.35.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1786438\n-    - wrappers: do not depend on network.taget in socket units, tweak\n-      generated units\n-\n- -- Michael Vogt   Fri, 05 Oct 2018 14:41:33 +0200\n-\n-snapd (2.35.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1786438\n-    - overlord: don't make become-operational interfere with user\n-      requests\n-    - docker_support.go: add rules to read apparmor macros\n-    - interfaces/apparmor: handle overlayfs snippet for snap-update-\n-      nsFixes:\n-    - snapcraft.yaml: add workaround to fix snapcraft build\n-    - interfaces/opengl: misc accesses for VA-API\n-\n- -- Michael Vogt   Fri, 05 Oct 2018 09:32:00 +0200\n-\n-snapd (2.35.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1786438\n-    - cmd,overlord/snapstate: go 1.11 format fixes\n-    - ifacestate: fix hang when retrying content providers\n-    - snap-env-generator: do nothing when PATH is unset\n-    - interfaces/modem-manager: allow access to more USB strings\n-\n- -- Michael Vogt   Wed, 12 Sep 2018 09:32:00 +0200\n-\n-snapd (2.35.1) xenial; urgency=medium\n-\n-  *  New upstream release, LP: #1786438\n-    - packaging/fedora: Merge changes from Fedora Dist-Git\n-    - snapcraft: do not use --diry in mkversion.sh\n-    - cmd: add systemd environment generator\n-    - snap-confine: map /var/lib/extrausers into snaps mount-namespace\n-    - tests: cherry-pick test fixes from master for 2.35\n-    - systemd: do not run \"snapd.snap-repair.service.in on firstboot\n-      bootstrap\n-    - interfaces: retain order of inserted security backends\n-    - selftest: detect if apparmor is unusable and error\n-\n- -- Michael Vogt   Mon, 03 Sep 2018 14:44:06 +0200\n-\n-snapd (2.35) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1786438\n-    - snapstate: add support for gadget tracks in model assertion\n-    - image: add support for \"gadget=track\"\n-    - asserts: add support for gadget tracks in the model assertion\n-    - interfaces: add new \"sysfs-name\" to i2c interfaces code\n-    - overlord: handle sigterm during shutdown better\n-    - wayland: add extra sockets that are used by older toolkits\n-    - snap: fix advice json\n-    - tests: fix autopkgtest failures in cosmic\n-    - store: backward compatible instance-key handling for non-instance\n-      snaps\n-    - snapstate: ensure normal snaps wait for the \"snapd\" snap on\n-      refresh\n-    - interfaces: add cpu-control for setting CPU tunables\n-    - debian: add missing breaks on comisc\n-    - overlord/devicestate: DTRT w/a snap proxy to reach a serial vault\n-    - devicestate: only run device-hook when fully seeded\n-    - seccomp: conditionally add socketcall() based on system and base\n-    - interfaces/builtin: addtl network-manager resolved DBus fix\n-    - hookstate: simplify some hook tests\n-    - udev: skip TestParseUdevEvent on ppc\n-    - interfaces: miscellaneous policy updates\n-    - debian: add tzdata to build-dep to ensure snapd builds correctly\n-    - interfaces/builtin: network-manager resolved DBus changes\n-    - tests: add spread test for fedora29 base snap\n-    - cmd/libsnap: treat distributions with VARIANT_ID=snappy as \"core\"\n-    - dirs: fix SnapMountDir inside a Fedora base snap\n-    - tests: fix snapd-failover for core18 with external backend\n-    - overlord/snapstate: always clean SnapState when doing Get()\n-    - overlod/ifacestate: always use a new SnapState when fetching the\n-      snap state\n-    - overlord/devicestate: have the serial request talk to the proxy if\n-      set\n-    - interfaces/hotplug: udevadm output parser\n-    - tests: New test for daemon-notify interface\n-    - image: ensure \"core\" is ordered early if base: and core is used\n-    - cmd/snap-confine: snap-device-helper parallel installs support\n-    - tests: enable interfaces-framebuffer everywhere\n-    - tests: reduce nc wait time from 2 to 1 second\n-    - snap/snapenv: add snap instance specific variables\n-    - cmd/snap-confine: add minimal test for snap-device-helper\n-    - tests: enable snapctl test on core18\n-    - overlord: added UDevMonitor for future hotplug support\n-    - wrappers: do not glob when removing desktop files\n-    - tests: add dbus monitor log to interfaces-accounts-service\n-    - tests: add core-18 systems to external backend\n-    - wrappers: account for changed app wrapper in parallel installed\n-      snaps\n-    - wrappers: make sure that the tests pass on non-Ubuntu too\n-    - many: add snapd snap failure handling\n-    - tests: new test for dvb interface\n-    - configstate: accept refresh.timer=managed\n-    - tests: new test for snap logs command\n-    - wrapper: generate all the snapd unit files when generating\n-      wrappers\n-    - store: keep all files with link-count > 1 in the cache\n-    - store: be less verbose in the common refresh case of \"no updates\"\n-    - snap-confine: update snappy-app-dev path\n-    - debian: ensure dependency on fixed apt on 18.04\n-    - snapd: add initial software watchdog for snapd\n-    - daemon, systemd: change journalctl -n=all to --no-tail\n-    - systemd: fix snapd.apparmor.service.in dependencies\n-    - snapstate: refuse to remove bases or core if snaps need them\n-    - snap: introduce package-level helpers for building snap related\n-      directory/file paths\n-    - overlord/devicestate: deny parallel install of kernel or gadget\n-      snaps\n-    - store: clean up parallel-install TODOs in store tests\n-    - timeutil: fix first weekday of the month schedule\n-    - interfaces: match all possible tty but console\n-    - tests: shellchecks part 5\n-    - cmd/snap-confine: allow ptrace read for 4.18 kernels\n-    - advise: make the bolt database do the atomic rename dance\n-    - tests/main/apt-hooks: debug dump of commands.db\n-    - tests/lib/prepare-restore: update Arch Linux kernel LOCALVERSION\n-      handling\n-    - snap: validate instance name as part of Validate()\n-    - daemon: if a snap is inactive, don't ask systemd about its\n-      services.\n-    - udev: skip TestParseUdevEvent on s390x\n-    - tests: switch core-amd64-18 to use `kernel: pc-kernel=18`\n-    - asserts,image: add support for new kernel=track syntax\n-    - tests: new gce image for fedora 27\n-    - interfaces/apparmor: use the cache in mtime-resilient way\n-    - store, overlord/snapstate: introduce instance name in store APIs\n-    - tests: drive-by cleanup of redudant pkgname matching\n-    - tests: ensure apt-hook is only run after catalog update ran\n-    - tests: use pkill instead of kilall\n-    - tests/main: another bunch of updates for Amazon Linux 2\n-    - tests/lib/snaps: avoid using relative command paths that go up in\n-      the  directory tree\n-    - tests: disable/fix more tests for Amazon Linux 2\n-    - overlord: introduce InstanceKey to SnapState and SnapSetup,\n-      renames\n-    - daemon: make sure most change generating handlers can produce\n-      errors with kinds\n-    - tests/main/interfaces-calendar-service: skip the test on AMZN2\n-    - tests/lib/snaps: avoid using relative command paths that go up in\n-      the directory tree\n-    - cmd/snap: add a green check mark to verified publishers\n-    - cmd/snap: fix two issues in the cmd/snap unit tests\n-    - packaging/fedora: fix target path of /snap symlink\n-    - cmd/snap: support `--last=?` to mean \"no error on empty\"\n-    - cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so\n-    - strutil: detect and bail out of Unmarshal on duplicate key\n-    - packaging/fedora(amzn2): disable SELinux, drop dependency on\n-      squashfuse for AMZN2\n-    - spread, tests: add support for Amazon Linux 2\n-    - packaging/fedora: Add Amazon Linux 2 support\n-    - many: make Wait/Stop optional on StateManagers\n-    - snap/squashfs: stop printing unsquashfs info to stderr\n-    - snap: add support for `snap advise-snap --from-apt`\n-    - overlord/ifacestate: ignore connect if already connected\n-    - tests: change the service snap used instead of network-bind-\n-      consumer\n-    - interfaces/network-control: update for wpa-supplicant and ifupdown\n-    - tests: fix raciness in stop mode tests\n-    - logger: try to not have double dates\n-    - debian: use deb-systemd-invoke instead of systemctl directly\n-    - tests: run all main tests on core18\n-    - many: finish sharing a single TaskRunner with all the managers\n-    - interfaces/repo: added AllHotplugInterfaces helper\n-    - snapstate: ensure kernel-track is honored on switch/refresh\n-    - overlord/ifacestate: support implicit slots on snapd\n-    - image: add support for \"kernel-track\" in `snap prepare-image`\n-    - tests: add test that ensures we do not boot any system in degraded\n-      state\n-    - tests: update tests to work on core18\n-    - cmd/snap: check for typographic dashes in command\n-    - tests: fix tests expecting old email address\n-    - client: add some existing error kinds that were not listed in\n-      client.go\n-    - tests: add missing slots in classic and core provider test snaps\n-    - overlord,daemon,cmd: re-map snap names around the edges of snapd\n-    - tests: use install_local in snap-run-hooks\n-    - coreconfig: add support for `snap set system network.disable-\n-      ipv6`\n-    - overlord/snapstate: dedupe default content providers\n-    - osutil/udev: sync with upstream\n-    - debian: do not ship snapd.apparmor.service on ubuntu\n-    - overlord: have SnapManager use a passed in TaskRunner created by\n-      Overlord\n-    - many: streamline the generic conflict check mechanisms\n-    - tests: remove unneeded setup code in snap-run-symlink\n-    - cmd/snap: print unset license as \"unset\", instead of \"unknown\"\n-    - asserts: add (optional) kernel-track to model assertion\n-    - snap/squashfs, tests: pass -n[o-progress] to {mk,un}squashfs\n-    - interfaces/pulseaudio: be clear that the interface allows playback\n-      and record\n-    - snap: support hook environment\n-    - interfaces: fix typo \"daemonNotify\" (add missing \"n\")\n-    - interfaces: tweak tests of daemon-notify, use common naming\n-    - interfaces: allow invoking systemd-notify when daemon-notify is\n-      connected\n-    - store: make snap blobs be 0600\n-    - interfaces,daemon: move JSON types to the daemon\n-    - tests: prepare needs to handle bin/snapctl being a symlink\n-    - tests: do not mask errors in interfaces-timezone-control (#5405)\n-    - packaging: put snapctl into /usr/lib/snapd and symlink in usr/bin\n-    - tests: add basic integration test for spread hold\n-    - overlord/snapstate: improve PlugsOnly comment\n-    - many: assorted shellcheck fixes\n-    - store, daemon, client, cmd/snap: expose \"scope\", default to wide\n-    - snapstate: allow setting \"refresh.timer=managed\"\n-    - cmd/snap: display a link to data privacy notice for interactive\n-      snap login\n-    - client, cmd/snap: pass snap instance name when installing from\n-      file\n-    - cmd/snap: add 'debug paths' command\n-    - snapstate: make sure all *link-*snap tasks carry a snap type and\n-      further hints\n-    - devicestate: fix race when refreshing a snap with snapd-control\n-    - tests: fix tests on arch\n-    - tests: start active system units on reset\n-    - tests: new test for joystick interface\n-    - tests: moving install of dependencies to pkgdb helper\n-    - tests: enable new fedora image with test dependencies installed\n-    - tests: start using the new opensuse image with test dependencies\n-    - tests: check catalog refresh before and after restart snapd\n-    - tests: stop restarting journald service on prepare\n-    - interfaces: make core-support a no-op interface\n-    - interfaces: prefer \"snapd\" when resolving implicit connections\n-    - interfaces/hotplug: add hotplug Specification and\n-      HotplugDeviceInfo\n-    - many: lessen the use of core-support\n-    - tests: fixes for the autopkgtest failures in cosmic\n-    - tests: remove extra ' which breaks interfaces-bluetooth-control\n-      test\n-    - dirs: fix antergos typo\n-    - tests: use grep to avoid non-matching messages from MATCH\n-    - dirs: improve distro detection for Antegros\n-    - vendor: switch to latest bson\n-    - interfaces/builtin: create can-bus interface\n-    - tests: \"snap connect\" is idempotent so just connect\n-    - many: use extra \"releases\" information on store \"revision-not-\n-      found\" errors to produce better errors\n-    - interfaces: treat \"snapd\" snap as type:os\n-    - interfaces: tweak tests to have less repetition of \"core\" and\n-      \"ubuntu\u2026\n-    - tests: simplify econnreset test\n-    - snap: add helper for renaming slots\n-    - devicestate: fix panic in firstboot code when no snaps are seeded\n-    - tests: add artful for sru validation on google backend\n-    - snap,interfaces: move interface name validation to snap\n-    - overlord/snapstate: introduce path to fake backend ops\n-    - cmd/snap-confine: fix snaps running on core18\n-    - many: expose publisher's validation throughout the API\n-\n- -- Michael Vogt   Mon, 20 Aug 2018 12:36:33 +0200\n-\n-snapd (2.34.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1779403\n-    - interfaces/apparmor: use the cache in mtime-resilient way\n-    - cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so\n-    - snapstate: allow setting \"refresh.timer=managed\"\n-    - spread: switch Fedora and openSUSE images\n-\n- -- Michael Vogt   Fri, 27 Jul 2018 19:08:44 +0200\n-\n-snapd (2.34.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1779403\n-    - packaging: fix bogus date in fedora snapd.spec\n-    - tests: fix tests expecting old email address\n-\n- -- Michael Vogt   Thu, 19 Jul 2018 12:05:50 +0200\n-\n-snapd (2.34.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1779403\n-    - tests: cherry-pick test fixes from master for 2.34\n-    - coreconfig: add support for `snap set system network.disable-\n-      ipv6`\n-    - debian: do not ship snapd.apparmor.service on ubuntu\n-    - overlord/snapstate: dedupe default content providers\n-    - interfaces/builtin: create can-bus interface\n-\n- -- Michael Vogt   Tue, 17 Jul 2018 19:46:56 +0200\n-\n-snapd (2.34) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1779403\n-    - store, daemon, client, cmd/snap: expose \"scope\", default to wide*\n-    - tests: fix arch tests\n-    - snapstate: make sure all *link-*snap tasks carry a snap type and\n-      further hints\n-    - snapstate: allow setting \"refresh.timer=managed\"\n-    - cmd/snap: display a link to data privacy notice for interactive\n-      snap login\n-    - devicestate: fix race when refreshing a snap with snapd-control\n-    - tests: skip interfaces-framebuffer when no /dev/fb0 is found\n-    - tests: run interfaces-contacts-service only where test-snapd-eds\n-      is available\n-    - many: expose publisher's validation throughout the API\n-    - many: use extra \"releases\" information on store \"revision-not-\n-      found\" errors to produce better errors\n-    - dirs: improve distro detection for Antegros\n-    - Revert \"dirs: improve identification of Arch Linux like systems\"\n-    - devicestate: fix panic in firstboot code when no snaps are seeded\n-    - i18n: use xgettext-go --files-from to avoid running into cmdline\n-      size limits\n-    - interfaces: move ValidateName helper to utils\n-    - snapstate,ifstate: wait for pending restarts before auto-\n-      connecting\n-    - snap: account for parallel installs in wrappers, place info and\n-      tests\n-    - configcore: fix incorrect handling of keys with numbers (like\n-      gpu_mem_512)\n-    - tests: fix tests when no keyboard input detected\n-    - overlord/configstate: add watchdog options\n-    - snap-mgmt: fix for non-existent dbus system policy dir,\n-      shellchecks\n-    - tests/main/snapd-notify: use systemd's service properties rater\n-      than the journal\n-    - snapstate: allow removal of snap.TypeOS when using a model with a\n-      base\n-    - interfaces: make findSnapdPath smarter\n-    - tests: run \"arp\" tests only if arp is available\n-    - spread: increase the number of auto retries for package downloads\n-      in opensuse\n-    - cmd/snap-confine: fix nvidia support under lxd\n-    - corecfg: added experimental.hotplug feature flag\n-    - image: block installation of parallel snap instances\n-    - interfaces: moved normalize method to interfaces/utils and made it\n-      public\n-    - api/snapctl: allow -h and --help for regular users.\n-    - interfaces/udisks2: also implement implicit classic slot\n-    - cmd/snap-confine: include CUDA runtime libraries\n-    - tests: disable auto-refresh test on core18\n-    - many: switch to account validation: unproven|verified\n-    - overlord/ifacestate: get/set connection state only via helpers\n-    - tests: adding extra check to validate journalctl is showing\n-      current test data\n-    - data: add systemd environment configuration\n-    - i18n: handle write errors in xgettext-go\n-    - snap: helper for validating snap instance names\n-    - snap{/snaptest}: set instance key based on snap name\n-    - userd: fix running unit tests on KDE\n-    - tests/main/econnreset: limit ingress traffic to 512kB/s\n-    - snap: introduce a struct Channel to represent store channels, and\n-      helpers to work with it\n-    - tests: add fedora to distro_clean_package_cache function\n-    - many: rename snap.Info.StoreName() to snap.Info.SnapName()\n-    - tests: add spread test to ensure snapd/core18 are not removable\n-    - tests: tweaks for running the main tests on core18\n-    - overlord/{config,snap}state: introduce experimental.parallel-\n-      instances feature flag\n-    - strutil: support iteration over almost clean paths\n-    - strutil: add PathIterator.Rewind\n-    - tests: update interfaces-timeserver-control to core18\n-    - tests: add halt-timeout to google backend\n-    - tests: skip security-udev-input-subsystem without /dev/input/by-\n-      path\n-    - snap: introduce the instance key field\n-    - packaging/opensuse: remaining packaging updates for 2.33.1\n-    - overlord/snapstate: disallow installing snapd on baseless models\n-    - tests: disable core tests on all core systems (16 and 18)\n-    - dirs: improve identification of Arch Linux like systems\n-    - many: expose full publisher info over the snapd API\n-    - tests: disable core tests on all core systems (16 and 18)\n-    - tests/main/xdg-open: restore or clean up xdg-open\n-    - tests/main/interfaces-firewall-control: shellcheck fix\n-    - snapstate: sort \"snapd\" first\n-    - systemd: require snapd.socket in snapd.seeded.service; make sure\n-      snapd.seeded\n-    - spread-shellcheck: use the latest shellcheck available from snaps\n-    - tests: use \"ss\" instead of \"netstat\" (netstat is not available in\n-      core18)\n-    - data/complete: fix three out of four shellcheck warnings in\n-      data/complete\n-    - packaging/opensuse: fix typo, missing assignment\n-    - tests: initial core18 spread image building\n-    - overlord: introduce a gadget-connect task and use it at first boot\n-    - data/completion: fix inconsistency in +x and shebang\n-    - firstboot: mark essential snaps as \"Required\" in the state\n-    - spread-shellcheck: use a whitelist of files that are allowed to\n-      fail validation\n-    - packaging/opensuse: build position-independent binaries\n-    - ifacestate: prevent running interface hooks twice when self-\n-      connecting on autoconnect\n-    - data: remove /bin/sh from snapd.sh\n-    - tests: fix shellcheck 0.5.0 warnings\n-    - packaging/opensuse: snap-confine should be 06755\n-    - packaging/opensuse: ship apparmor integration if enabled\n-    - interfaces/udev,misc: only trigger udev events on input subsystem\n-      as needed\n-    - packaging/opensuse: add missing bits for snapd.seeded.service\n-    - packaging/opensuse: don't use %-macros in comments\n-    - tests: shellchecks part 4\n-    - many: rename snap.Info.Name() to snap.Info.InstanceName(), leave\n-      parallel-install TODOs\n-    - store: drop unused: channel map types, and details fixture.\n-    - store: have a basic test about the unmarshalling of /search\n-      results\n-    - tests: show executed tests on current system when a test fails\n-    - tests: fix for the download of the big snap\n-    - interfaces/apparmor: add chopTree\n-    - tests: remove double debug: | entry in tests and add more checks\n-    - cmd/snap-update-ns: introduce mimicRequired helper\n-    - interfaces: move assertions around for better failure line number\n-    - store: log a nice clear \"download succeeded\" message\n-    - snap: run snap-confine from the re-exec location\n-    - snapstate: support restarting snapd from the snapd snap on core18\n-    - tests: show status of the partial test-snapd-huge snap in\n-      econnreset test\n-    - tests: fix interfaces-calendar-service test when gvfsd-metadata\n-      loks the xdg dirctory\n-    - store: switch store.SnapInfo to use the new v2/info endpoint\n-    - interfaces: add Repository.AllInterfaces\n-    - snapstate: stop using evolving SnapSpec internally, use an\n-      internal-only snapSpec instead\n-    - cmd/libsnap-confine-private: introduce a helper for splitting snap\n-      name\n-    - tests: econnreset/retry tweaks\n-    - store, et al: kill dead code that uses the bulk endpoint\n-    - tests/lib/prepare-restore: fix upgrade/reboot handling on arch\n-    - cmd/snap-update-ns,strutil: move PathIterator to strutil, add\n-      Depth helper\n-    - data/systemd/snapd.run-from-snap: ensure snapd tooling is\n-      available\n-    - store: switch connectivity check to use v2/info\n-    - devicestate: support seeding from a base snap instead of core\n-    - snapstate,ifacestate: remove core-phase-2 handling\n-    - interfaces/docker-support: update for docker 18.05\n-    - tests: enable fedora 28 again\n-    - overlord/ifacestate:  simplify checkConnectConflicts and also\n-      connect signature\n-    - snap: parse connect instructions in gadget.yaml\n-    - tests: fix snapd-repair.timer on ubuntu-core-snapd-run- from-snap\n-      test\n-    - interfaces/apparmor: allow killing snap-update-ns\n-    - tests: skip \"try\" test on s390x\n-    - store, image: have 'snap download' use v2/refresh action=download\n-    - interfaces/policy: test that base policy can be parsed\n-    - tests: publish test-snapd-appstreamid for any architecture\n-    - snap: don't include newline in hook environment\n-    - cmd/snap-update-ns: use RCall with SyscallsEqual\n-    - cmd/snap-update-ns: add IsSnapdCreatedPrivateTmpfs and tests\n-    - tests: skip security-dev-input-event-denied on s390x/arm64\n-    - interfaces: add the dvb interface\n-    - daemon: paging is not a thing.\n-    - cmd/snap-mgmt: remove system key on purge\n-    - testutil: syscall sequence checker\n-    - cmd/snap-update-ns: fix a leaking file descriptor in MkSymlink\n-    - packaging: use official bolt in the errtracker on fedora\n-    - many: add `snap debug connectivity` command* many: add `snap debug\n-      connectivity` command\n-    - configstate: deny configuration of base snaps and for the \"snapd\"\n-      snap\n-    - interfaces/raw-usb: also allow usb serial devices\n-    - snap: reject more layout locations\n-    - errtracker: do not send duplicated reports\n-    - httputil: extra debug if an error is not retried\n-    - cmd/snap-update-ns: improve wording in many errors\n-    - cmd/snap: use snaptest.MockSnapCurrent in `snap run` tests\n-    - cmd/snap-update-ns: add helper for checking for read-only\n-      filesystems\n-    - interfaces/builtin/docker: use commonInterface over specific\n-      struct\n-    - testutil: add test support for Fstatfs\n-    - cmd/snap-update-ns: discard the concept of segments\n-    - cmd/libsnap-confine-private: helper for extracting store snap name\n-      from local-name\n-    - tests: fix flaky test for hooks undo\n-    - interfaces: add {contacts,calendar}-service interfaces\n-    - tests: retry 'restarting into..' match in the snap-confine-from-\n-      core test\n-    - systemd: adjust TestWriteMountUnitForDirs() to use\n-      squashfs.MockUseFuse(false)\n-    - data: add helper that can generate/start/stop the snapd service\n-    - sefltest: advise reboot into 4.4 on trusty running 3.13\n-    - selftest: add new selftest package that tests squashfs mounting\n-    - store, jsonutil: move store.getStructFields to\n-      jsonutil.StructFields\n-    - ifacestate: improved conflict and error handling when creating\n-      autoconnect tasks\n-    - cmd/snap-confine: applied make fmt\n-    - interfaces/udev: call 'udevadm settle --timeout=10' after\n-      triggering events\n-    - tests: wait more time until snap start to be downloaded on\n-      econnreset test\n-    - snapstate: ensure fakestore returns TypeOS for the core snap\n-    - tests: fix lxd test which hangs on restore\n-    - cmd/snap-update-ns: add PathIterator\n-    - asserts,image: add support for models with bases\n-    - tests: shellchecks part 3\n-    - overlord/hookstate: support undo for hooks\n-    - interfaces/tpm: Allow access to the kernel resource manager\n-    - tests: skip appstream-id test for core systems 32 bits\n-    - interfaces/home: remove redundant common interface assignment\n-    - tests: reprioritise a few tests that are known to be slow\n-    - cmd/snap: small help tweaks and fixes\n-    - tests: add test to ensure /dev/input/event* for non-joysticks is\n-      denied\n-    - spread-shellcheck: silly fix & pep8\n-    - spread: switch fedora 28 to manual\n-    - client,cmd/snap,daemon,tests: expose base of a snap over API, show\n-      it in snap info --verbose\n-    - tests: fix lxd test - --auto now sets up networking\n-    - tests: adding fedora-28 to spread.yaml\n-    - interfaces: add juju-client-observe interface\n-    - client, daemon: add a \"mounted-from\" entry to local snaps' JSON\n-    - image: set model.DisplayName() in bootenv as \"snap_menuentry\"\n-    - packaging/opensuse: Refactor packaging to support all openSUSE\n-      targets\n-    - interfaces/joystick: force use of the device cgroup with joystick\n-      interface\n-    - interfaces/hardware-observe: allow access to /etc/sensors* for\n-      libsensors\n-    - interfaces: remove Plug/Slot types\n-    - interface hooks: update old AutoConnect methods\n-    - snapcraft: run with DEB_BUILD_OPTIONS=nocheck\n-    - overlord/{config,snap}state: the number of inactive revisions is\n-      config\n-    - cmd/snap: check with snapd for unknown sections\n-    - tests: moving test helpers from sh to bash\n-    - data/systemd: add snapd.apparmor.service\n-    - many: expose AppStream IDs (AKA common ID)\n-    - many: hold refresh when on metered connections\n-    - interfaces/joystick: also support modern evdev joysticks and\n-      gamepads\n-    - xdgopenproxy: skip TestOpenUnreadableFile when run as root\n-    - snapcraft: use dpkg-buildpackage options that work in xenial\n-    - spread: openSUSE LEAP 42.2 was EOLd in January, remove it\n-    - get-deps: work with an unset GOPATH too\n-    - interfaces/apparmor: use strict template on openSUSE tumbleweed\n-    - packaging: filter out verbose flags from \"dh-golang\"\n-    - packaging: fix description\n-    - snapcraft.yaml: add minimal snapcraft.yaml with custom build\n-\n- -- Michael Vogt   Fri, 06 Jul 2018 16:08:17 +0200\n-\n-snapd (2.33.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1773118\n-    - many: improve udev trigger on refresh experience\n-    - systemd: require snapd.socket in snapd.seeded.service\n-    - snap: don't include newline in hook environment\n-    - interfaces/apparmor: allow killing snap-update-ns\n-    - tests: skip \"try\" test on s390x\n-    - tests: skip security-dev-input-event-denied when /dev/input/by-\n-      path/ is missing\n-    - tests: skip security-dev-input-event-denied on s390x/arm64\n-\n- -- Michael Vogt   Thu, 21 Jun 2018 17:37:56 +0200\n-\n-snapd (2.33) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1773118\n-    - packaging: use official bolt in the errtracker on fedora\n-    - many: add `snap debug connectivity` command\n-    - interfaces/raw-usb: also allow usb serial devices\n-    - errtracker: do not send duplicated reports\n-    - selftest: add new selftest package that tests squashfs mounting\n-    - tests: backport lxd force stop and econnreset fixes\n-    - tests: add test to ensure /dev/input/event* for non-joysticks is\n-      denied\n-    - interfaces/joystick: support modern evdev joysticks\n-    - interfaces: add juju-client-observe\n-    - interfaces/hardware-observe: allow access to /etc/sensors* for\n-      libsensors\n-    - many: holding refresh on metered connections\n-    - many: expose AppStream IDs (AKA common ID)\n-    - tests: speed up save/restore snapd state for all-snap systems\n-      during tests execution\n-    - interfaces/apparmor: use helper to load stray profile\n-    - tests: ubuntu core abstraction\n-    - overlord/snapstate:\u00a0don't panic in a corner case interaction of\n-      cleanup tasks and pruning\n-    - interfaces/apparmor: add 'mediate_deleted' profile flag for all\n-      snaps\n-    - tests: new parameter for the journalctl rate limit\n-    - spread-shellcheck: port to python\n-    - interfaces/home: add 'read' attribute to allow non-owner read to\n-      @{HOME}\n-    - testutil: import check.v1 differently to workaround gccgo error\n-    - interfaces/many: miscellaneous updates for default, desktop,\n-      desktop-legacy, system-observe, hardware-observe, opengl and gpg-\n-      keys\n-    - snapstate/hooks: reorder autoconnect and reconnect hooks\n-    - daemon: update unit tests to match current master\n-    - overlord/snapshotstate/backend: introducing the snapshot backend\n-    - many: support 'system' nickname in interfaces\n-    - userd: add the \"snap\" scheme to the whitelist\n-    - many: make rebooting of core on refresh immediate, refactor logic\n-      around it\n-    - tests/main/snap-service-timer: account for service timer being in\n-      the 'running' state\n-    - interfaces/builtin: allow access to libGLESv* too for opengl\n-      interface\n-    - daemon: fix unit tests on arch\n-    - interfaces/default,process-control: miscellaneous signal policy\n-      fixes\n-    - interfaces/bulitin: add write permission to optical-drive\n-    - configstate: validate known core.* options\n-    - snap, wrappers: systemd WatchdogSec support\n-    - ifacestate: do not auto-connect manually disconnected interfaces\n-    - systemd: mock useFuse() so testsuite passes in container via lxd\n-      snap\n-    - snap/env: fix env duplication logic\n-    - snap: some doc comments fixes and additions\n-    - cmd/snap-confine, interfaces/opengl: allow access to glvnd EGL\n-      vendor files\n-    - ifacestate: unify reconnect and autoconnect methods\n-    - tests: fix user mounts test for external systems\n-    - overlord/snapstate,overlord/auth,store: coalesce no auth user\n-      refresh requests\n-    - boot,partition: improve tests/docs around SetNextBoot()\n-    - many: improve `snap wait` command\n-    - snap: fix `snap interface --attrs` output when numbers are used\n-    - cmd/snap-update-ns: poke holes when creating source paths for\n-      layouts\n-    - snapstate: support getting new bases/default-providers on refresh\n-    - ifacemgr: remove stale connections on startup\n-    - asserts: use Attrer in policy checks\n-    - testutil: record system call errors / return values\n-    - tests: increase timeouts to make tests reliable on slow boards\n-    - repo: pass and return ConnRef via pointers\n-    - interfaces: add xdg-document-portal support to desktop interface\n-    - debian: add a zenity|kdialog suggests\n-    - snapstate: make TestDoPrereqRetryWhenBaseInFlight less brittle\n-    - tests: go must be installed as a classic snap\n-    - tests: use journalctl cursors instead rotating logs\n-    - daemon: add confinement-options to /v2/system-info\n-      daemon: refactor classic support flag to be more structured\n-    - tests: build spread in the autopkgtests with a more recent go\n-    - cmd/snap: fix the message when snap.channel != snap.tracking\n-    - overlord/snapstate: allow core defaults configuration via 'system'\n-      key\n-    - many: add \"snap debug sandbox-features\" and needed bits\n-    - interfaces: interface hooks for refresh\n-    - snapd.core-fixup.sh: add workaround for corrupted uboot.env\n-    - boot: clear \"snap_mode\" when needed\n-    - many: add wait command and `snapd.seeded` service\n-    - interfaces: move host font update-ns AppArmor rules to desktop\n-      interface\n-    - jsonutil/safejson: introducing safejson.String &\n-      safejson.Paragraph\n-    - cmd/snap-update-ns: use Secure.BindMount to bind mount files\n-    - cmd/snap-update-ns,tests: mimic the mode and ownership of\n-      directories\n-    - cmd/snap-update-ns: add support for ignoring mounts with missing\n-      source/target\n-    - interfaces: interface hooks implementation\n-    - cmd/libsnap: fix compile error on more restrictive gcc\n-      cmd/libsnap: fix compilation errors on gcc 8\n-    - interfaces/apparmor: allow bash and dash to be in /usr/bin/\n-    - cmd/snap-confine: allow any base snap to provide /etc/alternatives\n-    - tests: fix interfaces-network test for systems with partial\n-      confinement\n-    - spread.yaml: add cosmic (18.10) to autopkgtest/qemu\n-    - tests: ubuntu 18.04 or higher does not need linux-image-extra-\n-    - configcore: validate experimental.layouts option\n-    - interfaces:minor autoconnect cleanup\n-    - HACKING: fix typos\n-    - spread: add adt for ubuntu 18.10\n-    - tests: skip test lp-1721518 for arch, snapd is failing to start\n-      after reboot\n-    - interfaces/x11: allow X11 slot implementations\n-    - tests: checking interfaces declaring the specific interface\n-    - snap: improve error for snaps not available in the given context\n-    - cmdstate: add missing test for default timeout handling\n-    - tests: shellcheck spread tasks\n-    - cmd/snap: update install/refresh help vs --revision\n-    - cmd/snap-confine: add support for per-user mounts\n-    - snap: do not use overly short timeout in `snap\n-      {start,stop,restart}`\n-    - tests: adding google-sru backend replacing linode-sur\n-    - interfaces/apparmor: fix incorrect apparmor profile glob\n-    - systemd: replace ancient paths with 16.04+ standards\n-    - overlord,systemd: store snap revision in mount units\n-    - testutil: add test helper for SysLstat\n-    - testutil,cmd: rename test helper of Lstat to OsLstat\n-    - testutil: document all fake syscall/os functions\n-    - osutil,interfaces,cmd: use less hardcoded strings\n-    - testutil: rename UNMOUNT_NOFOLLOW to umountNoFollow\n-    - testutil: don't dot-import check.v1\n-    - store: getStructFields takes pointers now\n-    - tests: drop `linux-image-extra-$(uname -r)` install in 18.04\n-    - many: fix false negatives reported by vet\n-    - osutil,interfaces: use uint32 for uid, gid\n-    - many: fix various issues reported by shellcheck\n-    - tests: add pending shutdown detection\n-    - image: support refreshing soft-expired user macaroons in tooling\n-    - interfaces/builtin, daemon: cleanup mocked builtin interfaces in\n-      daemon tests\n-    - interfaces/builtin: add support for software-watchdog interface\n-    - spread: auto accept key changes when calling dnf\n-    - snap,overlord/snapstate: introduce and use BrokenSnapError\n-    - tests: detect kernel oops during tests and abort tests in this\n-      case\n-    - tests: bring back one missing test in snap-service-stop-mode\n-    - debian: update LP bug for the 2.32.5 SRU\n-    - userd: set up journal logging streams for autostarted apps\n-    - snap,tests : don't fail if we cannot stat MountFile\n-    - tests: smaller fixes for Arch tests\n-    - tests: run interfaces-broadcom-asic-control early\n-    - client: support for snapshot sets, snapshots, and snapshot actions\n-    - tests: skip interfaces-content test on core devices\n-    - cmd: generalize locking to global, snap and per-user locks\n-    - release-tools: handle the snapd-x.y.z version\n-    - packaging: fix incorrectly auto-generated changelog entry for\n-      2.32.5\n-    - tests: add arch to CI\n-    - systemd: add helper for opening stream file descriptors to the\n-      journal\n-    - cmd/snap: handle distros with no version ID\n-    - many: add \"stop-mode: sig{term,hup,usr[12]}{,-all}\" instead of\n-      conflating that with refresh-mode\n-    - tests: removing linode-sru backend\n-    - tests: updating bionic version for spread tests on google\n-    - overlord/snapstate: poll for up to 10s if a snap is unexpectedly\n-      not mounted in doMountSnap\n-    - overlord/snapstate: allow to get an error from readInfo instead of\n-      a broken stub, use it in doMountSnap\n-    - snap: snap.AppInfo is now a fmt.Stringer\n-    - tests: move fedora 27 to google backend\n-    - many: add `core.problem-reports.disabled` option\n-    - cmd/snap-update-ns: remove the need for stash directory in secure\n-      bind mount implementation\n-    - errtracker: check for whoopsie.service instead of reading\n-      /etc/whoopsie\n-    - cmd/snap: user session application autostart v3\n-    - tests: add test to ensure `snap refresh --amend` works with\n-      different channels\n-    - tests: add check for OOM error after each test\n-    - cmd/snap-seccomp: graceful handling of non-multilib host\n-    - interfaces/shutdown: allow calling SetWallMessage\n-    - cmd/snap-update-ns: add secure bind mount implementation for use\n-      with user mounts\n-    - snap: fix `snap advise-snap --command` output to match spec\n-    - overlord/snapstate: on multi-snap refresh make sure bases and core\n-      are finished before dependent snaps\n-    - overlord/snapstate: introduce envvars to control the channels for\n-      based and prereqs\n-    - cmd/snap-confine: ignore missing cgroups in snap-device-helper\n-    - debian: add gbp.conf script to build snapd via `gbp buildpackage`\n-    - daemon,overlord/hookstate: stop/wait for running hooks before\n-      closing the snapctl socket\n-    - advisor: use json for package database\n-    - interfaces/hostname-control: allow setting the hostname via\n-      syscall and systemd\n-    - tests/main/interfaces-opengl-nvidia: verify access to 32bit\n-      libraries\n-    - interfaces: misc updates for default, firewall-control, fuse-\n-      support and process-control\n-    - data/selinux: Give snapd access to more aspects of the system\n-    - many: use the new install/refresh API by switching snapstate to\n-      use store.SnapAction\n-    - errtracker: make TestJournalErrorSilentError work on gccgo\n-    - ifacestate: add to the repo also snaps that are pending being\n-      activated but have a done setup-profiles\n-    - snapstate, ifacestate: inject auto-connect tasks try 2\n-    - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs\n-    - errtracker: add more fields to aid debugging\n-    - interfaces: make system-key more robust against invalid fstab\n-      entries\n-    - overlord,interfaces: be more vocal about broken snaps and read\n-      errors\n-    - ifacestate: injectTasks helper\n-    - osutil: fix fstab parser to allow for # in field values\n-    - cmd/snap-mgmt: remove timers, udev rules, dbus policy files\n-    - release-tools: add repack-debian-tarball.sh\n-    - daemon,client: add build-id to /v2/system-info\n-    - cmd: make fmt (indent 2.2.11)\n-    - interfaces/content: add rule so slot can access writable files at\n-      plug's mountpoint\n-    - interfaces: add /var/lib/snapd/snap to @{INSTALL_DIR}\n-    - ifacestate: don't surface errors from stale connections\n-    - cmd/snap-update-ns: convert Secure* family of functions into\n-      methods\n-    - tests: adjust canonical-livepatch test on GCE\n-    - tests: fix quoting issues in econnreset test\n-    - cmd/snap-confine: make /run/media an alias of /media\n-    - cmd/snap-update-ns: rename i to segNum\n-    - interfaces/serial: change pattern not to exclude /dev/ttymxc*\n-    - spread: disable StartLimitInterval option on opensuse-42.3\n-    - configstate: give a chance to immediately recompute the next\n-      refresh time when schedules are set\n-    - cmd/snap-confine: attempt to detect if multiarch host uses\n-      arch triplets\n-    - store: add Store.SnapAction to support the new install/refresh API\n-      endpoint\n-    - tests: adding test for removable-media interface\n-    - tests: update interface tests to remove extra checks and normalize\n-      tests\n-    - timeutil: in Human, count days with fingers\n-    - vendor: update gopkg.in/yaml.v2 to the latest version\n-    - cmd/snap-confine: fix Archlinux compatibility\n-    - cmd/snapd: make sure signal handlers are established during early\n-      daemon startup\n-    - cmd/snap-confine: apparmor: allow creating prefix path for\n-      gl/vulkan\n-    - osutil: use tilde suffix for temporary files used for atomic\n-      replacement\n-    - tests: copy or sanity check core users using usernames\n-    - tests: disentangle etc vs extrausers in core tests\n-    - tests: fix snap-run tests when snapd is not running\n-    - overlord/configstate: change how ssh is stopped/started\n-    - snap: make `snap run` look at the system-key for security profiles\n-    - strutil, cmd/snap: drop strutil.WordWrap, first pass at\n-      replacement\n-    - tests: adding opensuse-42.3 to google\n-    - cmd/snap: fix one issue with noWait error handling logic, add\n-      tests plus other cleanups\n-    - cmd/snap-confine: nvidia: preserve globbed file prefix\n-    - advisor: add comment why osutil.FileExists(dirs.SnapCommandsDB) is\n-      needed\n-    - interfaces,release: probe seccomp features lazily\n-    - tests: change debug for layout test\n-    - advisor: deal with missing commands.db file\n-    - interfaces/apparmor: simplify UpdateNS internals\n-    - polkit: Pass caller uid to PolicyKit authority\n-    - tests: moving debian 9 from linode to google backend\n-    - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob\n-    - po: specify charset in po/snappy.pot\n-    - interfaces: harden snap-update-ns profile\n-    - snap: Call SanitizePlugsSlots from InfoFromSnapYaml\n-    - tests: update tests to deal with s390x quirks\n-    - debian: run snap.mount upgrade fixup *before* debhelper\n-    - tests: move xenial i386 to google backend\n-    - snapstate: add compat mode for default-provider\n-    - tests: a bunch of test fixes for s390x from looking at the\n-      autopkgtest logs\n-    - packaging: recommend \"gnupg\" instead of \"gnupg1 | gnupg\"\n-    - interfaces/builtin: let MM change qmi device attributes\n-    - tests: add workaround for s390x failure\n-    - snap/pack, cmd/snap: add `snap pack --check-skeleton`\n-    - daemon: support 'system' as nickname of the core snap\n-    - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice\n-    - devicestate: add DeviceManager.Registered returning a channel\n-      closed when the device is known to be registered\n-    - store: Sections and WriteCatalogs need to strictly send device\n-      auth only if the device has a custom store\n-    - tests: add bionic system to google backend\n-    - many: fix shellcheck warnings in bionic\n-    - cmd/snap-update-ns: don't fail on existing symlinks\n-    - tests: make autopkgtest tests more targeted\n-    - cmd/snap-update-ns: fix creation of layout symlinks\n-    - spread,tests: move suite-level prepare/restore to central script\n-    - many: propagate contexts enough to be able to mark store\n-      operations done from the Ensure loop\n-    - snap: don't create empty Change with \"Hold\" state on disconnect\n-    - snap: unify snap name validation w/python; enforce length limit.\n-    - cmd/snap: use shlex when parsing `snap run --strace` arguments\n-    - osutil,testutil: add symlinkat(2) and readlinkat(2)\n-    - tests: autopkgtest may have non edge core too\n-    - tests: adding checks before stopping snapd service to avoid job\n-      canceled on ubuntu 14.04\n-    - errtracker: respect the /etc/whoopsie configuration\n-    - overlord/snapstate:  hold refreshes for 2h after seeding on\n-      classic\n-    - cmd/snap: tweak and polish help strings\n-    - snapstate: put layout feature behind feature flag\n-    - tests: force profile re-generation via system-key\n-    - snap/squashfs: when installing from seed, try symlink before cp\n-    - wrappers: services which are socket or timer activated should not\n-      be started during boot\n-    - many: go vet cleanups\n-    - tests: define MATCH from spread\n-    - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial\n-      fix\n-    - cmd/snap: use timeutil.Human to show times in `snap refresh\n-      --time`\n-    - cmd/snap: in changes and tasks, default to human-friendly times\n-    - many: support holding refreshes by setting refresh.hold\n-    - Revert \"cmd/snap: use timeutil.Human to show times in `snap\n-      refresh -\u2026-time`\"\n-    - cmd/snap: use timeutil.Human to show times in `snap refresh\n-      --time`\n-    - tests/main/snap-service-refresh-mode: refactor the test to rely on\n-      comparing PIDs\n-    - tests/main/media-sharing: improve the test to cover /media and\n-      /run/media\n-    - store: enable deltas for core devices too\n-    - cmd/snap: unhide --no-wait; make wait use go via waitMixin\n-    - strutil/shlex: import github.com/google/shlex into the tree\n-    - vendor: update github.com/mvo5/libseccomp-golang\n-    - overlord/snapstate: block install of \"system\"\n-    - cmd/snap: \"current\"\u2192\"installed\"; \"refreshed\"\u2192\"refresh-date\"\n-    - many: add the snapd-generator\n-    - cmd/snap-seccomp: Cancel the atomic file on error, not just Close\n-    - polkit: ensure error is properly set if dialog is dismissed\n-    - snap-confine, snap-seccomp: utilize new seccomp logging features\n-    - progress: tweak ansimeter cvvis use to no longer confuse minicom\n-    - xdgopenproxy: integrate xdg-open implementation into snapctl\n-    - tests: avoid removing preinstalled snaps on core\n-    - tests: chroot into core to run xdg-open there\n-    - userd: add an OpenFile method for launching local files with xdg-\n-      open\n-    - tests: moving ubuntu core from linode to google backend\n-    - run-checks: remove accidental bashism\n-    - i18n: simplify NG usage by doing the modulo math in-package.\n-    - snap/squashfs: set timezone when calling unsquashfs to get the\n-      build date\n-    - timeutil: timeutil.Human(t) gives a human-friendly string for t\n-    - snap: add autostart app property\n-    - tests: add support for external backend executions on listing test\n-    - tests: make interface-broadcom-asic-control test work on rpi\n-    - configstate: when disable \"ssh\" we must disable the \"sshd\" service\n-    - interfaces/apparmor,system-key: add upperdir snippets for strict\n-      snaps on livecd\n-    - snap/squashfs: add BuildDate\n-    - store: parse the JSON format used by the coming new store API to\n-      convey snap information\n-    - many: remove snapd.refresh.{timer,service}\n-    - tests: adding ubuntu-14.04-64 to the google backend\n-    - interfaces: add xdg-desktop-portal support to desktop interface\n-    - packaging/arch: sync with snapd/snapd-git from AUR\n-    - wrappers, tests/main/snap-service-timer: restore missing commit,\n-      add spread test for timer services\n-    - store: don't ask for snap_yaml_raw except on the details endpoint\n-    - many: generate and use per-snap snap-update-ns profile\n-    - tests: add debug for layout test\n-    - wrappers: detect whether systemd-analyze can be used in unit tests\n-    - osutil: allow creating strings out of MountInfoEntry\n-    - servicestate: use systemctl enable+start and disable+stop instead\n-      of --now flag\n-    - osutil: handle file being matched by multiple patterns\n-    - daemon, snap: fix InstallDate, make a method of *snap.Info\n-    - wrappers: timer services\n-    - wrappers: generator for systemd OnCalendar schedules\n-    - asserts: fix flaky storeSuite.TestCheckAuthority\n-    - tests: fix dependency for ubuntu artful\n-    - spread: start moving towards google backend\n-    - tests: add a spread test for layouts\n-    - ifacestate: be consistent passing Retry.After as named field\n-    - cmd/snap-update-ns: use recursive bind mounts for writable mimic\n-    - testutil: allow mocking syscall.Fstat\n-    - overlord/snapstate: verify that default schedule is randomized and\n-      is  not a single time\n-    - many: simplify mocking of home-on-NFS\n-    - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink\n-    - store: move infoFromRemote into details.go close to snapDetails\n-    - userd/tests: Test kdialog calls and mock kdialog too to make tests\n-      work in KDE\n-    - cmd/snap: tweaks to 'snap info' (feat. installed->current rename)\n-    - cmd/snap: add self-strace to `snap run`\n-    - interfaces/screen-inhibit-control,network-status: fix dbus path\n-      and interface typos\n-    - update-pot: Force xgettext() to return true\n-    - store: cleanup test naming, dropping remoteRepo  and\n-      UbuntuStore(Repository)? references\n-    - store: reorg auth refresh\n-\n- -- Michael Vogt   Fri, 08 Jun 2018 17:13:47 +0200\n-\n-snapd (2.32.9) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1767833\n-    - tests: run all spread tests inside GCE\n-    - tests: build spread in the autopkgtests with a more recent go\n-\n- -- Michael Vogt   Wed, 16 May 2018 10:20:08 +0200\n-\n-snapd (2.32.8) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1767833\n-    - snapd.core-fixup.sh: fix workaround for corrupted uboot.env\n-      and add tests\n-\n- -- Michael Vogt   Fri, 11 May 2018 14:36:16 +0200\n-\n-snapd (2.32.7) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1767833\n-    - many: add wait command and seeded target (2\n-    - snapd.core-fixup.sh: add workaround for corrupted uboot.env\n-    - boot: clear \"snap_mode\" when needed\n-    - cmd/libsnap: fix compile error on more restrictive gcc\n-    - tests: cherry-pick commits to move spread to google backend\n-    - spread.yaml: add cosmic (18.10) to autopkgtest/qemu\n-    - userd: set up journal logging streams for autostarted apps\n-\n- -- Michael Vogt   Fri, 11 May 2018 13:09:32 +0200\n-\n-snapd (2.32.6) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1767833\n-    - snap: do not use overly short timeout in `snap\n-      {start,stop,restart}`\n-    - interfaces/apparmor: fix incorrect apparmor profile glob\n-    - tests: detect kernel oops during tests and abort tests in this\n-      case\n-    - tests: run interfaces-boradcom-asic-control early\n-    - tests: skip interfaces-content test on core devices\n-\n- -- Michael Vogt   Sun, 29 Apr 2018 19:21:53 +0200\n-\n-snapd (2.32.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1765090\n-    - many: add \"stop-mode: sig{term,hup,usr[12]}{,-all}\" instead of\n-      conflating that with refresh-mode\n-    - overlord/snapstate:  poll for up to 10s if a snap is unexpectedly\n-      not mounted in doMountSnap\n-    - daemon: support 'system' as nickname of the core snap\n-\n- -- Michael Vogt   Mon, 16 Apr 2018 11:41:48 +0200\n-\n-snapd (2.32.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1756173\n-    - cmd/snap: user session application autostart\n-    - overlord/snapstate: introduce envvars to control the channels for\n-      bases and prereqs\n-    - overlord/snapstate: on multi-snap refresh make sure bases and core\n-      are finished before dependent snaps\n-    - many: use the new install/refresh /v2/snaps/refresh store API\n-\n- -- Michael Vogt   Wed, 11 Apr 2018 16:30:45 +0200\n-\n-snapd (2.32.3.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1756173\n-    - errtracker: make TestJournalErrorSilentError work on\n-      gccgo\n-    - errtracker: check for whoopsie.service instead of reading\n-      /etc/whoopsie\n-\n- -- Michael Vogt   Wed, 11 Apr 2018 12:40:09 +0200\n-\n-snapd (2.32.3.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1756173\n-    - debian: add gbp.conf script to build snapd via `gbp\n-      buildpackage`\n-    - tests: add check for OOM error after each test\n-    - cmd/snap-seccomp: graceful handling of non-multilib host\n-    - interfaces/shutdown: allow calling SetWallMessage\n-    - data/selinux: Give snapd access to more aspects of the system\n-    - daemon,overlord/hookstate: stop/wait for running hooks before\n-      closing the snapctl socket\n-    - cmd/snap-confine: ignore missing cgroups in snap-device-helper\n-    - interfaces: misc updates for default, firewall-control, fuse-\n-      support and process-control\n-    - overlord: test fix, address corner case\n-\n- -- Michael Vogt   Wed, 11 Apr 2018 10:34:00 +0200\n-\n-snapd (2.32.3) xenial; urgency=medium\n-\n-  *  New upstream release, LP: #1756173\n-    - ifacestate: add to the repo also snaps that are pending being\n-      activated but have a done setup-profiles\n-    - snapstate: inject autoconnect tasks in doLinkSnap for regular\n-      snaps\n-    - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs\n-    - errtracker: add more fields to aid debugging\n-    - interfaces: make system-key more robust against invalid fstab\n-      entries\n-    - cmd/snap-mgmt: remove timers, udev rules, dbus policy files\n-    - overlord,interfaces: be more vocal about broken snaps and read\n-      errors\n-    - osutil: fix fstab parser to allow for # in field values\n-\n- -- Michael Vogt   Thu, 05 Apr 2018 22:35:35 +0200\n-\n-snapd (2.32.2) xenial; urgency=medium\n-\n-  *  New upstream release, LP: #1756173\n-    - interfaces/content: add rule so slot can access writable files at\n-      plug's mountpoint\n-    - tests: adjust canonical-livepatch test on GCE\n-    - interfaces/serial: change pattern not to exclude /dev/ttymxc\n-    - spread.yaml: switch Fedora 27 tests to manual\n-    - store: Sections and WriteCatalogs need to strictly send device\n-      auth only if the device has a custom store\n-    - configstate: give a chance to immediately recompute the next\n-      refresh time when schedules are set\n-    - cmd/snap-confine: attempt to detect if multiarch host uses arch\n-      triplets\n-    - vendor: update gopkg.in/yaml.v2 to the latest version (#4945)\n-\n- -- Michael Vogt   Sat, 31 Mar 2018 21:09:29 +0200\n-\n-snapd (2.32.1) xenial; urgency=medium\n-\n-  *  New upstream release, LP: #1756173\n-    - cmd/snapd: make sure signal handlers are established during early\n-      daemon startup\n-    - osutil: use tilde suffix for temporary files used for atomic\n-      replacement\n-    - cmd/snap-confine: apparmor: allow creating prefix path for\n-      gl/vulkan\n-    - tests: disentangle etc vs extrausers in core tests\n-    - packaging: fix changelogs' typo\n-\n- -- Michael Vogt   Mon, 26 Mar 2018 21:01:41 +0200\n-\n-snapd (2.32) xenial; urgency=medium\n-\n-  *  New upstream release, LP: #1756173\n-    - snap: make `snap run` look at the system-key for security profiles\n-    - overlord/configstate: change how ssh is stopped/started\n-    - cmd/snap-confine: nvidia: preserve globbed file prefix\n-    - advisor: deal with missing commands.db file\n-    - interfaces,release: probe seccomp features lazily\n-    - interfaces: harden snap-update-ns profile\n-    - polkit: Pass caller uid to PolicyKit authority\n-    - tests: change debug for layout test\n-    - cmd/snap-confine: don't use per-snap s-u-n profile\n-    - many: backported fixes for layouts and symlinks\n-    - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob\n-    - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice\n-    - snap: Call SanitizePlugsSlots from InfoFromSnapYaml\n-    - cmd/snap-confine: fix ptrace rule with snap-confine peer\n-    - tests: update tests to deal with s390x quirks\n-    - snapstate: add compat mode for default-provider\"snapname:ifname\"\n-    - snap-confine: fallback to /lib/udev/snappy-app-dev if the core is\n-      older\n-    - tests: a bunch of test fixes for s390x from looking at the\n-      autopkgtest logs\n-    - packaging: recommend \"gnupg\" instead of \"gnupg1 | gnupg\"\n-    - interfaces/builtin: let MM change qmi device attributes\n-    - debian: undo snap.mount system unit removal\n-    - snap: don't create empty Change with \"Hold\" state on disconnect\n-    - tests: add workaround for s390x failure\n-    - tests: make autopkgtest tests more targeted\n-    - many: propagate contexts enough to be able to mark store\n-      operations done from the Ensure loop\n-    - store: cleanup test naming, dropping remoteRepo and\n-      UbuntuStore(Repository)? references\n-    - store: reorg auth refresh\n-    - tests: autopkgtest may have non edge core too\n-    - data: translate polkit strings\n-    - snapstate: put layout feature behind feature flag\n-    - errtracker: respect the /etc/whoopsie configuration\n-    - overlord/snapstate: hold refreshes for 2h after seeding on classic\n-    - many: cherry-pick relevant `go vet` 1.10 fixes to 2.32\n-    - snap/squashfs: when installing from seed, try symlink before cp\n-    - wrappers: services which are socket or timer activated should not\n-      be started during boot\n-    - many: generate and use per-snap snap-update-ns profile\n-    - many: support holding refreshes by setting refresh.hold\n-    - snap-confine, snap-seccomp: utilize new seccomp logging features\n-    - many: remove snapd.refresh.{timer,service}\n-    - many: add the snapd-generator\n-    - polkit: do not shadow dbus errors, avoid panic in case of errors\n-    - polkit: ensure error is properly set if dialog is dismissed\n-    - xdgopenproxy: integrate xdg-open implementation into snapctl\n-    - userd: add an OpenFile method for launching local files with xdg-\n-      open\n-    - asserts:  use a timestamp for the assertion after the signing key\n-      has been created\n-    - ifacestate: be consistent passing Retry.After as named field\n-    - interfaces/apparmor,system-key: add upperdir snippets for strict\n-      snaps on livecd\n-      interfaces/apparmor,system-key: add upperdir snippets for strict\n-      snaps\n-    - configstate: when disable \"ssh\" we must disable the \"sshd\"\n-      service\n-    - store: don't ask for snap_yaml_raw except on the details endpoint\n-    - osutil: handle file being matched by multiple patterns\n-    - cmd/snap-update-ns: use recursive bind mounts for writable mimic\n-    - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink\n-    - interfaces/screen-inhibit-control,network-status: fix dbus path\n-      and interface typos\n-    - interfaces/network-status: fix use of '/' in interface in DBus\n-      rule\n-    - interfaces/screen-inhibit-control: fix use of '.' in path in DBus\n-      rule\n-    - overlord/snapstate: fix task iteration order in\n-      TestDoPrereqRetryWhenBaseInFlight\n-    - interfaces: add an interface for gnome-online-accounts D-Bus\n-      service\n-    - snap: pass full timer spec in `snap run --timer`\n-    - cmd/snap: introduce `snap run --timer`\n-    - snapstate: auto install default-providers for content snaps\n-    - hooks/strutil: limit the number of data read from the hooks to\n-      avoid oom\n-    - osutil: aggregate mockable symbols\n-    - tests: make sure snapd is running before attempting to remove\n-      leftover snaps\n-    - timeutil: account for 24h wrap when flattening clock spans\n-    - many: send  new Snap-CDN header with none or with cloud instance\n-      placement info as needed\n-    - cmd/snap-update-ns,testutil: move syscall testing helpers\n-    - tests: disable interfaces-location-control on s390x\n-    - tests: new spread test for gpio-memory-control interface\n-    - tests: spread test for broadcom-asic-control interface\n-    - tests: make restore of interfaces-password-manager-service more\n-      robust\n-    - tests/lib/prepare-restore: sync journal before rotating and\n-      vacuuming\n-    - overlord/snapstate: use spread in the default refresh schedule\n-    - tests: fixes for autopkgtest in bionic\n-    - timeutil: introduce helpers for checking it time falls inside the\n-      schedule\n-    - cmd/snap-repair,httputil: set snap-repair User-Agent on requests\n-    - vendor: resync formatting of vendor.json\n-    - snapstate/ifacestate: auto-connect tasks\n-    - cmd/snap: also include tracking channel in list output.\n-    - interfaces/apparmor: use snap revision with surrounding '.' when\n-      replacing in glob\n-    - debian,vendor: import github.com/snapcore/squashfs and use\n-    - many: implement \"refresh-mode: {restart,endure,...}\" for services\n-    - daemon: make the ast-inspecting test smarter; drop 'exceptions'\n-    - tests: new spread test for kvm interface\n-    - cmd/snap: tweaks to 'snap info' output\n-    - snap: remove underscore from version validator regexp\n-    - testutil: add File{Matches,Equals,Contains} checkers.\n-    - snap: improve the version validator's error messages.\n-    - osutil: refactor EnsureFileState to separate out the comparator\n-    - timeutil: fix scheduling on nth weekday of the month\n-    - cmd/snap-update-ns: small refactor for upcoming per-user mounts\n-    - many: rename snappy-app-dev to snap-device-helper\n-    - systemd: add default target for timers\n-    - interfaces: miscellaneous policy updates for home, opengl, time-\n-      control, network, et al\n-    - cmd/snap: linter cleanups\n-    - interfaces/mount: generate per-user mount profiles\n-    - cmd/snap: use proper help strings for `snap userd --help`\n-    - packaging: provide a compat symlink for snappy-app-dev\n-    - interfaces/time-control,netlink-audit: adjust for util-linux\n-      compiled with libaudit\n-    - tests: adding new test to validate the raw-usb interface\n-    - snap: add support for `snap run --gdb`\n-    - interfaces/builtin: allow MM to access login1\n-    - packaging: fix build on sbuild\n-    - store: revert PR#4532 and do not display displayname\n-    - interfaces/mount: add support for per-user mount entries\n-    - cmd/system-shutdown: move sync to be even more pessimistic\n-    - osutil: reimplement IsMounted with LoadMountInfo\n-    - tests/main/ubuntu-core-services: enable snapd.refresh.timer for\n-      the test\n-    - many: don't allow layout construction to silently fail\n-    - interfaces/apparmor: ensure snap-confine profile for reexec is\n-      current\n-    - interfaces/apparmor: generalize apparmor load and unload helpers\n-    - tests: removing packages which are not needed anymore to generate\n-      random data\n-    - snap: improve `snap run` comments/naming\n-    - snap: allow options for --strace, e.g. `snap run --strace=\"-tt\"`\n-    - tests: fix spread test failures on 18.04\n-    - systemd: update comment on SocketsTarget\n-    - osutil: add and update docstrings\n-    - osutil: parse mount entries without options field\n-    - interfaces: mock away real mountinfo/fstab\n-    - many: move /lib/udev/snappy-app-dev to /usr/lib/snapd/snappy-app-\n-      dev\n-    - overlord/snapstate/backend: perform cleanup if snap setup fails\n-    - tests/lib/prepare: disable snapd.refresh.timer\n-    - daemon: remove redundant UserOK markings from api commands\n-    - snap: introduce  timer service data types and validation\n-    - cmd/snap: fix UX of snap services\n-    - daemon: allow `snapctl get` from any uid\n-    - debian, snap: only static link libseccomp in snap-seccomp on\n-      ubuntu\n-    - all: snap versions are now validated\n-    - many: add nfs-home flag to system-key\n-    - snap: disallow layouts in various special directories\n-    - cmd/snap: add help for service commands.\n-    - devicestate: fix autopkgtest failure in\n-      TestDoRequestSerialErrorsOnNoHost\n-    - snap,interfaces: allow using bind-file layouts\n-    - many: move mount code to osutil\n-    - snap: understand directories in layout blacklist\n-    - snap: use custom unsquashfsStderrWriter for unsquashfs error\n-      detection\n-    - tests/main/user-data-handling: get rid of ordering bug\n-    - snap: exclude `gettimeofday` from `snap run --strace`\n-    - tests: check if snapd.socket is active before stoping it\n-    - snap: sort layout elements before validating\n-    - strutil: introducing MatchCounter\n-    - snap: detect unsquashfs write failures\n-    - spread: add missing ubuntu-18.04-arm64 to available autopkgtest\n-      machines\n-    - cmd/snap-confine: allow mounting anywhere, effectively\n-    - daemon: improve ucrednet code for the snap.socket\n-    - release, interfaces: add new release.AppArmorFeatures helper\n-    - snap: apply some golint suggestions\n-    - many: add interfaces.SystemKey() helper\n-    - tests: new snaps to test installs nightly\n-    - tests: skip alsa interface test when the system does not have any\n-      audio devices\n-    - debian/rules: workaround for\n-      https://github.com/golang/go/issues/23721\n-    - interfaces/apparmor: early support for snap-update-ns snippets\n-    - wrappers: cleanup enabled service sockets\n-    - cmd/snap-update-ns: large refactor / update of unit tests\n-    - interfaces/apparmor: remove leaked future layout code\n-    - many: allow constructing layouts (phase 1)\n-    - data/systemd: for debugging/testing use /etc/environment also for\n-      snap-repair runs\n-    - cmd/snap-confine: create lib/{gl,gl32,vulkan} under /var/lib/snapd\n-      and chown as root:root\n-    - overlord/configstate/config: make [GS]etSnapConfig use *RawMessage\n-    - daemon: refactor snapFooMany helpers a little\n-    - cmd/snap-confine: allow snap-update-ns to chown things\n-    - interfaces/apparmor: use a helper to set the scope\n-    - overlord/configstate/config: make SetSnapConfig delete on empty\n-    - osutil: make MkdirAllChown clean the path passed in\n-    - many: at seeding try to capture cloud information into core config\n-      under \"cloud\"\n-    - cmd/snap: add completion conversion helper to increase DRY\n-    - many: remove \"content\" argument from snaptest.MockSnap()\n-    - osutil: allow using many globs in EnsureDirState\n-    - cmd/snap-confine: fix read-only filesystem when mounting nvidia\n-      files in biarch\n-    - tests: use root path to /home/test/tmp to avoid lack of space\n-      issue\n-    - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of\n-      packaging\n-    - tests: update kill-timeout focused on making tests pass on boards\n-    - advisor: ensure commands.db has mode 0644 and add test\n-    - snap: improve validation of snap layouts\n-    - tests: ensure disabled services are masked\n-    - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()\n-    - systemd, wrappers: start all snap services in one systemctl call\n-    - mir: software clients need access to shared memory /dev/shm/#*\n-    - snap: add support for `snap advise-snap pkgName`\n-    - snap: fix command-not-found on core devices\n-    - tests: new spead test for openvswitch-support interface\n-    - tests: add integration for local snap licenses\n-    - config: add (Get|Set)SnapConfig to do bulk config e.g. from\n-      snapshots\n-    - cmd/snap: display snap license information\n-    - tests: enable content sharing test for $SNAP\n-    - osutil: add ContextWriter and RunWithContext helpers.\n-    - osutil: add DirExists and IsDirNotExist\n-\n- -- Michael Vogt   Sat, 24 Mar 2018 08:23:31 +0100\n-\n-snapd (2.31.2) xenial; urgency=medium\n-\n-  *  New upstream release, LP: #1745217\n-    - many: add the snapd-generator\n-    - polkit: ensure error is properly set if dialog is dismissed\n-    - xdgopenproxy: integrate xdg-open implementation into snapctl\n-    - userd: add an OpenFile method for launching local files with xdg-\n-      open\n-    - configstate: when disable \"ssh\" we must disable the \"sshd\"\n-      service\n-    - many: remove snapd.refresh.{timer,service}\n-    - interfaces/builtin: allow MM to access login1\n-    - timeutil: account for 24h wrap when flattening clock spans\n-    - interfaces/screen-inhibit-control,network-status: fix dbus path\n-      and interface typos\n-    - systemd, wrappers: start all snap services in one systemctl\n-      call\n-    - tests: disable interfaces-location-control on s390x\n-\n- -- Michael Vogt   Fri, 09 Mar 2018 11:11:31 +0100\n-\n-snapd (2.31.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1745217\n-    - tests: multiple autopkgtest related fixes for 18.04\n-    - overlord/snapstate: use spread in the default refresh schedule\n-    - timeutil: fix scheduling on nth weekday of the month\n-    - interfaces: miscellaneous policy updates for home, opengl, time-\n-      control, network, et al\n-    - cmd/snap: use proper help strings for `snap userd --help`\n-    - interfaces/time-control,netlink-audit: adjust for util-linux\n-      compiled with libaudit\n-    - rules: do not static link on powerpc\n-    - packaging: revert LDFLAGS rewrite again after building snap-\n-      seccomp\n-    - store: revert PR#4532 and do not display displayname\n-    - daemon: allow `snapctl get` from any uid\n-    - debian, snap: only static link libseccomp in snap-seccomp on\n-      ubuntu\n-    - daemon: improve ucrednet code for the snap.socket\n-\n- -- Michael Vogt   Tue, 20 Feb 2018 17:27:42 +0100\n-\n-snapd (2.31) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1745217\n-    - cmd/snap-confine: allow snap-update-ns to chown things\n-    - cmd/snap-confine: fix read-only filesystem when mounting nvidia\n-      files in biarch\n-    - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of\n-      packaging\n-    - advisor: ensure commands.db has mode 0644 and add test\n-    - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()\n-    - snap: improve validation of snap layoutsRules for validating\n-      layouts:\n-    - snap: fix command-not-found on core devices\n-    - cmd/snap: display snap license information\n-    - tests: enable content sharing test for $SNAP\n-    - userd: add support for a simple UI that can be used from userd\n-    - snap-confine/nvidia: Support legacy biarch trees for GLVND systems\n-    - tests: generic detection of gadget and kernel snaps\n-    - cmd/snap-update-ns: refactor and improve Change.Perform to handle\n-      EROFS\n-    - cmd/snap: improve output when snaps were found in a section or the\n-      section is invalid\n-    - cmd/snap-confine,tests: hide message about stale base snap\n-    - cmd/snap-mgmt: fix out of source tree build\n-    - strutil/quantity: new package that exports formatFoo (from\n-      progress)\n-    - cmd/snap: snap refresh --time with new and legacy schedules\n-    - state: unknown tasks handler\n-    - cmd/snap-confine,data/systemd: fix removal of snaps inside LXD\n-    - snap: add io.snapcraft.Settings to `snap userd`\n-    - spread: remove more EOLed releases\n-    - snap: tidy up top-level help output\n-    - snap: fix race in `snap run --strace`\n-    - tests: update \"searching\" test to match store changes\n-    - store: use the \"publisher\" when populating the \"publisher\" field\n-    - snap: make `snap find --section` show all sections\n-    - tests: new test to validate location control interface\n-    - many: add new `snap refresh --amend ` command\n-    - tests/main/kernel-snap-refresh-on-core: skip the whole test if\n-      edge and stable are the same version\n-    - tests: set test kernel-snap-refresh-on-core to manual\n-    - tests: new spread test for interface gpg-keys\n-    - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial\n-      fix\n-    - interfaces: miscellaneous policy updates\n-    - interfaces/builtin: Replace Solus support with GLVND support\n-    - tests/main/kernel-snap-refresh-on-core: do not fail if edge and\n-      stable kernels are the same version\n-    - snap: add `snap run --strace` to be able to strace snap apps\n-    - tests: new spread test for ssh-keys interface\n-    - errtracker: include detected virtualisation\n-    - tests: add new kernel refresh/revert test for spread-cron\n-    - interfaces/builtin: blacklist zigbee dongle\n-    - cmd/snap-confine: discard stale mount namespaces\n-    - cmd: remove unused execArg0/execEnv\n-    - snap,interfaces/mount: disallow nobody/nogroup\n-    - cmd/snap: improve `snap aliases` output when no aliases are\n-      defined\n-    - tests/lib/snaps/test-snapd-service: refactor service reload\n-    - tests: new spread test for gpg-public-keys interface\n-    - tests: new spread test for ssh-public-keys interface\n-    - spread: setup machine creation on Linode\n-    - interfaces/builtin: allow introspecting UDisks2\n-    - interfaces/builtin: add support for content \"source\" section\n-    - tests: new spread test for netlink-audit interface\n-    - daemon: avoid panic'ing building an error response w/no snaps\n-      given\n-    - interfaces/mount,snap: early support for snap layouts\n-    - daemon: unlock state even if RefreshSchedule() fails\n-    - arch: add \"armv8l\" to ubuntuArchFromKernelArch table\n-    - tests: fix for test interface-netlink-connector\n-    - data/dbus: add AssumedAppArmorLabel=unconfined\n-    - advisor: use forked bolt to make it work on ppc\n-    - overlord/snapstate: record the 'kind' of conflicting change\n-    - dirs: fix snap mount dir on Manjaro\n-    - overlord/{snapstate,configstate}, daemon: introduce refresh.timer,\n-      fallback to refresh.schedule\n-    - config: add support for `snap set core proxy.no_proxy=...`\n-    - snap-mgmt: extend spread tests, stop, disable and cleanup snap\n-      services\n-    - spread.yaml: add fedora 27\n-    - cmd/snap-confine: allow snap-update-ns to poke writable holes in\n-      $SNAP\n-    - packaging/14.04: move linux-generic-lts-xenial to recommends\n-    - osutil/sys: ppc has 32-bit getuid already\n-    - snapstate: make no autorefresh message clearer\n-    - spread: try to enable Fedora once more\n-    - overlord/snapstate: do a minimal sanity check on containers\n-    - configcore: ensure config.txt has a final newline\n-    - cmd/libsnap-confine-private: print failed mount/umount regardless\n-      of SNAP_CONFINE_DEBUG\n-    - debian/tests: add missing autopkgtest test dependencies for debian\n-    - image: port ini handling to goconfigparser\n-    - tests/main/snap-service-after-before: add test for after/before\n-      service ordering\n-    - tests: enabling opensuse for tests\n-    - tests: update auto-refresh-private to match messages from current\n-      master\n-    - dirs: check if distro 'is like' fedora when picking path to\n-      libexecdir\n-    - tests: fix \"job canceled\" issue and improve cleanup for snaps\n-    - cmd/libsnap-confine-private: add debug build of libsnap-confine-\n-      private.a, link it into snap-confine-debug\n-    - vendor: remove x/sys/unix to fix builds on arm64 and powerpc\n-    - image: let consume snapcraft export-login files from tooling\n-    - interfaces/mir: allow Wayland socket and non-root sockets\n-    - interfaces/builtin: use snap.{Plug,Slot}Info over\n-      interfaces.{Plug,Slot}\n-    - tests: add simple snap-mgmt test\n-    - wrappers: autogenerate After/Before in systemd's service files for\n-      apps\n-    - snap: add usage hints in `snap download`\n-    - snap: provide more meaningful errors for installMany and friends\n-    - cmd/snap: show header/footer when `snap find` is used without\n-      arguments\n-    - overlord/snapstate: for Enable's tasks refer to the first task\n-      with snap-setup, do not duplicate\n-    - tests: add hard-coded fully expired macaroons to run related tests\n-    - cmd/snap-update-ns: new test features\n-    - cmd/snap-update-ns: we don't want to bind mount symlinks\n-    - interfaces/mount: test OptsToCommonFlags, filter out x-snapd.\n-      options\n-    - cmd/snap-update-ns: untangle upcoming cyclic initialization\n-    - client, daemon: update user's email when logging in with new\n-      account\n-    - tests: ensure snap-confine apparmor profile is parsable\n-    - snap: do not leak internal errors on install/refresh etc\n-    - snap: fix missing error check when multiple snaps are refreshed\n-    - spread: trying to re-enable tests on Fedora\n-    - snap: fix gadget.yaml parsing for multi volume gadgets\n-    - snap: give the snap.Container interface a Walk method\n-    - snap: rename `snap advise-command` to `snap advise-snap --command`\n-    - overlord/snapstate: no refresh just for hints if there was a\n-      recent regular full refresh\n-    - progress: switch ansimeter's Spin() to use a spinner\n-    - snap: support `command-not-found` symlink for `snap advise-\n-      command`\n-    - daemon: store email, ID and macaroon when creating a new user\n-    - snap: app startup after/before validation\n-    - timeutil: refresh timer take 2\n-    - store, daemon/api: Rename MyAppsServer, point to\n-      dashboard.snapcraft.io instead\n-    - tests: use \"quiet\" helper instead of \"dnf -q\" to get errors on\n-      failures\n-    - cmd/snap-update-ns: improve mocking for tests\n-    - many: implement the advisor backend, populate it from the store\n-    - tests: make less calls to the package manager\n-    - tests/main/confinement-classic: enable the test on Fedora\n-    - snap: do not leak internal network errors to the user\n-    - snap: use stdout instead of stderr for \"fetching\" message\n-    - tests: fix test whoami, share successful_login.exp\n-    - many: refresh with appropriate creds\n-    - snap: add new `snap advice-command` skeleton\n-    - tests: add test that ensures we never parse versions as numbers\n-    - overlord/snapstate: override Snapstate.UserID in refresh if the\n-      installing user is gone\n-    - interfaces: allow socket \"shutdown\" syscall in default profile\n-    - snap: print friendly message if `snap keys` is empty\n-    - cmd/snap-update-ns: add execWritableMimic\n-    - snap: make `snap info invalid-snap` output more user friendly\n-    - cmd/snap,  tests/main/classic-confinement: fix snap-exec path when\n-      running under classic confinement\n-    - overlord/ifacestate: fix disable/enable cycle to setup security\n-    - snap: fix snap find \" \" output\n-    - daemon: add new polkit action to manage interfaces\n-    - packaging/arch: disable services when removing\n-    - asserts/signtool: support for building tools on top that fill-\n-      in/compute some headers\n-    - cmd: clarify \"This leaves %s tracking %s.\" message\n-    - daemon: return \"bad-query\" error kind for store.ErrBadQuery\n-    - taskrunner/many: KnownTaskKinds helper\n-    - tests/main/interfaces-fuse_support: fix confinement, allow\n-      unmount, fix spread tests\n-    - snap: use the -no-fragments mksquashfs option\n-    - data/selinux: allow messages from policykit\n-    - tests: fix catalog-update wait loop\n-    - tests/lib/prepare-restore: disable rate limiting in journald\n-    - tests: change interfaces-fuse_support to be debug friendly\n-    - tests/main/postrm-purge: stop snapd before purge\n-    - This is an example of test log:https://paste.ubuntu.com/26215170/\n-    - tests/main/interfaces-fuse_support: dump more debugging\n-      information\n-    - interfaces/dbus: adjust slot policy for listen, accept and accept4\n-      syscalls\n-    - tests: save the snapd-state without compression\n-    - tests/main/searching: handle changes in featured snaps list\n-    - overlord/snapstate: fix auto-refresh summary for 2 snaps\n-    - overlord/auth,daemon: introduce an explicit auth.ErrInvalidUser\n-    - interfaces: add /proc/partitions to system-observe (This addresses\n-      LP#1708527.)\n-    - tests/lib: introduce helpers for setting up /dev/random using\n-      /dev/urandom in project prepare\n-    - tests: new test for interface network status\n-    - interfaces: interfaces: also add an app/hook-specific udev RUN\n-      rule for hotplugging\n-    - tests: fix external backend for tests that need DEBUG output\n-    - tests: do not disable refresh timer on external backend\n-    - client: send all snap related bool json fields\n-    - interfaces/desktop,unity7: allow status/activate/lock of\n-      screensavers\n-    - tests/main: source mkpinentry.sh\n-    - tests: fix security-device-cgroups-serial-port test for rpi and db\n-    - cmd/snap-mgmt: add more directories for cleanup and refactor\n-      purge() code\n-    - snap: YAML and data structures for app before/after ordering\n-    - tests: set TRUST_TEST_KEYS=false for all the external backends\n-    - packaging/arch: install snap-mgmt tool\n-    - tests: add support on tests for cm3 gadget\n-    - interfaces/removable-media: also allow 'k' (lock)\n-    - interfaces: use ConnectedPlug/ConnectedSlot types (step 2)\n-    - interfaces: rename sanitize methods\n-    - devicestate: fix misbehaving test when using systemd-resolved\n-    - interfaces: added Ref() helpers, restored more detailed error\n-      message on spi iface\n-    - debian: make \"gnupg\" a recommends\n-    - interfaces/many: misc updates for default, browser-support,\n-      opengl, desktop, unity7, x11\n-    - interfaces: PlugInfo/SlotInfo/ConnectedPlug/ConnectedSlot\n-      attribute helpers\n-    - interfaces: update fixme comments\n-    - tests: make interfaces-snapd-control-with-manage more robust\n-    - userd: generalize dbusInterface\n-    - interfaces: use ConnectedPlug/ConnectedSlot types (step 1)\n-    - hookstate: add compat \"configure-snapd\" task.\n-    - config, overlord/snapstate, timeutil: rename ParseSchedule to\n-      ParseLegacySchedule\n-    - tests: adding tests for time*-control interfaces\n-    - tests: new test to check interfaces after reboot the system\n-    - cmd/snap-mgmt: fixes\n-    - packaging/opensuse-42.2: package and use snap-mgmt\n-    - corecfg: also \"mask\" services when disabling them\n-    - cmd/snap-mgmt: introduce snap-mgmt tool\n-    - configstate: simplify ConfigManager\n-    - interfaces: add gpio-memory-control interface\n-    - cmd: disable check-syntax-c\n-    - packaging/arch: add bash-completion as optional dependency\n-    - corecfg: rename package to overlord/configstate/configcore\n-    - wrappers: fix unit tests to use dirs.SnapMountDir\n-    - osutil/sys: reimplement getuid and chown with the right int type\n-    - interfaces-netlink-connector: fix sourcing snaps.sh\n-\n- -- Michael Vogt   Tue, 06 Feb 2018 09:43:22 +0100\n-\n-snapd (2.30) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1735344\n-    - tests: set TRUST_TEST_KEYS=false for all the external backends\n-    - tests: fix external backend for tests that need DEBUG output\n-    - tests: do not disable refresh timer on external backend\n-    - client: send all snap related bool json fields\n-    - interfaces: interfaces: also add an app/hook-specific udev RUN\n-      rule for hotplugging\n-    - interfaces/desktop,unity7: allow status/activate/lock of\n-      screensavers\n-    - tests/main: source mkpinentry.sh\n-    - devicestate: use a different nowhere domain\n-    - interfaces: add ssh-keys, ssh-public-keys, gpg-keys and gpg-public\n-      keys interfaces\n-    - interfaces/many: misc updates for default, browser-support, opengl,\n-      desktop, unity7, x11\n-    - devicestate: fix misbehaving test when using systemd-resolved\n-    - interfaces/removable-media: also allow 'k' (lock)\n-    - interfaces/many: misc updates for default, browser-support,\n-      opengl, desktop, unity7, x11\n-    - corecfg: also \"mask\" services when disabling them\n-    - tests: add support for autopkgtests on s390x\n-    - snapstate: support for pre-refresh hook\n-    - many: allow to configure core before it is installed\n-    - devicestate: fix unkeyed fields error\n-    - snap-confine: create mount target for lib32,vulkan on demand\n-    - snapstate: add support for refresh.schedule=managed\n-    - cmd/snap-update-ns: teach update logic to handle synthetic changes\n-    - many: remove configure-snapd task again and handle internally\n-    - snap: fix TestDirAndFileMethods() test to work with gccgo\n-    - debian: ensure /var/lib/snapd/lib/vulkan is available\n-    - cmd/snap-confine: use #include instead of bare include\n-    - snapstate: store userID in snapstate\n-    - snapd.dirs: add var/lib/snapd/lib/gl32\n-    - timeutil, overlod/snapstate: cleanup remaining pieces of timeutil\n-      weekday support\n-    - packaging/arch: install missing directories, manpages and version\n-      info\n-    - snapstate,store: store if a snap is a paid snap in the sideinfo\n-    - packaging/arch: pre-create snapd directories when packaging\n-    - tests/main/manpages: set LC_ALL=C as man may complain if the\n-      locale is unset or unsupported\n-    - repo: ConnectedPlug and ConnectedSlot types\n-    - snapd: fix handling of undo in the taskrunner\n-    - store: fix download caching and add integration test\n-    - snapstate: move autorefresh code into autoRefresh helper\n-    - snapctl: don't error out on start/stop/restart from configure hook\n-      during install or refresh\n-    - cmd/snap-update-ns: add planWritableMimic\n-    - deamon: don't omit responses, even if null\n-    - tests: add test for frame buffer interface\n-    - tests/lib: fix shellcheck errors\n-    - apparmor: generate the snap-confine re-exec profile for\n-      AppArmor{Partial,Full}\n-    - tests: remove obsolete workaround\n-    - snap: use existing files in `snap download` if digest/size matches\n-    - tests: merge pepare-project.sh into prepare-restore.sh\n-    - tests: cache snaps to $TESTSLIB/cache\n-    - tests: set -e, -o pipefail in prepare-restore.sh\n-    - apparmor: generate the snap-confine re-exec profile for\n-      AppArmor{Partial,Full}\n-    - cmd/snap-seccomp: fix uid/gid restrictions tests on Arch\n-    - tests: document and slightly refactor prepare/restore code\n-    - snapstate: ensure RefreshSchedule() gives accurate results\n-    - snapstate: add new refresh-hints helper and use it\n-    - spread.yaml,tests: move most of project-wide prepare/restore to\n-      separate file\n-    - timeutil: introduce helpers for weekdays and TimeOfDay\n-    - tests: adding new test for uhid interface\n-    - cmd/libsnap: fix parsing of empty mountinfo fields\n-    - overlord/devicestate:  best effort to go to early full retries for\n-      registration on the like of DNS no host\n-    - spread.yaml: bump delta ref to 2.29\n-    - tests: adding test to test physical memory observe interface\n-    - cmd, errtracker: get rid of SNAP_DID_REEXEC environment\n-    - timeutil: remove support to parse weekday schedules\n-    - snap-confine: add workaround for snap-confine on 4.13/upstream\n-    - store: do not log the http body for catalog updates\n-    - snapstate: move catalogRefresh into its own helper\n-    - spread.yaml: fix shellcheck issues and trivial refactor\n-    - spread.yaml: move prepare-each closer to restore-each\n-    - spread.yaml: increase workers for opensuse to 3\n-    - tests: force delete when tests are restore to avoid suite failure\n-    - test: ignore /snap/README\n-    - interfaces/opengl: also allow read on 'revision' in\n-      /sys/devices/pci...\n-    - interfaces/screen-inhibit-control: fix case in screen inhibit\n-      control\n-    - asserts/sysdb: panic early if pointed to staging but staging keys\n-      are not compiled-in\n-    - interfaces: allow /bin/chown and fchownat to root:root\n-    - timeutil: include test input in error message in\n-      TestParseSchedule()\n-    - interfaces/browser-support: adjust base declaration for auto-\n-      connection\n-    - snap-confine: fix snap-confine under lxd\n-    - store: bit less aggressive retry strategy\n-    - tests: add new `fakestore new-snap-{declaration,revision}` helpers\n-    - cmd/snap-update-ns: add secureMkfileAll\n-    - snap: use field names when initializing composite literals\n-    - HACKING: fix path in snap install\n-    - store: add support for flags in ListRefresh()\n-    - interfaces: remove invalid plugs/slots from SnapInfo on\n-      sanitization.\n-    - debian: add missing udev dependency\n-    - snap/validate: extend socket validation tests\n-    - interfaces: add \"refresh-schedule\" attribute to snapd-control\n-    - interfaces/builtin/account_control: use gid owning /etc/shadow to\n-      setup seccomp rules\n-    - cmd/snap-update-ns: tweak changePerform\n-    - interfaces,tests: skip unknown plug/slot interfaces\n-    - tests: disable interfaces-network-control-tuntap\n-    - cmd: use a preinit_array function rather than parsing\n-      /proc/self/cmdline\n-    - interfaces/time*_control: explicitly deny noisy read on\n-      /proc/1/environ\n-    - cmd/snap-update-ns: misc cleanups\n-    - snapd: allow hooks to have slots\n-    - fakestore: add go-flags to prepare for `new-snap-declaration` cmd\n-    - interfaces/browser-support: add shm path for nwjs\n-    - many: add magic /snap/README file\n-    - overlord/snapstate: support completion for command aliases\n-    - tests: re-enable tun/tap test on Debian\n-    - snap,wrappers: add support for socket activation\n-    - repo: use PlugInfo and SlotInfo for permanent plugs/slots\n-    - tests/interfaces-network-control-tuntap: disable on debian-\n-      unstable for now\n-    - cmd/snap-confine: Loosen the NVIDIA Vulkan ICD glob\n-    - cmd/snap-update-ns: detect and report read-only filesystems\n-    - cmd/snap-update-ns: re-factor secureMkdirAll into\n-      secureMk{Prefix,Dir}\n-    - run-checks, tests/lib/snaps/: shellcheck fixes\n-    - corecfg: validate refresh.schedule when it is applied\n-    - tests: adjust test to match stderr\n-    - snapd: fix snap cookie bugs\n-    - packaging/arch: do not quote MAKEFLAGS\n-    - state: add change.LaneTasks helper\n-    - cmd/snap-update-ns: do not assume 'nogroup' exists\n-    - tests/lib: handle distro specific grub-editenv naming\n-    - cmd/snap-confine: Add missing bi-arch NVIDIA filesthe\n-      `/var/lib/snapd/lib/gl:/var/lib/snapd/lib/gl/vdpau` paths within\n-    - cmd: Support exposing NVIDIA Vulkan ICD files to the snaps\n-    - cmd/snap-confine: Implement full 32-bit NVIDIA driver support\n-    - packaging/arch: packaging update\n-    - cmd/snap-confine: Support bash as base runtime entry\n-    - wrappers: do not error on incorrect Exec= lines\n-    - interfaces: fix udev tagging for hooks\n-    - tests/set-proxy-store: exclude ubuntu-core-16 via systems: key\n-    - tests: new tests for network setup control and observe interfaces\n-    - osutil: add helper for obtaining group ID of given file path\n-    - daemon,overlord/snapstate: return snap-not-installed error in more\n-      cases\n-    - interfaces/builtin/lxd_support: allow discovering of host's os-\n-      release\n-    - configstate: add support for configure-snapd for\n-      snapstate.IgnoreHookError\n-    - tests:  add a spread test for proxy.store setting together with\n-      store assertion\n-    - cmd/snap-seccomp: do not use group 'shadow' in tests\n-    - asserts/assertstest:  fix use of hardcoded value when the passed\n-      or default keys should be used\n-    - interfaces/many: misc policy updates for browser-support, cups-\n-      control and network-status\n-    - tests: fix xdg-open-compat\n-    - daemon: for /v2/logs, 404 when no services are found\n-    - packaging/fedora: Merge changes from Fedora Dist-Git\n-    - cmd/snap-update-ns: add new helpers for mount entries\n-    - cmd/snap-confine: Respect biarch nature of libdirs\n-    - cmd/snap-confine: Ensure snap-confine is allowed to access os-\n-      release\n-    - cmd: fix re-exec bug with classic confinement for host snapd <\n-      2.28\n-    - interfaces/kmod: simplify loadModules now that errors are ignored\n-    - tests: disable xdg-open-compat test\n-    - tests: add test that checks core reverts on core devices\n-    - dirs: use alt root when checking classic confinement support\n-      without \u2026\n-    - interfaces/kmod: treat failure to load module as non-fatal\n-    - cmd/snap-update-ns: fix golint and some stale comments\n-    - corecfg:  support setting proxy.store if there's a matching store\n-      assertion\n-    - overlord/snapstate: toggle ignore-validation as needed as we do\n-      for channel\n-    - tests: fix security-device-cgroup* tests on devices with\n-      framebuffer\n-    - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS\n-    - interfaces: add USB interface number attribute in udev rule for\n-      serial-port interface\n-    - overlord/devicestate: switch to the new endpoints for registration\n-    - snap-update-ns: add missing unit test for desired/current profile\n-      handling\n-    - cmd/{snap-confine,libsnap-confine-private,snap-shutdown}: cleanup\n-      low-level C bits\n-    - ifacestate: make interfaces.Repository available via state cache\n-    - overlord/snapstate: cleanups around switch-snap*\n-    - cmd/snapd,client,daemon: display ignore-validation flag through\n-      the notes mechanism\n-    - cmd/snap-update-ns: add logging to snap-update-ns\n-    - many: have a timestamp on store assertions\n-    - many: lookup and use the URL from a store assertion if one is set\n-      for use\n-    - tests/test-snapd-service: fix shellcheck issues\n-    - tests: new test for hardware-random-control interface\n-    - tests: use `snap change --last=install` in snapd-reexec test\n-    - repo, daemon: use PlugInfo, SlotInfo\n-    - many: handle core configuration internally instead of using the\n-      core configure hook\n-    - tests: refactor and expand content interface test\n-    - snap-seccomp: skip in-kernel bpf tests for socket() in trusty/i386\n-    - cmd/snap-update-ns: allow Change.Perform to return changes\n-    - snap-confine: Support biarch Linux distribution confinement\n-    - partition/ubootenv: don't panic when uboot.env is missing the eof\n-      marker\n-    - cmd/snap-update-ns: allow fault injection to provide dynamic\n-      result\n-    - interfaces/mount: exspose mount.{Escape,Unescape}\n-    - snapctl: added long help to stop/start/restart command\n-    - cmd/snap-update-ns: create missing mount points automatically.\n-    - cmd: downgrade log message in InternalToolPath to Debugf()\n-    - tests: wait for service status change & file update in the test to\n-      avoid races\n-    - daemon, store: forward SSO invalid credentials errors as 401\n-      Unauthorized responses\n-    - spdx: fix for WITH syntax, require a license name before the\n-      operator\n-    - many: reorg things in preparation to make handling of the base url\n-      in store dynamic\n-    - hooks/configure: queue service restarts\n-    - cmd/snap: warn when a snap is not from the tracking channel\n-    - interfaces/mount: add support for parsing x-snapd.{mode,uid,gid}=\n-    - cmd/snap-confine: add detection of stale mount namespace\n-    - interfaces: add plugRef/slotRef helpers for PlugInfo/SlotInfo\n-    - tests: check for invalid udev files during all tests\n-    - daemon: use newChange() in changeAliases for consistency\n-    - servicestate: use taskset\n-    - many: add support for /home on NFS\n-    - packaging,spread: fix and re-enable opensuse builds\n-\n- -- Michael Vogt   Mon, 18 Dec 2017 15:31:04 +0100\n-\n-snapd (2.29.4.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1726258\n-    - tests: more debug info for classic-ubuntu-core-transition\n-    - packaging: fix typo that causes error in the misspell test\n-\n- -- Michael Vogt   Tue, 28 Nov 2017 07:45:23 +0100\n-\n-snapd (2.29.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1726258\n-    - snap-confine: fix snap-confine under lxd\n-    - tests: disable classic-ubuntu-core-transition on i386 temporarily\n-    - many: reject bad plugs/slots\n-    - interfaces,tests: skip unknown plug/slot interfaces\n-    - store: enable \"base\" field from the store\n-    - packaging/fedora: Merge changes from Fedora Dist-Git\n-\n- -- Michael Vogt   Fri, 17 Nov 2017 22:55:09 +0100\n-\n-snapd (2.29.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1726258\n-    - daemon: cherry-picked /v2/logs fixes\n-    - cmd/snap-confine: Respect biarch nature of libdirs\n-    - cmd/snap-confine: Ensure snap-confine is allowed to access os-\n-      release\n-    - interfaces: fix udev tagging for hooks\n-    - cmd: fix re-exec bug with classic confinement for host snapd\n-    - tests: disable xdg-open-compat test\n-    - cmd/snap-confine: add slave PTYs and let devpts newinstance\n-      perform mediation\n-    - interfaces/many: misc policy updates for browser-support, cups-\n-      control and network-status\n-    - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS\n-    - tests: fix security-device-cgroup* tests on devices with\n-      framebuffer\n-\n- -- Michael Vogt   Thu, 09 Nov 2017 19:16:29 +0100\n-\n-snapd (2.29.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1726258\n-    - snapctl: disable stop/start/restart (2.29)\n-    - cmd/snap-update-ns: fix collection of changes made\n-\n- -- Michael Vogt   Fri, 03 Nov 2017 17:17:14 +0100\n-\n-snapd (2.29.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1726258\n-    - interfaces: fix incorrect signature of ofono DBusPermanentSlot\n-    - interfaces/serial-port: udev tag plugged slots that have just\n-      'path' via KERNEL\n-    - interfaces/hidraw: udev tag plugged slots that have just 'path'\n-      via KERNEL\n-    - interfaces/uhid: unconditionally add existing uhid device to the\n-      device cgroup\n-    - cmd/snap-update-ns: fix mount rules for font sharing\n-    - tests: disable refresh-undo test on trusty for now\n-    - tests: use `snap change --last=install` in snapd-reexec test\n-    - Revert \" wrappers: fail install if exec-line cannot be re-written\n-    - interfaces: don't udev tag devmode or classic snaps\n-    - many: make ignore-validation sticky and send the flag with refresh\n-      requests\n-\n- -- Michael Vogt   Fri, 03 Nov 2017 07:25:17 +0100\n-\n-snapd (2.29) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1726258\n-    - interfaces/many: miscellaneous updates based on feedback from the\n-      field\n-    - snap-confine: allow reading uevents from any where in /sys\n-    - spread: add bionic beaver\n-    - debian: make packaging/ubuntu-14.04/copyright a real file again\n-    - tests: cherry pick the fix for services test into 2.29\n-    - cmd/snap-update-ns: initialize logger\n-    - hooks/configure: queue service restarts\n-    - snap-{confine,seccomp}: make @unrestricted fully unrestricted\n-    - interfaces: clean system apparmor cache on core device\n-    - debian: do not build static snap-exec on powerpc\n-    - snap-confine: increase sanity_timeout to 6s\n-    - snapctl: cherry pick service commands changes\n-    - cmd/snap: tell translators about arg names and descs req's\n-    - systemd: run all mount units before snapd.service to avoid race\n-    - store: add a test to show auth failures are forwarded by doRequest\n-    - daemon: convert ErrInvalidCredentials to a 401 Unauthorized error.\n-    - store: forward on INVALID_CREDENTIALS error as\n-      ErrInvalidCredentials\n-    - daemon: generate a forbidden response message if polkit dialog is\n-      dismissed\n-    - daemon: Allow Polkit authorization to cancel changes.\n-    - travis: switch to container based test runs\n-    - interfaces: reduce duplicated code in interface tests mocks\n-    - tests: improve revert related testing\n-    - interfaces: sanitize plugs and slots early in ReadInfo\n-    - store: add download caching\n-    - preserve TMPDIR and HOSTALIASES across snap-confine invocation\n-    - snap-confine: init all arrays with `= {0,}`\n-    - tests: adding test for network-manager interface\n-    - interfaces/mount: don't generate legacy per-hook/per-app mount\n-      profiles\n-    - snap: introduce structured epochs\n-    - tests: fix interfaces-cups-control test for cups-2.2.5\n-    - snap-confine: cleanup incorrectly created nvidia udev tags\n-    - cmd/snap-confine: update valid security tag regexp\n-    - cmd/libsnap: enable two stranded tests\n-    - cmd,packaging: enable apparmor on openSUSE\n-    - overlord/ifacestate: refresh all security backends on startup\n-    - interfaces/dbus: drop unneeded check for\n-      release.ReleaseInfo.ForceDevMode\n-    - dbus: ensure io.snapcraft.Launcher.service is created on re-\n-      exec\n-    - overlord/auth: continue for now supporting UBUNTU_STORE_ID if the\n-      model is generic-classic\n-    - snap-confine: add support for handling /dev/nvidia-modeset\n-    - interfaces/network-control: remove incorrect rules for tun\n-    - spread: allow setting SPREAD_DEBUG_EACH=0 to disable debug-each\n-      section\n-    - packaging: remove .mnt files on removal\n-    - tests: fix econnreset scenario when the iptables rule was not\n-      created\n-    - tests: add test for lxd interface\n-    - run-checks: use nakedret static checker to check for naked\n-      returns on long functions\n-    - progress: be more flexible in testing ansimeter\n-    - interfaces: fix udev rules for tun\n-    - many: implement our own ANSI-escape-using progress indicator\n-    - snap-exec: update tests to follow main_test pattern\n-    - snap: support \"command: foo $ENV_STRING\"\n-    - packaging: update nvidia configure options\n-    - snap: add new `snap pack` and use in tests\n-    - cmd: correctly name the \"Ubuntu\" and \"Arch\" NVIDIA methods\n-    - cmd: add autogen case for solus\n-    - tests: do not use http://canihazip.com/ which appears to be down\n-    - hooks: commands for controlling own services from snapctl\n-    - snap: refactor cmdGet.Execute()\n-    - interfaces/mount: make Change.Perform testable and test it\n-    - interfaces/mount,cmd/snap-update-ns: move change code\n-    - snap-confine: is_running_on_classic_distribution() looks into os-\n-      release\n-    - interfaces: misc updates for default, browser-support, home and\n-      system-observe\n-    - interfaces: deny lttng by default\n-    - interfaces/lxd: lxd slot implementation can also be an app snap\n-    - release,cmd,dirs: Redo the distro checks to take into account\n-      distribution families\n-    - cmd/snap: completion for alias and unalias\n-    - snap-confine: add new SC_CLEANUP and use it\n-    - snap: refrain from running filepath.Base on random strings\n-    - cmd/snap-confine: put processes into freezer hierarchy\n-    - wrappers: fail install if exec-line cannot be re-written\n-    - cmd/snap-seccomp,osutil: make user/group lookup functions public\n-    - snapstate: deal with snap user data in the /root/ directory\n-    - interfaces: Enhance full-confinement support for biarch\n-      distributions\n-    - snap-confine: Only attempt to copy/mount NVIDIA libs when NVIDIA\n-      is used\n-    - packaging/fedora: Add Fedora 26, 27, and Rawhide symlinks\n-    - overlord/snapstate: prefer a smaller corner case for doing the\n-      wrong thing\n-    - cmd/snap-repair:  set user agent for snap-repair http requests\n-    - packaging: bring down the delta between 14.04 and 16.04\n-    - snap-confine: Ensure lib64 biarch directory is respected\n-    - snap-confine: update apparmor rules for fedora based base snaps\n-    - tests: Increase SNAPD_CONFIGURE_HOOK_TIMEOUT to 3 minutes to\n-      install real snaps\n-    - daemon: use client.Snap instead of map[string]interface{} for\n-      snaps.\n-    - hooks: rename refresh hook to post-refresh\n-    - git: make the .gitingore file a bit more targeted\n-    - interfaces/opengl: don't udev tag nvidia devices and use snap-\n-      confine instead\n-    - cmd/snap-{confine,update-ns}: apply mount profiles using snap-\n-      update-ns\n-    - cmd: update \"make hack\"\n-    - interfaces/system-observe: allow clients to enumerate DBus\n-      connection names\n-    - snap-repair: implement `snap-repair {list,show}`\n-    - dirs,interfaces: create snap-confine.d on demand when re-executing\n-    - snap-confine: fix base snaps on core\n-    - cmd/snap-repair: fix tests when running as root\n-    - interfaces: add Connection type\n-    - cmd/snap-repair: skip disabled repairs\n-    - cmd/snap-repair: prefer leaking unmanaged fds on test failure over\n-      closing random ones\n-    - snap-repair: make `repair` binary available for repair scripts\n-    - snap-repair: fix missing Close() in TestStatusHappy\n-    - cmd/snap-confine,packaging: import snapd-generated policy\n-    - cmd/snap: return empty document if snap has no configuration\n-    - snap-seccomp: run secondary-arch tests via gcc-multilib\n-    - snap: implement `snap {repair,repairs}` and pass-through to snap-\n-      repair\n-    - interfaces/builtin: allow receiving dbus messages\n-    - snap-repair: implement `snap-repair {done,skip,retry}`\n-    - data/completion: small tweak to snap completion snippet\n-    - dirs: fix classic support detection\n-    - cmd/snap-repair: integrate root public keys for repairs\n-    - tests: fix ubuntu core services\n-    - tests: add new test that checks that the compat snapd-xdg-open\n-      works\n-    - snap-confine: improve error message if core/u-core cannot be found\n-    - tests: only run tests/regression/nmcli on amd64\n-    - interfaces: mount host system fonts in desktop interface\n-    - interfaces: enable partial apparmor support\n-    - snapstate: auto-install missing base snaps\n-    - spread: work around temporary packaging issue in debian sid\n-    - asserts,cmd/snap-repair: introduce a mandatory summary for repairs\n-    - asserts,cmd/snap-repair: represent RepairID internally as an int\n-    - tests: test the real \"xdg-open\" from the core snap\n-    - many: implement fetching sections and package names periodically.\n-    - interfaces/network: allow using netcat as client\n-    - snap-seccomp, osutil: use osutil.AtomicFile in snap-seccomp\n-    - snap-seccomp: skip mknod syscall on arm64\n-    - tests: add trivial canonical-livepatch test\n-    - tests: add test that ensures that all core services are working\n-    - many: add logger.MockLogger() and use it in the tests\n-    - snap-repair: fix test failure in TestRepairHitsTimeout\n-    - asserts: add empty values check in HeadersFromPrimaryKey\n-    - daemon: remove unused installSnap var in test\n-    - daemon: reach for Overlord.Loop less thanks to overlord.Mock\n-    - snap-seccomp: manually resolve socket() call in tests\n-    - tests: change regex used to validate installed ubuntu core snap\n-    - cmd/snapctl: allow snapctl -h without a context (regression fix).\n-    - many: use snapcore/snapd/i18n instead of i18n/dumb\n-    - many: introduce asserts.NotFoundError replacing both ErrNotFound\n-      and store.AssertionNotFoundError\n-    - packaging: don't include any marcos in comments\n-    - overlord: use overlord.Mock in more tests, make sure we check the\n-      outcome of Settle\n-    - tests: try to fix staging tests\n-    - store: simplify api base url config\n-    - systemd: add systemd.MockJournalctl()\n-    - many: provide systemd.MockSystemctl() helper\n-    - tests: improve the listing test to not fail for e.g. 2.28~rc2\n-    - snapstate: give snapmgrTestSuite.settle() more time to settle\n-    - tests: fix regex to check core version on snap list\n-    - debian: update trusted account-keys check on 14.04 packaging\n-    - interfaces: add udev netlink support to hardware-observe\n-    - overlord: introduce Mock which enables to use Overlord.Settle for\n-      settle in many more places\n-    - snap-repair: execute the repair and capture logs/status\n-    - tests: run the tests/unit/go everywhere\n-    - daemon, snapstate: move ensureCore from daemon/api.go into\n-      snapstate.go\n-    - cmd/snap: get keys or root document\n-    - spread.yaml: turn suse to manual given that it's breaking master\n-    - many: configure store from state, reconfigure store at runtime\n-    - osutil: AtomicWriter (an io.Writer), and io.Reader versions of\n-      AtomicWrite*\n-    - tests: check for negative syscalls in runBpf() and skip those\n-      tests\n-    - docs: use abolute path in PULL_REQUEST_TEMPLATE.md\n-    - store: move device auth endpoint uris to config (#3831)\n-\n- -- Michael Vogt   Mon, 30 Oct 2017 16:22:31 +0100\n-\n-snapd (2.28.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1714984\n-    - snap-confine: cleanup broken nvidia udev tags\n-    - cmd/snap-confine: update valid security tag regexp\n-    - overlord/ifacestate: refresh udev backend on startup\n-    - dbus: ensure io.snapcraft.Launcher.service is created on re-\n-      exec\n-    - snap-confine: add support for handling /dev/nvidia-modeset\n-    - interfaces/network-control: remove incorrect rules for tun\n-\n- -- Michael Vogt   Fri, 13 Oct 2017 23:25:46 +0200\n-\n-snapd (2.28.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1714984\n-    - interfaces/opengl: don't udev tag nvidia devices and use snap-\n-      confine instead\n-    - debian: fix replaces/breaks for snap-xdg-open (thanks to apw!)\n-\n- -- Michael Vogt   Wed, 11 Oct 2017 19:40:57 +0200\n-\n-snapd (2.28.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1714984\n-    - interfaces/lxd: lxd slot implementation can also be an app\n-      snap\n-\n- -- Michael Vogt   Wed, 11 Oct 2017 08:20:26 +0200\n-\n-snapd (2.28.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1714984\n-    - interfaces: fix udev rules for tun\n-    - release,cmd,dirs: Redo the distro checks to take into account\n-      distribution families\n-\n- -- Michael Vogt   Tue, 10 Oct 2017 18:39:58 +0200\n-\n-snapd (2.28.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1714984\n-    - snap-confine: update apparmor rules for fedora based basesnaps\n-    - snapstate: rename refresh hook to post-refresh for consistency\n-\n- -- Michael Vogt   Wed, 27 Sep 2017 17:59:49 -0400\n-\n-snapd (2.28) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1714984\n-    - hooks: rename refresh to after-refresh\n-    - snap-confine: bind mount /usr/lib/snapd relative to snap-confine\n-    - cmd,dirs: treat \"liri\" the same way as \"arch\"\n-    - snap-confine: fix base snaps on core\n-    - hooks: substitute env vars when executing hooks\n-    - interfaces: updates for default, browser-support, desktop, opengl,\n-      upower and stub-resolv.conf\n-    - cmd,dirs: treat manjaro the same as arch\n-    - systemd: do not run auto-import and repair services on classic\n-    - packaging/fedora: Ensure vendor/ is empty for builds and fix spec\n-      to build current master\n-    - many: fix TestSetConfNumber missing an Unlock and other fragility\n-      improvements\n-    - osutil: adjust StreamCommand tests for golang 1.9\n-    - daemon: allow polkit authorisation to install/remove snaps\n-    - tests: make TestCmdWatch more robust\n-    - debian: improve package description\n-    - interfaces: add netlink kobject uevent to hardware observe\n-    - debian: update trusted account-keys check on 14.04 packaging\n-    - interfaces/network-{control,observe}: allow receiving\n-      kobject_uevent() messages\n-    - tests: fix lxd test for external backend\n-    - snap-confine,snap-update-ns: add -no-pie to fix FTBFS on\n-      go1.7,ppc64\n-    - corecfg: mock \"systemctl\" in all corecfg tests\n-    - tests: fix unit tests on Ubuntu 14.04\n-    - debian: add missing flags when building static snap-exec\n-    - many: end-to-end support for the bare base snap\n-    - overlord/snapstate: SetRootDir from SetUpTest, not in just some\n-      tests\n-    - store: have an ad-hoc method on cfg to get its list of uris for\n-      tests\n-    - daemon: let client decide whether to allow interactive auth via\n-      polkit\n-    - client,daemon,snap,store: add license field\n-    - overlord/snapstate: rename HasCurrent to IsInstalled, remove\n-      superfluous/misleading check from All\n-    - cmd/snap: SetRootDir from SetUpTest, not in just some individual\n-      tests.\n-    - systemd: rename snap-repair.{service,timer} to snapd.snap-\n-      repair.{service,timer}\n-    - snap-seccomp: remove use of x/net/bpf from tests\n-    - httputil: more naive per go version way to recreate a default\n-      transport for tls reconfig\n-    - cmd/snap-seccomp/main_test.go: add one more syscall for arm64\n-    - interfaces/opengl: use == to compare, not =\n-    - cmd/snap-seccomp/main_test.go: add syscalls for armhf and arm64\n-    - cmd/snap-repair: track and use a lower bound for the time for\n-      TLS\u00a0checks\n-    - interfaces: expose bluez interface on classic OS\n-    - snap-seccomp: add in-kernel bpf tests\n-    - overlord: always try to get a serial, lazily on classic\n-    - tests: add nmcli regression test\n-    - tests: deal with __PNR_chown on aarch64 to fix FTBFS on arm64\n-    - tests: add autopilot-introspection interface test\n-    - vendor: fix artifact from manually editing vendor/vendor.json\n-    - tests: rename complexion to test-snapd-complexion\n-    - interfaces: add desktop and desktop-legacy\n-      interfaces/desktop: add new 'desktop' interface for modern DEs\n-      interfaces/builtin/desktop_test.go: use modern testing techniques\n-      interfaces/wayland: allow read on /etc/drirc for Plasma desktop\n-      interfaces/desktop-legacy: add new 'legacy' interface (currently\n-      for a11y and input)\n-    - tests: fix race in snap userd test\n-    - devices/iio: add read/write for missing sysfs entries\n-    - spread: don't set HTTPS?_PROXY for linode\n-    - cmd/snap-repair: check signatures of repairs from Next\n-    - env: set XDG_DATA_DIRS for wayland et.al.\n-    - interfaces/{default,account-control}: Use username/group instead\n-      of uid/gid\n-    - interfaces/builtin: use udev tagging more broadly\n-    - tests: add basic lxd test\n-    - wrappers: ensure bash completion snaps install on core\n-    - vendor: use old golang.org/x/crypto/ssh/terminal to build on\n-      powerpc again\n-    - docs: add PULL_REQUEST_TEMPLATE.md\n-    - interfaces: fix network-manager plug\n-    - hooks: do not error out when hook is optional and no hook handler\n-      is registered\n-    - cmd/snap: add userd command to replace snapd-xdg-open\n-    - tests: new regex used to validate the core version on extra snaps\n-      ass...\n-    - snap: add new `snap switch` command\n-    - tests: wait more and more debug info about fakestore start issues\n-    - apparmor,release: add better apparmor detection/mocking code\n-    - interfaces/i2c: adjust sysfs rule for alternate paths\n-    - interfaces/apparmor: add missing call to dirs.SetRootDir\n-    - cmd: \"make hack\" now also installs snap-update-ns\n-    - tests: copy files with less verbosity\n-    - cmd/snap-confine: allow using additional libraries required by\n-      openSUSE\n-    - packaging/fedora: Merge changes from Fedora Dist-Git\n-    - snapstate: improve the error message when classic confinement is\n-      not supported\n-    - tests: add test to ensure amd64 can run i386 syscall binaries\n-    - tests: adding extra info for fakestore when fails to start\n-    - tests: install most important snaps\n-    - cmd/snap-repair: more test coverage of filtering\n-    - squashfs: remove runCommand/runCommandWithOutput as we do not need\n-      it\n-    - cmd/snap-repair: ignore superseded revisions, filter on arch and\n-      models\n-    - hooks: support for refresh hook\n-    - Partial revert \"overlord/devicestate, store: update device auth\n-      endpoints URLs\"\n-    - cmd/snap-confine: allow reading /proc/filesystems\n-    - cmd/snap-confine: genearlize apparmor profile for various lib\n-      layout\n-    - corecfg: fix proxy.* writing and add integration test\n-    - corecfg: deal with system.power-key-action=\"\" correctly\n-    - vendor: update vendor.json after (presumed) manual edits\n-    - cmd/snap: in `snap info`, don't print a newline between tracks\n-    - daemon: add polkit support to /v2/login\n-    - snapd,snapctl: decode json using Number\n-    - client: fix go vet 1.7 errors\n-    - tests: make 17.04 shellcheck clean\n-    - tests: remove TestInterfacesHelp as it breaks when go-flags\n-      changes\n-    - snapstate: undo a daemon restart on classic if needed\n-    - cmd/snap-repair: recover brand/model from\n-      /var/lib/snapd/seed/assertions checking signatures and brand\n-      account\n-    - spread: opt into unsafe IO during spread tests\n-    - snap-repair: update snap-repair/runner_test.go for API change in\n-      makeMockServer\n-    - cmd/snap-repair: skeleton code around actually running a repair\n-    - tests: wait until the port is listening after start the fake store\n-    - corecfg: fix typo in tests\n-    - cmd/snap-repair: test that redirects works during fetching\n-    - osutil: honor SNAPD_UNSAFE_IO for testing\n-    - vendor: explode and make more precise our golang.go/x/crypto deps,\n-      use same version as Debian unstable\n-    - many: sanitize NewStoreStack signature, have shared default store\n-      test private keys\n-    - systemd: disable `Nice=-5` to fix error when running inside lxd\n-    - spread.yaml: update delta ref to 2.27\n-    - cmd/snap-repair: use E-Tags when refetching a repair to retry\n-    - interfaces/many: updates based on chromium and mrrescue denials\n-    - cmd/snap-repair: implement most logic to get the next repair to\n-      run/retry in a brand sequence\n-    - asserts/assertstest: copy headers in SigningDB.Sign\n-    - interfaces: convert uhid to common interface and test cases\n-      improvement for time_control and opengl\n-    - many tests: move all panicing fake store methods to a common place\n-    - asserts: add store assertion type\n-    - interfaces: don't crash if content slot has no attributes\n-    - debian: do not build with -buildmode=pie on i386\n-    - wrappers: symlink completion snippets when symlinking binaries\n-    - tests: adding more debug information for the interfaces-cups-\n-      control \u2026\n-    - apparmor: pass --quiet to parser on load unless SNAPD_DEBUG is set\n-    - many: allow and support serials signed by the 'generic' authority\n-      instead of the brand\n-    - corecfg: add proxy configuration via `snap set core\n-      proxy.{http,https,ftp}=...`\n-    - interfaces: a bunch of interfaces test improvement\n-    - tests: enable regression and completion suites for opensuse\n-    - tests: installing snapd for nested test suite\n-    - interfaces: convert lxd_support to common iface\n-    - interfaces: add missing test for camera interface.\n-    - snap: add support for parsing snap layout section\n-    - cmd/snap-repair: like for downloads we cannot have a timeout (at\n-      least for now), less aggressive retry strategies\n-    - overlord: rely on more conservative ensure interval\n-    - overlord,store: no piles of return args for methods gathering\n-      device session request params\n-    - overlord,store: send model assertion when setting up device\n-      sessions\n-    - interfaces/misc: updates for unity7/x11, browser-\n-      support, network-control and mount-observe\n-      interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT\n-      interfaces/browser-support: update sysfs reads for\n-      newer browser versions, interfaces/network-control: rw for\n-      ieee80211 advanced wireless interfaces/mount-observe: allow read\n-      on sysfs entries for block devices\n-    - tests: use dnf --refresh install to avert stale cache\n-    - osutil: ensure TestLockUnlockWorks uses supported flock\n-    - interfaces: convert lxd to common iface\n-    - tests: restart snapd to ensure re-exec settings are applied\n-    - tests: fix interfaces-cups-control test\n-    - interfaces: improve and tweak bunch of interfaces test cases.\n-    - tests: adding extra worker for fedora\n-    - asserts,overlord/devicestate: support predefined assertions that\n-      don't establish foundational trust\n-    - interfaces: convert two hardware_random interfaces to common iface\n-    - interfaces: convert io_ports_control to common iface\n-    - tests: fix for  upgrade test on fedora\n-    - daemon, client, cmd/snap: implement snap start/stop/restart\n-    - cmd/snap-confine: set _FILE_OFFSET_BITS to 64\n-    - interfaces: covert framebuffer to commonInterface\n-    - interfaces: convert joystick to common iface\n-    - interfaces/builtin: add the spi interface\n-    - wrappers, overlord/snapstate/backend: make link-snap clean up on\n-      failure.\n-    - interfaces/wayland: add wayland interface\n-    - interfaces: convert kvm to common iface\n-    - tests: extend upower-observe test to cover snaps providing slots\n-    - tests: enable main suite for opensuse\n-    - interfaces: convert physical_memory_observe to common iface\n-    - interfaces: add missing test for optical_drive interface.\n-    - interfaces: convert physical_memory_control to common iface\n-    - interfaces: convert ppp to common iface\n-    - interfaces: convert time-control to common iface\n-    - tests: fix failover test\n-    - interfaces/builtin: rework for avahi interface\n-    - interfaces: convert broadcom-asic-control to common iface\n-    - snap/snapenv: document the use of CoreSnapMountDir for SNAP\n-    - packaging/arch: drop patches merged into master\n-    - cmd: fix mustUnsetenv docstring (thanks to Chipaca)\n-    - release: remove default from VERSION_ID\n-    - tests: enable regression, upgrade and completion test suites for\n-      fedora\n-    - tests: restore interfaces-account-control properly\n-    - overlord/devicestate, store: update device auth endpoints URLs\n-    - tests: fix install-hook test failure\n-    - tests: download core and ubuntu-core at most once\n-    - interfaces: add common support for udev\n-    - overlord/devicestate: fix, don't assume that the serial is backed\n-      by a 1-key chain\n-    - cmd/snap-confine: don't share /etc/nsswitch from host\n-    - store: do not resume a download when we already have the whole\n-      thing\n-    - many: implement \"snap logs\"\n-    - store: don't call useDeltas() twice in quick succession\n-    - interfaces/builtin: add kvm interface\n-    - snap/snapenv: always expect /snap for $SNAP\n-    - cmd: mark arch as non-reexecing distro\n-    - cmd: fix tests that assume /snap mount\n-    - gitignore: ignore more build artefacts\n-    - packaging: add current arch packaging\n-    - interfaces/unity7: allow receiving media key events in (at least)\n-      gnome-shell\n-    - interfaces/many, cmd/snap-confine: miscellaneous policy updates\n-    - interfaces/builtin: implement broadcom-asic-control interface\n-    - interfaces/builtin: reduce duplication and remove cruft in\n-      Sanitize{Plug,Slot}\n-    - tests: apply underscore convention for SNAPMOUNTDIR variable\n-    - interfaces/greengrass-support: adjust accesses now that have\n-      working snap\n-    - daemon, client, cmd/snap: implement \"snap services\"\n-    - tests: fix refresh tests not stopping fake store for fedora\n-    - many: add the interface command\n-    - overlord/snapstate/backend: some copydata improvements\n-    - many: support querying and completing assertion type names\n-    - interfaces/builtin: discard empty Validate{Plug,Slot}\n-    - cmd/snap-repair:  start of Runner, implement first pass of Peek\n-      and Fetch\n-    - tests: enable main suite on fedora\n-    - snap: do not always quote the snap info summary\n-    - vendor: update go-flags to address crash in \"snap debug\"\n-    - interfaces: opengl support pci device and vendor\n-    - many: start implenting \"base\" snap type on the snapd side\n-    - arch,release: map armv6 correctly\n-    - many: expose service status in 'snap info'\n-    - tests: add browser-support interface test\n-    - tests: disable snapd-notify for the external backend\n-    - interfaces: Add /run/uuid/request to openvswitch\n-    - interfaces: add password-manager-service implicit classic\n-      interface\n-    - cmd: rework reexec detection\n-    - cmd: fix re-exec bug when starting from snapd 2.21\n-    - tests: dependency packages installed during prepare-project\n-    - tests: remove unneeded check for re-exec in InternalToolPath()\n-    - cmd,tests: fix classic confinement confusing re-execution code\n-    - store: configurable base api\n-    - tests: fix how package lists are updated for opensuse and fedora\n-\n- -- Michael Vogt   Mon, 25 Sep 2017 12:07:34 -0400\n-\n-snapd (2.27.6) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1703798:\n-    - interfaces: add udev netlink support to hardware-observe\n-    - interfaces/network-{control,observe}: allow receiving\n-      kobject_uevent() messages\n-\n- -- Michael Vogt   Thu, 07 Sep 2017 10:22:18 +0200\n-\n-snapd (2.27.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1703798:\n-    - interfaces: fix network-manager plug regression\n-    - hooks: do not error when hook handler is not registered\n-    - interfaces/alsa,pulseaudio: allow read on udev data for sound\n-    - interfaces/optical-drive: read access to udev data for /dev/scd*\n-    - interfaces/browser-support: read on /proc/vmstat and misc udev\n-      data\n-\n- -- Michael Vogt   Wed, 30 Aug 2017 07:32:20 +0200\n-\n-snapd (2.27.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1703798:\n-    - snap-seccomp: add secondary arch for unrestricted snaps as well\n-\n- -- Michael Vogt   Thu, 24 Aug 2017 08:51:22 +0200\n-\n-snapd (2.27.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1703798:\n-    - systemd: disable `Nice=-5` to fix error when running inside lxdSee\n-      https://bugs.launchpad.net/snapd/+bug/1709536\n-\n- -- Michael Vogt   Fri, 18 Aug 2017 15:49:56 +0200\n-\n-snapd (2.27.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1703798:\n-    - tests: remove TestInterfacesHelp as it breaks when go-flags\n-      changes\n-    - interfaces: don't crash if content slot has no attributes\n-    - debian: do not build with -buildmode=pie on i386\n-    - interfaces: backport broadcom-asic-control interface\n-    - interfaces: allow /usr/bin/xdg-open in unity7\n-    - store: do not resume a download when we already have the whole\n-      thing\n-\n- -- Michael Vogt   Wed, 16 Aug 2017 12:14:51 +0200\n-\n-snapd (2.27.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1703798:\n-    - tests: use dnf --refresh install to avert stale cache\n-    - tests: fix test failure on 14.04 due to old version of\n-      flock\n-    - updates for unity7/x11, browser-support, network-control,\n-      mount-observe\n-    - interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT\n-    - interfaces/browser-support: update sysfs reads for\n-      newer browser versions\n-    - interfaces/network-control: rw for ieee80211 advanced wireless\n-    - interfaces/mount-observe: allow read on sysfs entries for block\n-      devices\n-\n- -- Michael Vogt   Mon, 14 Aug 2017 08:02:17 +0200\n-\n-snapd (2.27) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1703798\n-    - fix build failure on 32bit fedora\n-    - interfaces: add password-manager-service implicit classic interface\n-    - interfaces/greengrass-support: adjust accesses now that have working\n-      snap\n-    - interfaces/many, cmd/snap-confine: miscellaneous policy updates\n-    - interfaces/unity7: allow receiving media key events in (at least)\n-      gnome-shell\n-    - cmd: fix re-exec bug when starting from snapd 2.21\n-    - tests: restore interfaces-account-control properly\n-    - cmd: fix tests that assume /snap mount\n-    - cmd: mark arch as non-reexecing distro\n-    - snap-confine: don't share /etc/nsswitch from host\n-    - store: talk to api.snapcraft.io for purchases\n-    - hooks: support for install and remove hooks\n-    - packaging: fix Fedora support\n-    - tests: add bluetooth-control interface test\n-    - store: talk to api.snapcraft.io for assertions\n-    - tests: remove snapd before building from branch\n-    - tests: add avahi-observe interface test\n-    - store: orders API now checks if customer is ready\n-    - cmd/snap: snap find only searches stable\n-    - interfaces: updates default, mir, optical-observe, system-observe,\n-      screen-inhibit-control and unity7\n-    - tests: speedup prepare statement part 1\n-    - store: do not send empty refresh requests\n-    - asserts: fix error handling in snap-developer consistency check\n-    - systemd: add explicit sync to snapd.core-fixup.sh\n-    - snapd: generate snap cookies on startup\n-    - cmd,client,daemon: expose \"force devmode\" in sysinfo\n-    - many: introduce and use strutil.ListContains and also\n-      strutil.SortedListContains\n-    - assserts,overlord/assertstate: test we don't accept chains of\n-      assertions founded on a self-signed key coming externally\n-    - interfaces: enable access to bridge settings\n-    - interfaces: fix copy-pasted iio vs io in io-ports-control\n-    - cmd/snap-confine: various small fixes and tweaks to seccomp\n-      support code\n-    - interfaces: bring back seccomp argument filtering\n-    - systemd, osutil: rework systemd logs in preparation for services\n-      commands\n-    - tests: store /etc/systemd/system/snap-*core*.mount in snapd-\n-      state.tar.gz\n-    - tests: shellcheck improvements for tests/main tasks - first set of\n-      tests\n-    - cmd/snap: `--last` for abort and watch, and aliases\n-      (search\u2192find, change\u2192tasks)\n-    - tests: shellcheck improvements for tests/lib scripts\n-    - tests: create ramdisk if it's not present\n-    - tests: shellcheck improvements for nightly upgrade and regressions\n-      tests\n-    - snapd: fix for snapctl get panic on null config values.\n-    - tests: fix for rng-tools service not restarting\n-    - systemd: add snapd.core-fixup.service unit\n-    - cmd: avoid using current symlink in InternalToolPath\n-    - tests: fix timeout issue for test refresh core with hanging \u2026\n-    - intefaces: control bridged vlan/ppoe-tagged traffic\n-    - cmd/snap: include snap type in notes\n-    - overlord/state: Abort() only visits each task once\n-    - tests: extend find-private test to cover more cases\n-    - snap-seccomp: skip socket() tests on systems that use socketcall()\n-      instead of socket()\n-    - many: support snap title as localized/title-cased name\n-    - snap-seccomp: deal with mknod on aarch64 in the seccomp tests\n-    - interfaces: put base policy fragments inside each interface\n-    - asserts: introduce NewDecoderWithTypeMaxBodySize\n-    - tests: fix snapd-notify when it takes more time to restart\n-    - snap-seccomp: fix snap-seccomp tests in artful\n-    - tests: fix for create-key task to avoid rng-tools service ramains\n-      alive\n-    - snap-seccomp: make sure snap-seccomp writes the bpf file\n-      atomically\n-    - tests: do not disable ipv6 on core systems\n-    - arch: the kernel architecture name is armv7l instead of armv7\n-    - snap-confine: ensure snap-confine waits some seconds for seccomp\n-      security profiles\n-    - tests: shellcheck improvements for tests/nested tasks\n-    - wrappers: add SyslogIdentifier to the service unit files.\n-    - tests: shellcheck improvements for unit tasks\n-    - asserts: implement FindManyTrusted as well\n-    - asserts: open up and optimize Encoder to help avoiding unnecessary\n-      copying\n-    - interfaces: simplify snap-confine by just loading pre-generated\n-      bpf code\n-    - tests: restart rng-tools services after few seconds\n-    - interfaces, tests: add mising dbus abstraction to system-observe\n-      and extend spread test\n-    - store: change main store host to api.snapcraft.io\n-    - overlord/cmdstate: new package for running commands as tasks.\n-    - spread: help libapt resolve installing libudev-dev\n-    - tests: show the IP from .travis.yaml\n-    - tests/main: use pkgdb function in more test cases\n-    - cmd,daemon: add debug command for displaying the base policy\n-    - tests: prevent quoting error on opensuse\n-    - tests: fix nightly suite\n-    - tests: add linode-sru backend\n-    - snap-confine: validate SNAP_NAME against security tag\n-    - tests: fix ipv6 disable for ubuntu-core\n-    - tests: extend core-revert test to cover bluez issues\n-    - interfaces/greengrass-support: add support for Amazon Greengrass\n-      as a snap\n-    - asserts: support timestamp and optional disabled header on repair\n-    - tests: reboot after upgrading to snapd on the -proposed pocket\n-    - many: fix test cases to work with different DistroLibExecDir\n-    - tests: reenable help test on ubuntu and debian systems\n-    - packaging/{opensuse,fedora}: allow package build with testkeys\n-      included\n-    - tests/lib: generalize RPM build support\n-    - interfaces/builtin: sync connected slot and permanent slot snippet\n-    - tests: fix snap create-key by restarting automatically rng-tools\n-    - many: switch to use http numeric statuses as agreed\n-    - debian: add missing  Type=notify in 14.04 packaging\n-    - tests: mark interfaces-openvswitch as manual due to prepare errors\n-    - debian: unify built_using between the 14.04 and 16.04 packaging\n-      branch\n-    - tests: pull from urandom when real entropy is not enough\n-    - tests/main/manpages: install missing man package\n-    - tests: add refresh --time output check\n-    - debian: add missing \"make -C data/systemd clean\"\n-    - tests: fix for upgrade test when it is repeated\n-    - tests/main: use dir abstraction in a few more test cases\n-    - tests/main: check for confinement in a few more interface tests\n-    - spread: add fedora snap bin dir to global PATH\n-    - tests: check that locale-control is not present on core\n-    - many: snapctl outside hooks\n-    - tests: add whoami check\n-    - interfaces: compose the base declaration from interfaces\n-    - tests: fix spread flaky tests linode\n-    - tests,packaging: add package build support for openSUSE\n-    - many: slight improvement of some snap error messaging\n-    - errtracker: Include /etc/apparmor.d/usr.lib.snap-confine md5sum in\n-      err reports\n-    - tests: fix for the test postrm-purge\n-    - tests: restoring the /etc/environment and service units config for\n-      each test\n-    - daemon: make snapd a \"Type=notify\" daemon and notify when startup\n-      is done\n-    - cmd/snap-confine: add support for --base snap\n-    - many: derive implicit slots from interface meta-data\n-    - tests: add core revert test\n-    - tests,packaging: add package build support for Fedora for our\n-      spread setup\n-    - interfaces: move base declaration to the policy sub-package\n-    - tests: fix for snapd-reexec test cheking for restart info on debug\n-      log\n-    - tests: show available entropy on error\n-    - tests: clean journalctl logs on trusty\n-    - tests: fix econnreset on staging\n-    - tests: modify core before calling set\n-    - tests: add snap-confine privilege test\n-    - tests: add staging snap-id\n-    - interfaces/builtin: silence ptrace denial for network-manager\n-    - tests: add alsa interface spread test\n-    - tests: prefer ipv4 over ipv6\n-    - tests: fix for econnreset test checking that the download already\n-      started\n-    - httputil,store: extract retry code to httputil, reorg usages\n-    - errtracker: report if snapd did re-execute itself\n-    - errtracker: include bits of snap-confine apparmor profile\n-    - tests: take into account staging snap-ids for snap-info\n-    - cmd: add stub new snap-repair command and add timer\n-    - many: stop \"snap refresh $x --channel invalid\" from working\n-    - interfaces: revert \"interfaces: re-add reverted ioctl and quotactl\n-    - snapstate: consider connect/disconnect tasks in\n-      CheckChangeConflict.\n-    - interfaces: disable \"mknod |N\" in the default seccomp template\n-      again\n-    - interfaces,overlord/ifacestate: make sure installing slots after\n-      plugs works similarly to plugs after slots\n-    - interfaces/seccomp: add bind() syscall for forced-devmode systems\n-    - packaging/fedora: Sync packaging from Fedora Dist-Git\n-    - tests: move static and unit tests to spread task\n-    - many: error types should be called FooError, not ErrFoo.\n-    - partition: add directory sync to the save uboot.env file code\n-    - cmd: test everything (100% coverage \\o/)\n-    - many: make shell scripts shellcheck-clean\n-    - tests: remove additional setup for docker on core\n-    - interfaces: add summary to each interface\n-    - many: remove interface meta-data from list of connections\n-    - logger (& many more, to accommodate): drop explicit syslog.\n-    - packaging: import packaging bits for opensuse\n-    - snapstate,many: implement snap install --unaliased\n-    - tests/lib: abstract build dependency installation a bit more\n-    - interfaces, osutil: move flock code from interfaces/mount to\n-      osutil\n-    - cmd: auto import assertions only from ext4,vfat file systems\n-    - many: refactor in preparation for 'snap start'\n-    - overlord/snapstate: have an explicit code path last-refresh\n-      unset/zero => immediately refresh try\n-    - tests: fixes for executions using the staging store\n-    - tests: use pollinate to seed the rng\n-    - cmd/snap,tests: show the sha3-384 of the snap for snap info\n-      --verbose SNAP-FILE\n-    - asserts: simplify and adjust repair assertion definition\n-    - cmd/snap,tests: show the snap id if available in snap info\n-    - daemon,overlord/auth: store from model assertion wins\n-    - cmd/snap,tests/main: add confinement switch instead of spread\n-      system blacklisting\n-    - many: cleanup MockCommands and don't leave a process around after\n-      hookstate tests\n-    - tests: update listing test to the core version number schema\n-    - interfaces: allow snaps to use the timedatectl utility\n-    - packaging: Add Fedora packaging files\n-    - tests/libs: add distro_auto_remove_packages function\n-    - cmd/snap: correct devmode note for anomalous state\n-    - tests/main/snap-info: use proper pkgdb functions to install distro\n-      packages\n-    - tests/lib: use mktemp instead of tempfile to work cross-distro\n-    - tests: abstract common dirs which differ on distributions\n-    - many: model and expose interface meta-data.\n-    - overlord: make config defaults from gadget work also at first boot\n-    - interfaces/log-observe: allow using journalctl from hostfs for\n-      classic distro\n-    - partition,snap: add support for android boot\n-    - errtracker: small simplification around readMachineID\n-    - snap-confine: move rm_rf_tmp to test-utils.\n-    - tests/lib: introduce pkgdb helper library\n-    - errtracker: try multiple paths to read machine-id\n-    - overlord/hooks: make sure only one hook for given snap is executed\n-      at a time.\n-    - cmd/snap-confine: use SNAP_MOUNT_DIR to setup /snap inside the\n-      confinement env\n-    - tests: bump kill-timeout and remove quiet call on build\n-    - tests/lib/snaps: add a test store snap with a passthrough\n-      configure hook\n-    - daemon: teach the daemon to wait on active connections when\n-      shutting down\n-    - tests: remove unit tests task\n-    - tests/main/completion: source from /usr/share/bash-completion\n-    - assertions: add \"repair\" assertion\n-    - interfaces/seccomp: document Backend.NewSpecification\n-    - wrappers: make StartSnapServices cleanup any services that were\n-      added if a later one fails\n-    - overlord/snapstate: avoid creating command aliases for daemons\n-    - vendor: remove unused packages\n-    - vendor,partition: fix panics from uenv\n-    - cmd,interfaces/mount: run snap-update-ns and snap-discard-ns from\n-      core if possible\n-    - daemon: do not allow to install ubuntu-core anymore\n-    - wrappers: service start/stop were inconsistent\n-    - tests: fix failing tests (snap core version, syslog changes)\n-    - cmd/snap-update-ns: add actual implementation\n-    - tests: improve entropy also for ubuntu\n-    - cmd/snap-confine: use /etc/ssl from the core snap\n-    - wrappers: don't convert between []byte and string needlessly.\n-    - hooks: default timeout\n-    - overlord/snapstate: Enable() was ignoring the flags from the\n-      snap's state, resulting in losing \"devmode\" on disable/enable.\n-    - difs,interfaces/mount: add support for locking namespaces\n-    - interfaces/mount: keep track of kept mount entries\n-    - tests/main: move a bunch of greps over to MATCH\n-    - interfaces/builtin: make all interfaces private\n-    - interfaces/mount: spell unmount correctly\n-    - tests: allow 16-X.Y.Z version of core snap\n-    - the timezone_control interface only allows changing /etc/timezone\n-      and /etc/writable/timezone. systemd-timedated also updated the\n-      link of /etc/localtime and /etc/writable/localtime ... allow\n-      access to this file too\n-    - cmd/snap-confine: aggregate operations holding global lock\n-    - api, ifacestate: resolve disconnect early\n-    - interfaces/builtin: ensure we don't register interfaces twice\n-\n- -- Michael Vogt   Thu, 10 Aug 2017 12:43:16 +0200\n-\n-snapd (2.26.14) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - cmd: fix incorrect re-exec when starting from snapd 2.21\n-\n- -- Michael Vogt   Thu, 20 Jul 2017 13:52:05 +0200\n-\n-snapd (2.26.13) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - cmd,tests: fix classic confinement confusing re-execution code\n-    - cmd: fix incorrect check check for re-exec in InternalToolPath()\n-    - snap-seccomp: add secondary arch for unrestricted snaps as well\n-\n- -- Michael Vogt   Tue, 18 Jul 2017 20:34:33 +0200\n-\n-snapd (2.26.10) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - Fix snap-seccomp tests in artful/trusty on i386/s390x/aarch64\n-\n- -- Michael Vogt   Mon, 17 Jul 2017 11:58:22 +0200\n-\n-snapd (2.26.9) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - statically link libseccomp in snap-seccomp to fix refresh issue\n-      on trusty\n-\n- -- Michael Vogt   Wed, 12 Jul 2017 08:27:14 +0200\n-\n-snapd (2.26.8) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - Fix snap-seccomp tests in artful/trusty on i386/s390x/aarch64\n-    - add snapd.core-fixup.service unit\n-    - ensure re-exec uses the right internal tools\n-\n- -- Michael Vogt   Wed, 05 Jul 2017 07:48:22 +0200\n-\n-snapd (2.26.6) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - interfaces: allow snaps to use the timedatectl utility in\n-      time-control\n-\n- -- Michael Vogt   Tue, 27 Jun 2017 08:36:23 +0100\n-\n-snapd (2.26.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - backport of seccomp-bpf branch to the 2.26 release to ensure snap\n-      revert with new seccomp syntax works correctly\n-\n- -- Michael Vogt   Mon, 26 Jun 2017 15:30:15 +0100\n-\n-snapd (2.26.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - partly revert aace15ab53 to unbreak core reverts\n-    - Revert \"interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)\"\n-    - Disable \"mknod |N\" in the default seccomp template\n-      reasons outline in https://forum.snapcraft.io/t/snapd-2-25-blocked-because-of-revert-race-condition\n-    - errtracker: include bits of snap-confine apparmor profile\n-    - errtracker: report if snapd did re-execute itself \n-\n- -- Michael Vogt   Thu, 01 Jun 2017 18:50:52 +0200\n-\n-snapd (2.26.3) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - cherry pick test fixes f0103a6, 9de5c8a, d7725a7 to make\n-      sure the image tests are updated for the changes in the\n-      `snap info core` output and the removal of the rsyslog\n-      package from core.\n-\n- -- Michael Vogt   Wed, 17 May 2017 11:31:56 +0200\n-\n-snapd (2.26.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - cherry pick d444728 to make the uboot.env file parsing more\n-      robust\n-\n- -- Michael Vogt   Tue, 16 May 2017 18:37:07 +0200\n-\n-snapd (2.26.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - store: fix panic error in auth\n-    - tests: the new ubuntu-image snap needs classic confinement, adjust\n-      tests\n-    - cmd/snap-confine: don't fail on pre 3.8 kernel\n-\n- -- Michael Vogt   Thu, 11 May 2017 21:44:27 +0200\n-\n-snapd (2.26) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1690083\n-    - timeutil: avoid panicking when the window is very small\n-    - image: fix go vet issue\n-    - overlord/ifacestate: don't spam logs with harmless auto-connect\n-      messages\n-    - interfaces/builtin: add network-status interface\n-    - interfaces/builtin: add online-accounts-service interface\n-    - interfaces/builtin: distribute code of touching allInterfaces\n-    - interfaces: API additions for interface hooks\n-    - interfaces/builtin: add storage-framework-service interface\n-    - tests: disable create-key test on ppc64el for artful (expect not\n-      working)\n-    - snap: make `snap prepare-image --extra-snaps` derive side info\n-    - tests: unify tests/{main/completion,completion}/lib.exp0\n-    - cmd/snap: tweak info channels output\n-    - interfaces: ensure that legacy interface methods are unused\n-    - packaging: cleanup how built-using is generated\n-    - tests: extend kernel-module-control interface test\n-    - interfaces/network: workaround Go's need for NETLINK_ROUTE with\n-      'net'.\n-    - cmd/snap-confine: use defensive argument parser\n-    - tests: add test for empty snap name on revert\n-    - overlord/hookstate: remove unused Context.timeout\n-    - tests: additional setup in docker test for core systems\n-    - configstate: return error if patch is invalid\n-    - interfaces: add random interface\n-    - store, daemon, client, cmd/snap: handle PASSWORD_POLICY_ERROR\n-    - cmd/snap, client: add \"whoami\" command\n-    - cmd/snap: iterate interface tab completion\n-    - snap: move locale-control to only be present on classic\n-    - interfaces/browser-support: deny read on squashfs backing files\n-      and LVM vg names\n-    - tests: wait for the docker socket to be listening\n-    - snap: add `snap refresh --time` option\n-    - tests: re-enable and moderninze /media sharing test\n-    - cmd: make rst2man optional\n-    - tests: remove quoting from [[ ]] when globs\n-    - interfaces: allow plugging DBus clients to introspect the slot\n-      service\n-    - packaging/ubuntu*/changelog: drop extra dash\n-    - snap-confine: init the ENTRY variable, coverity is unhappy\n-      otherwise\n-    - cmd/snap-confine/spread-tests: discard useless --version test\n-    - spread: add spread target qemu:debian-9-64\n-    - interfaces: mediate netlink sockets via seccomp\n-    - tests,cmd/snap-confine: port older snapd-discard-ns tests\n-    - cmd/snap-confine/tests: fix shellcheck on recently added files\n-    - tests/upgrade: force install core snap from beta for debian\n-    - overlord/snapstate/backend,interfaces/mount: move ns management\n-      code.\n-    - tests: extend network-control spread test to cope with network\n-      namespaces\n-    - tests: fail early in the spread suite if trying to run it inside a\n-      container\n-    - tests: set ownership of $PROJECT_PATH for the external backend\n-    - tests: specify the auto-refreshable snap being tested\n-    - many: fix tests with go1.8 / artful\n-    - fix for tests: debian does not have /snap/bin in secure_path so\n-      sudo\n-    - snap: support for snap tasks --last=...\n-    - cmd/snap-confine: remove obsolete debug message\n-    - address review feedback, add a lot of comments :-), call\n-      shellcheck on the completion scripts, fix a bug in compopt\n-\n- -- Michael Vogt   Thu, 11 May 2017 10:05:44 +0200\n-\n-snapd (2.25) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1686713\n-    - interfaces/default: allow mknod for regular files, pipes and\n-      sockets\n-    - many: use \"SNAP.APP as ALIAS\" instead of => when listing\n-      added/removed aliases\n-    - cmd/snap-confine: write current mount profile\n-    - cmd/snap-discard-ns: remove current profile when cleaning up\n-    - many: support debian in our CI\n-    - tests: tweak time for econnreset test a bit more\n-    - cmd/snap-confine: re-enable re-assciate fix for CE\n-    - many: aliases v2 cleanups\n-    - cmd/snap-confine: don't use apparmor if it is disabled on boot\n-    - many: implement `snap prefer `  (aliases v2)\n-    - many: adjust /aliases and \"snap aliases\" to aliases v2, also some\n-      cleanup\n-    - snapstate: normalize gadget defaults\n-    - many: allow core refresh.schedule setting\n-    - many: show alias changes on snap alias/unalias (aliases v2)\n-    - client,cmd/snap: improve messaging on --devmode and --classic\n-    - many: implement `snap unalias ` (aliases v2)\n-    - store: retry on connection reset\n-    - interfaces/mount: add Change.Perform\n-    - tests: add openvswitch interface spread test\n-    - interfaces/i2c: allow modifying device-specific sysfs entries\n-    - interfaces: allow writing to /run/systemd/journal/stdout by\n-      default\n-    - tests: ensure travis fails early if static checks fail\n-    - store,daemon: make store interpret channel=\"\" as stable in most\n-      cases\n-    - overlord/snapstate: make UpdateAliases idempotent, simplify the\n-      backend interface bits for aliases not used anymore (aliases v2)\n-    - many: implement snap alias   (aliases v2)\n-    - snap-confine: add code to ensure that / or /snap is mounted\n-      \"shared\"\n-    - many: show available \"tracks\" in `snap info`\n-    - cmd/snap: make users Xauthority file available in snap environment\n-    - interfaces/mount: write current fstab files with mode 0644\n-    - overlord: switch to aliases v2 tasks for install/refresh etc ops\n-      plus transition\n-    - tests: parameterize gadget snap channel (#3117)\n-    - tests: copy .real profile as .real\n-    - tests: add empty initrd failover test\n-    - many: mount squashfs as read-only\n-    - cmd: make locking around namespaces explicit\n-    - tests: address review comments from #3186\n-    - tests: add dbus interface spread test\n-    - interfaces/mount: add ReadMountInfo and LoadMountInfo\n-    - snap: require snap name for 'revert'\n-    - overlord: maintain per-revision snapshots of snap configuration\n-    - tests: relax network-bind interface regexps\n-    - interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)\n-    - store: retry once on hashsum mismatches in a Download()\n-    - interfaces/builtin: don't panic if content plug has nil attrs\n-    - interfaces/mount: pass mount.Profile to mount.NeededChanges\n-    - packaging: add `built-using` header for 16.04 packaging\n-    - interfaces: add media-hub interface\n-    - interfaces/builtin: allow full access to properties iface of the\n-      udisks service\n-    - tests: handle case when both .real and plain are present\n-    - interfaces/mount: add Change.String for readable output\n-    - tests: ensure we mock force dev mode as well to fix FTBFS in\n-      sbuild\n-    - store: add more logs around retry in download\n-    - interfaces/mount: add stub Change.{Needed,Perform}\n-    - tests: allow installing snapd from -proposed for SRU validation\n-    - interfaces/mount: parse mount options to map[string]string\n-    - snap: added tasks subcommand\n-    - tests: copy snap-confine apparmor profile into testbed\n-    - interfaces/mount: improve go identifier names of mountinfo, parse\n-      optional fields\n-    - Arch Linux wants to respect FHS\n-      (https://bugs.archlinux.org/task/53656),\n-    - daemon: do not set RemoveSnapPath flag when doing a try\n-    - debian: add maintscript helper to remove usr.lib.snapd.snap-\n-      confine in snap-confine\n-    - cmd/snap-confine: don't use plain \"classic\" term\n-    - cmd/snap-confine: set TMPDIR and TEMPDIR each time\n-    - many: fixes for `go vet` in go 1.7\n-    - tests: add kernel-module-control interface test\n-    - overlord/snapstate: introduce tasks for aliases v2 semantics with\n-      temporary names for now (aliases v2)\n-    - overlord/devicestate: switch to ssh-keygen for device key\n-      generation\n-    - snap: skip /dev/ram from auto-import assertions to make it less\n-      noisy (#3010)\n-    - interfaces: add kubernetes-support interface and adjust related\n-      interfaces (LP: #1664638)\n-    - tests: download previous snapd package from published versions\n-      instead of specific PPA\n-    - snap: run snap-confine from core if snap is also running from core\n-    - overlord/ifacestate: automatically rename connections on core snap\n-    - many: break the /aliases mutation API with a clean 400 (aliases\n-      v2)\n-    - interfaces/builting: allow read-only access to /sys/module\n-    - tests: add extra test after the core transition for snap get/set\n-      core\n-    - store: misc cleanups in tests\n-    - interfaces/mount: add parser for mountinfo entries\n-    - store: tests for unexpected EOF\n-    - tests: fix unity test\n-    - interfaces,overlord: log interface auto-connection failures\n-    - cmd/snap-update-ns: add C preamble for setns\n-    - interfaces: validate plug/slot uniqueness\n-\n- -- Michael Vogt   Fri, 28 Apr 2017 07:57:49 +0200\n-\n-snapd (2.24.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1681799:\n-    - fix autopkgtest failures with stable core snap\n-    - ensure the snap-confine transitional package cleans up\n-      the no-longer-used apparmor profile to fix the kernels\n-      autopkgtest failures\n-\n- -- Michael Vogt   Wed, 19 Apr 2017 11:54:33 +0200\n-\n-snapd (2.24) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1681799:\n-    - interfaces/mount: add InfoEntry type\n-    - many: fix plug auto-connect during core transition\n-    - interfaces: fold network bind into core support with tests\n-    - .travis.yml: add option to make raw log less noisy\n-    - interfaces: adjust shm accesses to use 'm' for updated mmap kernel\n-      mediation\n-    - many: rename two core plugs that clash with slot names\n-    - snap-confine,browser-support: /dev/tty for snap-confine, misc\n-      browser-support for gnome-shell\n-    - store: add download test with EOF in the middle\n-    - tests: adjust to look for network-bind-plug\n-    - store: make hash error message more accurate\n-    - overlord/snapstate: simplify AliasesStatus down to just an\n-      AutoAliasesDisabled bool flag (aliases v2)\n-    - errtracker: never send errtracker reports when running under\n-      SNAPPY_TESTING\n-    - interfaces/repo: validate slot/plug names\n-    - daemon: Give the snap directories via GET /v2/system-info\n-    - interfaces/unity7: support unity messaging menu\n-    - interfaces/mount: add high-level Profile functions\n-    - git: ignore only the cmd/Makefile{,.in}\n-    - cmd: explicitly set _GNU_SOURCE and _FILE_OFFSET_BITS for xfs\n-      support\n-    - daemon: add desktop file location for app to the API\n-    - overlord,release: disable classic snap support when not possible\n-    - overlord: fix TestEnsureLoopPrune not to be so racy\n-    - many: abstract path to /bin/{true,false}\n-    - data/systemd: tweak data/systemd/Makefile to be slightly simpler\n-    - store: handle EOF via url.Error check\n-    - packaging: use templates for relevant systemd units\n-    - tests: run gccgo only on ubuntu-16.04-64\n-    - .travis.yml: remove travis matrix and do a single sequential run\n-    - overlord/state: make sure that setting to nil a state key is\n-      equivalent to deleting it\n-    - tests: fix incorrect shell expression\n-    - interfaces/mount: add OptsToFlags for converting arguments to\n-      syscall\u2026\n-    - interfaces: add a joystick interface\n-    - tests: enable docker test for more ubuntu-core systems\n-    - tests: download and install additional dependencies when using\n-      prepackaged snapd\n-    - many: add support for partially static builds\n-    - interfaces: allow slot to introspect dbus-daemon in dbus\n-      interface, allow /usr/bin/arch by default\n-    - interfaces/mount: fix golint issues\n-    - interfaces/mount: add function for saving fstab-like file\n-    - osutil: introducing GetenvInt64, like GetenvBool but Int64er.\n-    - interfaces: drop udev tagging from framebuffer interface\n-    - snapstate: more helpers to work with aliases state (aliases\n-      v2)\n-    - interfaces/mount: add function for parsing fstab-like file\n-    - cmd: disable the re-associate fix as requested by jdstrand\n-    - overlord/snapstate: unlock/relock the state less, especially not\n-      across mutating the SnapState of a snap\n-    - interfaces: allow executing ld.so (needed with new AppArmor base\n-      abstraction)\n-    - interfaces/mount: add function for parsing mount entries\n-    - cmd: rework header check for xfs/xqm.h\n-    - cmd: add poky to the list of distros which don't support reexec\n-    - overlord: finish reorg, revert \"be more conservative until we have\n-      cut 2.23.x\"\n-    - cmd: select what socket to use in cmd/snap{,ctl}\n-    - overlord: remove snap config values when snap is removed\n-    - snapstate: introduce helper to apply to disk a alias states change\n-      for a snap (aliases v2)\n-    - configstate,hookstate: timeout the configure hook after 5 mins,\n-      report failures to the errtracker\n-    - interfaces/seccomp: add bind as part of the default seccomp policy\n-      for hooks\n-    - cmd: discard the C implementation of snap-update-ns\n-    - tests: remove stale apt proxy leftover from cloud-init\n-    - tests: move unity test to nightly suite\n-    - interfaces: add support for location-observe for\n-      dbus::ObjectManager session paths\n-    - boot: log error in KernelOrOsRebootRequired\n-    - interfaces: remove old API\n-    - interfaces: use udev spec\n-    - interfaces: convert systemd backend to new APIs\n-    - osutil: add BootID\n-    - tests: move docker test to new nightly suite\n-    - interfaces/mount: compute mount changes required to transition\n-      mount profiles\n-    - data/selinux: add context definition for snapctl\n-    - overlord: clean up organization under state packages\n-    - overlord: make sure all managers packages have *state.go with the\n-      main state manipulation/query APIs\n-    - interfaces: use spec in the dbus backend\n-    - store: download from authenticated URL if there is a device\n-      session set\n-    - tests: remove core_name variable\n-    - interfaces: rename thumbnailer to thumbnailer-service\n-    - interfaces: add chroot to base templates\n-    - asserts: remove some unused things\n-    - systemd: mount the squashfs with nodev\n-    - overlord: when shutting down assume errors might be due to\n-      cancellation so retry\n-    - cmd: rename all unit tests to $command/unit-test\n-    - cmd/snap: fix help string for version command\n-    - asserts: don't allow revocations with other items for the same\n-      developer\n-    - tests: skip lp-1644439 test on older kernels\n-    - interfaces: allow \"sync\" to be used by core support\n-    - assertstate,snapstate: have assertstate.AutoAliases use the\n-      \"aliases\" header\n-    - interfaces: allow writing config.txt.tmp  in the core-support\n-      interface\n-    - tests: adjust network-bind test\n-    - interfaces: dbus backend spec\n-    - asserts: introduce a snap-declaration \"aliases\" header to list\n-      auto aliases with explicit targets\n-    - cmd: enable large file support\n-    - cmd/snap: handle missing snap-confine\n-    - cmd/snap-confine: re-associate with pid-1 mount namespace if\n-      required\n-    - cmd/libsnap: make mountinfo structures public\n-    - tests: fix interfaces-cups-control for zesty\n-    - misc: revert \"Log if the system goes into ForceDevMode\"\n-    - interfaces: seccomp tests cleanup\n-    - cmd: validate SNAP_NAME\n-    - interfaces: log if the system goes into ForceDevMode\n-    - tests: fix classic-ubuntu-core-transition race\n-    - interfaces: use apparmor spec in the apparmor backend\n-    - interfaces: alphabetize framebuffer in base decl and add it to\n-      all_test.go\n-    - tests: add ubuntu-core-16-32 system to the external backend and\n-      fix docker test\n-    - cmd/libsnap: simplify sc_string_quote default case\n-    - osutil: fix double expand in environment map code and add test\n-    - interfaces: extend location-control out-of-process provider\n-      support\n-    - cmd/snap-update-ns: use bidirectional lists for mount entries\n-    - tests: prevent automatic transition before setting the initial\n-      state of the test\n-    - release: detect if we are in ForcedDevMode by inspecting the\n-      kernel\n-    - tests: add core-snap-refresh test\n-    - interfaces: add maliit input method interface\n-    - interfaces: seccomp spec API tweaks for better tests\n-    - interfaces: updates for mir-kiosk in browser-support, mir, opengl,\n-      unity7\n-    - testutils: address review feedback from PR#2997\n-    - tests: specify the core version to be unsquashfs'ed in the\n-      failover tests\n-    - interfaces: use MockInfo in tests\n-    - cmd/libsnap: add sc_quote_string\n-    - cmd/snap-confine: use sc_do_umount everywhere\n-    - interfaces: add unity8 plug permissions\n-    - timeutil: a few helpers for the recurring events\n-    - asserts: implement snap-developer type\n-    - partition: deal with grub{,2}-editenv in tests\n-    - many: add new (hidden) `snap debug ensure-state-soon` command and\n-      use in tests\n-    - interfaces/builtin: small refactor of dbus tests\n-    - packaging, tests: use \"systemctl list-unit-files --full\"\n-      everywhere\n-    - many: some opensuse patches that are ready to go into master\n-    - packaging: add opensuse permissions files\n-    - client, daemon: move \"snap list\" name filtering into snapd.\n-    - interfaces: use seccomp specs\n-    - overlord/snapstate: small cleanup of\n-      ensureForceDevmodeDropsDevmodeFromState\n-    - interfaces/builtin/alsa: add read access to alsa state dir\n-    - interfaces: use spec in kmod backend, updated firewall_control,\n-      openvswitch_support, ppp\n-    - cmd/snap-confine: use sc_do_mount everywhere\n-    - tests: remove workaround for docker again, snap-declaration is\n-      fixed now\n-    - interfaces: interface to allow autopilot introspection\n-\n- -- Michael Vogt   Tue, 11 Apr 2017 13:31:46 +0200\n-\n-snapd (2.23.6) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1673568\n-    - cmd: use the most appropriate snap/snapctl sockets\n-    - tests: fix interfaces-cups-control for zesty\n-    - configstate,hookstate: timeout the configure hook after 5 mins,\n-      report failures\n-    - packaging: rename the file shipping snap-confine AA profile to\n-      workaround dpkg bug #858004\n-    - many: ignore configure hook failures on core refresh to ensure\n-      upgrades are always possible\n-    - snapstate: restart as needed if we undid unlinking aka relinked\n-      core or kernel snap\n-\n- -- Michael Vogt   Wed, 29 Mar 2017 15:30:35 +0200\n-\n-snapd (2.23.5) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1673568\n-    - allow \"sync\" in core-support\n-\n- -- Michael Vogt   Fri, 17 Mar 2017 18:13:43 +0100\n-\n-snapd (2.23.4) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1673568\n-    - fix core-support interface for the new pi-config options\n-\n- -- Michael Vogt   Fri, 17 Mar 2017 16:05:57 +0100\n-\n-snapd (2.23.3) xenial; urgency=medium\n-\n-  * FTBFS due to missing files in vendor/\n-\n- -- Zygmunt Krynicki   Thu, 16 Mar 2017 19:56:55 +0100\n-\n-snapd (2.23.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1673568\n-    - cmd/snap: handle missing snap-confine (#3041)\n-\n- -- Zygmunt Krynicki   Thu, 16 Mar 2017 19:38:24 +0100\n-\n-snapd (2.23.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1665608\n-    - packaging, tests: use \"systemctl list-unit-files --full\"\n-      everywhere\n-    - interfaces: fix default content attribute value\n-    - tests: do not nuke the entire snapd.conf.d dir when changing\n-      store settings\n-    - hookstate: run the right \"snap\" command in the hookmanager \n-    - snapstate: revert PR#2958, run configure hook again everywhere\n-\n- -- Michael Vogt   Wed, 08 Mar 2017 14:29:56 +0100\n-\n-snapd (2.23) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1665608\n-    - overlord: phase 2 with 2nd setup-profiles and hook done after\n-      restart for core installation\n-    - data: re-add snapd.refresh.{timer,service} with weekly schedule\n-    - interfaces: allow 'getent' by default with some missing dbs to\n-      various interfaces\n-    - overlord/snapstate: drop forced devmode\n-    - snapstate: disable running the configure hook on classic for the\n-      core snap\n-    - ifacestate: re-generate apparmor in InterfaceManager.initialize()\n-    - daemon: DevModeDistro does not imply snapstate.Flags{DevMode:true}\n-    - interfaces/bluez,network-manager: implement ConnectedSlot policy\n-    - cmd: add helpers for mounting / unmounting\n-    - snapstate: error in LinkSnap() if revision is unset\n-    - release: add linuxmint 18 to the non-devmode distros\n-    - cmd: fixes to run correctly on opensuse\n-    - interfaces: consistently use 'const' instead of 'var' for security\n-      policy\n-    - interfaces: miscellaneous policy updates for unity7, udisks2 and\n-      browser-support\n-    - interfaces/apparmor: compensate for kernel behavior change\n-    - many: only tweak core config if hook exists\n-    - overlord/hookstate: don't report a run hook output error without\n-      any context\n-    - cmd/snap-update-ns: move test data and helpers to new module\n-    - vet: fix vet error on mount test.\n-    - tests: empty init (systemd) failover test\n-    - cmd: add .indent.pro file to the tree \n-    - interfaces: specs for apparmor, seccomp, udev\n-    - wrappers/services: RemainAfterExit=yes for oneshot daemons w/ stop\n-      cmds\n-    - tests: several improvements to the nested suite\n-    - tests: do not use core for \"All snaps up to date\" check\n-    - cmd/snap-update-ns: add function for sorting mount entries\n-    - httputil: copy some headers over redirects\n-    - data/selinux: merge SELinux policy module\n-    - kmod: added Specification for kmod security backend\n-    - tests: failover test for rc.local crash\n-    - debian/tests: map snapd deb pockets to core snap channels for\n-      autopkgtest\n-    - many: switch channels on refresh if needed\n-    - interfaces/builtin: add /boot/uboot/config.txt access to core-\n-      support\n-    - release: assume higher version of supported distros will still\n-      work \n-    - cmd/snap-update-ns: add compare function for mount entries\n-    - tests: enable docker test\n-    - tests: bail out if core snap is not installed\n-    - interfaces: use mount.Entry instead of string snippets.\n-    - osutil: trivial tweaks to build ID support\n-    - many: display kernel version in 'snap version'\n-    - osutil: add package for reading Build-ID\n-    - snap: error when `snap list foo` is run and no snap is installed\n-    - cmd/snap-confine: don't crash if nvidia module is loaded but\n-      drivers are not available\n-    - tests: update listing test for latest core snap version update\n-    - overlord/hookstate/ctlcmd: helper function for creating a deep\n-      copy of interface attributes\n-    - interfaces: add a linux framebuffer interface\n-    - cmd/snap, store: change error messages to reflect latest UX doc\n-    - interfaces: initial unity8 interface\n-    - asserts: improved information about assertions format in the\n-      Decode doc comment\n-    - snapstate: ensure snapstate.CanAutoRefresh is nil in tests\n-    - mkversion.sh: Add support for taking the version as a parameter\n-    - interfaces: add an interface for use by thumbnailer\n-    - cmd/snap-confine: ensure that hostfs is root owned.\n-    - screen-inhibit-control: add methods for delaying screensavers\n-    - overlord: optional device registration and gadget support on\n-      classic\n-    - overlord: make seeding work also on classic, optionally\n-    - image,cmd/snap: refactoring and initial envvar support to use\n-      stores needing auth\n-    - tests: add libvirt interface spread test\n-    - cmd/libsnap: add helper for dropping permissions\n-    - interfaces: misc updates for network-control, firewall-control,\n-      unity7 and default policy\n-    - interfaces: allow recv* and send* by default, accept4 with accept\n-      and other cleanups\n-    - interfaces/builtin: add classic-support interface\n-    - store: use xdelta3 from core if available and not on the regular\n-      system\n-    - snap: add contact: line in `snap info`\n-    - interfaces/builtin: add network-setup-control which allows rw\n-      access to netplan\n-    - unity7: support missing signals and methods for status icons\n-    - cmd: autoconf for RHEL\n-    - cmd/snap-confine: look for PROCFS_SUPER_MAGIC\n-    - dirs: use the right snap mount dir for the distribution\n-    - many: differentiate between \"distro\" and \"core\" libexecdir\n-    - cmd: don't reexec on RHEL family\n-    - config: make helpers reusable\n-    - snap-exec: support nested environment variables in environment\n-    - release: add galliumos support\n-    - interfaces/builtin: more path options for serial\n-    - i18n: look into core snaps when checking for translations\n-    - tests: nested image testing\n-    - tests: add basic test for docker\n-    - hookstate,ifacestate: support snapctl set/get slot and plug attrs\n-      (step 3) \n-    - cmd/snap: add shell completion to connect\n-    - cmd: add functions to load/save fstab-like files\n-    - snap run: create \"current\" symlink in user data dir\n-    - cmd: autoconf for centos\n-    - tests: add more debug if ubuntu-core-upgrade fails\n-    - tests: increase service retries\n-    - packaging/ubuntu-14.04: inform user how to extend PATH with\n-      /snap/bin.\n-    - cmd: add helpers for working with mount/umount commands\n-    - overlord/snapstate: prepare for using snap-update-ns\n-    - cmd: use per-snap mount profile to populate the mount namespace\n-    - overlord/ifacestate: setup seccomp security on startup\n-    - interface/seccomp: sort combined snippets\n-    - release: don't force devmode on LinuxMint \"serena\"\n-    - tests: filter ubuntu-core systems for authenticated find-private\n-      test\n-    - interfaces/builtin/core-support: Allow modifying logind\n-      configuration from the core snap\n-    - tests: fix \"snap managed\" output check and suppress output from\n-      expect in the authenticated login tests\n-    - interfaces: shutdown: also allow shutdown/reboot/suspend via\n-      logind\n-    - cmd/snap-confine-tests: reformat test to pass shellcheck\n-    - cmd: add sc_is_debug_enabled\n-    - interfaces/mount: add dedicated mount entry type\n-    - interfaces/core-support: allow modifying systemd-timesyncd and\n-      sysctl configuration\n-    - snap: improve message after `snap refresh pkg1 pkg2`\n-    - tests: improve snap-env test\n-    - interfaces/io-ports-control: use /dev/port, not /dev/ports\n-    - interfaces/mount-observe: add quotactl with arg filtering (LP:\n-      #1626359)\n-    - interfaces/mount: generate per-snap mount profile\n-    - tests: add spread test for delta downloads\n-    - daemon: show \"$snapname (delta)\" in progress when downloading\n-      deltas\n-    - cmd: use safer functions in sc_mount_opt2str\n-    - asserts: introduce a variant of model assertions for classic\n-      systems\n-    - interfaces/core-support: allow modifying snap rsyslog\n-      configuration\n-    - interfaces: remove some syscalls already in the default policy\n-      plus comment cleanups\n-    - interfaces: miscellaneous updates for hardware-observe, kernel-\n-      module-control, unity7 and default\n-    - snap-confine: add the key for which hsearch_r fails\n-    - snap: improve the error message for `snap try`\n-    - tests: fix pattern and use MATCH in find-private\n-    - tests: stop tying setting up staging store access to the setup of\n-      the state tarball\n-    - tests: add regression spread test for #1660941\n-    - interfaces/default: don't allow TIOCSTI ioctl\n-    - interfaces: allow nice/setpriority to 0-19 values for calling\n-      process by default\n-    - tests: improve debug when the core transition test hangs\n-    - tests: disable ubuntu-core->core transition on ppc64el (its just\n-      too slow)\n-    - snapstate: move refresh from a systemd timer to the internal\n-      snapstate Ensure()\n-    - tests/lib/fakestore/refresh: some more info when we fail to copy\n-      asserts\n-    - overlord/devicestate: backoff between retries if the server seems\n-      to have refused the serial-request\n-    - image: check kernel/gadget publisher vs model brand, warn on store\n-      disconnected snaps\n-    - vendor: move gettext.go back to github.com/ojii/gettext.go\n-    - store: retry on 502 http response as well\n-    - tests: increase snap-service kill-timeout\n-    - store,osutil: use new osutil.ExecutableExists(exe) check to only\n-      use deltas if xdelta3 is present\n-    - cmd: fix autogen.sh on fedora\n-    - overlord/devicemgr: fix test: setup account-key before using the\n-      key for signing\n-    - cmd: add /usr/local/* to PATH\n-    - cmd: add sc_string_append\n-    - asserts: support for correctly suggesting format 2 for snap-\n-      declaration\n-    - interfaces: port mount backend to new APIs, unify content of per\n-      app/hook profiles\n-    - overlord/devicestate: implement policy about gadget and kernel\n-      matching the model\n-    - interfaces: allow sched_setscheduler again by default\n-    - debian: update breaks/replaces for snap-confine->snapd\n-    - debian: move the snap-confine packaging into snapd\n-    - 14.04/integrationtests: rely on upstart to restart ssh.\n-    - store: enable download deltas on classic by default\n-    - spread: add unit suite\n-    - snapctl: add config in client to disable auth and use it in\n-      snapctl\n-    - overlord/ifacestate: register all security backends with the\n-      repository\n-    - overlord,tests: have enable/disable affect security profiles\n-    - tests: install ubuntu-core from the same channel as core\n-    - overlord: move configstate.Transaction into config package\n-    - seccomp-support.c: add PF_* domains which can be used instead of\n-      AF_*\n-    - store: always log retry summary when SNAPD_DEBUG is set\n-    - tests: parameterize kernel snap channel\n-    - snapenv: do not append \":\" to the SNAP_LIBRARY_PATH\n-    - interfaces/builtin: refine the content interface rules using $SLOT\n-    - asserts,interfaces/policy: add support for\n-      $SLOT()/$PLUG()/$MISSING in *-attributes constraintsThis adds\n-      support for $SLOT(arg), $PLUG(arg) and $MISSING attribute\n-      constraints in plugs and slots rules in snap-declarations:\n-    - cmd/snap-confine: add snap-confine command line parser module\n-    - tests: remove (some) garbage files found by restore cleanup\n-      analysis\n-    - cmd: fix issues uncovered by valgrind\n-    - tests: fix typo in systems name\n-    - cmd: collect string utilities in one module, add missing tests\n-    - cmd: rename mountinfo to sc_mountinfo\n-    - tests: allow to install snapd debs from a ppa instead of building\n-      them\n-    - spread: remove state tar on project restore\n-\n- -- Michael Vogt   Fri, 17 Feb 2017 12:21:42 +0100\n-\n-snapd (2.22.7) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - errtracker,overlord/snapstate: more info in errtracker reports\n-    - interfaces/apparmor: compensate for kernel behavior change\n-\n- -- Michael Vogt   Fri, 24 Feb 2017 19:24:11 +0100\n-\n-snapd (2.22.6) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1667105\n-    - overlord/ifacestate: don't fail if affected snap is gone\n-    - revert #2910: osutil: add package for reading Build-ID (#2918)\n-    - errtracker: include the build-id of host and core snapd (#2912)\n-    - errtracker: include the number of ubuntu-core -> core retries\n-      (#2915)\n-    - snapstate: retry ubuntu-core -> core transition every 6h (#2914)\n-    - osutil: add package for reading Build-ID (#2910)\n-    - errtracker: include kernel version in error reports (#2905)\n-    - release: return \"unknown\" if uname fails\n-    - many: rebased uname branch for 2.22\n-    - errtracker: include snapd version in err reports\n-    - overlord/ifacestate: don't unconditionally retry stuff (#2906)\n-    - snapstate: fix incorrect cut of the timestamps for the error\n-      reports (#2908)\n-    - tests: update listing test for latest core snap version update\n-\n- -- Zygmunt Krynicki   Wed, 22 Feb 2017 23:34:23 +0100\n-\n-snapd (2.22.5) xenial; urgency=medium\n-\n-  * Fix FTBFS due to machine-id file\n-\n- -- Zygmunt Krynicki   Tue, 21 Feb 2017 09:43:42 +0100\n-\n-snapd (2.22.4) xenial; urgency=medium\n-\n-  * New bugfix release:\n-    - errtracker: add support for error reporting via daisy.ubuntu.com\n-    - snapstate: allow for 6 retries for the core transition\n-    - httputils: ensure User-Agent works across redirects\n-\n- -- Michael Vogt   Tue, 21 Feb 2017 09:07:10 +0100\n-\n-snapd (2.22.3) xenial; urgency=medium\n-\n-  * New bugfix release, LP: #1665729:\n-    - Limit the number of retries for the ubuntu-core -> core\n-      transition to fix possible store overload.\n-\n- -- Michael Vogt   Fri, 17 Feb 2017 18:58:34 +0100\n-\n-snapd (2.22.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1659522\n-    - cherry pick fix for sched_setscheduler regression\n-      (LP: #1661265)\n-\n- -- Michael Vogt   Thu, 02 Feb 2017 17:13:51 +0100\n-\n-snapd (2.22.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1659522\n-    - cherry pick fix for snapctl auth.json handling\n-\n- -- Michael Vogt   Wed, 01 Feb 2017 17:09:31 +0100\n-\n-snapd (2.22) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1659522\n-    - many: make ubuntu-core-launcher mostly go\n-    - interfaces/builtin: add account-control interface\n-    - interfaces/builtin: add missing syscalls to core-support needed\n-      for systemctl\n-    - interfaces/builtin: rework core-support to only allow full access\n-      to systemctl\n-    - debian/tests: drop stale autopkgtest dependencies.\n-    - tests: make the debugging of c-unit-tests more useful\n-    - store: retry auth-related requests\n-    - tests: integration test for system reload\n-    - snap: be more helpful in the `snap install `\n-      error message\n-    - tests: set SNAPPY_USE_STAGING_STORE in su call\n-    - tests: use test snap\n-    - spread: set SNAPD_DEBUG=1 in the core snap as well\n-    - tests: add extra debugging to security-setuid-root test\n-    - cmd,snap,wrappers: systemd reload command support\n-    - interfaces: builtin: mir: Allow recv and send\n-    - overlord/ifacestate: use ParseConnRef\n-    - overlord/snapstate,overlord/ifacestate: add automatic ubuntu-core\n-      -> core transition\n-    - debian: remove aliases as well in snapd.postrm\n-    - many: change interfaces.ParseID to return value\n-    - interfaces/opengl: allow access to the nvidia abstract socket\n-    - overlord, daemon: flag failures feature fancy forms.\n-    - many: add --classic support to try and revert, and make missing\n-      these things a little harder\n-    - interfaces: allow reading non-PCI-attached usb devices via raw-usb\n-    - many: rename snap-alter-ns to snap-update-ns\n-    - interfaces/builtin: add core-support\n-    - store: increase the retry.LimitTime()\n-    - debian: move the packaging out into package/$id-$version_id\n-    - overlord/stapstate: don't use unkeyed fields\n-    - many: add stub implementation of snap-alter-ns\n-    - asserts: improve error message when key is not valid at the given\n-      time\n-    - snapstate, ifacestate: add snapstate.CheckChangeConflict() to\n-      ifacestate.{Connect,Disconnect}\n-    - debian: remove trusty specific bits\n-    - docs: Add a note about building snapd.\n-    - interfaces: miscellaneous updates for default and network-control\n-    - daemon: bubble out store.ErrSnapNotFound in the findOne codepath\n-    - store: add retry logging into download as well\n-    - snap: show price in `snap info`\n-    - cmd: add fault injection support code\n-    - interfaces: network-manager: allow rw access to /etc/netplan\n-    - debian: move systemd files out of ./debian and into ./data/systemd\n-    - asserts: implement SuggestFormat to help avoid specifying the\n-      wrong format iteration for an assertion\n-    - many: detect potentially insecure use of snap-confine\n-    - interfaces: allow querying added security backends\n-    - cmd: ensure that all .c files have a -test.c file\n-    - asserts: don't use 'context' for the path of attributes, want to\n-      reuse the concept for something else\n-    - interfaces: abbreviate ConnRef construction\n-    - tests: ensure systemd override directory is available before using\n-      it\n-    - cmd: more build system cleanups and a small fix\n-    - tests: increase retries for service up\n-    - cmd: move seccomp cleanup function to seccomp-support\n-    - many: auto-connect plugs and slots symmetrically\n-    - overlord: use a ticker for the pruning\n-    - interfaces/builtin: add uhid interface\n-    - cmd/snap-confine: add shutdown helper\n-    - tests: fix path used when debugging\n-    - cmd: switch to non-recursive make\n-    - overlord/ifacestate: setup security of snaps affected by auto-\n-      connection\n-    - spread: refresh apt cache before first install\n-    - overlord: allow max 500 changes in \"ready\" state to avoid growing\n-      changes for 24h\n-    - snap: add {Plug,Slot}Info.SecurityTags\n-    - cmd: move snap-discard-ns to dedicated directory\n-    - tests: skip i18n test when no \"snappy.mo\" file is available\n-    - interfaces,overlord/ifacestate: small refactor around reference\n-      methods\n-    - tests: remove the snapd dirs last (should fix random test errors)\n-    - interfaces: mm: permissions for protocol proxies\n-    - interfaces/builtin: add evolution interfaces\n-    - many: extract the logging http client and user-agent handling for\n-      use in devicestate\n-    - interfaces: unity8-download-manager is the chosen name for this\n-      interface.\n-    - tests: add \"quiet\" wrapper function that only prints output on\n-      failure\n-    - tests: fix failing snapd-reexec test\n-    - docs: simplify HACKING.md that snapd itself supports setting up\n-      the sockets\n-    - overlord: flag required-snaps from model as required and prevent\n-      removing them\n-    - spread: exclude .o and .a files\n-    - tests: parameterize remote store\n-    - cmd: fix hardcoded paths to rst2man and support rst2man.py\n-    - tests: improve debug output when reexec is used\n-    - tests: disable ipv6 before unpacking delta\n-    - interfaces: add new interface API\n-    - tests: change TRUST_TEST_KEYS to be controlled from the host\n-    - spread: add boilerplate for Linode delta uploads\n-    - wrappers: add support for the X-Ayatana-Desktop-Shortcuts=\n-      extension\n-    - partition: add support for native grubenv read/write and use it\n-    - tests: add test ensuring manual pages are shipped\n-\n- -- Michael Vogt   Fri, 27 Jan 2017 23:18:57 +0100\n-\n-snapd (2.21) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1656382\n-    - daemon: re-enable reexec\n-    - interfaces: allow reading installed files from previous revisions\n-      by default\n-    - daemon: make activation optional\n-    - tests: run all snap-confine tests in c-unit-tests task\n-    - many: fix abbreviated forms of disconnect\n-    - tests: switch more tests to MATCH\n-    - store: export userAgent. daemon: print store.UserAgent() on\n-      startup.\n-    - tests: test classic confinement `snap list` and  `snap info`\n-      output\n-    - debian: skip snap-confine unit tests on nocheck\n-    - overlord/snapstate: share code between Update and UpdateMany, so\n-      that it deals with auto-aliases correctly\n-    - interfaces: upower-observe: refactor to allow snaps to provide a\n-      slot\n-    - tests: add end-to-end store test for classic confinement\n-    - overlord,overlord/snapstate: have UpdateMany retire/enable auto-\n-      aliases even without new revision\n-    - interfaces/browser-support: add @{PROC}/@{pid}/fd/[0-9] w and misc\n-      /run/udev\n-    - interfaces/builtin: add physical-memory-* and io-ports-control\n-    - interfaces: allow getsockopt by default since it is so commonly\n-      used\n-    - cmd/snap, daemon, overlord/snapstate: tests and fixes for \"snap\n-      refresh\" of a classic snap\n-    - interfaces: allow read/write access of real-time clock with time-\n-      control interface\n-    - store: request no CDN via a header using SNAPPY_STORE_NO_CDN\n-      envvar\n-    - snap: add information about tracking channel (not just actual\n-      channel)\n-    - interfaces: use fewer dot imports\n-    - overlord/snapstate: remove restrictions on ResetAliases\n-    - overlord, store: move confinement filtering to the overlord (from\n-      The Store)\n-    - many: move interface test helpers to ifacetest package\n-    - many: implement 'snap aliases'\n-    - vet: fix for unkeyed fields error on aliases_test.go\n-    - interfaces: miscellaneous policy updates for network-control,\n-      unity7, pulseaudio, default and home\n-    - tests: test for auto-aliases\n-    - interface hooks: connect plug slot hooks (step 2)\n-    - cmd/snap: fix internal naming in snap connect\n-    - snap: use \"size\" as the json tag in snap.ChannelSnapInfo\n-    - tests: restore the missing initialization of iface manager causing\n-      race\n-    - snap: fix missing sizes in `snap info `\n-    - tests: improve cleanup for c-unit-tests\n-    - cmd/snap-confine: build non-installed libsnap-confine-private.a\n-    - cmd/snap-confine: small tweaks to seccomp support code\n-    - interfaces/docker-support: allow /run/shm/aufs.xeno for 14.04\n-    - many: obtain installed snaps developer/publisher username through\n-      assertions\n-    - store: setting of fields for details endpoint\n-    - cmd/snap-confine: check for rst2man on configure\n-    - snap: show `snap --help` output when just running `snap`\n-    - interface/builtin: drop the obsolete checks in udisks2\n-      SanitizeSlot\n-    - cmd/snap: remove currency switch following UX review\n-    - spread: find top-level directory before running generate-\n-      packaging-dir\n-    - interface hooks: prepare plug slot hooks (step 1)\n-    - i18n: use github.com/mvo5/gettext.go (pure go) for i18n to avoid\n-      cgo\n-    - many: put a marker in the User-Agent sent by snapd/snap when under\n-      testingThe User-Agent will look like:\n-    - tests: fix -reuse and -resend when govendor is missing\n-    - snap: provide friendlier `snap find` message when no snaps are\n-      found\n-    - tests: fix mkversions.sh failure on zesty\n-    - spread: install build-essential unconditionally\n-    - spread: improve qemu ubuntu-14.04-{32,64} support\n-    - overlord/snapstate,daemon: implement GET /v2/aliases handling\n-    - store: retry user info request\n-    - tests: port more snap-confine regression tests\n-    - tests: cancel the scheduled reboot on ubuntu-core-upgrade-no-gc\n-      and restore state\n-    - tests: debug zesty autopkgtest failures\n-    - overlord/snapstate: use keyed fields on literals\n-    - tests: use MATCH in install-remove-multi\n-    - tests: increase wait time for service to be up\n-    - tests: make debug-each succeed if DENIED doesn't match\n-    - tests: skip packaging dir generation for non-git based autopkgtest\n-      runs\n-    - tests: port refresh-all-undo to MATCH\n-    - tests: improve snap connect test\n-    - tests: port additional snap-confine regression tests\n-    - tests: show --version when it matches unknown\n-    - tests: optionally use apt proxy for qemu\n-    - tests: add hello-classic test\n-    - many: behave more consistently when pointed to staging and\n-      possibly the fake store\n-    - overlord/ifacestate: remove stale comments\n-    - interfaces/apparmor: ignore snippets in classic confinement\n-    - tests: port first regression test from snap-confine\n-    - cmd/snap-confine: disable old tests\n-\n- -- Michael Vogt   Fri, 13 Jan 2017 19:39:51 +0100\n-\n-snapd (2.20.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1648520\n-    - tests: enable the ppc64el tests again\n-    - tests: add classic confinement test\n-    - tests: run snap confine tests in debian/rules already\n-\n- -- Michael Vogt   Mon, 19 Dec 2016 11:53:29 +0100\n-\n-snapd (2.20) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1648520\n-    - many: implement  \"snap alias --reset\" using snapstate.ResetAliases\n-    - debian: use a packaging branch for 14.04\n-    - store: retry downloads on io.Copy errors and sha3 checksum errors\n-    - snap: show apps in `snap info`\n-    - store: send an explicit X-Ubuntu-Classic header to the store\n-    - overlord/snapstate: implement snapstate.ResetAliases\n-    - interfaces/builtin: add dbus interface\n-    - tests: fix tests on 17.04\n-    - store: use mocked retry strategy to make store tests faster\n-    - overlord: apply auto-aliases information from the snap-declaration\n-      on install or refresh\n-    - many: prepare landing on trusty\n-    - many: implement snap unalias using snapstate.Unalias\n-    - overlord/snapstate: fixing the placement/grouping of some\n-      functions\n-    - interfaces: support network namespaces via 'ip netns' in network-\n-      control\n-    - interfaces/builtin: fix pulseaudio apparmor rules\n-    - interfaces/builtin: add iio interface\n-    - tests: update custom core snap with the freshly build snap-confine\n-    - interfaces: use sysd.{Disable,Stop} instead of sysd.DisableNow()\n-    - overlord,overlord/snapstate: implement snapstate.Unalias by\n-      generalizing the \"alias\" task\n-    - interfaces: misc openstack snap enablement\n-    - cmd/snap: mock terminal.ReadPassword instead of using /dev/ptmx\n-    - notifications, daemon: kill the unsupported events endpoint\n-    - client: only allow Dangerous option in InstallPath\n-    - overlord/ifacestate: no interface checks if no snap id\n-    - many: implement alias command\n-    - snap: tweak snap install output as designed by Mark\n-    - debian: fix Pre-Depends on dpkg\n-    - tests: check if snap-confine --version is unknown\n-    - cmd/snap-confine: allow content interface mounts\n-    - tests: remove ppa:snappy-dev/image again\n-    - interfaces/apparmor: allow access to core snap\n-    - tests: remove snap-confine/ubuntu-core-launcher after the tests\n-    - overlord,overlord/snapstate: implement snapstate.Alias\n-    - cmd/snap: reject \"snap disconnect foo\"\n-    - debian: add split ubuntu-core-launcher and snap-confine packages\n-    - cmd: fix mkversion.sh and add regression test\n-    - overlord/snapstate: setup/remove aliases as we link/unlink snaps\n-    - cmd/snap,tests: alias support in snap run\n-    - snap/snapenv: don't obscure HOME if snap uses classic confinement\n-    - store: decode response.Body json inside retry loops\n-    - cmd/snap-confine: fix compilation on platforms with gcc < 4.9.0\n-    - vendor: update tomb package fixing context support\n-\n- -- Michael Vogt   Thu, 15 Dec 2016 22:07:08 +0100\n-\n-snapd (2.19) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1648520\n-    - cmd/snap-confine: disable support for XDG_RUNTIME_DIR\n-    - cmd/snap-confine/tests: fix stale path after move to snapd\n-    - cmd/snap-confine: don't use __attribute__((nonull))\n-    - snap: add description to `snap info`\n-    - snap: show last refresh time\n-    - store: switch default delta format from xdelta to xdelta3\n-    - interfaces: fix system-observe interface to work with ps_mem\n-    - debian: add missing ca-certificates dependency\n-    - cmd/snap-confine: add support for classic confinement\n-    - snapstate/backend: add backend methods to manage aliases\n-    - tests: re-enable snap-confine unit tests via spread\n-    - many: merge snap-confine into snapd\n-    - many: add support for classic confinement\n-    - snap: abort install with ctrl+c\n-    - cmd/snap: change terms accept URL following UX review\n-    - interfaces/apparmor: use distinct apparmor template for classic\n-    - snap: add snap size to `snap info`\n-    - interfaces: add unconfined access to modem-manager\n-    - snap: support for parsing and exposing on snap.Info aliases\n-    - debian: disable autopkgtests on ppc64el\n-    - snap: disable support for socket activation\n-    - tests: fix incorrect restore of the current symlink\n-    - asserts: introduce auto-aliases header in snap-declaration\n-    - interfaces/seccomp: add support for classic confinement\n-    - tests: do not use external snaps\n-    - daemon: close the dup()ed file descriptor to not leak it\n-    - overlord, daemon, progress: enable building snapd without CGO\n-    - daemon, store: let snap info find things in any channel\n-    - store: retry tweaks and logging\n-    - snap: Improve `snap --help` output as designed by Mark\n-    - interfaces/builtin: fix incorrect udev rule in i2c\n-    - overlord: increase test timeout and improve failure message\n-    - snap: remove unused experimental command\n-    - debian: remove unneeded conflict against the \"snappy\" package\n-    - daemon, strutil: move daemon.quotedNames to strutil.Quoted\n-    - docs: document SNAP_DEBUG_HTTP in HACKING.md\n-    - cmd/snap: have some completers\n-    - snap: support \"daemon: notify\" in snap.yaml\n-    - snap: fix try command when daemon linie is added\n-    - interfaces: apparmor support for classic confinement\n-    - debian/rules: build with -buildoptions=pie\n-    - tests: include /boot in saved state (including bootenv and any\n-      kernels)\n-    - daemon: ensure `snap try` installs core if it's missing\n-    - tests: save/restore /snap/core/current symlink\n-    - tests: decrease the number of expected featured apps\n-    - tests: add set -e to the prepare ssh script\n-    - cmd/snap: add tests for section completion; fix bugs.\n-    - cmd/snap: document 'snap list --all'\n-\n- -- Michael Vogt   Thu, 08 Dec 2016 16:16:04 +0100\n-\n-snapd (2.18.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1644625\n-    - daemon: fix crash when `snap refresh` contains a single update\n-    - fix unhandled error from io.Copy() in download()\n-    - interfaces/builtin: fix incorrect udev rule in i2c\n-\n- -- Michael Vogt   Mon, 05 Dec 2016 15:04:13 +0100\n-\n-snapd (2.18) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1644625\n-    - store: retry on io.EOF\n-    - tests: skip pty tests on ppc64el and powerpc\n-    - client, cmd/snap: introducing \"snap info\"\n-    - snap: do exit 0 on install/remove if that snap is already\n-      installed or already removed\n-    - snap: add `snap watch ` to attach to a running change\n-    - store: retry downloads using retry loop\n-    - snap: try doesn't require snap-dir when run in snap's directory\n-    - daemon: show what will change in the \"refresh-all\" changes\n-    - tests: disable autorefresh for the external backend\n-    - snap: add `snap list -a` to show all snaps (even inactive ones)\n-    - many: unify boolean env var handling\n-    - overlord/ifacestate: don't setup jailmode snaps with devmode\n-      confinement\n-    - snapstate: do not garbage collect the snaps used by the bootenv\n-    - debian: drop hard xdelta dependency for now\n-    - snap: make `snap login` ask for email if not given as argument\n-    - osutil: fix build on armhf (arm in go-arch) and powerpc (ppc in\n-      go-arch)\n-    - many: rename DevmodeConfinement to DevModeConfinement\n-    - store: resp.Body.Close() missing in ReadyToBuy\n-    - many: use ConfinementOptions instead of ConfinementType\n-    - snap, daemon, store: fake the channel map in the REST API\n-    - misc: run github.com/gordonklaus/ineffassign as part of the static\n-      checks\n-    - docs: add goreportcard badge and remove coveralls badge\n-    - tests: force gofmt -s in static checks\n-    - many: run gofmt -s -w on all the code\n-    - store: DRY actual retry code\n-    - many: fix various errors uncovered by goreportcard.com\n-    - interfaces/builtin: allow additional shared memory for webkit\n-    - many: some more missing snapState->snapst\n-    - asserts: introduce an optional freeform display-name for model\n-    - interfaces/builtin: rename usb-raw to raw-usb\n-    - progress: init pbar with correct total value\n-    - daemon/api.go: add quotedNames() helper\n-    - interfaces: add ConfinementOptions type\n-    - tests: add a test about the extra bits that prepare-device can\n-      specify for device registration\n-    - tests: check that gpio device nodes are exported after reboot\n-    - tests: parameterize core channel with env var for classic too\n-    - many: rename variable \"ss\" to \"snapsup\" or \"snapst\" or \"st\"\n-      (depending on context)\n-    - tests: do not use external snaps in spread\n-    - store: retry buy request\n-    - store: retry store.Find\n-    - store: retry assertion store call\n-    - store: retry call for snap details\n-    - many: use snap.ConfinementType rather than bool devmode\n-    - daemon: if a bad snap is posted it is not an internal error but a\n-      bad request\n-    - client: add \"Snap.Screenshots\" to the client API\n-    - interfaces: update base declaration documentation and policy for\n-      on-classic and snap-type\n-    - store: check payment method before TOS for a better UX\n-    - interfaces: allow sched_setaffinity in process-control\n-    - tests: parameterize core channel with env var\n-    - tests: ensure that the XDG_ env contains at least XDG_RUNTIME_DIR\n-    - interfaces: fcitx also listens on the session bus for Qt apps\n-    - store: retry ListRefresh\n-    - snap: use \"Password of :\" in the `snap login`\n-    - many: reshuffle how we load/inject tests keys so image doesn't\n-      need assertstate anymore\n-    - store: use range requests if we have a local file already\n-    - dirs,interfaces,overlord,snap,snapenv,test: export per-snap\n-      XDG_RUNTIME_DIR per user\n-    - osutil: make RealUser only look at SUDO_USER when uid==0\n-    - tests: do not use the ppa:snappy-dev/image in the tests\n-    - store: retry readyToBuy request\n-    - tests: increase `expect` timeouts\n-    - static tests: add spell check\n-    - tests: add debug to all flaky expect tests\n-    - systemd: correct the mount arguments when mounting with squashfuse\n-    - interfaces: add avahi-observe\n-    - store: bring delta downloads back\n-    - interfaces: add alsa\n-    - interfaces/builtin: fix a broken test that snuck into master\n-    - osutil: add chattr funcs\n-    - image: init \"snap_mode\" on image creation time to avoid ugly\n-      messages\n-    - tests: test-snapd-fuse-consumer needs python-fuse as a build-\n-      package\n-    - interfaces/builtin: add i2c interface\n-    - interfaces: add ofono interface\n-    - tests: do not use hello-world in our tests\n-    - snap: add support for classic confinement\n-    - interfaces: remove LegacyAutoConnect() from the interfaces\n-    - interfaces: miscellaneous policy updates\n-    - tests: run autopkgtests in the autopkgtest.ubuntu.com\n-      infrastructure\n-    - Implement lxd-client interface exposing the lxd snap\n-    - asserts: validate optional account username\n-    - many: remove unnecessary snap name parameter from buying endpoint\n-    - tests: do not hardcode the size of /dev/ram0\n-    - tests: add test that ensures the right content for /etc/os-release\n-    - spread tests: fix snap mode check\n-    - docs: fix path for source files location in HACKING.md\n-    - interfaces/builtin/mir: allow slot to make recvfrom syscalls\n-    - store: sections/featured snaps store support\n-\n- -- Michael Vogt   Thu, 24 Nov 2016 19:43:08 +0100\n-\n-snapd (2.17.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1637215:\n-    - release: os-release on core has changed\n-    - tests: /dev/ptmx does not work on powerpc, skip here\n-    - docs: moved to github.com/snapcore/snapd/wiki (#2258)\n-    - debian: golang is not installable on powerpc, use golang-any\n-\n- -- Michael Vogt   Fri, 04 Nov 2016 18:13:10 +0200\n-\n-snapd (2.17) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1637215:\n-    - overlord/ifacestate: add unit tests for undo of setup-snap-\n-      security (#2243)\n-    - daemon,overlord,snap,tests: download to .partial in final dir\n-      (#2237)\n-    - overlord/state: marshaling tests for lanes (#2245)\n-    - overlord/state: introduce state lanes (#2241)\n-    - overlord/snapstate: fix revert+refresh (#2224)\n-    - interfaces/sytemd: enable/disable generated service units (#2229)\n-    - many: fix incorrect security files generation on undo\n-    - overlord/snapstate: add dynamic snapdX.Y assumes (#2227)\n-    - interfaces: network-manager: give slot full read-write access to\n-      /run/NetworkManager\n-    - docs: update the name of the command for the cross-build\n-    - overlord/snapstate: fix missing argument to Noticef\n-    - snapstate: ensure gadget/core/kernel can not be disabled (#2218)\n-    - asserts: limit to 1y only if len(models) == 0 (#2219)\n-    - debian: only install share/locale if available (missing on\n-      powerpc)\n-    - overlrod/snapstate: fix revert followed by refresh to old-current\n-      (#2214)\n-    - interfaces/builtin: network-manager and bluez can change hostname\n-      (#2204)\n-    - snap: switch the auto-import dir to /run/snapd/auto-import\n-    - docs: less details about cloud.cfg as requested in trello (#2206)\n-    - spread.yaml: Ensure ubuntu user has passwordless sudo for\n-      autopkgtests (#2201)\n-    - interfaces/builtin: add dcdbas-control interface\n-    - boot: do not set boot to try mode if the revision is unchanged\n-    - interfaces: add shutdown interface (#2162)\n-    - interfaces: add system-power-control interface\n-    - many: use the new systemd backend for configuring GPIOs\n-    - overlord/ifacestate: setup security for slots before plugs\n-    - snap: spool assertion candidates if snapd is not up yet\n-    - store,daemon,overlord: download things to a partials dir\n-    - asserts,daemon: implement system-user-authority header/concept\n-    - interfaces/builtin: home base declaration rule using on-classic\n-      for its policy\n-    - interfaces/builtin: finish decl based checks\n-    - asserts: bump snap-declaration to allow signing with new-style\n-      plugs and slots\n-    - overlord: checks for kernel installation/refresh based on model\n-      assertion and previous kernel\n-    - tests/lib/fakestore: fix logic to distinguish assertion not found\n-      errors\n-    - client: add a few explicit error types (around the request cycle)\n-    - tests/lib/fakestore/cmd/fakestore: make it log, and fix a typo\n-    - overlord/snapstate: two bugs for one\n-    - snappy: disable auto-import of assertions on classic (#2122)\n-    - overlord/snapstate: move trash cleanup to a cleanup handler\n-      (#2173)\n-    - daemon: make create-user --known fail on classic without --force-\n-      managed (#2123)\n-    - asserts,interfaces/policy: implement on-classic plug/slot\n-      constraints\n-    - overlord: check that the first installed gadget matches the model\n-      assertion\n-    - tests: use the snapd-control-consumer snap from the store\n-    - cmd/snap: make snap run not talk to snapd for finding the revision\n-    - snap/squashfs: try to hard link instead of copying. Also, switch\n-      to osutil.CopyFile for cp invocation.\n-    - store: send supported max-format when retrieving assertions\n-    - snapstate, devicestate: do not remove seed\n-    - boot,image,overlord,partition: read/write boot variables in single\n-      operation\n-    - tests: reenable ubuntu-core tests on qemu\n-    - asserts,interfaces/policy: allow OR-ing of subrule constraints in\n-      plug/slot rules\n-    - many: move from flags as ints to flags as structs-of-bools (#2156)\n-    - many: add supports for keeping and finding assertions with\n-      different format iterations\n-    - snap: stop using ubuntu-core-launcher, use snap-confine\n-    - many: introduce an assertion format iteration concept, refuse to\n-      add unsupported assertion\n-    - interfaces: tweak wording and comment\n-    - spread.yaml: dump apparmor denials on spread failure\n-    - tests: unflake ubuntu-core-reboot (#2150)\n-    - cmd/snap: tweak unknown command error message (#2139)\n-    - client,daemon,cmd: add payment-declined error kind (#2107)\n-    - cmd/snap: update remove command help (#2145)\n-    - many: removed frameworks target and fixed service files (#2138)\n-    - asserts,snap: validate attributes to a JSON-compatible type subset\n-      (#2140)\n-    - asserts: remove unused serial-proof type\n-    - tests: skip auto-import tests on systems without test keys (#2142)\n-    - overlord/devicestate: don't spam the debug log on classic (#2141)\n-    - cmd/snap: simplify auto-import mountinfo parsing (#2135)\n-    - tests: run ubuntu-core upgrades on isolated machine (#2137)\n-    - overlord/devicestate: recover seeding from old external approach\n-      (#2134)\n-    - overlord: merge overlord/boot pkg into overlord/devicestate\n-      (#2118)\n-    - daemon: add postCreateUserSuite test suite (#2124)\n-    - tests: abort tests if an update process is scheduled (#2119)\n-    - snapstate: avoid reboots if nothing in the boot setup has changed\n-      (#2117)\n-    - cmd/snap: do not auto-import from loop or non-dev devices (#2121)\n-    - tests: add spread test for `snap auto-import` (#2126)\n-    - tests: add test for auto-mount assertion import (#2127)\n-    - osutil: add missing unit tests for IsMounted (#2133)\n-    - tests: check for failure creating user on managed ubuntu-core\n-      systems (#2096)\n-    - snap: ignore /dev/loop addings from udev (#2111)\n-    - tests: remove snapd.boot-ok reference (#2109)\n-    - tests: enable tests related to the home interface in all-snaps\n-      (#2106)\n-    - snapstate: only import defaults from gadget on install (#2105)\n-    - many: move firstboot code into the snapd daemon (#2033)\n-    - store: send correct JSON type of string for expected payment\n-      amount (#2103)\n-    - cmd/snap: rename is-managed to managed and tune (#2102)\n-    - interfaces,overlord/ifacestate: initial cleaning up of no arg\n-      AutoConnect related bits (#2090)\n-    - client, cmd: prompt for password when buying (#2086)\n-    - snapstate: fix hanging `snap remove` if snap is no longer mounted\n-    - image: support gadget specific cloud.conf file (#2101)\n-    - cmd/snap,ctlcmd: fix behavior of snap(ctl) get (#2093)\n-    - store: local users download from the anonymous url (#2100)\n-    - docs/hooks.md: fix typos (#2099)\n-    - many: check installation of slots and plugs against declarations\n-    - docs: fix missing \"=\" in the systemd-active docs\n-    - store: do not set store auth for local users (#2092)\n-    - interfaces,overlord/ifacestate: use declaration-based checking for\n-      auto-connect (#2071)\n-    - overlord, daemon, snap: support gadget config defaults (#2082)The\n-      main semantic changes are:\n-    - tests: fix snap-disconnect tests after core rename (#2088)\n-    - client,daemon,overlord,cmd: add /v2/users and create-user on auto-\n-      import (#2074)\n-    - many: abbreviated forms of disconnect (#2066)\n-    - asserts: require lowercase model until insensitive matching is\n-      ready (#2076)\n-    - cmd/snap: add version command, same as --version (#2075)\n-    - all: use \"core\" by default but allow \"ubuntu-core\" still (#2070)\n-    - overlord/devicestate, docs/hooks.md: nest prepare-device\n-      configuration options\n-    - daemon: fix login API to return local macaroons (#2078)\n-    - daemon: do not hardcode UID in userLookup (#2080)\n-    - client, cmd: connect fixes (#2026)\n-    - many: preparations for switching most of autoconnect to use the\n-      declarationsfor now:\n-    - overlord/auth: update CheckMacaroon to verify local snapd\n-      macaroons (#2069)\n-    - cmd/snap: trivial auto-import and download tweaks (#2067)\n-    - interfaces: add repo.ResolveConnect that handles name resolution\n-    - interfaces/policy: introduce InstallCandidate and its checks\n-    - interfaces/policy,overlord: check connection requests against the\n-      declarations in ifacestate\n-    - many: setup snapd macaroon for local users (#2051)Next step: do\n-      snapd macaroons verification.\n-    - interfaces/policy: implement snap-id/publisher-id checks\n-    - many: change Connect to take ConnRef instead of strings (#2060)\n-    - snap: auto mount block devices and import assertions (#2047)\n-    - daemon: add `snap create-user --force-managed` support (#2041)\n-    - docs: remove references to removed buying features (#2057)\n-    - interfaces,docs: allow sharing SNAP{,_DATA,_COMMON} via content\n-      iface (#2063)\n-    - interfaces: add Plug/Slot/Connection reference helpers (#2056)\n-    - client,daemon,cmd/snap: improve create-user APIs (#2054)\n-    - many: introduce snap refresh --ignore-validation  to\n-      override refresh validation (#2052)\n-    - daemon: add support for `snap create-user --known` (#2040)\n-    - interfaces/policy: start of interface policy checking code based\n-      on declarations (#2050)\n-    - overlord/configstate: support nested configuration (#2039)\n-    - asserts,interfaces/builtin,overlord/assertstate: introduce base-\n-      declaration (#2037)\n-    - interfaces: builtin: Allow writing DHCP lease files to\n-      /run/NetworkManager/dhcp (#2049)\n-    - many: remove all traces of the /v2/buy/methods endpoint (#2045)\n-    - tests: add external spread backend (#1918)\n-    - asserts: parse the slot rules in snap-declarations (#2035)\n-    - interfaces: allow read of /etc/ld.so.preload by default for armhf\n-      on series 16 (#2048)\n-    - store: change purchase to order and store clean up first pass\n-      (#2043)\n-    - daemon, store: switch to new store APIs in snapd (#2036)\n-    - many: add email to UserState (#2038)\n-    - asserts: support parsing the plugs stanza i.e. plug rules in snap-\n-      declarations (#2027)\n-    - store: apply deltas if explicitly enabled (#2031)\n-    - tests: fix create-key/snap-sign test isolation (#2032)\n-    - snap/implicit: don't restrict the camera iface to classic (#2025)\n-    - client, cmd: change buy command to match UX document (#2011)\n-    - coreconfig: nuke it. Also, ignore po/snappy.pot. (#2030)\n-    - store: download deltas if explicitly enabled (#2017)\n-    - many: allow use of the system user assertion with create-user\n-      (#1990)\n-    - asserts,overlord,snap: add prepare-device hook for device\n-      registration (#2005)\n-    - debian: adjust packaging for trusty/deputy systemd (#2003)\n-    - asserts: introduce AttributeConstraints (#2015)\n-    - interface/builtin: access system bus on screen-inhibit-control\n-    - tests: add firewall-control interface test (#2009)\n-    - snapstate: pass errors from ListRefresh in updateInfo (#2018)\n-    - README: add links to IRC, mailing list and social media (#2022)\n-    - docs: add `configure` hook to hooks list (#2024)LP: #1596629\n-    - cmd/snap,configstate: rename apply-config variables to configure.\n-      (#2023)\n-    - store: retry download on 500 (#2019)\n-    - interfaces/builtin: support time and date settings via\n-      'org.freedesktop.timedate1 (#1832)\n-\n- -- Michael Vogt   Wed, 02 Nov 2016 01:17:36 +0200\n-\n-snapd (2.16) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1628425\n-    - overlord/state: prune old empty changes\n-    - interfaces: ppp: load needed kernel module (#2007)\n-    - interfaces/builtin: add missing rule to allow run-parts to\n-      execute all resolvconf scripts\n-    - many: rename apply-config hook to configure\n-    - tests: use new spread `debug` feature\n-    - many: finish `snap set` API.\n-    - overlord: fix and simplify configstate.Transaction\n-    - assertions: add system-user assertion\n-    - snap: add `snap known --remote`\n-    - tests: replace systemd-run with on-the-fly generation of units.\n-    - overlord/boot: switch to using assertstate.Batch\n-    - snap, daemon, store: pass through screenshots from store\n-    - image: add meta/gadget.yaml infrastructure\n-    - tests: add test benchmark script\n-    - daemon: add the actual ssh keys that got added to the create-user\n-      response\n-    - daemon: add REST API behind `snap get`\n-    - debian: re-add golang-github-gosexy-gettext-dev\n-    - tests: added install_local function\n-    - interfaces/builtin: fix resolvconf permissions for network-manager\n-      interface\n-    - tests: use apt as compatible with trusty\n-    - many: discard preserved namespace after removing snap\n-    - daemon, overlord, store: add ReadyToBuy API to snapd\n-    - many: add support for installing/removing multiple snaps\n-    - progress: use New64 and fix output newline\n-    - interfaces/builtin: allow network-manager to access netplan conf\n-      files\n-    - tests: build once and install test snap from cache\n-    - overlord/state: introduce cleanup support\n-    - snap: move/clarify Info.Broken\n-    - ctlcmd: add snapctl get.\n-    - overlord,store: clean up serial-proof plumbing code\n-    - interfaces/builtin: add network-setup-observe interface\n-    - daemon,overlord/assertstate: support streams of assertions with\n-      snap ack\n-    - snapd: kmod backend\n-    - tests: ensure HOME is also set correctly\n-    - configstate,hookstate: add snapctl set\n-    - tests: disable broken create-key test\n-    - interfaces: adjust bluetooth-control to allow getsockopt (LP:\n-      #1613572)\n-    - tests: add a test for core about device initialization and device\n-      registration and auth\n-    - many: show snap name before the download progress bar\n-    - interfaces/builtin: add rcvfrom for client connected plugs to mir\n-      interface\n-    - asserts: support for maps in assertions\n-    - tests: increase timeout for key generation in create-key test\n-    - many: validate refreshes against validation assertions by gating\n-      snaps\n-    - interfaces/apparmor: allow 'm' in default policy for snap-exec\n-    - many: avoid snap.InfoFromSnapYaml in tests\n-    - interfaces/builtin: allow /dev/net/tun with network-control\n-    - tests: add spread test for snap create-key/snap sign\n-    - tests: add missing quotes in security-device-cgroups/task.yaml\n-    - interfaces: drop ErrUnknownSecurity\n-    - store: add \"ready to buy\" method\n-    - snap/snapenv, tests: use root's data dirs when running via sudo\n-    - interfaces/builtin: add initial docker interface\n-    - snap: remove extra newline after progress is done\n-    - docs: fix formating of HACKING.md \"Testing snapd\"\n-    - store : add requestOptions.ExtraHeaders so that individual\n-      requests can customise headers.\n-    - many: use unique plug/slot names in tests\n-    - tests: add tests for the classic dimension\n-    - many: add vendoring of dependencies by default\n-    - tests: use in-tree snap{ctl,-exec} for all tests\n-    - many: support snapctl -h\n-    - tests: adjust regex after changes in stat output\n-    - store,snap: initial support for delta downloads\n-    - interfaces/builtin: add run/udev/data paths to mir interface\n-    - snap: lessen annoyance of implicit interface tests\n-    - tests: ensure http{,s}_proxy is defined inside the fake-store\n-    - interfaces: allow xdg-open in unity7, unity7 cleanups\n-    - daemon,store: move store login user logic to store\n-    - tests: replace realpath with readlink -f for trusty support.\n-    - tests: add https_proxy into environment as well\n-    - interfaces/builtin: allow mmaping pulseaudio buffers\n-\n- -- Michael Vogt   Wed, 28 Sep 2016 11:09:27 +0200\n-\n-snapd (2.15.2ubuntu1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1623579\n-    - snap/snapenv, tests: use root's data dirs when running via sudo\n-      (cherry pick PR: #1857)\n-    - tests: add https_proxy into environment\n-      (cherry pick PR: #1926)\n-    - interfaces: allow xdg-open in unity7, unity7 cleanups\n-      (cherry pick PR: #1946)\n-    - tests: ensure http{,s}_proxy is defined inside the fake-store\n-      (cherry pick PR: #1949)\n-\n- -- Michael Vogt   Wed, 21 Sep 2016 17:21:12 +0200\n-\n-snapd (2.15.2) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1623579\n-    - asserts: define a bit less terse Ref.String\n-    - interfaces: disable auto-connect in libvirt interface\n-    - asserts: check that validation assertions are signed by the\n-      publisher of the gating snap\n-\n- -- Michael Vogt   Mon, 19 Sep 2016 10:42:29 +0200\n-\n-snapd (2.15.1) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1623579\n-    - image: ensure local snaps are put last in seed.yaml\n-    - asserts: revert change that made the account-key's name mandatory.\n-    - many: refresh all snap decls\n-    - interfaces/apparmor: allow reading /etc/environment\n-\n- -- Michael Vogt   Mon, 19 Sep 2016 09:19:44 +0200\n-\n-snapd (2.15) xenial; urgency=medium\n-\n-  * New upstream release, LP: #1623579\n-    - tests: disable prepare-image-grub test in autopkgtest\n-    - interfaces: allow special casing for auto-connect until we have\n-      assertions\n-    - docs: add a little documentation on hooks.\n-    - hookstate,daemon: don't mock HookRunner, mock command.\n-    - tests: add http_proxy to /etc/environment in the autopkgtest\n-      environment\n-    - backends: first bits of kernel-module security backend\n-    - tests: ensure openssh-server is installed in autopkgtest\n-    - tests: make ubuntu-core tests more robust\n-    - many: mostly work to support ABA upgrades\n-    - cmd/snap: do runtime linting of descriptions\n-    - spread.yaml: don't assume LANG is set\n-    - snap: fix SNAP* environment merging in `snap run`\n-    - CONTRIBUTING.md: remove integration-tests, include spread\n-    - store: don't discard error body from request device session call\n-    - docs: add create-user documentation\n-    - cmd/snap: match UX document for message when buying without login\n-    - firstboot: do not overwrite any existing netplan config\n-    - tests: add debug output to ubuntu-core-update-rollback-\n-      stresstest:\n-    - tests/lib/prepare.sh: test that classic does not setting bootvars\n-    - snap: run all tests with gpg2\n-    - asserts: basic support for validation assertion and refresh-\n-      control\n-    - interfaces: miscellaneous policy updates for default, browser-\n-      support and camera\n-    - snap: (re)add --force-dangerous compat option\n-    - tests: ensure SUDO_{USER,GID} is unset in the spread tests\n-    - many: clean out left over references to integration tests\n-    - overlord/auth,store: fix raciness in updating device/user in state\n-      through authcontext and other issuesbonus fixes:\n-    - tests: fix spread tests on yakkety\n-    - store: refactor auth/refresh tests\n-    - asserts: use gpg --fixed-list-mode to be compatible with both gpg1\n-      and gpg2\n-    - cmd/snap: i18n option descriptions\n-    - asserts: required account key name header\n-    - tests: add yakkety test host\n-    - packaging: make sure debhelper-generated snippet is invoked on\n-      postrm\n-    - snap,store: capture newest digest from the store, make it\n-      DownloadInfo only\n-    - tests: add upower-observe spread test\n-    - Merge github.com:snapcore/snapd\n-    - tests: fixes to actually run the spread tests inside autopkgtest\n-    - cmd/snap: make \"snap find\" error nicer.\n-    - tests: get the gadget name from snap list\n-    - cmd/snap: tweak help of 'snap download'\n-    - cmd/snap,image: teach snap download to download also assertions\n-    - interfaces/builtin: tweak opengl interface\n-    - interfaces: serial-port use udevUsbDeviceSnippet\n-    - store: ensure the payment methods method handles auth failure\n-    - overlord/snapstate: support revert flags\n-    - many: add snap configuration to REST API\n-    - tests: use ubuntu-image for the ubuntu-core-16 image creation\n-    - cmd/snap: serialise empty keys list as [] rather than null\n-    - cmd/snap,client: add snap set and snap get commands\n-    - asserts: update trusted account-key asserts with names\n-    - overlord/snapstate: misc fixes/tweaks/cleanups\n-    - image: have prepare-image set devmode correctly\n-    - overlord/boot: have firstboot support assertion files with\n-      multiple assertions\n-    - daemon: bail from enable and disable if revision given, and from\n-      multi-op if unsupported optons given\n-    - osutil: call sync after cp if\n-      requested.overlord/snapstate/backend: switch to use osutil instead\n-      of another buggy call to cp\n-    - cmd/snap: generate account-key-request \"since\" header in UTC\n-    - many: use symlinks instead of wrappers\n-    - tests: remove silly [Service] entry from snapd.socket.d/local.conf\n-    - store: switch device session to use device-session-request\n-      assertion\n-    - snap: ensure that plug and slot names are unique\n-    - cmd/snap: fix test suite (no Exit(0) on tests!)\n-    - interfaces: add interface for hidraw devices\n-    - tests: use the real model assertion when creating the core test\n-      image\n-    - interfaces/builtin: add udisks2 and removable-media interfaces\n-    - interface: network_manager: enable resolvconf\n-    - interfaces/builtin: usb serial-port support via udev\n-    - interfaces/udev: support noneSecurityTag keyed snippets\n-    - snap: switch to the new agreed regexp for snap names\n-    - tests: adjust test setup after ubuntu user removal\n-    - many: start services only after the snap is fully ready (link-snap\n-      was run)\n-    - asserts: don't have Add/Check panic in the face of unsupported no-\n-      authority assertions\n-    - asserts: initial support to generate/sign snap-build assertions\n-    - asserts: support checking account-key-request assertions\n-    - overlord: introduce AuthContext.DeviceSessionRequest with support\n-      in devicestate\n-    - overlord/state: fix for reloaded task/change crashing on Set if\n-      checkpointed w. no custom data  yet\n-    - snapd.refresh.service: require snap.socket and /snap/*/current.\n-    - many: spell --force-dangerous as just --dangerous, devmode should\n-      imply it\n-    - overlord/devicestate: try to fetch/refresh the signing key of\n-      serial (also in case is not there yet)\n-    - image,overlord/boot,snap: metadata from asserts for image snaps\n-    - many: automatically restart all-snap devices after os/kernel\n-      updates\n-    - interfaces: modem-manager: ignore camera\n-    - firstboot: only configure en* and eth* interfaces by default\n-    - interfaces: fix interface handling on no-app snaps\n-    - snap: set user variables even if HOME is unset (like with systemd\n-      services)\n-\n- -- Michael Vogt   Fri, 16 Sep 2016 07:46:22 +0200\n-\n-snapd (2.14.2~16.04) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1618095\n-    - tests: use the spread tests with the adhoc interface inside\n-      autopkgtest\n-    - interfaces: add fwupd interface\n-    - asserts,cmd/snap: add \"name\" header to account-key(-request)\n-    - client,cmd/snap: display os-release data only on classic\n-    - asserts/tool,cmd/snap: introduce hidden \"snap sign\"\n-    - many: when installing snap file derive metadata from assertions\n-      unless --force-dangerous\n-    - osutil: tweak the createUserTests a bit and extract common code\n-    - debian: umount --lazy before rm on snapd.postrm\n-    - interfaces: updates to default policy, browser-support, and x11\n-    - store: set initial device session\n-    - interfaces: add upower-observe interface (LP: #1595813)\n-    - tests: use beta u-d-f in test by default\n-    - interfaces/builtin: allow writing on /dev/vhci in bluetooth-\n-      control\n-    - interfaces/builtin: allow /dev/vhci on bluetooth-control\n-    - tests: port integration tests to spread\n-    - snapstate: use umount --lazy when removing the mount units\n-    - spread: enable halt-timeout, tweak image selection\n-    - tests: fix firstboot-assertions to actually be runnable on classic\n-      again\n-    - asserts: introduce device-session-request\n-    - interfaces: add screen-inhibit-control interface (LP: #1604880)\n-    - firstboot: change location of netplan config\n-    - overlord/devicestate: some cleanups and solving a couple todos\n-    - daemon,overlord: add subcommand handling to snapctl\n-\n- -- Michael Vogt   Thu, 01 Sep 2016 18:52:05 +0200\n-\n-snapd (2.14.1) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1618095\n-    - snap-exec: add support for commands with internal args in snap-\n-      exec\n-    - store: refresh expired device sessions\n-    - debian: re-add ubuntu-core-snapd-units as a transitional package\n-    - image: snap assertions into image\n-    - overlord/assertstate,asserts/snapasserts: give snap assertions\n-      helpers a package, introduce ReconstructSideInfo\n-    - docs/interfaces: Add empty line after lxd-support title\n-    - README: cover the new /run/snapd-snap.socket\n-    - daemon: make socket split backward-compatible.\n-\n- -- Michael Vogt   Tue, 30 Aug 2016 16:43:29 +0200\n-\n-snapd (2.14) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1618095\n-    - cmd: enable SNAP_REEXEC only if it is set to SNAP_REEXEC=1\n-    - osutil: fix create-user on classic\n-    - firstboot: disable firstboot on classic for now\n-    - cmd/snap: add export-key --account= option\n-    - many: split public snapd REST API into separate socket.\n-    - many: drop ubuntu-core-snapd-units package, use release.OnClassic\n-      instead\n-    - tests: add content-shareing binary test that excersises snap-\n-      confine\n-    - snap: use \"up to date\" instead of \"up-to-date\"\n-    - asserts: add an account-key-request assertion\n-    - asserts: fix GPG key generation parameters\n-    - tests, integration-tests: implement the cups-control manual test\n-      as a spread test\n-    - many: clarify/tie down model assertion\n-    - cmd/snap: add \"snap download\" command\n-    - integration-tests: remove them in favour of the spread tests\n-    - tests: test all snap ubuntu core upgrade\n-    - many: support install and remove by revision\n-    - overlord/state: prevent change ready => unready\n-    - tests: fixes to make the ubuntu-core-16 image usable with\n-      -keep/-reuse\n-    - asserts: authority-id and brand-id of serial must match\n-    - firstboot: generate netplan config rather than ifupdown\n-    - store: request device session macaroon from store\n-    - tests: add workaround for u-d-f to unblock all-snap image tests\n-    - tests: the stable ubuntu-core snap has snap run support now\n-    - many: use make StripGlobalRootDir public\n-    - asserts: add some stricter checks around format\n-    - many: have AuthContext expose device store-id, serial and serial-\n-      proof signing to the store\n-    - tests: fix \"tests/main/ack\" to not break if asserts are alreay\n-      there\n-    - tests/main/ack: fix test/style\n-    - snap: add key management commands\n-    - firstboot: add firstboot assertions importing\n-\n- -- Michael Vogt   Mon, 29 Aug 2016 17:07:20 +0200\n-\n-snapd (2.13) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1616157\n-    - many: respect dirs.SnapSnapsDir in tests\n-    - tests: update listing test for latest stable image\n-    - many: hook in start of code to fetch/check assertions when\n-      installing snap from store\n-    - boot: add missing udevadm mock to fix FTBFS\n-    - interfaces: add lxd-support interface\n-    - dirs,snap: handle empty root directory in SetRootDir\n-    - dirs,snap: define methods for SNAP_USER_DATA and SNAP_USER_COMMON\n-    - tests: spread all-snap test cleanup\n-    - tests: add all-snap spread image tests\n-    - store,tests: have just one envvar SNAPPY_USE_STAGING_STORE to\n-      control talking to staging\n-    - overlord/hookstate: use snap run posix parameters.\n-    - interfaces/builtin: allow bind in the network interface\n-    - asserts,overlord/devicestate: simplify private key/key pairs APIs,\n-      they take just key ids\n-    - dependencies: update godeps\n-    - boot: add support for \"devmode: {true,false}\" in seed.yaml\n-    - many: teach prepare-image to copy the model assertion (and\n-      prereqs) into the seed area of the image\n-    - tests: start teaching the fakestore about assertions\n-    - asserts/sysdb: embed the new format official root/trusted\n-      assertions\n-    - overlord/devicestate: first pass at device registration logic\n-    - tests: add process-control interface spread test\n-    - tests: disable unity test\n-    - tests: adapt to new spread version\n-    - asserts: add serial-proof device assertion\n-    - client, cmd/snap: use the new multi-refresh endpoint\n-    - many: preparations for image code to fetch model prereqs\n-    - debian: add extra checks when debian/snapd.postrm purge is run\n-    - overlord/snapstate, daemon: support for multi-snap refresh\n-    - tests: do not leave \"squashfs-root\" around\n-    - snap-exec: Fix broken `snap run --shell` and add test\n-    - overlord/snapstate: check changes to SnapState for conflicts also.\n-    - docs/interfaces: change snappy command to snap\n-    - tests: test `snap run --hook` using in-tree snap-exec.\n-    - partition: ensure that snap_{kernel,core} is not overridden with an\n-      empty value\n-    - asserts,overlord/assertstate: introduce an assertstate task\n-      handler to fetch snap assertions\n-    - spread: disable re-exec to always test development tree.\n-    - interfaces: implement a fuse interface\n-    - interfaces/hardware-observe.go: re-add /run/udev/data\n-    - overlord/assertstate,daemon: reorg how the assert manager exposes\n-      the assertion db and adding to it\n-    - release: Remove \"UBUNTU_CODENAME\" from the test data\n-    - many: implement snapctl command.\n-    - interfaces: mpris updates (fix unconfined introspection, add name\n-      attribute)\n-    - asserts: export DecodePublicKey\n-    - asserts: introduce support for assertions with no authority,\n-      implement serial-request\n-    - interfaces: bluez: add a few more tests to verify interface\n-      connection works\n-    - interfaces: bluez: add missing mount security snippet case\n-    - interfaces: add kernel-module interface for module insertion.\n-    - integration-tests: look for ubuntu-device-flash on PATH before\n-      calling sudo\n-    - client, cmd, daemon, osutil: support --yaml and --sudoer flags for\n-      create-user\n-    - spread: use snap-confine from ppa:snappy-dev/image for the tests\n-    - many: move to purely hash based key lookup and to new\n-      key/signature format (v1)\n-    - spread: Use /home/gopath in spread.yaml\n-    - tests: base security spread tests\n-\n- -- Michael Vogt   Wed, 24 Aug 2016 14:48:28 +0200\n-\n-snapd (2.12) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1612362\n-    - many: do not require root for `snap prepare-image`\n-    - tests: prevent restore error on test failure\n-    - osutil: change escaping for create-user's sudoers\n-    - docs: private flag doesn't exist on /v2/find (it's select)\n-    - snap: do not sort the result of `snap find`\n-    - interfaces/builtin: add gpio interface\n-    - partition: fix cleaning of the boot variables on the second good\n-      boot\n-    - tests: add udev rules spread test\n-    - docs: fix references to refresh action\n-    - interfaces/udev,osutil: avoid doubled rules and put all in a per\n-      snap file\n-    - store: minor store improvements from previous reviews\n-    - many: support interactive payments in snapd, filter from command\n-      line\n-    - docs/interfaces.md: improve interfaces documentation\n-    - overlord,store: set store device authorization header\n-    - store: add device nonce API support\n-    - many: various fixes around the `create-user` command\n-    - client, osutil: chown the auth file\n-    - interfaces/builtin: add transitional browser-support interface\n-    - snap: don't load unsupported implicit hooks.\n-    - cmd/snap,cmd/snap-exec: support hooks again.\n-    - interfaces/builtin: improve pulseaudio interface\n-    - asserts: make account-key's `until` optional to represent a never-\n-      expiring key\n-    - store: refactor newRequest/doRequest to take requestOptions\n-    - tests: allow-downgrades on upgrade test to prevent version errors\n-    - daemon: stop using group membership as succedaneous of running\n-      things with sudo\n-    - interfaces: add bluetooth-control interfaces\n-    - many: remove integration-test coverage metrics\n-    - daemon,docs: drop license docs and error kind\n-    - tests: add network-control interface spread test\n-    - tests: add hardware-observe spread test\n-    - interfaces: add system-trace interface LP: #1600085\n-    - boot: use `cp -aLv` instead of `cp -a` (no symlinks on vfat)\n-    - store: soft-refresh discharge macaroon from store when required\n-    - partition: clear snap_try_{kernel,core} on success\n-    - tests: add snapd-control interface spread test\n-    - tests: add locale-control write spread test\n-    - store: fix buy method after some refactoring broke it\n-    - interfaces/builtin: read perms for network devices in network-\n-      observe\n-    - interfaces: also allow rfkill in network_control\n-    - snapstate: remove artifacts from a snap try dir that vanished\n-    - client, cmd/snap: better errors for empty snap list result\n-    - wrappers: set BAMF_DESKTOP_FILE_HINT for unity\n-    - many: cleanup/update rest.md; improve auth errors\n-    - interfaces: miscelleneous policy updates for default, log-observe,\n-      mount-observe, opengl, pulseaudio, system-observe and unity7\n-    - interfaces: add process-control interface (LP: #1598225)\n-    - osutil: support both \"nobody\" and \"nogroup\" for grpnam tests\n-    - cmd: support defaulting to the user's preferred payment method\n-    - overlord: actually run hooks.\n-    - overlord/state,overlord/ifacestate: define basic infrastructure\n-      for and then setting up serialising of interface mgr tasks\n-    - asserts: add Assertion.Prerequisites and SigningKey, Ref and\n-      FindTrusted\n-    - overlord/snapstate: ensure calls to store are done without the\n-      state lock held\n-    - asserts,client: switch snap-build and snap-revision to be indexed\n-      by snap-sha3-384\n-    - many: make seed.yaml on firstboot mandatory and include sideInfo\n-    - asserts,many: start supporting structured headers using the new\n-      parseHeaders\n-    - many: update code for the new snap_mode\n-    - tests: added spread find private test\n-    - store: deal with 404 froms the SSO store properly\n-    - snap: remove meta/kernel.yaml again\n-    - daemon: always mock release info in tests\n-    - snapstate: drop revisions after \"current\" on refresh\n-    - asserts: introduce new parseHeadersThis introduces the new\n-      parseHeaders returning map[string]interface{} and capable of\n-      accepting:\n-    - asserts: remove/disable comma separated lists and their uses\n-\n- -- Michael Vogt   Thu, 11 Aug 2016 19:30:36 +0200\n-\n-snapd (2.11) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1605303\n-    - increase version number to reflect the nature of the update\n-      better\n-    - store, daemon, client, cmd/snap, docs/rest.md: adieu search\n-      grammar\n-    - debian: move snapd.refresh.timer into timers.target\n-    - snapstate: add daemon-reload to fix autopkgtest on yakkety\n-    - Interfaces: hardware-observe\n-    - snap: rework the output after a snap operation\n-    - daemon, cmd/snap: refresh --devmode\n-    - store, daemon, client, cmd/snap: implement `snap find --private`\n-    - tests: add network-observe interface spread test\n-    - interfaces/builtin: allow getsockopt for connected x11 plugs\n-    - osutil: check for nogrup instead of adm\n-    - store: small cleanups (more needed)\n-    - snap/squashfs: fix test not to hardcode snap size\n-    - client,cmd/snap: cleanup cmd/snap test suite, add extra args\n-      testThis cleans up the cmd/snap test suite:\n-    - wrappers: map \"never\" restart condition to \"no.\"\n-    - wrappers: run update-desktop-database after add/remove of desktop\n-      files\n-    - release: work around elementary mistake\n-    - many: remove all traces of channel from the buying codepath\n-    - store: kill setUbuntuStoreHeaders\n-    - docs: add payment methods documentation\n-    - many: present user with a choice of payment backends\n-    - asserts: add cross checks for snap asserts\n-    - cmd/snap,cmd/snap-exec: support running hooks via snap-exec.\n-    - tests: improve snap run symlink tests\n-    - tests: add content sharing interface spread test\n-    - store & many: a mechanical branch shortening store names\n-    - snappy: remove old snappy pkg\n-    - overlord/snapstate: kill flagscompat\n-    - overlord/snapstate, daemon, client, cmd/snap: devmode override\n-      (aka confined)\n-    - tests: extend refresh test to talk to the staging and production\n-      stores\n-    - asserts,daemon: cross checks for account and account-key\n-      assertions\n-    - client: existing JSON fixtures uses tabs for indentation\n-    - snap-exec: add proper integration test for snap-exec\n-    - spread.yaml, tests: replace hello-world with test-snapd-tools\n-    - tests: add locale-control interface spread test\n-    - tests: add mount-observe interface spread test\n-    - tests: add system-observe interface spread test\n-    - many: add AuthContext to mediate user updates to the state\n-    - store/auth: add helper for the macaroon refresh endpoint\n-    - cmd: add buy command\n-    - overlord: switch snapstate.Update to use ListRefresh (aka\n-      /snaps/metadata)\n-    - snap-exec: fix silly off-by-one error\n-    - tests: stop using hello-world.echo in the tests\n-    - tests: add env command to test-snapd-tools\n-    - classic: remove (most of) \"classic\" mode, this is implemented as a\n-      snap now\n-    - many: remove snapstate.Candidate and other cleanups\n-    - many: removed authenticator, store gets a user instead\n-    - asserts: fix minor doc comment typo\n-    - snap: ensure unknown arguments to `snap run` are ignored\n-    - overlord/auth: add Device/SetDevice to persist device identity in\n-      state\n-    - overlord: make SyncBoot work again\n-    - tests: add -y flag to apt autoremove command in unity task restore\n-    - many: migrate SnapSetup and SideInfo to use RealName\n-    - daemon: drop auther()\n-    - client: improve error from client.do() on json decode failures\n-    - tests: readd the fake store tests\n-    - many: allow removal of broken snaps, add spread test\n-    - overlord: implement &Retry{After: duration} support for handlers\n-    - interface: add new interfaces.all.SecurityBackends\n-    - integration-tests: remove login tests\n-    - cmd,interfaces,snap: implement hook whitelist.\n-    - daemon,overlord/auth,store: update macaroon authentication to use\n-      the new endpoints\n-    - daemon, overlord: add buy endpoint to REST API\n-    - tests: use systemd-run for starting and stopping the unity app\n-    - tests, integration-tests: port systemd service check test to\n-      spread\n-    - store: switch search to new snap-specific endpoint\n-    - store, many: start using the new details endpoint\n-    - tests, integration-tests: port unity test to spread\n-    - tests: add spread test for tried snaps removal\n-    - tests, integration-tests: port auth errors test to spread\n-    - snapstate: rename OfficialName to RealName in the new tests\n-    - many: rename SideInfo.OfficialName to SideInfo.RealName\n-    - snapstate: use snapstate.Type in backend.RemoveSnapFiles\n-    - many: add `snap enable/disable` commands\n-    - tests, integration-tests: port refresh all test to spread\n-    - snap: add `snap run --shell`\n-    - tests: set yaml indentation to 4 spaces\n-    - snapstate: cleanup downloaded temp snap files\n-    - overlord: make patch1_test more robust\n-    - debian: add snapd.postrm that purges\n-    - integration-tests: drop already covered refresh app test\n-    - many: add concept of \"broken\" snaps\n-    - tests, integration-tests: port remove errors tests to spread\n-    - tests, integration-tests: port revert test to spread\n-    - debian: fix snapbuild path\n-    - overlord: fix access to the state without lock in firstboot.go and\n-      add test\n-    - snapstate: add very simple garbage collection on upgrade\n-    - asserts: introduce assertstest with helpers to test code involving\n-      assertions\n-    - tests, integration tests: port undone failed install test to\n-      spread\n-    - snap,store: switch to the new snaps/metadata endpoint, introduce\n-      and start capturing DeveloperID\n-    - tests, integration-tests: port the op remove retry test to spread\n-    - po: remove snappy.pot from git, it will be generated at build time\n-    - many: add some missing tests, clarify some things and nitpicks as\n-      follow up to `snap revert`\n-    - snapstate: when doing snapsate.Update|Install, talk to the store\n-      early\n-    - tests, integration-tests: port the op remove test to spread\n-    - interfaces: allow /usr/bin/locale in default policy\n-    - many: add `snap revert`\n-    - overlord/auth,store: add macaroon serialization/deserialization\n-      helpers\n-    - many: embed main store trusted assertions in snapd, way to have\n-      test ones, spread tests for ack and known\n-    - overlord/snapstate,daemon: clarify active vs current, add\n-      SnapState.HasCurrent,CurrentInfo\n-    - tests: do not search for a specific snap (we hit 100 items) and\n-      pagination kicks in\n-    - tests: use printf instead of echo where we need portability\n-    - tests: rename and generalize basic-binaries to test-snapd-tools\n-\n- -- Michael Vogt   Tue, 26 Jul 2016 15:49:04 +0200\n-\n-snapd (2.0.10) xenial; urgency=medium\n-\n-  *  New upstream release: LP: #1597329\n-    - interfaces: also allow @{PROC}/@{pid}/mountinfo and\n-      @{PROC}/@{pid}/mountstats\n-    - interfaces: allow read access to /etc/machine-id and\n-      @{PROC}/@{pid}/smaps\n-    - interfaces: miscelleneous policy updates for default, log-observe\n-      and system-observe\n-    - snapstate: add logging after a successful doLinkSnap\n-    - tests, integration-tests: port try tests to spread\n-    - store, cmd/snapd: send a basic user-agent to the store\n-    - store: add buy method\n-    - client: retry on failed GETs\n-    - tests: actual refresh test\n-    - docs: REST API update\n-    - interfaces: add mount support for hooks.\n-    - interfaces: add udev support for hooks.\n-    - interfaces: add dbus support for hooks.\n-    - tests, integration-tests: port refresh test to spread\n-    - tests, integration-tests: port change errors test to spread\n-    - overlord/ifacestate: don't retry snap security setup\n-    - integration-tests: remove unused file\n-    - tests: manage the socket unit when reseting state\n-    - overlord: improve organization of state patches\n-    - tests: wait for snapd listening after reset\n-    - interfaces/builtin: allow other sr*/scd* optical devices\n-    - systemd: add support for squashfuse\n-    - snap: make snaps vanishing less fatal for the system\n-    - snap-exec: os.Exec() needs argv0 in the args[] slice too\n-    - many: add new `create-user` command\n-    - interfaces: auto-connect content interfaces with the same content\n-      and developer\n-    - snapstate: add Current revision to SnapState\n-    - readme: tweak readme blurb\n-    - integration-tests: wait for listening port instead of active\n-      service reported by systemd\n-    - many: rename Current -> {CurrentSideInfo,CurrentInfo}\n-    - spread: fix home interface test after suite move\n-    - many: name unversioned data.\n-    - interfaces: add \"content\" interface\n-    - overlord/snapstate: defaultBackend can go away now\n-    - debian: comment to remember why the timer is setup like it is\n-    - tests,spread.yaml: introduce an upgrade test, support/split into\n-      two suites for this\n-    - overlord,overlord/snapstate: ensure we keep snap type in snapstate\n-      of each snap\n-    - many: rework the firstboot support\n-    - integration-tests: fix test failure\n-    - spread: keep core on suite restore\n-    - tests: temporary fix for state reset\n-    - overlord: add infrastructure for simple state format/content\n-      migrations\n-    - interfaces: add seccomp support for hooks.\n-    - interfaces: allow gvfs shares in home and temporarily allow\n-      socketcall by default (LP: #1592901, LP: #1594675)\n-    - tests, integration-tests: port network-bind interface tests to\n-      spread\n-    - snap,snap/snaptest: use PopulateDir/MakeTestSnapWithFiles directly\n-      and remove MockSnapWithHooks\n-    - interfaces: add mpris interface\n-    - tests: enable `snap run` on i386\n-    - tests, integration-tests: port network interface test to spread\n-    - tests, integration-tests: port interfaces cli to spread\n-    - tests, integration-tests: port leftover install tests to spread\n-    - interfaces: add apparmor support for hooks.\n-    - tests, integration-tests: port log-observe interface tests to\n-      spread\n-    - asserts: improve Decode doc comment about assertion format\n-    - tests: moved snaps to lib\n-    - many: add the camera interface\n-    - many: add optical-drive interface\n-    - interfaces: auto-connect home if running on classic\n-    - spread: bump gccgo test timeout\n-    - interfaces: use security tags to index security snippets.\n-    - daemon, overlord/snapstate, store: send confinement header to the\n-      store for install\n-    - spread: run tests on 16.04 i386 concurrently\n-    - tests,integration-tests: port install error tests to spread\n-    - interfaces: add a serial-port interface\n-    - tests, integration-tests, debian: port sideload install tests to\n-      spread\n-    - interfaces: add new bind security backend and refactor\n-      backendtests\n-    - snap: load and validate implicit hooks.\n-    - tests: add a build/run test for gccgo in spread\n-    - cmd/snap/cmd_login: Adjust message after adding support for wheel\n-      group\n-    - tests, integration-tests: ported install from store tests to\n-      spread\n-    - snap: make `snap change ` show task progress\n-    - tests, integration-tests: port search tests to spread\n-    - overlord/state,daemon: make abort proceed immediately, fix doc\n-      comment, improve tests\n-    - daemon: extend privileged access to users in \"wheel\" group\n-    - snap: tweak `snap refresh` and `snap refresh --list` outputTiny\n-      branch that does three things:\n-    - interfaces: refactor auto-connection candidate check\n-    - snap: add support for snap {install,refresh}\n-      --{edge,beta,candidate,stable}\n-    - release: don't force KDE Neon into devmode.\n-\n- -- Michael Vogt   Wed, 29 Jun 2016 21:02:39 +0200\n-\n-snapd (2.0.9) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1593201\n-    - snap: add the magic redirect part of `snap run`\n-    - tests, integration-tests: port server related tests to spread\n-    - overlord/snapstate: log restarting in the task\n-    - daemon: test restart wiring, fix setup/teardown\n-    - cmd: don't show the price if a snap has already been purchased\n-    - tests, integration-tests: port listing tests to spread\n-    - integration-tests: do not try to kill ubuntu-clock-app.clock (no\n-      longer a process)\n-    - several: tie up overlord's restart handler into daemon; adjust\n-      snap to cope\n-    - tests, integration-tests: port abort tests to spread\n-    - integration-tests: fix flaky TestRemoveBusyRetries\n-    - testutils: refactor/mock exec\n-    - snap,cmd: add hook support to snap run.\n-    - overlord/snapstate: remove Download from backend\n-    - store: use a custom logging transport\n-    - overlord/hookstate: implement basic HookManager.\n-    - spread: move the suite restore to restore-each\n-    - asserts: turn model os into model core field, making it also more\n-      like the kernel and gadget fields\n-    - asserts: / is not allowed in primary key headers, follow the store\n-      in this\n-    - release: enable full confinement on Elementary 0.4\n-    - integration-tests: fix another i386 autopkgtest failure.\n-    - cmd/snap: create SNAP_USER_DATA and common dirs in `snap run`\n-    - many: have the installation of the core snap request a restart (on\n-      classic)\n-    - asserts: allow to load also account assertions into the trusted\n-      set\n-    - many: install snaps in devmode on distributions without complete\n-      apparmor and seccomp support\n-    - spread: run on travis\n-    - snapenv: do not hardcode amd64 in tests\n-    - spread: initial harness and first test\n-    - interfaces: miscelleneous policy updates for chromium, x86,\n-      opengl, etc\n-    - integration-tests: remove daemon to use the log-observe interface\n-    - client: remove client.Revision and import snap.Revision instead\n-    - integration-tests: wait for network-bind service in try test\n-    - many: move over from snappy to snapstate/backend SetupSnap and\n-      related code\n-    - integration-tests: add interfaces cli tests\n-    - snapenv: cleanup snapenv.{Basic,User}\n-    - cmd/snap: also print slots that connect to the wanted snap (LP:\n-      #1590704)\n-    - asserts: error style, use \"cannot\" instead of \"failed to\"\n-      following the main decided style\n-    - integration-tests: wait until the network-bind service is up\n-      before testing\n-    - many: add new `snap run` command\n-    - snappy: unexport snappy.Install and snappy.Overlord.{Un,}Install\n-    - many: add some shared testing helpers to snap/snaptest and to\n-      boot/boottest\n-    - rest-api: support to send apps per snap (LP: #1564076)\n-\n- -- Michael Vogt   Thu, 16 Jun 2016 13:56:12 +0200\n-\n-snapd (2.0.8.1) UNRELEASED; urgency=medium\n-\n-  * New upstream release\n-    - Cherry pick four commits that show snaps as installed in devmode on\n-    distributions without full confinement dependencies available:\n-\n-    25634d3364a46b5e9147e4466932c59b1b572d35\n-    53f2e8d5f1b2d7ce13f5b50be4c09fa1de8cf1e0\n-    38771f4cc324ad9dd4aa48b03108d13a2c361aad\n-    c46e069351c61e45c338c98ab12689a319790bd5\n-\n- -- Zygmunt Krynicki   Tue, 14 Jun 2016 15:55:30 +0200\n-\n-snapd (2.0.8) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1589534\n-    - debian: make `snap refresh` times more random (LP: #1537793)\n-    - cmd: ExecInCoreSnap looks in \"core\" snap first, and only in\n-      \"ubuntu-core\" snap if rev>125.\n-    - cmd/snap: have 'snap list' display helper message on stderr\n-      (LP: #1587445)\n-    - snap: make app names more restrictive.\n-\n- -- Michael Vogt   Wed, 08 Jun 2016 07:56:58 +0200\n-\n-snapd (2.0.7) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1589534\n-    - debian: do not ship  /etc/ld.so.conf.d/snappy.conf (LP: #1589006)\n-    - debian: fix snapd.refresh.service install and usage (LP: #1588977)\n-    - ovlerlord/state: actually support task setting themself as\n-      done/undone\n-    - snap: do not use \".\" import in revision_test.go, as this breaks\n-      gccgo-6 (fix build failure on powerpc)\n-    - interfaces: add fcitx and mozc input methods to unity7\n-    - interfaces: add global gsettings interfaces\n-    - interfaces: autoconnect home and doc updates (LP: #1588886)\n-    - integration-tests: remove\n-      abortSuite.TestAbortWithValidIdInDoingStatus\n-    - many: adding backward compatible code to upgrade SnapSetup.Flags\n-    - overlord/snapstate: handle sideloading over an old sideloaded snap\n-      without panicing\n-    - interfaces: add socketcall() to the network/network-bind\n-      interfaces (LP: #1588100)\n-    - overlord/snapstate,snappy: move over CanRemoveThis moves over the\n-      CanRemove check to snapstate itself.overlord/snapstate\n-    - snappy: move over CanRemove\n-    - overlord/snapstate,snappy: move over CopyData and Remove*Data code\n-\n- -- Michael Vogt   Mon, 06 Jun 2016 16:35:50 +0200\n-\n-snapd (2.0.6) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1588052:\n-    - many: repository moved to snapcore/snapd\n-    - debian: add transitional pkg for the github location change\n-    - snap: ensure `snap try` work with relative paths\n-    - debian: drop run/build dependency on lsb-release\n-    - asserts/tool: gpg key pair manager\n-    - many: add new snap-exec\n-    - many: implement `snap refresh --list` and  `snap refresh`\n-    - snap: add parsing support for hooks.\n-    - many: add the cups interface\n-    - interfaces: misc policy fixes (LP: #1583794)\n-    - many: add `snap try`\n-    - interfaces: allow using sysctl and scmp_sys_resolver for parsing\n-      kernel logs\n-    - debian: make snapd get its environ from /etc/environment\n-    - daemon,client,snap: revisions are now strings\n-    - interfaces: allow access to new ibus abstract socket path\n-      LP: #1580463\n-    - integration-tests: add remove tests\n-    - asserts: stronger crypto choices and follow better latest designs\n-    - snappy,daemon: hollow out more of snappy (either removing or not\n-      exporting stuff on its way out), snappy/gadget.go is gone\n-    - asserts: rename device-serial to serial\n-    - asserts: rename identity to account (and username access)\n-    - integration-tests: add changes tests\n-    - backend: add tests for environment wrapper generation\n-    - interfaces/builtin: add location-control interface\n-    - overlord/snapstate: move over check snap logic from snappy\n-    - release: use os-release instead of lsb-release for cross-distro\n-      use\n-    - asserts: allow empty snap-name for snap-declaration\n-    - interfaces/builtin,docs,snap: add the pulseaudio interface\n-    - many: add support for an environment map inside snap.yaml\n-    - overlord/snapstate: increase robustness of doLinkSnap/undoLinkSnap\n-      with sanity unit tests\n-    - snap: parse epoch property\n-    - snappy: do nothing in SetNextBoot when running on classic\n-    - snap: validate snap type\n-    - integration-tests: extend find command tests\n-    - asserts: extend tests to cover mandatory and empty headers\n-    - tests: stop the update-pot check in run-checks\n-    - snap: parse confinement property.\n-    - store: change applyUbuntuStoreHeaders to not take accept, and to\n-      take a channel\n-    - many: struct-based revisions, new representation\n-    - interfaces: remove 'audit deny' rules from network_control.go\n-    - interfaces: add  com.canonical.UrlLauncher.XdgOpen to unity7\n-      interface\n-    - interfaces: firewall-control can access xtables lock file\n-    - interfaces: allow unity7 AppMenu\n-    - interfaces: allow unity7 launcher API\n-    - interfaces/builtin: add location-observe interface\n-    - snap: fixed snap empty list text LP: #1587445\n-\n- -- Michael Vogt   Thu, 02 Jun 2016 08:23:50 +0200\n-\n-snapd (2.0.5) xenial; urgency=medium\n-\n-  * New upstream release: LP: #1583085\n-    - interfaces: add dbusmenu, freedesktop and kde notifications to\n-      unity7 (LP: #1573188)\n-    - daemon: make localSnapInfo return SnapState\n-    - cmd: make snap list with no snaps not special\n-    - debian: workaround for XDG_DATA_DIRS issues\n-    - cmd,po: fix conflicts, apply review from #1154\n-    - snap,store: load and store the private flag sent by the store in\n-      SideInfo\n-    - interfaces/apparmor/template.go: adjust /dev/shm to be more usable\n-    - store: use purchase decorator in Snap and FindSnaps\n-    - interfaces: first version of the networkmanager interface\n-    - snap, snappy: implement the new (minmimal) kernel spec\n-    - cmd/snap, debian: move manpage generation to depend on an environ\n-      key; also, fix completion\n-\n- -- Michael Vogt   Thu, 19 May 2016 15:29:16 +0200\n-\n-snapd (2.0.4) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - interfaces: cleanup explicit denies\n-    - integration-tests: remove the ancient integration daemon tests\n-    - integration-tests: add network-bind interface test\n-    - integration-tests: add actual checks for undoing install\n-    - integration-tests: add store login test\n-    - snap: add certain implicit slots only on classic\n-    - integration-tests: add coverage flags to snapd.service ExecStart\n-      setting when building from branch\n-    - integration-tests: remove the tests for features removed in 16.04.\n-    - daemon, overlord/snapstate: \"(de)activate\" is no longer a thing\n-    - docs: update meta.md and security.md for current snappy\n-    - debian: always start snapd\n-    - integration-tests: add test for undoing failed install\n-    - overlord: handle ensureNext being in the past\n-    - overlord/snapstate,overlord/snapstate/backend,snappy: start\n-      backend porting LinkSnap and UnlinkSnap\n-    - debian/tests: add reboot capability to autopkgtest and execute\n-      snapPersistsSuite\n-    - daemon,snappy,progress: drop license agreement broken logic\n-    - daemon,client,cmd/snap: nice access denied message\n-      (LP: #1574829)\n-    - daemon: add user parameter to all commands\n-    - snap, store: rework purchase methods into decorators\n-    - many: simplify release package and add OnClassic\n-    - interfaces: miscellaneous policy updates\n-    - snappy,wrappers: move desktop files handling to wrappers\n-    - snappy: remove some obviously dead code\n-    - interfaces/builtin: quote apparmor label\n-    - many: remove the gadget yaml support from snappy\n-    - snappy,systemd,wrappers: move service units generation to wrappers\n-    - store: add method to determine if a snap must be bought\n-    - store: add methods to read purchases from the store\n-    - wrappers,snappy: move binary wrapper generation to new package\n-      wrappers\n-    - snap: add `snap help` command\n-    - integration-tests: remove framework-test data and avoid using\n-      config-snap for now\n-    - add integration test to verify fix for LP: #1571721\n-\n- -- Michael Vogt   Fri, 13 May 2016 17:19:37 -0700\n-\n-snapd (2.0.3) xenial; urgency=medium\n-\n-  * New upstream micro release:\n-    - integration-tests, debian/tests: add unity snap autopkg test\n-    - snappy: introduce first feature flag for assumes: common-data-dir\n-    - timeout,snap: add YAML unmarshal function for timeout.Timeout\n-    - many: go into state.Retry state when unmounting a snap fails.\n-      (LP: #1571721, #1575399)\n-    - daemon,client,cmd/snap: improve output after snap\n-      install/refresh/remove (LP: #1574830)\n-    - integration-tests, debian/tests: add test for home interface\n-    - interfaces,overlord: support unversioned data\n-    - interfaces/builtin: improve the bluez interface\n-    - cmd: don't include the unit tests when building with go test -c\n-      for integration tests\n-    - integration-tests: teach some new trick to the fake store,\n-      reenable the app refresh test\n-    - many: move with some simplifications test snap building to\n-      snap/snaptest\n-    - asserts: define type for revision related errors\n-    - snap/snaptest,daemon,overlord/ifacestate,overlord/snapstate: unify\n-      mocking snaps behind MockSnap\n-    - snappy: fix openSnapFile's handling of sideInfo\n-    - daemon: improve snap sideload form handling\n-    - snap: add short and long description to the man-page\n-      (LP: #1570280)\n-    - snappy: remove unused SetProperty\n-    - snappy: use more accurate test data\n-    - integration-tests: add a integration test about remove removing\n-      all revisions\n-    - overlord/snapstate: make \"snap remove\" remove all revisions of a\n-      snap (LP: #1571710)\n-    - integration-tests: re-enable a bunch of integration tests\n-    - snappy: remove unused dbus code\n-    - overlord/ifacestate: fix setup-profiles to use new snap revision\n-      for setup (LP: #1572463)\n-    - integration-tests: add regression test for auth bug LP:#1571491\n-    - client, snap: remove obsolete TypeCore which was used in the old\n-      SystemImage days\n-    - integration-tests: add apparmor test\n-    - cmd: don't perform type assertion when we know error to be nil\n-    - client: list correct snap types\n-    - intefaces/builtin: allow getsockname on connected x11 plugs\n-      (LP: #1574526)\n-    - daemon,overlord/snapstate: read name out of sideloaded snap early,\n-      improved change summary\n-    - overlord: keep tasks unlinked from a change hidden, prune them\n-    - integration-tests: snap list on fresh boot is good again\n-    - integration-tests: add partial term to the find test\n-    - integration-tests: changed default release to 16\n-    - integration-tests: add regression test for snaps not present after\n-      reboot\n-    - integration-tests: network interface\n-    - integration-tests: add proxy related environment variables to\n-      snapd env file\n-    - README.md: snappy => snap\n-    - etc: trivial typo fix (LP:#1569892)\n-    - debian: remove unneeded /var/lib/snapd/apparmor/additional\n-      directory (LP: #1569577)\n-    - builtin/unity7.go: allow using gmenu. LP: #1576287\n-\n- -- Michael Vogt   Tue, 03 May 2016 07:51:57 +0200\n-\n-snapd (2.0.2) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - systemd: add multi-user.target (LP: #1572125)\n-    - release: our series is 16\n-    - integration-tests: fix snapd binary path for mounting the daemon\n-      built from branch\n-    - overlord,snap: add firstboot state sync\n-\n- -- Michael Vogt   Tue, 19 Apr 2016 16:02:44 +0200\n-\n-snapd (2.0.1) xenial; urgency=medium\n-\n-  * client,daemon,overlord: fix authentication:\n-    - fix incorrect authenication check (LP: #1571491)\n-\n- -- Michael Vogt   Mon, 18 Apr 2016 07:24:33 +0200\n-\n-snapd (2.0) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - debian: put snapd in /usr/lib/snapd/\n-    - cmd/snap: minor polishing\n-    - cmd,client,daemon: add snap abort command\n-    - overlord: don't hold locks when callling backends\n-    - release,store,daemon: no more default-channel, release=>series\n-    - many: drop support for deprecated environment variables\n-      (SNAP_APP_*)\n-    - many: support individual ids in changes cmd\n-    - overlord/state: use numeric change and task ids\n-    - overlord/auth,daemon,client,cmd/snap: logout\n-    - daemon: don't install ubuntu-core twice\n-    - daemon,client,overlord/state,cmd: add changes command\n-    - interfaces/dbus: drop superfluous backslash from template\n-    - daemon, overlord/snapstate: updates are users too!\n-    - cmd/snap,daemon,overlord/ifacestate: add support for developer\n-      mode\n-    - daemon,overlord/snapstate: on refresh use the remembered channel,\n-      default to stable channel otherwise\n-    - cmd/snap: improve UX of snap interfaces when there are no results\n-    - overlord/state: include time in task log messages\n-    - overlord: prune and abort old changes and tasks\n-    - overlord/ifacestate: add implicit slots in setup-profiles\n-    - daemon,overlord: setup authentication for store downloads\n-    - daemon: macaroon-authed users are like root, and sudoers can login\n-    - daemon,client,docs: send install options to daemon\n-\n- -- Michael Vogt   Sat, 16 Apr 2016 22:15:40 +0200\n-\n-snapd (1.9.4) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - etc: fix desktop file location\n-    - overlord/snapstate: stop an update once download sees the revision\n-      is already installed\n-    - overlord: make SnapState.DevMode a method, store flags\n-    - snappy: no more snapYaml in snappy.Snap\n-    - daemon,cmd,dirs,lockfile: drop all lockfiles\n-    - debian: use sudo in setup of the proxy environment\n-    - snap/snapenv,snappy,systemd: expose SNAP_REVISION to app\n-      environment\n-    - snap: validate similarly to what we did with old snapYaml info\n-      from squashfs snaps\n-    - daemon,store: plug in authentication for store search/details\n-    - overlord/snapstate: fix JSON name of SnapState.Candidate\n-    - overlord/snapstate: start using revisions higher than 100000 for\n-      local installs (sideloads)\n-    - interfaces,overlorf/ifacestate: honor user choice and don't auto-\n-      connect disconnected plugs\n-    - overlord/auth,daemon,client: hide user ids again\n-    - daemon,overlord/snapstate: back /snaps (and so snap list) using\n-      state\n-    - daemon,client,overlord/auth: rework state auth data\n-    - overlord/snapstate: disable Activate and Deactivate\n-    - debian: fix silly typo in autopkgtest setup\n-    - overlord/ifacestate: remove connection state with discard-conns\n-      task, on the removal of last snap\n-    - daemon,client: rename API update action to refresh\n-    - cmd/snap: rework login to be more resilient\n-    - overlord/snapstate: deny two changes on one snap\n-    - snappy: fix crash on certain snap.yaml\n-    - systemd: use native systemctl enable instead of our own\n-      implementation\n-    - store: add workaround for misbehaving store\n-    - debian: make autopkgtest use the right env vars\n-    - state: log do/undo status too when a task is run\n-    - docs: update rest.md with price information\n-    - daemon: only include price property if the snap is non-free\n-    - daemon, client, cmd/snap: connect/disconnect now async\n-    - snap,snappy: allow snaps to require system features\n-    - integration-tests: fix report of skips in SetUpTest method\n-    - snappy: clean out major bits (still using Installed) now\n-      unreferenced as cmd/snappy is gone\n-    - daemon/api,overlord/auth: add helper to get UserState from a\n-      client request\n-\n- -- Michael Vogt   Fri, 15 Apr 2016 23:30:00 +0200\n-\n-snapd (1.9.3) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - many: prepare for opengl support on classic\n-    - interfaces/apparmor: load all apparmor profiles on snap setup\n-    - daemon,client: move async resource to change in meta\n-    - debian: disable autopilot\n-    - snap: add basic progress reporting\n-    - client,cmd,daemon,snap,store: show the price of snaps in the cli\n-    - state: add minimal taskrunner logging\n-    - daemon,snap,overlord/snapstate: in the API get the snap icon using\n-      state\n-    - client,daemon,overlord: don't guess snap file vs. name\n-    - overlord/ifacestate: reload snap connections when setting up\n-      security for a given snap\n-    - snappy: remove cmd/snappy (superseded in favour of cmd/snap)\n-    - interfaecs/apparmor: remove all traces of old-security from\n-      apparmor backend\n-    - interfaces/builtin: add bluez interface\n-    - overlord/ifacestate: don't crash if connection cannot be reloaded\n-    - debian: add searchSuite to autopkgtest\n-    - client, daemon, cmd/snap: no more tasks; everything is changes\n-    - client: send authorization header in client requests\n-    - client, daemon: marshal suggested currency over REST\n-    - docs, snap: enumerate snap types correctly in docs and comments\n-    - many: add store authenticator parameter\n-    - overlord/ifacestate,daemon: setup security on conect and\n-      disconnect\n-    - interfaces/apparmor: remove unused apparmor variables\n-    - snapstate: add missing \"TaskProgressAdapter.Write()\" for working\n-      progress reporting\n-    - many: clean out snap config related code not for OS\n-    - daemon,client,cmd: return snap list from /v2/snaps\n-    - docs: update `/v2/snaps` endpoint documentation\n-    - interfaces: rename developerMode to devMode\n-    - daemon,client,overlord: progress current => done\n-    - daemon,client,cmd/snap: move query metadata to top-level doc\n-    - interfaces: add TestSecurityBackend\n-    - many: replace typographic quotes with ASCII\n-    - client, daemon: rework rest changes to export \"ready\" and \"err\"\n-    - overlord/snapstate,snap,store: track snap-id in side-info and\n-      therefore in state\n-    - daemon: improve mocking  of interfaces API tests\n-    - integration-tests: remove origins in default snap names for udf\n-      call\n-    - integration-test: use \"snap list\" in GetCurrentVersion\n-    - many: almost no more NewInstalledSnap reading manifest from\n-      snapstate and backend\n-    - daemon: auto install ubuntu-core if missing\n-    - oauth,store: remove OAuth authentication logic\n-    - overlord/ifacestate: simplify some tests with implicit manager\n-      initialization\n-    - store, snappy: move away from hitting details directly\n-    - overlord/ifacestate: reload connections when restarting the\n-      manager\n-    - overlord/ifacestate: increase flexibility of unit tests\n-    - overlord: use state to discover all installed snaps\n-    - overlord/ifacestate: track connections in the state\n-    - many: separate copy-data from unlinking of current snap\n-    - overlord/auth,store/auth: add macaroon authenticator to UserState\n-    - client: support for /v2/changes and /v2/changes/{id}\n-    - daemon/api,overlord/auth: rework authenticated users information\n-      in state\n-\n- -- Michael Vogt   Thu, 14 Apr 2016 23:29:43 +0200\n-\n-snapd (1.9.2) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - cmd/snap,daemon,store: rework login command to use daemon login\n-      API\n-    - store: cache suggested currency from the store\n-    - overlord/ifacestate: modularize and extend tests\n-    - integration-tests: reenable failure tests\n-    - daemon: include progress in rest changes\n-    - daemon, overlord/state: expose individual changes\n-    - overlord/ifacestate: drop duplicate package comment\n-    - overlord/ifacestate: allow tests to override security backends\n-    - cmd/snap: install *.snap and *.snap.* as files too\n-    - interfaces/apparmor: replace /var/lib/snap with /var/snap\n-    - daemon,overlord/ifacestate: connect REST API to interfaces in the\n-      overlord\n-    - debian: remove unneeded dependencies from snapd\n-    - overlord/state: checkpoint on final progress only\n-    - osutil: introduce IsUIDInAny\n-    - overlord/snapstate: rename GetSnapState to Get, SetSnapState to\n-      Set\n-    - daemon: add id to changes json\n-    - overlord/snapstate: SetSnapState() needs locks\n-    - overlord: fix broken tests\n-    - overlord/snapstate,overlord/ifacestate: reimplement SnapInfo (as\n-      Info) actually using the state\n-\n- -- Michael Vogt   Wed, 13 Apr 2016 17:27:00 +0200\n-\n-snapd (1.9.1.1) xenial; urgency=medium\n-\n-  * debian/tests/control:\n-    - add git to make autopkgtest work\n-\n- -- Michael Vogt   Tue, 12 Apr 2016 17:19:19 +0200\n-\n-snapd (1.9.1) xenial; urgency=medium\n-\n-  * Add warning about installing ubuntu-core-snapd-units on Desktop systems.\n-  * Add ${misc:Depends} to ubuntu-core-snapd-units.\n-  * interfaces,overlord: add support for auto-connecting plugs on\n-    install\n-  * fix sideloading snaps and (re)add tests for this\n-  * add `ca-certificates` to the test-dependencies to fix autopkgtest\n-    failure on armhf\n-\n- -- Michael Vogt   Tue, 12 Apr 2016 14:39:57 +0200\n-\n-snapd (1.9) xenial; urgency=medium\n-\n-  * rename source and binary package to \"snapd\"\n-  * update directory layout to final 16.04 layout\n-  * use `snap` command instead of the previous `snappy`\n-  * use `interface` based security\n-  * use new state engine for install/update/remove\n-\n- -- Michael Vogt   Tue, 12 Apr 2016 01:05:09 +0200\n-\n-ubuntu-snappy (1.7.3+20160310ubuntu1) xenial; urgency=medium\n-\n-    - debian: update versionized ubuntu-core-launcher dependency\n-    - debian: tweak desktop file dir, ship Xsession.d snip for seamless\n-      integration\n-    - snappy: fix hw-assign to work with per-app udev tags\n-    - snappy: use $snap.$app as per-app udev tag\n-    - snap,snappy,systemd: %s/\\/SNAP_DEVELOPER/g\n-    - snappy: add mksquashfs --no-xattrs parameter\n-    - snap,snappy,systemd: kill SNAP_FULLNAME\n-\n- -- Michael Vogt   Thu, 10 Mar 2016 09:26:20 +0100\n-\n-ubuntu-snappy (1.7.3+20160308ubuntu1) xenial; urgency=medium\n-\n-    - snappy,snap: move icon under meta/gui/\n-    - debian: add snap.8 manpage\n-    - debian: move snapd to /usr/lib/snappy/snapd\n-    - snap,snappy,systemd: remove TMPDIR, TEMPDIR, SNAP_APP_TMPDIR\n-    - snappy,dirs: add support to use desktop files from inside snaps\n-    - daemon: snapd API events endpoint redux\n-    - interfaces/builtin: add \"network\" interface\n-    - overlord/state: do small fixes (typo, id clashes paranoia)\n-    - overlord: add first pass of the logic in StateEngine itself\n-    - overlord/state: introduce Status/SetStatus on Change\n-    - interfaces: support permanent security snippets\n-    - overlord/state: introduce Status/SetStatus and\n-      Progress/SetProgress on Task\n-    - overlord/state: introduce Task and Change.NewTask\n-    - many: selectively swap semantics of plugs and slots\n-    - client,cmd/snap: remove useless indirection in Interfaces\n-    - interfaces: maintain Plug and Slot connection details\n-    - client,daemon,cmd/snap: change POST /2.0/interfaces to work with\n-      lists\n-    - overlord/state: introduce Change and NewChange on state to create\n-      them\n-    - snappy: bugfix for snap.yaml parsing to be more consistent with\n-      the spec\n-    - snappy,systemd: remove \"ports\" from snap.yaml\n-\n- -- Michael Vogt   Tue, 08 Mar 2016 11:24:09 +0100\n-\n-ubuntu-snappy (1.7.3+20160303ubuntu4) xenial; urgency=medium\n-\n-  * rename:\n-    debian/golang-snappy-dev.install ->\n-       debian/golang-github-ubuntu-core-snappy-dev.install:\n-\n- -- Michael Vogt   Thu, 03 Mar 2016 12:29:16 +0100\n-\n-ubuntu-snappy (1.7.3+20160303ubuntu3) xenial; urgency=medium\n-\n-  * really fix typo in dependency name\n-\n- -- Michael Vogt   Thu, 03 Mar 2016 12:21:39 +0100\n-\n-ubuntu-snappy (1.7.3+20160303ubuntu2) xenial; urgency=medium\n-\n-  * fix typo in dependency name\n-\n- -- Michael Vogt   Thu, 03 Mar 2016 12:05:36 +0100\n-\n-ubuntu-snappy (1.7.3+20160303ubuntu1) xenial; urgency=medium\n-\n-    - debian: update build-depends for MIR\n-    - many: implement new REST API: GET /2.0/interfaces\n-    - integration-tests: properly stop snapd from branch\n-    - cmd/snap: update tests for go-flags changes\n-    - overlord/state: implement Lock/Unlock with implicit checkpointing\n-    - overlord: split out the managers and State to their own\n-      subpackages of overlord\n-    - snappy: rename \"migration-skill\" to \"old-security\" and use new\n-      interface names instead of skills\n-    - client,cmd/snap: clarify name ambiguity in Plug or Slot\n-    - overlord: start working on state engine along spec v2, have the\n-      main skeleton follow that\n-    - classic, oauth: update tests for change in MakeRandomString()\n-    - client,cmd/snap: s/add/install/:-(\n-    - interfaces,daemon: specialize Name to either Plug or Slot\n-    - interfaces,interfaces/types: unify security snippet functions\n-    - snapd: close the listener on Stop, to force the http.Serve loop to\n-      exit\n-    - snappy,daemon,snap/lightweight,cmd/snappy,docs/rest.md: expose\n-      explicit channel selection to rest api\n-    - interfaces,daemon: rename package holding built-in interfaces\n-    - integration-tests: add the first classic dimension tests\n-    - client,deaemon,docs: rename skills to interfaces on the wire\n-    - asserts: add identity assertion type\n-    - integration-tests: add the no_proxy env var\n-    - debian: update build-depends for new package names\n-    - oauth: fix oauth & quoting in the oauth_signature\n-    - integration-tests: remove unused field\n-    - integration-tests: add the http proxy argument\n-    - interfaces,interfaces/types,deamon: mass internal rename to\n-      interfaces\n-    - client,cmd/snap: rename skills to interfaces (part 2)\n-    - arch: fix missing mapping for powerpc\n-\n- -- Michael Vogt   Thu, 03 Mar 2016 11:00:19 +0100\n-\n-ubuntu-snappy (1.7.3+20160225ubuntu1) xenial; urgency=medium\n-\n-    - integration-tests: always use the built snapd when compiling\n-      binaries from branch\n-    - cmd/snap: rename skills to interfaces\n-    - testutil,skills/types,skills,daemon: tweak discovery of know skill\n-      types\n-    - docs: add docs for arm64 cross building\n-    - overlord: implement basic ReadState/WriteState\n-    - overlord: implement Get/Set/Copy on State\n-    - integration-tests: fix dd output check\n-    - integration-tests: add fromBranch config field\n-    - integration-tests: use cli pkg methods in hwAssignSuite\n-    - debian: do not create the snappypkg user, we don't need it anymore\n-    - arch: fix build failure on s390x\n-    - classic: cleanup downloaded lxd tarball\n-    - cmd/snap,client,integration-tests: rename snap subcmds\n-      'assert'=>'ack', 'asserts'=>'known'\n-    - skills: fix broken tests builds\n-    - skills,skills/types: pass slot to SlotSecuritySnippet()\n-    - skills/types: teach bool-file about udev security\n-\n- -- Michael Vogt   Thu, 25 Feb 2016 16:17:19 +0100\n-\n-ubuntu-snappy (1.7.2+20160223ubuntu1) xenial; urgency=medium\n-\n-  * New git snapshot:\n-    - asserts: introduce snap-declaration\n-    - cmd/snap: fix integration tests for the \"cmd_asserts\"\n-    - integration-tests: fix fanctl output check\n-    - cmd/snap: fix test failure after merging 23a64e6\n-    - cmd/snap: replace skip-help with empty description\n-    - docs: update security.md to match current migration-skill\n-      semantics\n-    - snappy: treat commands with 'daemon' field as services\n-    - asserts: use more consistent names for receivers in\n-      snap_asserts*.go\n-    - debian: add missing golang-websocket-dev build-dependency\n-    - classic: if classic fails to get created, undo the bind mounts\n-    - snappy: never return nil in NewLocalSnapRepository()\n-    - notifications: A simple notification system\n-    - snappy: when using staging, authenticate there instead\n-    - integration-tests/snapd: fix the start of the test snapd socket\n-    - skills/types: use CamelCase for security names\n-    - skills: add support for implicit revoke\n-    - skills: add security layer\n-    - integration-tests: use exec.Command wrapper for updates\n-    - cmd/snap: add 'snap skills'\n-    - cms/snap: add 'snap revoke'\n-    - docs: add docs for skills API\n-    - cmd/snap: add 'snap grant'\n-    - cmd/snappy, coreconfig, daemon, snappy: move config to always be\n-      bytes (in and out)\n-    - overlord: start with a skeleton and stubs for Overlord,\n-      StateEngine, StateJournal and managers\n-    - integration-tests: skip tests affected by LP: #1544507\n-    - skills/types: add bool-file\n-    - po: refresh translation templates\n-    - cmd/snap: add 'snap experimental remove-skill-slot'\n-    - asserts: introduce device assertion\n-    - cmd/snap: implemented add, remove, purge, refresh, rollback,\n-      activate, deactivate\n-    - cmd/snap: add 'snap experimental add-skill-slot'\n-    - cmd/snap: add 'snap experimental remove-skill'\n-    - cmd/snap: add tests for common skills code\n-    - cmd/snap: add 'snap experimental add-skill'\n-    - asserts: make assertion checkers used by db.Check modular and\n-      pluggable\n-    - cmd,client,daemon,caps,docs,po: remove capabilities\n-    - scripts: move the script to get dependencies to a separate file\n-    - asserts: make the disk layout compatible for storing more than one\n-      revision\n-    - cmd/snap: make the assert command options exported\n-    - integration-tests: Remove the target release and channel\n-    - asserts: introduce model assertion\n-    - integration-tests: add exec.Cmd wrapper\n-    - cmd/snap: add client test support methods\n-    - cmd/snap: move key=value attribute parsing to commmon\n-    - cmd/snap: apply new style consistency to \"snap\" commands.\n-    - cmd/snap: support redirecting the client for testing\n-    - cmd/snap: support testing command output\n-    - snappy,daemon: remove the meta repositories abstractions\n-    - cmd: add support for experimental commands\n-    - cmd/snappy,daemon,snap,snappy: remove SetActive from parts\n-    - cmd/snappy,daemon,snappy,snap: remove config from parts interface\n-    - client: improve test data\n-    - cmd: allow to construct a fresh parser\n-    - cmd: don't treat help as an error\n-    - cmd/snappy,snappy: remove \"Details\" from the repository interface\n-    - asserts: check that primary keys are set when\n-      Decode()ing/assembling assertions\n-    - snap,snappy: refactor to remove \"Install\" from the Part interface\n-    - client,cmd: make client.New() configurable\n-    - client: enable retrieving asynchronous operation information with\n-      `Client.Operation`.\n-\n- -- Michael Vogt   Tue, 23 Feb 2016 11:28:18 +0100\n-\n-ubuntu-snappy (1.7.2+20160204ubuntu1) xenial; urgency=medium\n-\n-  * New git snapshot:\n-    - integration-tests: fix the rollback error messages\n-    - integration-test: use the common cli method when trying to install\n-      an unexisting snap\n-    - integration-tests: rename snap find test\n-    - daemon: refactor makeErrorResponder()\n-    - integration: add regression test for LP: #1541317\n-    - integration-tests: reenable TestRollbackMustRebootToOtherVersion\n-    - asserts: introduce \"snap asserts\" subcmd to show assertions in the\n-      system db\n-    - docs: fix parameter style\n-    - daemon: use underscore in JSON interface\n-    - client: add skills API\n-    - asserts,docs/rest.md: change Encoder not to add extra newlines at\n-      the end of the stream\n-    - integration-tests: \"snappy search\" is no more, its \"snap search\"\n-      now\n-    - README, integration-tests/tests: chmod snapd.socket after manual\n-      start.\n-    - snappy: add default security profile if none is specified\n-    - skills,daemon: add REST APIs for skills\n-    - cmd/snap, cmd/snappy: move from `snappy search` to `snap find`.\n-    - The first step towards REST world domination: search is now done\n-      via\n-    - debian: remove obsolete /etc/grub.d/09_snappy on upgrade\n-    - skills: provide different security snippets for skill and slot\n-      side\n-    - osutil: make go vet happy again\n-    - snappy,systemd: use Type field in systemd.ServiceDescription\n-    - skills: add basic grant-revoke methods\n-    - client,daemon,asserts: expose the ability to query assertions in\n-      the system db\n-    - skills: add basic methods for slot handling\n-    - snappy,daemon,snap: move \"Uninstall\" into overlord\n-    - snappy: move SnapFile.Install() into Overlord.Install()\n-    - integration-tests: re-enable some failover tests\n-    - client: remove snaps\n-    - asserts: uniform searching across trusted (account keys) and main\n-      backstore\n-    - asserts: introduce Decoder to parse streams of assertions and\n-      Encoder to build them\n-    - client: filter snaps with a search query\n-    - client: pass query as well as path in client internals\n-    - skills: provide different security snippets for skill and slot\n-      side\n-    - snappy: refactor snapYaml to remove methods on snapYaml type\n-    - snappy: remove unused variable from test\n-    - skills: add basic methods for skill handing\n-    - snappy: remove support for meta/package.yaml and implement new\n-      meta/snap.yaml\n-    - snappy: add new overlord type responsible for\n-      Installed/Install/Uninstall/SetActive and stub it out\n-    - skills: add basic methods for type handling\n-    - daemon, snappy: add find (aka search)\n-    - client: filter snaps by type\n-    - skills: tweak valid names and error messages\n-    - skills: add special skill type for testing\n-    - cmd/snapd,daemon: filter snaps by type\n-    - partition: remove obsolete uEnv.txt\n-    - skills: add Type interface\n-    - integration-tests: fix the bootloader path\n-    - asserts: introduce a memory backed assertion backstore\n-    - integration-tests: get name of OS snap from bootloader\n-    - cmd/snapd,daemon: filter snaps by source\n-    - asserts,daemon: bump some copyright years for things that have\n-      been touched in the new year\n-    - skills: add the initial Repository type\n-    - skills: add a name validation function\n-    - client: filter snaps by source\n-    - snappy: unmount the squashfs snap again if it fails to install\n-    - snap: make a copy of the search uri before mutating it\n-      Closes: LP#1537005\n-    - cmd/snap,client,daemon,asserts: introduce \"assert \" snap\n-      subcommand\n-    - cmd/snappy, snappy: fix failover handling of the \"active\"\n-      kernel/os snap\n-    - daemon, client, docs/rest.md, snapd integration tests: move to the\n-      new error response\n-    - asserts: change Backstore interface, backstores can now access\n-      primary key names from types\n-    - asserts: make AssertionType into a real struct exposing the\n-      metadata Name and PrimaryKey\n-    - caps: improve bool-file sanitization\n-    - asserts: fixup toolbelt to use exposed key ID.\n-    - client: return by reference rather than by value\n-    - asserts: exported filesystem backstores + explicit backstores\n-\n- -- Michael Vogt   Thu, 04 Feb 2016 16:35:31 +0100\n-\n-ubuntu-snappy (1.7.2+20160113ubuntu1) xenial; urgency=medium\n-\n-  * New git snapshot\n-\n- -- Michael Vogt   Wed, 13 Jan 2016 11:25:40 +0100\n-\n-ubuntu-snappy (1.7.2ubuntu1) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - bin-path integration\n-    - assertions/capability work\n-    - fix squashfs based snap building\n-\n- -- Michael Vogt   Fri, 04 Dec 2015 08:46:35 +0100\n-\n-ubuntu-snappy (1.7.1ubuntu1) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - fix dependencies\n-    - fix armhf builds\n-\n- -- Michael Vogt   Wed, 02 Dec 2015 07:46:07 +0100\n-\n-ubuntu-snappy (1.7ubuntu1) xenial; urgency=medium\n-\n-  * New upstream release:\n-    - kernel/os snap support\n-    - squashfs snap support\n-    - initial capabilities work\n-    - initial assertitions work\n-    - rest API support\n-\n- -- Michael Vogt   Wed, 18 Nov 2015 19:59:51 +0100\n-\n-ubuntu-snappy (1.6ubuntu1) wily; urgency=medium\n-\n-  * New upstream release, including the following changes:\n-    - Fix hwaccess for gpio (LP: #1493389, LP: #1488618)\n-    - Fix handleAssets name normalization\n-    - Run boot-ok job late (LP: #1476129)\n-    - Add support for systemd socket files\n-    - Add \"snappy service\" command\n-    - Documentation improvements\n-    - Many test improvements (unit and integration)\n-    - Override sideload versions\n-    - Go1.5 fixes\n-    - Add i18n\n-    - Add man-page\n-    - Add .snapignore\n-    - Run services that uses external ports only after the network is up\n-    - Bufix in Synbootloader (LP: 1474125)\n-    - Use uboot.env for boot state tracking\n-\n- -- Michael Vogt   Wed, 09 Sep 2015 14:20:22 +0200\n-\n-ubuntu-snappy (1.5ubuntu1) wily; urgency=medium\n-\n-  * New upstream release, including the following changes:\n-    - Use O_TRUNC when copying files\n-    - Added path redefinition to include test's binaries location\n-    - Don't run update-grub, instead use grub.cfg from the oem\n-      package\n-    - Do network configuration from first boot\n-    - zero size systemd of new partition made executable to\n-      prevent unrecoverable boot failure\n-    - Close downloaded files\n-\n- -- Ricardo Salveti de Araujo   Mon, 06 Jul 2015 15:14:37 -0300\n-\n-ubuntu-snappy (1.4ubuntu1) wily; urgency=medium\n-\n-  * New upstream release, including the following changes:\n-    - Allow to run the integration tests using snappy from branch\n-    - Add CopyFileOverwrite flag and behaviour to helpers.CopyFile\n-    - add a bunch of missing i18n.G() now that we have gettext\n-    - Generate only the translators comments that start with\n-      TRANSLATORS\n-    - Try both clickpkg and snappypkg when dropping privs\n-\n- -- Ricardo Salveti de Araujo   Thu, 02 Jul 2015 16:21:53 -0300\n-\n-ubuntu-snappy (1.3ubuntu1) wily; urgency=medium\n-\n-  * New upstream release, including the following changes:\n-    - gettext support\n-    - use snappypkg user for the installed snaps\n-    - switch to system-image-3.x as the system-image backend\n-    - more reliable developer mode detection\n-\n- -- Michael Vogt   Wed, 01 Jul 2015 10:37:05 +0200\n-\n-ubuntu-snappy (1.2-0ubuntu1) wily; urgency=medium\n-\n-  * New upstream release, including the following changes:\n-    - Consider the root directory when installing and removing policies\n-    - In the uboot TestHandleAssetsNoHardwareYaml, patch the cache dir\n-      before creating the partition type\n-    - In the PartitionTestSuite, remove the unnecessary patches for\n-      defaultCacheDir\n-    - Fix the help output of \"snappy install -h\"\n-\n- -- Ricardo Salveti de Araujo   Wed, 17 Jun 2015 11:42:47 -0300\n-\n-ubuntu-snappy (1.1.2-0ubuntu1) wily; urgency=medium\n-\n-  * New upstream release, including the following changes:\n-    - Remove compatibility for click-bin-path in generated exec-wrappers\n-    - Release the readme.md after parsing it\n-\n- -- Ricardo Salveti de Araujo   Thu, 11 Jun 2015 23:42:49 -0300\n-\n-ubuntu-snappy (1.1.1-0ubuntu1) wily; urgency=medium\n-\n-  * New upstream release, including the following changes:\n-    - Set all app services to restart on failure\n-    - Fixes the missing oauth quoting and makes the code a bit nicer\n-    - Added integrate() to set Integration to default values needed for\n-      integration\n-    - Moved setActivateClick to be a method of SnapPart\n-    - Make unsetActiveClick a method of SnapPart\n-    - Check the package.yaml for the required fields\n-    - Integrate lp:snappy/selftest branch into snappy itself\n-    - API to record information about the image and to check if the kernel was\n-      sideloaded.\n-    - Factor out update from cmd\n-    - Continue updating when a sideload error is returned\n-\n- -- Ricardo Salveti de Araujo   Wed, 10 Jun 2015 15:54:12 -0300\n-\n-ubuntu-snappy (1.1-0ubuntu1) wily; urgency=low\n-\n-  * New wily upload with fix for go 1.4 syscall.Setgid() breakage\n-\n- -- Michael Vogt   Tue, 09 Jun 2015 10:02:04 +0200\n-\n-ubuntu-snappy (1.0.1-0ubuntu1) vivid; urgency=low\n-\n-  * fix symlink unpacking\n-  * fix typo in apparmor rules generation\n-\n- -- Michael Vogt   Thu, 23 Apr 2015 16:09:56 +0200\n-\n-ubuntu-snappy (1.0-0ubuntu1) vivid; urgency=low\n-\n-  * 15.04 archive upload\n-\n- -- Michael Vogt   Thu, 23 Apr 2015 11:08:22 +0200\n-\n-ubuntu-snappy (0.1.2-0ubuntu1) vivid; urgency=medium\n-\n-  * initial ubuntu archive upload\n-\n- -- Michael Vogt   Mon, 13 Apr 2015 22:48:13 -0500\n-\n-ubuntu-snappy (0.1.1-0ubuntu1) vivid; urgency=low\n-\n-  * new snapshot\n-\n- -- Michael Vogt   Thu, 12 Feb 2015 13:51:22 +0100\n-\n-ubuntu-snappy (0.1-0ubuntu1) vivid; urgency=medium\n-\n-  * Initial packaging\n+    - LP: #2125439 FDE: update secboot to revision f8400226f49a to fix\n+      possible preinstall secboot panic when secure boot is disabled\n \n- -- Sergio Schvezov   Fri, 06 Feb 2015 02:25:43 -0200\n+ -- Ernest Lotter   Fri, 26 Sep 2025 07:39:49 +0200\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/compat snapd-2.76+ubuntu26.04.2/debian/compat\n--- snapd-2.75.2+ubuntu26.04.2/debian/compat\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/compat\t2026-06-17 16:16:09.000000000 +0200\n@@ -1 +1 @@\n-9\n+12\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/control snapd-2.76+ubuntu26.04.2/debian/control\n--- snapd-2.75.2+ubuntu26.04.2/debian/control\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/control\t2026-06-17 16:16:09.000000000 +0200\n@@ -9,24 +9,23 @@\n                bash-completion,\n                ca-certificates,\n                dbus,\n-               debhelper (>= 9),\n-               debhelper (>= 9.20160709~) | dh-systemd,\n+               debhelper (>= 12),\n                dh-apparmor,\n                dh-autoreconf,\n-               dh-golang (>=1.7),\n+               dh-golang,\n                fakeroot,\n                flake8,\n                gcc-multilib [amd64],\n                gettext,\n                gnupg2,\n-               golang-go (>=2:1.18~)  [!powerpc] | golang-1.18 [!powerpc] | golang-1.21,\n+               golang-go (>=2:1.18~),\n                grub-common,\n                indent,\n                init-system-helpers,\n                libapparmor-dev,\n                libblkid-dev,\n                libcap-dev,\n-               libfuse3-dev (>= 3.10.5-1) | libfuse-dev,\n+               libfuse3-dev,\n                libglib2.0-dev,\n                liblzma-dev,\n                liblzo2-dev,\n@@ -42,19 +41,15 @@\n                python3-pytest,\n                squashfs-tools,\n                tzdata,\n-               systemd-dev | systemd (<< 255),\n+               systemd-dev,\n                xfslibs-dev\n Standards-Version: 3.9.7\n-Homepage: https://github.com/snapcore/snapd\n-Vcs-Browser: https://github.com/snapcore/snapd\n-Vcs-Git: https://github.com/snapcore/snapd.git\n+Homepage: https://github.com/canonical/snapd\n+Vcs-Browser: https://github.com/canonical/snapd\n+Vcs-Git: https://github.com/canonical/snapd.git\n \n Package: golang-github-snapcore-snapd-dev\n Architecture: all\n-Breaks: golang-github-ubuntu-core-snappy-dev (<< 2.0.6),\n-        golang-snappy-dev (<< 1.7.3+20160303ubuntu4)\n-Replaces: golang-github-ubuntu-core-snappy-dev (<< 2.0.6),\n-          golang-snappy-dev (<< 1.7.3+20160303ubuntu4)\n Depends: ${misc:Depends}\n Description: snappy development go packages.\n  Use these to use the snappy API.\n@@ -62,9 +57,9 @@\n Package: snapd\n Architecture: any\n Depends: adduser,\n-         apparmor (>= 2.10.95-0ubuntu2.2),\n+         apparmor,\n          ca-certificates,\n-         fuse3 (>= 3.10.5-1) | fuse,\n+         fuse3,\n          libcap2-bin,\n          openssh-client,\n          squashfs-tools,\n@@ -73,20 +68,8 @@\n          ${dbussession:Depends},\n          ${misc:Depends},\n          ${shlibs:Depends}\n-Replaces: snap-confine (<< 2.23),\n-          snapd-xdg-open (<= 0.0.0),\n-          ubuntu-core-launcher (<< 2.22),\n-          ubuntu-snappy (<< 1.9),\n-          ubuntu-snappy-cli (<< 1.9)\n-Breaks: snap-confine (<< 2.23),\n-        snapd-xdg-open (<= 0.0.0),\n-        ubuntu-core-launcher (<< 2.22),\n-        ubuntu-snappy (<< 1.9),\n-        ubuntu-snappy-cli (<< 1.9),\n-        ${snapd:Breaks}\n Recommends: gnupg\n Suggests: zenity | kdialog\n-Conflicts: snap (<< 2013-11-29-1ubuntu1)\n Built-Using: ${Built-Using} ${misc:Built-Using}\n Description: Daemon and tooling that enable snap packages\n  Install, configure, refresh and remove snap packages. Snaps are\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/copyright snapd-2.76+ubuntu26.04.2/debian/copyright\n--- snapd-2.75.2+ubuntu26.04.2/debian/copyright\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/copyright\t2026-06-17 16:16:09.000000000 +0200\n@@ -1,6 +1,6 @@\n Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/\n-Upstream-Name: snappy\n-Source: https://github.com/snapcore/snapd\n+Upstream-Name: snapd\n+Source: https://github.com/canonical/snapd\n \n Files: *\n Copyright: Copyright (C) 2014,2015 Canonical, Ltd.\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/.gitignore snapd-2.76+ubuntu26.04.2/debian/.gitignore\n--- snapd-2.75.2+ubuntu26.04.2/debian/.gitignore\t1970-01-01 01:00:00.000000000 +0100\n+++ snapd-2.76+ubuntu26.04.2/debian/.gitignore\t2026-06-17 16:16:09.000000000 +0200\n@@ -0,0 +1 @@\n+.build\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/not-installed snapd-2.76+ubuntu26.04.2/debian/not-installed\n--- snapd-2.75.2+ubuntu26.04.2/debian/not-installed\t1970-01-01 01:00:00.000000000 +0100\n+++ snapd-2.76+ubuntu26.04.2/debian/not-installed\t2026-06-17 16:16:09.000000000 +0200\n@@ -0,0 +1,2 @@\n+usr/bin/snap-gpio-helper\n+usr/lib/snapd/system-shutdown\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/README.md snapd-2.76+ubuntu26.04.2/debian/README.md\n--- snapd-2.75.2+ubuntu26.04.2/debian/README.md\t1970-01-01 01:00:00.000000000 +0100\n+++ snapd-2.76+ubuntu26.04.2/debian/README.md\t2026-06-17 16:16:09.000000000 +0200\n@@ -0,0 +1,152 @@\n+# Ubuntu 26.04 Packaging\n+\n+This directory contains packaging for the Ubuntu distribution.\n+\n+## Build Container\n+\n+The package can be built using a rootless podman container.\n+\n+The entire snapd tree is exposed as `/src` inside the container, this is done\n+with the first `-v` switch. The `.build` directory is exposed as the `/build`\n+directory. This is where most of the build actually happens. This is where we\n+copy the built packages from the container back to the container host.\n+\n+The `--rm` switch removes the container so that it doesn't linger after each\n+build.  The `--interactive` switch allows us to pass a script to bash on stdin.\n+The `--userns host` option maps the ID of the calling user to root inside the\n+container.\n+\n+We are using a Ubuntu 24.04 container (noble) for the build.\n+\n+The `BASH_XTRACEFD` environment variable is preserved, along with the file\n+descriptor. This allows the outer script to differentiate trace output from\n+stderr for better clarity.\n+\n+Several named volumes are used to avoid network operations on subsequent runs.\n+- `snapd-ubuntu-apt-cache` is mapped to `/var/cache/apt`\n+- `snapd-ubuntu-apt-lists` is mapped to `/var/lib/apt/lists`\n+- `snapd-gomod-cache` is mapped to `/var/cache/gomod`\n+\n+`GOMODCACHE` is exported early in the container script so every subsequent `go`\n+invocation picks it up. This volume is shared with other distributions that use\n+the same approach.\n+\n+To make apt cache work docker hook is removed from\n+`/etc/apt/apt.conf.d/docker-clean`. The hook registers a `DPkg::Post-Invoke`\n+command that deletes all `.deb` files from the archive after every `dpkg` run.\n+This wipes the volume from inside the container, causing a full re-download on\n+every build.\n+\n+```sh\n+podman run \\\n+    --rm \\\n+    --interactive \\\n+    --attach stdin \\\n+    --attach stdout \\\n+    --attach stderr \\\n+    --preserve-fd=\"${BASH_XTRACEFD-}\" \\\n+    --userns host \\\n+    --security-opt label=disable \\\n+    -e BASH_XTRACEFD=\"${BASH_XTRACEFD-}\" \\\n+    -e SKIP_TESTS=\"${SKIP_TESTS-}\" \\\n+    -v \"../../:/src:ro\" \\\n+    -v \".build/:/build\" \\\n+    -v \"snapd-ubuntu-apt-cache:/var/cache/apt\" \\\n+    -v \"snapd-ubuntu-apt-lists:/var/lib/apt/lists\" \\\n+    -v \"snapd-gomod-cache:/var/cache/gomod\" \\\n+    -w /build \\\n+    docker.io/ubuntu:resolute \\\n+    /bin/bash -x -e -u\n+```\n+\n+## Host Script\n+\n+The small host script creates the input and output directories that allow\n+exchanging data with the container. The `.build/` directory can be inspected to\n+debug failures.\n+\n+```sh\n+rm -rf .build\n+mkdir -p .build\n+```\n+\n+## Container Script\n+\n+The build script has several sections. The source tree is copied to a writable\n+location, the `debian/` directory is populated from `packaging/ubuntu-26.04/`,\n+Go modules are vendored, and then `dpkg-buildpackage` is invoked.\n+\n+This is a native package (`3.0 (native)` format), so the version has no\n+upstream/revision split and there is only a single source archive. In the\n+future this will go away, but for now let's go with the status quo.\n+\n+```sh\n+# Show the sizes of persistent caches to verify volumes are populated across runs.\n+echo \"APT cache:       $(du -sh /var/cache/apt       2>/dev/null | cut -f1 || echo empty)\"\n+echo \"Go module cache: $(du -sh /var/cache/gomod     2>/dev/null | cut -f1 || echo empty)\"\n+\n+# Allow both root and the builder user to read and write the Go module cache.\n+chmod 1777 /var/cache/gomod\n+export GOMODCACHE=/var/cache/gomod\n+\n+# The official Ubuntu container image ships a post-invoke hook that deletes all\n+# .deb files after every dpkg run. Remove it so the archive cache is preserved.\n+rm -f /etc/apt/apt.conf.d/docker-clean\n+\n+# Install the base build-dependencies as well as golang, git and ca-certificates\n+# needed to export the source tarball with vendored packages.\n+apt-get update\n+DEBIAN_FRONTEND=noninteractive apt-get --yes install --no-install-recommends \\\n+    devscripts build-essential golang ca-certificates git\n+\n+# Determine the version of the package.\n+# Native package: no upstream/revision split, use the full version as-is.\n+version=$(dpkg-parsechangelog --file /src/packaging/ubuntu-26.04/changelog --show-field Version)\n+\n+# Copy the source tree to a temporary location, so that we can call go mod vendor.\n+mkdir -p /src-rw\n+tar -C /src -c \\\n+    --exclude='./vendor/*' \\\n+    --exclude='./c-vendor/squashfuse' \\\n+    --exclude='.git' \\\n+    --exclude='.git/*' \\\n+    --exclude='.image-garden/*' \\\n+    --exclude='./packaging/*/.build/*' \\\n+    --exclude='./built-snap/*' \\\n+    --exclude='./*.snap' \\\n+. | tar -C /src-rw -x\n+\n+# Vendor Go modules that are needed.\n+( cd /src-rw && go mod vendor )\n+\n+# Vendor C pieces that are needed.\n+# Note that we run this from the /src directory so that it doesn't have\n+# to be copied into the build tree as an exception.\n+( cd /src-rw/c-vendor && /src/c-vendor/vendor.sh )\n+\n+# Create a source archive with bundled vendored sources.\n+# NOTE: This is still online and is not cached anywhere.\n+( cd /src-rw && ./packaging/pack-source -v \"$version\" -o /build )\n+\n+# Unpack the source archive and install the packaging directory.\n+tar -Jxf /build/snapd_\"$version\".no-vendor.tar.xz -C /build\n+tar -Jxf /build/snapd_\"$version\".only-vendor.tar.xz -C /build\n+# The ubuntu-26.04 directory contains .build/ which would be copied recursively, exclude it by using a glob.\n+mkdir /build/snapd-\"$version\"/debian\n+cp -a /src/packaging/ubuntu-26.04/* /build/snapd-\"$version\"/debian\n+\n+# Discover and install build dependencies.\n+DEBIAN_FRONTEND=noninteractive apt-get --yes build-dep /build/snapd-\"$version\"\n+\n+# Create a non-root build user.\n+useradd -m builder\n+\n+# Transfer ownership of the work directory to the build user.\n+# When exiting, restore root ownership. Root in the container\n+# is mapped to the calling host user.\n+chown -R builder /build\n+trap 'chown -R root /build' EXIT\n+\n+# Build the binary package.\n+su builder -c 'cd /build/snapd-'\"$version\"' && DEB_BUILD_OPTIONS=\"${SKIP_TESTS:+nocheck}\" GOMODCACHE=/var/cache/gomod dpkg-buildpackage -us -uc -b'\n+```\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/README.powerpc snapd-2.76+ubuntu26.04.2/debian/README.powerpc\n--- snapd-2.75.2+ubuntu26.04.2/debian/README.powerpc\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/README.powerpc\t2026-06-17 16:16:09.000000000 +0200\n@@ -1 +1 @@\n-Unfortunately snapd is not support on powerpc.\n\\ No newline at end of file\n+Unfortunately snapd is not supported on powerpc.\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/rules snapd-2.76+ubuntu26.04.2/debian/rules\n--- snapd-2.75.2+ubuntu26.04.2/debian/rules\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/rules\t2026-06-17 16:16:09.000000000 +0200\n@@ -26,8 +26,6 @@\n endif\n \n export PATH:=${PATH}:${CURDIR}\n-# make sure that correct go version is found on xenial\n-export PATH:=/usr/lib/go-1.18/bin:${PATH}\n ifeq (${FIPSBUILD},1)\n \t# when building with FIPS, use Go 1.23 which is also declared in build\n \t# dependencies; during testing it is manually installed, but during LP builds\n@@ -39,37 +37,10 @@\n \n include /etc/os-release\n \n-SUBSTVARS =\n-# On 18.04 the released version of apt (1.6.1) has a bug that causes\n-# problem on \"apt purge snapd\". To ensure this won't happen add the\n-# right dependency on 18.04.\n-ifeq (${VERSION_ID},\"18.04\")\n-\tSUBSTVARS += -Vsnapd:Breaks=\"systemd (<< 237-3ubuntu10.24), apt (<< 1.6.3)\"\n-endif\n-# Same as above for 18.10 just a different version.\n-ifeq (${VERSION_ID},\"18.10\")\n-\tSUBSTVARS += -Vsnapd:Breaks=\"apt (<< 1.7.0~alpha2)\"\n-endif\n-# Since 21.10 is using cgroups v2, having a session bus is a hard requirement,\n-# for earlier versions it's nice to have and allows snaps to be tracked\n-# correctly. However, the (default-)dbus-session-bus virtual packages were only\n-# introduced in 2018, so earlier supported releases (16.04) have to explicitly\n-# specify the requirement.\n-ifneq (${VERSION_ID},\"16.04\")\n-\t# version with appropriate virtual packages\n-\tSUBSTVARS += -Vdbussession:Depends=\"default-dbus-session-bus | dbus-session-bus\"\n-endif\n-\n-# Restart snapd only after the upgrade, this does not work on 16.04 so\n-# we keep the existing behavior there, see\n-# https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1969162\n-DH_SYSTEMD_START_OPTS=\n-ifneq (${VERSION_ID},\"16.04\")\n-\tDH_SYSTEMD_START_OPTS += --restart-after-upgrade\n-endif\n+SUBSTVARS=-Vdbussession:Depends=\"default-dbus-session-bus | dbus-session-bus\"\n+DH_SYSTEMD_START_OPTS=--restart-after-upgrade\n \n-# this is overridden in the ubuntu/14.04 release branch\n-SYSTEMD_UNITS_DESTDIR=\"lib/systemd/system/\"\n+SYSTEMD_UNITS_DESTDIR:=$(or $(shell pkg-config --variable=systemdsystemunitdir systemd),$(error pkg-config did not return systemdsystemunitdir))\n \n # The go tool does not fully support vendoring with gccgo, but we can\n # work around that by constructing the appropriate -I flag by hand.\n@@ -138,12 +109,12 @@\n     # libudev and udevd so we need to link with it dynamically.\n     VENDOR_ARGS=--enable-nvidia-multiarch --enable-static-libcap --enable-static-libapparmor --with-host-arch-triplet=$(DEB_HOST_MULTIARCH)\n ifeq ($(shell dpkg-architecture -qDEB_HOST_ARCH),amd64)\n-\t\tVENDOR_ARGS+= --with-host-arch-32bit-triplet=$(shell dpkg-architecture -f -ai386 -qDEB_HOST_MULTIARCH)\n+    VENDOR_ARGS+= --with-host-arch-32bit-triplet=$(shell dpkg-architecture -f -ai386 -qDEB_HOST_MULTIARCH)\n endif\n     BUILT_USING_PACKAGES=libcap-dev libapparmor-dev libseccomp-dev\n else\n ifeq ($(shell dpkg-vendor --query Vendor),Debian)\n-    BUILT_USING_PACKAGES=libcap-dev\n+    BUILT_USING_PACKAGES=libcap-dev libapparmor-dev libseccomp-dev\n else\n     VENDOR_ARGS=--disable-apparmor\n endif\n@@ -151,24 +122,10 @@\n BUILT_USING=$(shell dpkg-query -f '$${source:Package} (= $${source:Version}), ' -W $(BUILT_USING_PACKAGES))\n \n %:\n-ifneq ($(shell dpkg-architecture -qDEB_HOST_ARCH),powerpc)\n-\tdh $@ --buildsystem=golang --with=golang --fail-missing --with systemd --builddirectory=_build\n-else\n-\t# \"powerpc\" is not supported unfortunately, do nothing here\n-\t# See https://github.com/tianon/debian-runc/compare/70957b315f82170dc2ab7085d39c23835c0fa996...xenial for a more elaborate version of this idea.\n-\t# Note that snapd never really worked on powerpc (we never had a core\n-\t# snap there) so we don't need to show anything to the user\n-\tif [ \"$@\" = \"clean\" ]; then \\\n-\t\trm -rf debian/snapd; \\\n-\tfi; \\\n-\tif [ \"$@\" = \"binary\" ] || [ \"$@\" = \"binary-arch\" ]; then \\\n-\t\tinstall -m755 -d debian/snapd/usr/share/doc/snapd/; \\\n-\t\tcp debian/README.powerpc debian/snapd/usr/share/doc/snapd/; \\\n-\t\tdh_installdeb; \\\n-\t\tdh_gencontrol; \\\n-\t\tdh_builddeb; \\\n-\tfi;\n-endif\n+\tdh $@ --buildsystem=golang --with=golang --builddirectory=_build\t\n+\n+override_dh_missing:\n+\tdh_missing --fail-missing\n \n override_dh_fixperms:\n \tdh_fixperms -Xusr/lib/snapd/snap-confine\n@@ -182,12 +139,23 @@\n # Because both the usual and the .real profile describe the same binary the\n # .real profile takes priority (as it is loaded later).\n #\n-# We need run dh_apparmor *before* dh_systemd_enable to ensure the postinst\n-# snippets are added in the right order (first the new apparmor profile\n-# is loaded, then we restart the service).\n-override_dh_systemd_enable:\n+override_dh_installsystemd:\n+\t# We need run dh_apparmor *before* dh_installsystemd to ensure the postinst\n+\t# snippets are added in the right order (first the new apparmor profile\n+\t# is loaded, then we restart the service).\n \tdh_apparmor --profile-name=usr.lib.snapd.snap-confine.real -psnapd\n-\tdh_systemd_enable\n+\n+\t# Due to https://github.com/systemd/systemd/issues/8102 \n+\t# debhelper supporting --remaining like behaviour here would\n+\t# have been useful\n+\t# (Re-)start socket first\n+\tdh_installsystemd -psnapd $(DH_SYSTEMD_START_OPTS) snapd.socket\n+\t# Then service\n+\tdh_installsystemd -psnapd $(DH_SYSTEMD_START_OPTS) snapd.service\n+\t# Then the rest\n+\tdh_installsystemd -psnapd $(DH_SYSTEMD_START_OPTS) \\\n+\t$(filter-out snapd.socket snapd.service snapd.mounts-pre.target, \\\n+\t$(notdir $(wildcard debian/snapd$(SYSTEMD_UNITS_DESTDIR)/*)))\n \n override_dh_clean:\n \tdh_clean\n@@ -196,8 +164,36 @@\n \t$(MAKE) -C cmd distclean || true\n \t# XXX: hacky^2\n \t(cd c-vendor/squashfuse && rm -f snapfuse && make distclean || true )\n+\trm -f snapd.defines.mk\n+\n+# Generate snapd.defines.mk for use by snapd.mk makefile targets.\n+# This file contains variable definitions that match Ubuntu's FHS conventions.\n+define snapd_defines_mk_content\n+# This file is generated by Ubuntu's snapd.rules\n+# Directory variables\n+prefix = /usr\n+bindir = /usr/bin\n+sbindir = /usr/sbin\n+libexecdir = /usr/lib/snapd\n+mandir = /usr/share/man\n+datadir = /usr/share\n+localstatedir = /var\n+sharedstatedir = /var/lib\n+unitdir = $(shell pkg-config --variable=systemdsystemunitdir systemd)\n+# Build configuration\n+builddir=$(CURDIR)/_build/bin\n+with_core_bits = 0\n+with_alt_snap_mount_dir = 0\n+with_apparmor = 1\n+with_testkeys = $(if $(findstring testkeys,$(DEB_BUILD_OPTIONS)),1,0)\n+with_static_pie = 0\n+with_vendor = 1\n+endef\n+\n+snapd.defines.mk:\n+\t$(file >$@,$(snapd_defines_mk_content))\n \n-override_dh_auto_build:\n+override_dh_auto_build: snapd.defines.mk\n \t# very ugly test for FIPS variant of a toolchain\n \t# see https://warthogs.atlassian.net/browse/FR-8860\n ifeq (${FIPSBUILD},1)\n@@ -214,10 +210,11 @@\n \t# ensure auto-generated version is also in the build-tree\n \t(cd _build/src/$(DH_GOPKG)/ && ../../../../../mkversion.sh)\n \t# Build golang bits\n-\tmkdir -p _build/src/$(DH_GOPKG)/cmd/snap/test-data\n-\tcp -a cmd/snap/test-data/*.gpg _build/src/$(DH_GOPKG)/cmd/snap/test-data/\n \tcp -a bootloader/assets/data _build/src/$(DH_GOPKG)/bootloader/assets\n \n+\t# Copy test-data manually for old dh-golang.\n+\tmkdir -p _build/src/$(DH_GOPKG)/cmd/snap/testdata\n+\tcp -a cmd/snap/testdata/*.gpg _build/src/$(DH_GOPKG)/cmd/snap/testdata/\n \t# this is the main go build\n \n \t# note that dh-golang invokes go generate as the first step, which may invoke\n@@ -237,9 +234,7 @@\n \t(cd _build/bin && GOPATH=$$(pwd)/.. go build -mod=vendor --ldflags '-extldflags \"-static\"' $(GCCGOFLAGS) $(DH_GOPKG)/cmd/snap-update-ns)\n \n \t# ensure we generated a static build\n-\t$(shell\tif ldd _build/bin/snap-exec; then false \"need static build\"; fi)\n-\t$(shell\tif ldd _build/bin/snap-update-ns; then false \"need static build\"; fi)\n-\t$(shell\tif ldd _build/bin/snapctl; then false \"need static build\"; fi)\n+\t$(MAKE) -f packaging/snapd.mk check-static-binaries SNAPD_DEFINES_DIR=$(CURDIR)\n \n \t# ensure snap-seccomp is build with a static libseccomp on Ubuntu\n ifeq ($(shell dpkg-vendor --query Vendor),Ubuntu)\n@@ -274,18 +269,8 @@\n # a tested default (production) build should have no test keys\n ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))\n \t# check that only the main trusted account-keys are included\n-\tfor b in _build/bin/snapd _build/bin/snap-bootstrap _build/bin/snap-preseed; do \\\n-\t  [ $$(strings $$b |grep -c -E \"public-key-sha3-384: [a-zA-Z0-9_-]{64}\") -eq 2 ] && \\\n-\t  strings $$b |grep -c \"^public-key-sha3-384: -CvQKAwRQ5h3Ffn10FILJoEZUXOv6km9FwA80-Rcj-f-6jadQ89VRswHNiEB9Lxk$$\" && \\\n-\t  strings $$b |grep -c \"^public-key-sha3-384: d-JcZF9nD9eBw7bwMnH61x-bklnQOhQud1Is6o_cn2wTj8EYDi9musrIT9z2MdAa$$\"; \\\n-\tdone;\n-\t# same for snap-repair\n-\t[ $$(strings _build/bin/snap-repair|grep -c -E \"public-key-sha3-384: [a-zA-Z0-9_-]{64}\") -eq 3 ]\n-\t# common with snapd\n-\tstrings _build/bin/snap-repair|grep -c \"^public-key-sha3-384: -CvQKAwRQ5h3Ffn10FILJoEZUXOv6km9FwA80-Rcj-f-6jadQ89VRswHNiEB9Lxk$$\"\n-\tstrings _build/bin/snap-repair|grep -c \"^public-key-sha3-384: d-JcZF9nD9eBw7bwMnH61x-bklnQOhQud1Is6o_cn2wTj8EYDi9musrIT9z2MdAa$$\"\n-\t# repair-root\n-\tstrings _build/bin/snap-repair|grep -c \"^public-key-sha3-384: nttW6NfBXI_E-00u38W-KH6eiksfQNXuI7IiumoV49_zkbhM0sYTzSnFlwZC-W4t$$\"\n+\t$(MAKE) -f packaging/snapd.mk check-trusted-account-keys \\\n+\t\tSNAPD_DEFINES_DIR=$(CURDIR)\n endif\n ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))\n \t# run the snap-confine tests\n@@ -307,6 +292,9 @@\n \trm -f ${CURDIR}/debian/tmp/usr/bin/toolbelt\n \t# we do not like /usr/bin/snappy anymore\n \trm -f ${CURDIR}/debian/tmp/usr/bin/snappy\n+\t# FIPS dispatch is built anyway, but we only use it in the snap, there's no\n+\t# need for dispatcher in native FIPS deb build\n+\trm -f ${CURDIR}/debian/tmp/usr/bin/snap-fips-dispatch\n \t# i18n stuff\n \tmkdir -p debian/snapd/usr/share\n \tif [ -d share/locale ]; then \\\n@@ -357,21 +345,8 @@\n \t$(CURDIR)/_build/bin/snap help --man | sed '1 s/^.*/.TH snap 8 \"$(shell date --reference=debian/changelog +\"%d %B %Y\")\"/' > $@\n \n override_dh_auto_clean:\n-\t# XXX: workaround old dh-golang inability to remove _build/\n-\tif [ -d _build ]; then cd _build && GOPATH=$$(pwd) go clean -modcache; fi\n \tdh_auto_clean -O--buildsystem=golang\n \trm -vf snap.8\n \n override_dh_gencontrol:\n \tdh_gencontrol -- -VBuilt-Using=\"$(BUILT_USING)\" $(SUBSTVARS)\n-\n-override_dh_systemd_start:\n-\t# Due to https://github.com/systemd/systemd/issues/8102\n-\t# debhelper supporting --remaining like behaviour here would\n-\t# have been useful\n-\t# (Re-)start socket first\n-\tdh_systemd_start $(DH_SYSTEMD_START_OPTS) snapd.socket\n-\t# Then service\n-\tdh_systemd_start $(DH_SYSTEMD_START_OPTS) snapd.service\n-\t# Then the rest\n-\tdh_systemd_start $(DH_SYSTEMD_START_OPTS) $(filter-out snapd.socket snapd.service snapd.mounts-pre.target, $(shell ls debian/snapd/lib/systemd/system/))\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/snapd.install.in snapd-2.76+ubuntu26.04.2/debian/snapd.install.in\n--- snapd-2.75.2+ubuntu26.04.2/debian/snapd.install.in\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/snapd.install.in\t2026-06-17 16:16:09.000000000 +0200\n@@ -1,6 +1,5 @@\n usr/bin/snap\n usr/bin/snapctl /usr/lib/snapd/\n-usr/lib/snapd/system-shutdown\n usr/bin/snap-exec /usr/lib/snapd/\n usr/bin/snap-repair /usr/lib/snapd/\n usr/bin/snap-failure /usr/lib/snapd/\n@@ -12,7 +11,6 @@\n usr/bin/snap-recovery-chooser /usr/lib/snapd/\n usr/bin/snap-fde-keymgr /usr/lib/snapd/\n usr/bin/snapd-apparmor /usr/lib/snapd/\n-usr/bin/snap-gpio-helper /usr/lib/snapd/\n \n # bash completion\n data/completion/bash/snap /usr/share/bash-completion/completions\n@@ -47,5 +45,5 @@\n \n # use \"usr/lib\" here because apparently systemd looks only there\n usr/lib/systemd/system-environment-generators\n-# but system generators end up in lib\n+# system generators use /system-generators (resolved via pkg-config)\n @systemd-lib@/system-generators\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/snapd.links snapd-2.76+ubuntu26.04.2/debian/snapd.links\n--- snapd-2.75.2+ubuntu26.04.2/debian/snapd.links\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/snapd.links\t2026-06-17 16:16:09.000000000 +0200\n@@ -1,5 +1,2 @@\n-/usr/lib/snapd/snap-device-helper  /lib/udev/snappy-app-dev\n-# This should be removed once we can rely on debhelper >= 11.5:\n-#     https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764678\n-/usr/lib/systemd/user/snapd.session-agent.socket /usr/lib/systemd/user/sockets.target.wants/snapd.session-agent.socket\n+/usr/lib/snapd/snap-device-helper  /usr/lib/udev/snappy-app-dev\n usr/lib/snapd/snapctl usr/bin/snapctl\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/snapd.postinst snapd-2.76+ubuntu26.04.2/debian/snapd.postinst\n--- snapd-2.75.2+ubuntu26.04.2/debian/snapd.postinst\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/snapd.postinst\t2026-06-17 16:16:09.000000000 +0200\n@@ -2,78 +2,13 @@\n \n set -e\n \n-# \"powerpc\" is not supported unfortunately, do nothing here# \n-if [ \"$DPKG_MAINTSCRIPT_ARCH\" = powerpc ]; then\n-    exit 0\n-fi\n-\n case \"$1\" in\n     configure)\n-        # ensure /var/lib/snapd/lib/gl is cleared\n-        if dpkg --compare-versions \"$2\" lt-nl \"2.0.7\"; then\n-            ldconfig\n-        fi\n-\n-        # Ensure that we undo the damage done by the snap.mount unit that was present\n-        # in snapd 2.31.\n-        #\n-        # We found that update scripts make systemd stop inactive mount units and this\n-        # in turn stops all the units that depend on it so when the snap.mount unit is\n-        # stopped all the per-snap mount units gets stopped along with them.  The 2.31\n-        # release was only out briefly in xenial-proposed and bionic but to keep the\n-        # affected users safe let's start all the per-snap mount units so that snaps no\n-        # longer appear as broken after update.\n-        if dpkg --compare-versions \"$2\" ge-nl \"2.31\" && \\\n-                dpkg --compare-versions \"$2\" lt-nl \"2.32\"; then\n-            units=$(systemctl list-unit-files --full | grep '^snap[-.]' | cut -f1 -d ' ' | grep -vF snap.mount.service || true)\n-            mounts=$(echo \"$units\" | grep '^snap[-.].*\\.mount$' || true)\n-            for unit in $mounts; do\n-                # ensure its really a snap mount unit or systemd unit\n-                if ! grep -q 'What=/var/lib/snapd/snaps/' \"/etc/systemd/system/$unit\" && ! grep -q 'X-Snappy=yes' \"/etc/systemd/system/$unit\"; then\n-                    echo \"Skipping non-snapd systemd unit $unit\"\n-                    continue\n-                fi\n-\n-                echo \"Starting $unit\"\n-                deb-systemd-invoke start \"$unit\" || true\n-            done\n-        fi\n-\n-        # In commit 0dce4704a5d (2017-03-28, snapd v2.23.6) we renamed\n-        # /etc/apparmor.d/usr.lib.snap-confine to usr.lib.snap-confine.real\n-        # to fix LP: #1673247 - however some people (developers?) still have\n-        # the old usr.lib.snap-confine file. This seems to be loaded instead\n-        # of the correct usr.lib.snap-confine.real profile. To fix this we\n-        # use the rather blunt approach to rename the file forcefully.\n-        if test -f /etc/apparmor.d/usr.lib.snapd.snap-confine && test -f /etc/apparmor.d/usr.lib.snapd.snap-confine.real; then\n-            mv /etc/apparmor.d/usr.lib.snapd.snap-confine /etc/apparmor.d/usr.lib.snapd.snap-confine.dpkg-bak\n-        fi\n-\n         # Ensure that the void directory has correct permissions.\n         chmod 111 /var/lib/snapd/void\n \n-        # Ubuntu 20.04 had a incorrect seed directory during development.\n-        #\n-        # This was causing hangs in the postinst when systemctl tries to\n-        # start snapd.seeded.service which will wait for snapd to finish\n-        # seeding (which will never happen because seeding is broken).\n-        # See LP: 1868706\n-        # This snippet detect this incorrect seed and disables it.\n-        if [ -e /var/lib/snapd/seed/seed.yaml ] && [ \"$(snap debug state --is-seeded /var/lib/snapd/state.json)\" = \"false\" ]; then\n-            if ! snap debug validate-seed /var/lib/snapd/seed/seed.yaml; then\n-                echo \"Found incorrect seed, disabling it\"\n-                mv /var/lib/snapd/seed /var/lib/snapd/seed.disabled\n-            fi\n-        fi\n-\n-        # ensure \"snap userd\" is restarted\n-        if dpkg --compare-versions \"$2\" lt-nl \"2.45.2\"; then\n-            pkill -f \"snap userd\" || true\n-        fi\n-\n         # ensure required caps on snap-confine\n         setcap -q - /usr/lib/snapd/snap-confine < /usr/lib/snapd/snap-confine.caps\n-\n         ;;\n esac\n \ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/snapd.postrm snapd-2.76+ubuntu26.04.2/debian/snapd.postrm\n--- snapd-2.75.2+ubuntu26.04.2/debian/snapd.postrm\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/snapd.postrm\t2026-06-17 16:16:09.000000000 +0200\n@@ -2,11 +2,6 @@\n \n set -e\n \n-# \"powerpc\" is not supported unfortunately, do nothing here# \n-if [ \"$DPKG_MAINTSCRIPT_ARCH\" = powerpc ]; then\n-    exit 0\n-fi\n-\n systemctl_stop() {\n     unit=\"$1\"\n \ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/snapd.preinst snapd-2.76+ubuntu26.04.2/debian/snapd.preinst\n--- snapd-2.75.2+ubuntu26.04.2/debian/snapd.preinst\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/snapd.preinst\t1970-01-01 01:00:00.000000000 +0100\n@@ -1,10 +0,0 @@\n-#!/bin/sh\n-\n-set -e \n-\n-# \"powerpc\" is not supported unfortunately, do nothing here# \n-if [ \"$DPKG_MAINTSCRIPT_ARCH\" = powerpc ]; then\n-    exit 0\n-fi\n-\n-#DEBHELPER#\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/snapd.prerm snapd-2.76+ubuntu26.04.2/debian/snapd.prerm\n--- snapd-2.75.2+ubuntu26.04.2/debian/snapd.prerm\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/snapd.prerm\t2026-06-17 16:16:09.000000000 +0200\n@@ -2,11 +2,6 @@\n \n set -e\n \n-# \"powerpc\" is not supported unfortunately, do nothing here# \n-if [ \"$DPKG_MAINTSCRIPT_ARCH\" = powerpc ]; then\n-    exit 0\n-fi\n-\n systemctl_stop() {\n     unit=\"$1\"\n \ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/tests/control snapd-2.76+ubuntu26.04.2/debian/tests/control\n--- snapd-2.75.2+ubuntu26.04.2/debian/tests/control\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/tests/control\t2026-06-17 16:16:09.000000000 +0200\n@@ -1,9 +1,7 @@\n Tests: integrationtests\n Restrictions: allow-stderr, rw-build-tree, needs-root, breaks-testbed, isolation-machine\n-Depends: bzr,\n-         ca-certificates,\n+Depends: ca-certificates,\n          git,\n-         golang-golang-x-net-dev,\n          locales,\n          net-tools,\n          netcat-openbsd,\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/tests/integrationtests snapd-2.76+ubuntu26.04.2/debian/tests/integrationtests\n--- snapd-2.75.2+ubuntu26.04.2/debian/tests/integrationtests\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/tests/integrationtests\t2026-06-17 16:16:09.000000000 +0200\n@@ -56,33 +56,33 @@\n \n # and now run spread against localhost\n export GOPATH=/tmp/go\n-/snap/bin/go install github.com/canonical/spread/cmd/spread@latest\n+/snap/bin/go install github.com/canonical/spread-plus/cmd/spread@latest\n \n # the tests need this:\n groupadd --gid 12345 test\n adduser --uid 12345 --gid 12345 --disabled-password --gecos '' test\n \n # we build our own minimal spread.yaml\n-cat > spread.yaml <<'EOF'\n+cat > spread.yaml <<EOF\n project: snapd\n path: /home/gopath/src/github.com/snapcore/snapd\n environment:\n     PROJECT_PATH: /home/gopath/src/github.com/snapcore/snapd\n-    TESTSLIB: $PROJECT_PATH/tests/lib\n-    TESTSTOOLS: $PROJECT_PATH/tests/lib/tools\n+    TESTSLIB: \\$PROJECT_PATH/tests/lib\n+    TESTSTOOLS: \\$PROJECT_PATH/tests/lib/tools\n     SNAPPY_TESTING: 1\n-    PATH: $PATH:$PROJECT_PATH/tests/bin\n+    PATH: \\$PATH:\\$PROJECT_PATH/tests/bin\n backends:\n     autopkgtest:\n         type: adhoc\n         allocate: ADDRESS localhost:22\n         systems:\n         - adt-local:\n-            username: ubuntu\n-            password: ubuntu\n+            username: ${AUTOPKGTEST_NORMAL_USER:-user}\n+            password: ${AUTOPKGTEST_NORMAL_USER:-user}\n prepare: |\n-    # Copy external tools from the subtree to the \"$TESTSLIB\"/tools directory\n-    cp -f \"$TESTSLIB\"/external/snapd-testing-tools/tools/* \"$TESTSTOOLS\"\n+    # Copy external tools from the subtree to the \"\\$TESTSLIB\"/tools directory\n+    cp -f \"\\$TESTSLIB\"/external/snapd-testing-tools/tools/* \"\\$TESTSTOOLS\"\n suites:\n         tests/smoke/:\n             summary: Essenial system level tests for snapd\ndiff -Nru snapd-2.75.2+ubuntu26.04.2/debian/tests/README.md snapd-2.76+ubuntu26.04.2/debian/tests/README.md\n--- snapd-2.75.2+ubuntu26.04.2/debian/tests/README.md\t2026-03-30 17:06:36.000000000 +0200\n+++ snapd-2.76+ubuntu26.04.2/debian/tests/README.md\t2026-06-17 16:16:09.000000000 +0200\n@@ -2,9 +2,9 @@\n \n In order to run the autopkgtest suite locally you need first to generate an image:\n \n-    $ adt-buildvm-ubuntu-cloud -a amd64 -r xenial -v\n+    $ adt-buildvm-ubuntu-cloud -a amd64 -r resolute -v\n \n-This will create a `adt-xenial-amd64-cloud.img` file, then you can run the tests from\n+This will create a `adt-resolute-amd64-cloud.img` file, then you can run the tests from\n the project's root with:\n \n-    $ adt-run --unbuilt-tree . --- qemu ./adt-xenial-amd64-cloud.img\n+    $ adt-run --unbuilt-tree . --- qemu ./adt-resolute-amd64-cloud.img\n", "creation_timestamp": "2026-07-08T11:11:40.354681Z"}