resolved: pin stream while calling callbacks for it (#2110549)
ci(functions): Add `useradd` and `userdel` (#2110549)

Try stopping MD RAID devices in shutdown too (#1817706)
shutdown: get only active md arrays. (#1817706)
scope: allow unprivileged delegation on scopes (#2068575)

test-procfs-util: skip test on certain errors (#2087152)

ci: bump the worker Ubuntu version to Jammy (#2087152)
test: make test-execute pass on Linux 5.15 (#2087152)
ci: install iputils (#2087152)
ci(Mergify): Add `ci-waived` logic (#2087152)
sd-event: don't invalidate source type on disconnect (#2115396)
tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
core: drop references to 'StandardOutputFileToCreate' (#2093479)
dbus-execute: fix indentation (#2093479)
dbus-execute: generate the correct transient unit setting (#2093479)
bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
core: be more careful when inheriting stdout fds to stderr (#2093479)
test: add a test for StandardError=file:… (#2093479)
tree-wide: allow ASCII fallback for → in logs (#2093479)
tree-wide: allow ASCII fallback for … in logs (#2093479)
core: allow to set default timeout for devices (#1967245)
man: document DefaultDeviceTimeoutSec= (#1967245)
Revert "core: Propagate condition failed state to triggering units." (#2114005)
core: Check unit start rate limiting earlier (#2114005)
core: Add trigger limit for path units (#2114005)
meson: add syscall-names-update target (#2040247)
syscall-names: add process_madvise which is planned for 5.10 (#2040247)
shared: add @known syscall list (#2040247)
generate-syscall-list: require python3 (#2040247)
shared/seccomp: reduce scope of indexing variables (#2040247)
shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
seccomp: tighten checking of seccomp filter creation (#2040247)
shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
revert: resolved: pin stream while calling callbacks for it (#2110549)

resolved: pin stream while calling callbacks for it (#2110549)

spec: Remove dependency on timedatex (#2066946)

mkosi: Add gnutls package (#2101227)
unit-name: tighten checks for building valid unit names (#1940973)
core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
test: add extended test for triggering mount rate limit (#1940973)
tests: add test case for long unit names (#1940973)
core: unset HOME=/ that the kernel gives us (#2056527)
journal-remote: check return value from MHD_add_response_header (#2051981)
journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
fstab-generator: fix debug log (#2101433)
logind-session-dbus: allow to set display name via dbus (#1857969)
Allow restart for oneshot units (#2042896)
test: correct TEST-41 StartLimitBurst test (#2042896)
core: fix assert() about number of built environment variables (#2049788)
core: add one more assert() (#2049788)
strv: introduce strv_join_prefix() (#2049788)
test: add tests for strv_join_prefix() (#2049788)
test: replace swear words by 'hoge' (#2049788)
core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
man: document RUNTIME_DIRECTORY= or friends (#2049788)

unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
tests: make inverted tests actually count (#2087152)
ci(Mergify): configuration update (#2087152)
core: propagate triggered unit in more load states (#2065322)
core: propagate unit start limit hit state to triggering path unit (#2065322)
core: Move 'r' variable declaration to start of unit_start() (#2065322)
core: Delay start rate limit check when starting a unit (#2065322)
core: Propagate condition failed state to triggering units. (#2065322)
unit: check for mount rate limiting before checking active state (#2095744)

core: disallow using '-.service' as a service name (#2051520)
shared/dropin: support -.service.d/ top level drop-in for service units (#2051520)
core: change top-level drop-in from -.service.d to service.d (#2051520)
shared/dropin: fix assert for invalid drop-in (#2051520)
udev: fix slot based network names on s390 (#1939914)
udev: it is not necessary that the path is readable (#1939914)
udev: allow onboard index up to 65535 (#1939914)
Revert "basic: use comma as separator in cpuset cgroup cpu ranges" (#1858220)
acpi-fpdt: mark structures as packed (#2047373)
core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2047373)
core/unit: fix use-after-free (#2047373)
sd-bus: fix reference counter to be incremented (#2047373)
sd-bus: do not read unused value (#2047373)
sd-bus: do not return negative errno when unknown name is specified (#2047373)
sd-bus: switch to a manual overflow check in sd_bus_track_add_name() (#2047373)
spec: Add dependency on timedatex (#2066946)

ci: drop CentOS 8 CI (#2017033)
test: adapt to the new capsh format (#2017033)
test: ignore IAB capabilities in `test-execute` (#2017033)

udev/net_id: introduce naming scheme for RHEL-8.5 (#2039797)
udev/net_id: remove extraneous bracket (#2039797)
udev/net_id: introduce naming scheme for RHEL-8.6 (#2039797)
define newly needed constants (#2005008)
sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#2005008)
sd-netlink: introduce sd_netlink_message_read_strv() (#2005008)
sd-netlink: introduce sd_netlink_message_append_strv() (#2005008)
test: add a test for sd_netlink_message_{append,read}_strv() (#2005008)
util: introduce ifname_valid_full() (#2005008)
rename function (#2005008)
udev: support AlternativeName= setting in .link file (#2005008)
network: make Name= in [Match] support alternative names of interfaces (#2005008)
udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#2005008)
udev: do not fail if kernel does not support alternative names (#2005008)
udev: introduce AlternativeNamesPolicy= setting (#2005008)
network: set AlternativeNamesPolicy= in 99-default.link (#2005008)
random-util: call initialize_srand() after fork() (#2005008)
sd-netlink: introduce rtnl_resolve_link_alternative_names() (#2005008)
udev: sort alternative names (#2005008)
netlink: introduce rtnl_get/delete_link_alternative_names() (#2005008)
netlink: do not fail when new interface name is already used as an alternative name (#2005008)
udev: do not try to reassign alternative names (#2005008)
Do not fail if the same alt. name is set again (#2005008)
mount: do not update exec deps on mountinfo changes (#2008825)
core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2008825)
core: fix unfortunate typo in unit_is_unneeded() (#2040147)
core: make destructive transaction error a bit more useful (#2040147)
tmpfiles: use a entry in hashmap as ItemArray in read_config_file() (#1944468)
tmpfiles: rework condition check (#1944468)
TEST-22-TMPFILES: add reproducer for bug with X (#1944468)
core: make sure we don't get confused when setting TERM for a tty fd (#2045307)
hash-funcs: introduce macro to create typesafe hash_ops (#2037807)
hash-func: add destructors for key and value (#2037807)
util: define free_func_t (#2037807)
hash-funcs: make basic hash_ops typesafe (#2037807)
test: add tests for destructors of hashmap or set (#2037807)
man: document the new sysctl.d/ - prefix (#2037807)
sysctl: if options are prefixed with "-" ignore write errors (#2037807)
sysctl: fix segfault (#2037807)

Take ghost ownership of /var/log/lastlog (#1798685)

lgtm: detect uninitialized variables using the __cleanup__ attribute (#2017033)
lgtm: replace the query used for looking for fgets with a more general query (#2017033)
lgtm: beef up list of dangerous/questionnable API calls not to make (#2017033)
lgtm: warn about strerror() use (#2017033)
lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] (#2017033)
lgtm: don't treat the custom note as a list of tags (#2017033)
lgtm: ignore certain cleanup functions (#2017033)
lgtm: detect more possible problematic scenarios (#2017033)
lgtm: enable more (and potentially useful) queries (#2017033)
test: make TEST-47 less racy (#2017033)
core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2036608)
core: Check unit start rate limiting earlier (#2036608)
sd-event: introduce callback invoked when event source ratelimit expires (#2036608)
core: rename/generalize UNIT(u)->test_start_limit() hook (#2036608)
mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2036608)
mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2036608)
pid1: add a manager_trigger_run_queue() helper (#2036608)
unit: add jobs that were skipped because of ratelimit back to run_queue (#2036608)
Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers"" (#2037807)
sysctl: prefix ping port range setting with a dash (#2037807)
mount: don't propagate errors from mount_setup_unit() further up (#2036853)

core: consider service with no start command immediately started (#1860899)
core: define "exit" and "exit-force" actions for user units and only accept that (#1860899)
core: accept system mode emergency action specifiers with a warning (#1860899)
core: allow services with no commands but SuccessAction set (#1860899)
core: limit service-watchdogs=no to actual "watchdog" commands (#1860899)
units: use SuccessAction=exit-force in systemd-exit.service (#1860899)
units: use SuccessAction=reboot-force in systemd-reboot.service (#1860899)
units: use SuccessAction=poweroff-force in systemd-poweroff.service (#1860899)
units: allow and use SuccessAction=exit-force in system systemd-exit.service (#1860899)
core: do not "warn" about mundane emergency actions (#1860899)
macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2017033)
tests: add helper function to autodetect CI environments (#2017033)
strv: rework FOREACH_STRING() macro (#2017033)
ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2017033)

sd-hwdb: allow empty properties (#2005009)
Update hwdb (#2005009)
Disable libpitc to fix CentOS Stream CI (#2017033)
rpm: Fix typo in /usr/lib/environment.d (#2018024)
rpm: Add misspelled /usr/lib/environment.d macro for temporary compatibility (#2018024)
rpm: emit warning when macro with typo is used (#2018024)
Remove unintended additions to systemd-analyze man page (#2004765)
core: fix SIGABRT on empty exec command argv (#2020239)
core/service: also check path in exec commands (#2020239)
mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (#2015057)
basic: add vmware hypervisor detection from device-tree (#1959150)
pam: do not require a non-expired password for user@.service (#1961746)
udev rules: add rule to create /dev/ptp_hyperv (#1991834)
process-util: explicitly handle processes lacking parents in get_process_ppid() (#1977569)
errno-util: add ERRNO_IS_PRIVILEGE() helper (#1977569)
procfs-util: fix confusion wrt. quantity limit and maximum value (#1977569)
test-process-util: also add EROFS to the list of "good" errors (#1977569)
journal: refresh cached credentials of stdout streams (#1931806)
util-lib: introduce HAS_FEATURE_ADDRESS_SANITIZER (#2017033)
ci: skip test-execute on GH Actions under ASan (#2017033)
test-seccomp: accept ENOSYS from sysctl(2) too (#2017033)
test: accept that char device 0/0 can now be created witout privileges (#2017033)
meson: do not fail if rsync is not installed with meson 0.57.2 (#2017033)
pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#1970945)
sd-event: take ref on event loop object before dispatching event sources (#1970945)

Added option --check-inhibitors for non-tty usage (#1269726)
logind: Introduce RebootWithFlags and others (#1269726)
logind: add …WithFlags methods to policy (#1269726)
logind: simplify flags handling a bit (#1269726)
Update link to RHEL documentation (#1982584)
Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
shared/seccomp-util: address family filtering is broken on ppc (#1982650)
logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
logind: fix serialization/deserialization of user's "display session" (#1642460)
logind: turn of stdio locking when writing session files too (#1642460)
units: set StopWhenUnneeded= for the user slice units too (#1642460)
units: improve Description= string a bit (#1642460)
logind: improve logging in manager_connect_console() (#1642460)
logind: save/restore User object's "stopping" field during restarts (#1642460)
logind: correct bad clean-up path (#1642460)
logind: fix bad error propagation (#1642460)
logind: never elect a session that is stopping as display (#1642460)
logind: introduce little helper that checks whether a session is ready (#1642460)
logind: propagate session stop errors (#1642460)
logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
logind: improve error propagation of user_check_linger_file() (#1642460)
logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
pam_systemd: simplify code which with we set environment variables (#1642460)
logind: validate /run/user/1000 before we set it (#1642460)