manager: limit access to private dbus socket (#2119405)
journalctl: do not treat EINTR as an error when waiting for events (#2161683)
core: bring manager_startup() and manager_reload() more inline (#2059633)
pam: add a call to pam_namespace (#1861836)
virt: Support detection for ARM64 Hyper-V guests (#2158307)
virt: Fix the detection for Hyper-V VMs (#2158307)
basic: add STRERROR() wrapper for strerror_r() (#2155520)
coredump: put context array into a struct (#2155520)
coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155520)

basic: recognize pdfs filesystem as a network filesystem (#2094661)
core: move reset_arguments() to the end of main's finish (#2127131)
manager: move inc. of n_reloading into a function (#2136869)
core: Add new DBUS properties UnitsReloadStartTimestamp and UnitsLoadTimestampMontonic (#2136869)
core: Indicate the time when the manager started loading units the last time (#2136869)
core: do not touch /run/systemd/systemd-units-load from user session instances (#2136869)
sysctl: downgrade message when we have no permission (#2158160)
core: respect SELinuxContext= for socket creation (#2136738)
manager: use target process context to set socket context (#2136738)
virt: detect Amazon EC2 Nitro instance (#2117948)
machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 (#2117948)
virt: use string table to detect VM or container (#2117948)
fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (#2117948)
Use BIOS characteristics to distinguish EC2 bare-metal from VMs (#2117948)
device: drop refuse_after (#2043524)

logind: optionally watch utmp for login data (#2122288)
logind: add hashtable for finding session by leader PID (#2122288)
core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
sd-event: add relative timer calls (#2122288)
logind: add option to stop idle sessions after specified timeout (#2122288)
logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)
ci(lint): add shell linter - Differential ShellCheck (#2122499)
meson: do not compare objects of different types (#2122499)
journal-remote: use MHD_HTTP_CONTENT_TOO_LARGE as MHD_HTTP_PAYLOAD_TOO_LARGE is deprecated since 0.9.74 (#2122499)
Fix build with Âľhttpd 0.9.71 (#2122499)
ci: replace LGTM with CodeQL (#2122499)
ci(mergify): Update policy - Drop LGTM checks (#2122499)
time-util: fix buffer-over-run (#2139391)

resolved: pin stream while calling callbacks for it (#2110549)
ci(functions): Add `useradd` and `userdel` (#2110549)

Try stopping MD RAID devices in shutdown too (#1817706)
shutdown: get only active md arrays. (#1817706)
scope: allow unprivileged delegation on scopes (#2068575)

test-procfs-util: skip test on certain errors (#2087152)

ci: bump the worker Ubuntu version to Jammy (#2087152)
test: make test-execute pass on Linux 5.15 (#2087152)
ci: install iputils (#2087152)
ci(Mergify): Add `ci-waived` logic (#2087152)
sd-event: don't invalidate source type on disconnect (#2115396)
tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
core: drop references to 'StandardOutputFileToCreate' (#2093479)
dbus-execute: fix indentation (#2093479)
dbus-execute: generate the correct transient unit setting (#2093479)
bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
core: be more careful when inheriting stdout fds to stderr (#2093479)
test: add a test for StandardError=file:… (#2093479)
tree-wide: allow ASCII fallback for → in logs (#2093479)
tree-wide: allow ASCII fallback for … in logs (#2093479)
core: allow to set default timeout for devices (#1967245)
man: document DefaultDeviceTimeoutSec= (#1967245)
Revert "core: Propagate condition failed state to triggering units." (#2114005)
core: Check unit start rate limiting earlier (#2114005)
core: Add trigger limit for path units (#2114005)
meson: add syscall-names-update target (#2040247)
syscall-names: add process_madvise which is planned for 5.10 (#2040247)
shared: add @known syscall list (#2040247)
generate-syscall-list: require python3 (#2040247)
shared/seccomp: reduce scope of indexing variables (#2040247)
shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
seccomp: tighten checking of seccomp filter creation (#2040247)
shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
revert: resolved: pin stream while calling callbacks for it (#2110549)

resolved: pin stream while calling callbacks for it (#2110549)

spec: Remove dependency on timedatex (#2066946)

mkosi: Add gnutls package (#2101227)
unit-name: tighten checks for building valid unit names (#1940973)
core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
test: add extended test for triggering mount rate limit (#1940973)
tests: add test case for long unit names (#1940973)
core: unset HOME=/ that the kernel gives us (#2056527)
journal-remote: check return value from MHD_add_response_header (#2051981)
journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
fstab-generator: fix debug log (#2101433)
logind-session-dbus: allow to set display name via dbus (#1857969)
Allow restart for oneshot units (#2042896)
test: correct TEST-41 StartLimitBurst test (#2042896)
core: fix assert() about number of built environment variables (#2049788)
core: add one more assert() (#2049788)
strv: introduce strv_join_prefix() (#2049788)
test: add tests for strv_join_prefix() (#2049788)
test: replace swear words by 'hoge' (#2049788)
core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
man: document RUNTIME_DIRECTORY= or friends (#2049788)

unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
tests: make inverted tests actually count (#2087152)
ci(Mergify): configuration update (#2087152)
core: propagate triggered unit in more load states (#2065322)
core: propagate unit start limit hit state to triggering path unit (#2065322)
core: Move 'r' variable declaration to start of unit_start() (#2065322)
core: Delay start rate limit check when starting a unit (#2065322)
core: Propagate condition failed state to triggering units. (#2065322)
unit: check for mount rate limiting before checking active state (#2095744)

core: disallow using '-.service' as a service name (#2051520)
shared/dropin: support -.service.d/ top level drop-in for service units (#2051520)
core: change top-level drop-in from -.service.d to service.d (#2051520)
shared/dropin: fix assert for invalid drop-in (#2051520)
udev: fix slot based network names on s390 (#1939914)
udev: it is not necessary that the path is readable (#1939914)
udev: allow onboard index up to 65535 (#1939914)
Revert "basic: use comma as separator in cpuset cgroup cpu ranges" (#1858220)
acpi-fpdt: mark structures as packed (#2047373)
core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2047373)
core/unit: fix use-after-free (#2047373)
sd-bus: fix reference counter to be incremented (#2047373)
sd-bus: do not read unused value (#2047373)
sd-bus: do not return negative errno when unknown name is specified (#2047373)
sd-bus: switch to a manual overflow check in sd_bus_track_add_name() (#2047373)
spec: Add dependency on timedatex (#2066946)

ci: drop CentOS 8 CI (#2017033)
test: adapt to the new capsh format (#2017033)
test: ignore IAB capabilities in `test-execute` (#2017033)

udev/net_id: introduce naming scheme for RHEL-8.5 (#2039797)
udev/net_id: remove extraneous bracket (#2039797)
udev/net_id: introduce naming scheme for RHEL-8.6 (#2039797)
define newly needed constants (#2005008)
sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#2005008)
sd-netlink: introduce sd_netlink_message_read_strv() (#2005008)
sd-netlink: introduce sd_netlink_message_append_strv() (#2005008)
test: add a test for sd_netlink_message_{append,read}_strv() (#2005008)
util: introduce ifname_valid_full() (#2005008)
rename function (#2005008)
udev: support AlternativeName= setting in .link file (#2005008)
network: make Name= in [Match] support alternative names of interfaces (#2005008)
udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#2005008)
udev: do not fail if kernel does not support alternative names (#2005008)
udev: introduce AlternativeNamesPolicy= setting (#2005008)
network: set AlternativeNamesPolicy= in 99-default.link (#2005008)
random-util: call initialize_srand() after fork() (#2005008)
sd-netlink: introduce rtnl_resolve_link_alternative_names() (#2005008)
udev: sort alternative names (#2005008)
netlink: introduce rtnl_get/delete_link_alternative_names() (#2005008)
netlink: do not fail when new interface name is already used as an alternative name (#2005008)
udev: do not try to reassign alternative names (#2005008)
Do not fail if the same alt. name is set again (#2005008)
mount: do not update exec deps on mountinfo changes (#2008825)
core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2008825)
core: fix unfortunate typo in unit_is_unneeded() (#2040147)
core: make destructive transaction error a bit more useful (#2040147)
tmpfiles: use a entry in hashmap as ItemArray in read_config_file() (#1944468)
tmpfiles: rework condition check (#1944468)
TEST-22-TMPFILES: add reproducer for bug with X (#1944468)
core: make sure we don't get confused when setting TERM for a tty fd (#2045307)
hash-funcs: introduce macro to create typesafe hash_ops (#2037807)
hash-func: add destructors for key and value (#2037807)
util: define free_func_t (#2037807)
hash-funcs: make basic hash_ops typesafe (#2037807)
test: add tests for destructors of hashmap or set (#2037807)
man: document the new sysctl.d/ - prefix (#2037807)
sysctl: if options are prefixed with "-" ignore write errors (#2037807)
sysctl: fix segfault (#2037807)

Take ghost ownership of /var/log/lastlog (#1798685)

lgtm: detect uninitialized variables using the __cleanup__ attribute (#2017033)
lgtm: replace the query used for looking for fgets with a more general query (#2017033)
lgtm: beef up list of dangerous/questionnable API calls not to make (#2017033)
lgtm: warn about strerror() use (#2017033)
lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] (#2017033)
lgtm: don't treat the custom note as a list of tags (#2017033)
lgtm: ignore certain cleanup functions (#2017033)
lgtm: detect more possible problematic scenarios (#2017033)
lgtm: enable more (and potentially useful) queries (#2017033)
test: make TEST-47 less racy (#2017033)
core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2036608)
core: Check unit start rate limiting earlier (#2036608)
sd-event: introduce callback invoked when event source ratelimit expires (#2036608)
core: rename/generalize UNIT(u)->test_start_limit() hook (#2036608)
mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2036608)
mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2036608)
pid1: add a manager_trigger_run_queue() helper (#2036608)
unit: add jobs that were skipped because of ratelimit back to run_queue (#2036608)
Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers"" (#2037807)
sysctl: prefix ping port range setting with a dash (#2037807)
mount: don't propagate errors from mount_setup_unit() further up (#2036853)