fd-util: rework how we determine highest possible fd (RHEL-18302)
basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302)
fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302)
exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302)
ci: use source-git-automation composite Action (RHEL-1087)
ci: increase the cron interval to 45 minutes (RHEL-1087)
ci: add all Z-Stream versions to array of allowed versions (RHEL-1087)
tree-wide: always declare bitflag enums the same way (RHEL-2857)
login: Add KEY_RESTART handling (RHEL-2857)
analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991)
analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991)
analyze-security: include an actual syscall name in the message (RHEL-5991)
udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426)
doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426)
service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863)

ci: Extend source-git-automation (RHEL-1087)
ci: add missing configuration for commit linter (RHEL-1087)
ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087)
ci: enable source-git automation to validate reviews and ci results (RHEL-1087)
ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087)
ci: enable auto-merge GH Action (RHEL-1087)
fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087)
fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087)
test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087)
resolved: actually check authenticated flag of SOA transaction (RHEL-6213)

login: add a missing error check for session_set_leader() (#2158167)
logind: reset session leader if we know for a fact that it is gone (#2158167)
test-login: skip consistency checks when logind is not active (#2223582)
sd-event: remove dead code and use _cleanup_ (#2211358)
sd-event: don't destroy inotify data structures from inotify event handler (#2211358)
sd-event: add sd_event_add_inotify_fd() call (#2211358)
test: add test case for self-destroy inotify handler (#2211358)
doc: add downstream CONTRIBUTING document (#2179309)
doc: use link with prefilled Jira issue (#2179309)
docs: link downstream CONTRIBUTING in README (#2179309)
unit drop-in: Fix ordering of special type.d drop-ins (#2156620)
Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620)
test: set indentation to 4 spaces (#2156620)
test/TEST-15: remove all created unit files (#2156620)
test: use quotes where necessary (#2156620)
tree-wide: drop manually-crafted message for missing variables (#2156620)
manager: reformat boolean expression in unit_is_pristine() (#2156620)
manager: allow transient units to have drop-ins (#2156620)
TEST-15: allow helper functions to accept other unit types (#2156620)
TEST-15: also test hierarchical drop-ins for slices (#2156620)
TEST-15: add test for transient units with drop-ins (#2156620)
TEST-15: add one more test for drop-in precedence (#2156620)
udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846)
meson: remove libdw dependency from pstore (#2211416)
pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416)
tmpfiles: don't complain if we can't enable pstore in containers (#2211416)
pstore: don't enable crash_kexec_post_notifiers by default (#2211416)
core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925)
man: link Delegate= documentation up with the markdown docs (#2215925)

ci: update permissions for source-git automation workflows (#2179309)
sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932)
parse-util: in parse_permille() check negative earlier (#2178179)
tree-wide: increase granularity of percent specifications all over the place to permille (#2178179)
errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846)
tree-wide: use ERRNO_IS_TRANSIENT() (#2172846)
libsystemd: ignore both EINTR and EAGAIN (#2172846)
sd-bus: handle -EINTR return from bus_poll() (#2172846)
stdio-bridge: don't be bothered with EINTR (#2172846)
sd-netlink: handle EINTR from poll() gracefully, as success (#2172846)
resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846)
utmp-wtmp: fix error in case isatty() fails (#2172846)
utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846)
journal-vacuum: count size of all journal files (#2180380)
resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751)
resolved: close UDP socket when we received a network error on it (#2156751)
ci: allow RHEL-only labels to mark downstream-only commits (#2179309)
man: tweak markup in systemd-pstore.service(8) (#2217786)
man: add .service suffix to systemd-pstore(8) (#2217786)
presets: enable systemd-pstore.service by default (#2217786)
logind: simplify code (#2209328)
format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786)
loginctl: shorten variable name (#2156786)
loginctl: use bus_map_all_properties (#2156786)
loginctl: show session idle status in list-sessions (#2156786)
loginctl: list-sessions: fix timestamp for idle hint (#2156786)
loginctl: also show idle hint in session-status (#2156786)
core/timer: Always use inactive_exit_timestamp if it is set (#1719364)
timer: Use dual_timestamp_is_set() in one more place (#1719364)
ci: drop systemd-stable from advanced-commit-linter config (#2179309)
core/mount: escape invalid UTF8 char in dbus reply (#2158724)

ci(Mergify): drop requirements on linting workflows (#2179309)
ci: workflow for gathering metadata for source-git automation (#2179309)
ci: first part of the source-git automation - commit linter (#2179309)
pstore: fix crash and forward dummy arguments instead of NULL (#2190151)
test: Disable LUKS devices from initramfs in QEMU tests (#2190151)
pstore: explicitly set the base when converting record ID (#2190151)
pstore: avoid opening the dmesg.txt file if not requested (#2190151)
test: add a couple of tests for systemd-pstore (#2190151)

journald-server: always create state file in signal handler (#2176892)
journald-server: move relinquish code into function (#2176892)
journald-server: always touch state file in signal handler (#2176892)
test: make TEST-35-LOGIN stable again (#2179309)
pager: set $LESSSECURE whenver we invoke a pager (#2175624)
test-login: always test sd_pid_get_owner_uid(), modernize (#2175624)
pager: make pager secure when under euid is changed or explicitly requested (#2175624)
ci: trigger differential-shellcheck workflow on push (#2179309)
ci: codeql `master` -> `main` (#2179309)
test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622)

journald-server: always create state file in signal handler (#2174645)
journald-server: move relinquish code into function (#2174645)
journald-server: always touch state file in signal handler (#2174645)

journald: add API to move logging from /var to /run again (#1873540)
journalctl: add new --relinquish and --smart-relinquish options (#1873540)
units: automatically revert to /run logging on shutdown if necessary (#1873540)
pstore: Tool to archive contents of pstore (#2158832)
meson: drop redundant line (#2158832)
pstore: drop unnecessary initializations (#2158832)
pstopre: fix return value of list_files() (#2158832)
pstore: remove temporary file on failure (#2158832)
pstore: do not add FILE= journal entry if content_size == 0 (#2158832)
pstore: run only when /sys/fs/pstore is not empty (#2158832)
pstore: fix use after free (#2158832)
pstore: refuse to run if arguments are specified (#2158832)
pstore: allow specifying src and dst dirs are arguments (#2158832)
pstore: rework memory handling for dmesg (#2158832)
pstore: fixes for dmesg.txt reconstruction (#2158832)
pstore: Don't start systemd-pstore.service in containers (#2158832)
units: pull in systemd-pstore.service from sysinit.target (#2158832)
units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832)
units: make sure systemd-pstore stops at shutdown (#2158832)
pstore: Run after modules are loaded (#2158832)
pstore: do not try to load all known pstore modules (#2158832)
logind-session: make stopping of idle session visible to admins (#2156780)
journald: Increase stdout buffer size sooner, when almost full (#2029426)
journald: rework end of line marker handling to use a field table (#2029426)
journald: use the fact that client_context_release() returns NULL (#2029426)
journald: rework pid change handling (#2029426)
test: Add a test case for #15654 (#2029426)
test: Stricter test case for #15654 (Add more checks) (#2029426)
man: document the new _LINE_BREAK= type (#2029426)

test: import logind test from debian/ubuntu test suite (#1866955)
test: introduce inst_recursive() helper function (#1866955)
tests: verify that Lock D-Bus signal is sent when IdleAction=lock (#1866955)
systemctl: simplify halt_main() (#2053273)
systemctl: shutdown don't fallback on auth fail (#2053273)
systemctl: reintroduce the original halt_main() (#2053273)
systemctl: preserve old behavior unless requested (#2053273)
pam_systemd: suppress LOG_DEBUG log messages if debugging is off (#2170084)
udev/net_id: introduce naming scheme for RHEL-8.8 (#2170499)
pam: add a call to pam_namespace (#1861836)

manager: limit access to private dbus socket (#2119405)
journalctl: do not treat EINTR as an error when waiting for events (#2161683)
core: bring manager_startup() and manager_reload() more inline (#2059633)
pam: add a call to pam_namespace (#1861836)
virt: Support detection for ARM64 Hyper-V guests (#2158307)
virt: Fix the detection for Hyper-V VMs (#2158307)
basic: add STRERROR() wrapper for strerror_r() (#2155520)
coredump: put context array into a struct (#2155520)
coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155520)

basic: recognize pdfs filesystem as a network filesystem (#2094661)
core: move reset_arguments() to the end of main's finish (#2127131)
manager: move inc. of n_reloading into a function (#2136869)
core: Add new DBUS properties UnitsReloadStartTimestamp and UnitsLoadTimestampMontonic (#2136869)
core: Indicate the time when the manager started loading units the last time (#2136869)
core: do not touch /run/systemd/systemd-units-load from user session instances (#2136869)
sysctl: downgrade message when we have no permission (#2158160)
core: respect SELinuxContext= for socket creation (#2136738)
manager: use target process context to set socket context (#2136738)
virt: detect Amazon EC2 Nitro instance (#2117948)
machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 (#2117948)
virt: use string table to detect VM or container (#2117948)
fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (#2117948)
Use BIOS characteristics to distinguish EC2 bare-metal from VMs (#2117948)
device: drop refuse_after (#2043524)

logind: optionally watch utmp for login data (#2122288)
logind: add hashtable for finding session by leader PID (#2122288)
core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
sd-event: add relative timer calls (#2122288)
logind: add option to stop idle sessions after specified timeout (#2122288)
logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)
ci(lint): add shell linter - Differential ShellCheck (#2122499)
meson: do not compare objects of different types (#2122499)
journal-remote: use MHD_HTTP_CONTENT_TOO_LARGE as MHD_HTTP_PAYLOAD_TOO_LARGE is deprecated since 0.9.74 (#2122499)
Fix build with Âľhttpd 0.9.71 (#2122499)
ci: replace LGTM with CodeQL (#2122499)
ci(mergify): Update policy - Drop LGTM checks (#2122499)
time-util: fix buffer-over-run (#2139391)

resolved: pin stream while calling callbacks for it (#2110549)
ci(functions): Add `useradd` and `userdel` (#2110549)

Try stopping MD RAID devices in shutdown too (#1817706)
shutdown: get only active md arrays. (#1817706)
scope: allow unprivileged delegation on scopes (#2068575)

test-procfs-util: skip test on certain errors (#2087152)

ci: bump the worker Ubuntu version to Jammy (#2087152)
test: make test-execute pass on Linux 5.15 (#2087152)
ci: install iputils (#2087152)
ci(Mergify): Add `ci-waived` logic (#2087152)
sd-event: don't invalidate source type on disconnect (#2115396)
tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
core: drop references to 'StandardOutputFileToCreate' (#2093479)
dbus-execute: fix indentation (#2093479)
dbus-execute: generate the correct transient unit setting (#2093479)
bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
core: be more careful when inheriting stdout fds to stderr (#2093479)
test: add a test for StandardError=file:… (#2093479)
tree-wide: allow ASCII fallback for → in logs (#2093479)
tree-wide: allow ASCII fallback for … in logs (#2093479)
core: allow to set default timeout for devices (#1967245)
man: document DefaultDeviceTimeoutSec= (#1967245)
Revert "core: Propagate condition failed state to triggering units." (#2114005)
core: Check unit start rate limiting earlier (#2114005)
core: Add trigger limit for path units (#2114005)
meson: add syscall-names-update target (#2040247)
syscall-names: add process_madvise which is planned for 5.10 (#2040247)
shared: add @known syscall list (#2040247)
generate-syscall-list: require python3 (#2040247)
shared/seccomp: reduce scope of indexing variables (#2040247)
shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
seccomp: tighten checking of seccomp filter creation (#2040247)
shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
revert: resolved: pin stream while calling callbacks for it (#2110549)