journald-server: always create state file in signal handler (#2176892)
journald-server: move relinquish code into function (#2176892)
journald-server: always touch state file in signal handler (#2176892)
test: make TEST-35-LOGIN stable again (#2179309)
pager: set $LESSSECURE whenver we invoke a pager (#2175624)
test-login: always test sd_pid_get_owner_uid(), modernize (#2175624)
pager: make pager secure when under euid is changed or explicitly requested (#2175624)
ci: trigger differential-shellcheck workflow on push (#2179309)
ci: codeql `master` -> `main` (#2179309)
test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622)

journald-server: always create state file in signal handler (#2174645)
journald-server: move relinquish code into function (#2174645)
journald-server: always touch state file in signal handler (#2174645)

journald: add API to move logging from /var to /run again (#1873540)
journalctl: add new --relinquish and --smart-relinquish options (#1873540)
units: automatically revert to /run logging on shutdown if necessary (#1873540)
pstore: Tool to archive contents of pstore (#2158832)
meson: drop redundant line (#2158832)
pstore: drop unnecessary initializations (#2158832)
pstopre: fix return value of list_files() (#2158832)
pstore: remove temporary file on failure (#2158832)
pstore: do not add FILE= journal entry if content_size == 0 (#2158832)
pstore: run only when /sys/fs/pstore is not empty (#2158832)
pstore: fix use after free (#2158832)
pstore: refuse to run if arguments are specified (#2158832)
pstore: allow specifying src and dst dirs are arguments (#2158832)
pstore: rework memory handling for dmesg (#2158832)
pstore: fixes for dmesg.txt reconstruction (#2158832)
pstore: Don't start systemd-pstore.service in containers (#2158832)
units: pull in systemd-pstore.service from sysinit.target (#2158832)
units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832)
units: make sure systemd-pstore stops at shutdown (#2158832)
pstore: Run after modules are loaded (#2158832)
pstore: do not try to load all known pstore modules (#2158832)
logind-session: make stopping of idle session visible to admins (#2156780)
journald: Increase stdout buffer size sooner, when almost full (#2029426)
journald: rework end of line marker handling to use a field table (#2029426)
journald: use the fact that client_context_release() returns NULL (#2029426)
journald: rework pid change handling (#2029426)
test: Add a test case for #15654 (#2029426)
test: Stricter test case for #15654 (Add more checks) (#2029426)
man: document the new _LINE_BREAK= type (#2029426)

test: import logind test from debian/ubuntu test suite (#1866955)
test: introduce inst_recursive() helper function (#1866955)
tests: verify that Lock D-Bus signal is sent when IdleAction=lock (#1866955)
systemctl: simplify halt_main() (#2053273)
systemctl: shutdown don't fallback on auth fail (#2053273)
systemctl: reintroduce the original halt_main() (#2053273)
systemctl: preserve old behavior unless requested (#2053273)
pam_systemd: suppress LOG_DEBUG log messages if debugging is off (#2170084)
udev/net_id: introduce naming scheme for RHEL-8.8 (#2170499)
pam: add a call to pam_namespace (#1861836)

manager: limit access to private dbus socket (#2119405)
journalctl: do not treat EINTR as an error when waiting for events (#2161683)
core: bring manager_startup() and manager_reload() more inline (#2059633)
pam: add a call to pam_namespace (#1861836)
virt: Support detection for ARM64 Hyper-V guests (#2158307)
virt: Fix the detection for Hyper-V VMs (#2158307)
basic: add STRERROR() wrapper for strerror_r() (#2155520)
coredump: put context array into a struct (#2155520)
coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155520)

basic: recognize pdfs filesystem as a network filesystem (#2094661)
core: move reset_arguments() to the end of main's finish (#2127131)
manager: move inc. of n_reloading into a function (#2136869)
core: Add new DBUS properties UnitsReloadStartTimestamp and UnitsLoadTimestampMontonic (#2136869)
core: Indicate the time when the manager started loading units the last time (#2136869)
core: do not touch /run/systemd/systemd-units-load from user session instances (#2136869)
sysctl: downgrade message when we have no permission (#2158160)
core: respect SELinuxContext= for socket creation (#2136738)
manager: use target process context to set socket context (#2136738)
virt: detect Amazon EC2 Nitro instance (#2117948)
machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 (#2117948)
virt: use string table to detect VM or container (#2117948)
fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (#2117948)
Use BIOS characteristics to distinguish EC2 bare-metal from VMs (#2117948)
device: drop refuse_after (#2043524)

logind: optionally watch utmp for login data (#2122288)
logind: add hashtable for finding session by leader PID (#2122288)
core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
sd-event: add relative timer calls (#2122288)
logind: add option to stop idle sessions after specified timeout (#2122288)
logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)
ci(lint): add shell linter - Differential ShellCheck (#2122499)
meson: do not compare objects of different types (#2122499)
journal-remote: use MHD_HTTP_CONTENT_TOO_LARGE as MHD_HTTP_PAYLOAD_TOO_LARGE is deprecated since 0.9.74 (#2122499)
Fix build with Âľhttpd 0.9.71 (#2122499)
ci: replace LGTM with CodeQL (#2122499)
ci(mergify): Update policy - Drop LGTM checks (#2122499)
time-util: fix buffer-over-run (#2139391)

resolved: pin stream while calling callbacks for it (#2110549)
ci(functions): Add `useradd` and `userdel` (#2110549)

Try stopping MD RAID devices in shutdown too (#1817706)
shutdown: get only active md arrays. (#1817706)
scope: allow unprivileged delegation on scopes (#2068575)

test-procfs-util: skip test on certain errors (#2087152)

ci: bump the worker Ubuntu version to Jammy (#2087152)
test: make test-execute pass on Linux 5.15 (#2087152)
ci: install iputils (#2087152)
ci(Mergify): Add `ci-waived` logic (#2087152)
sd-event: don't invalidate source type on disconnect (#2115396)
tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
core: drop references to 'StandardOutputFileToCreate' (#2093479)
dbus-execute: fix indentation (#2093479)
dbus-execute: generate the correct transient unit setting (#2093479)
bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
core: be more careful when inheriting stdout fds to stderr (#2093479)
test: add a test for StandardError=file:… (#2093479)
tree-wide: allow ASCII fallback for → in logs (#2093479)
tree-wide: allow ASCII fallback for … in logs (#2093479)
core: allow to set default timeout for devices (#1967245)
man: document DefaultDeviceTimeoutSec= (#1967245)
Revert "core: Propagate condition failed state to triggering units." (#2114005)
core: Check unit start rate limiting earlier (#2114005)
core: Add trigger limit for path units (#2114005)
meson: add syscall-names-update target (#2040247)
syscall-names: add process_madvise which is planned for 5.10 (#2040247)
shared: add @known syscall list (#2040247)
generate-syscall-list: require python3 (#2040247)
shared/seccomp: reduce scope of indexing variables (#2040247)
shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
seccomp: tighten checking of seccomp filter creation (#2040247)
shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
revert: resolved: pin stream while calling callbacks for it (#2110549)

resolved: pin stream while calling callbacks for it (#2110549)

spec: Remove dependency on timedatex (#2066946)

mkosi: Add gnutls package (#2101227)
unit-name: tighten checks for building valid unit names (#1940973)
core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
test: add extended test for triggering mount rate limit (#1940973)
tests: add test case for long unit names (#1940973)
core: unset HOME=/ that the kernel gives us (#2056527)
journal-remote: check return value from MHD_add_response_header (#2051981)
journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
fstab-generator: fix debug log (#2101433)
logind-session-dbus: allow to set display name via dbus (#1857969)
Allow restart for oneshot units (#2042896)
test: correct TEST-41 StartLimitBurst test (#2042896)
core: fix assert() about number of built environment variables (#2049788)
core: add one more assert() (#2049788)
strv: introduce strv_join_prefix() (#2049788)
test: add tests for strv_join_prefix() (#2049788)
test: replace swear words by 'hoge' (#2049788)
core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
man: document RUNTIME_DIRECTORY= or friends (#2049788)

unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
tests: make inverted tests actually count (#2087152)
ci(Mergify): configuration update (#2087152)
core: propagate triggered unit in more load states (#2065322)
core: propagate unit start limit hit state to triggering path unit (#2065322)
core: Move 'r' variable declaration to start of unit_start() (#2065322)
core: Delay start rate limit check when starting a unit (#2065322)
core: Propagate condition failed state to triggering units. (#2065322)
unit: check for mount rate limiting before checking active state (#2095744)

core: disallow using '-.service' as a service name (#2051520)
shared/dropin: support -.service.d/ top level drop-in for service units (#2051520)
core: change top-level drop-in from -.service.d to service.d (#2051520)
shared/dropin: fix assert for invalid drop-in (#2051520)
udev: fix slot based network names on s390 (#1939914)
udev: it is not necessary that the path is readable (#1939914)
udev: allow onboard index up to 65535 (#1939914)
Revert "basic: use comma as separator in cpuset cgroup cpu ranges" (#1858220)
acpi-fpdt: mark structures as packed (#2047373)
core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2047373)
core/unit: fix use-after-free (#2047373)
sd-bus: fix reference counter to be incremented (#2047373)
sd-bus: do not read unused value (#2047373)
sd-bus: do not return negative errno when unknown name is specified (#2047373)
sd-bus: switch to a manual overflow check in sd_bus_track_add_name() (#2047373)
spec: Add dependency on timedatex (#2066946)