Upgrade to the latest upstream release (rhbz#2217441)
Add offline support for sysctl probe (rhbz#2185791)

Upgrade to the latest upstream release (rhbz#2159290)
Fix error when processing OVAL filters (rhbz#2126882)
Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2139060)

Fix potential invalid scan results in OpenSCAP (rhbz#2111040)
Remove oscap-remediate service (rhbz#2111360)

Prevent fails of test_ds_misc.sh

Fix coverity issues
Prevent fails of test_ds_misc.sh

Upgrade to the latest upstream release (rhbz#2041781)
Select and exclude groups of rules on the command line
The boot-time remediation service for systemd's Offline Update mode

Print warning for local files

Lower memory limits and improve their checking (rhbz#2021851)
Remove timestamp from the user manual (rhbz#2022364)

Allow local DS components (rhbz#1970529)
Fix hostname detection in offline scan of UBI 9 images (rhbz#1893888)
Add an alternative source of hostname (rhbz#1977668)
Fix oscap-chroot errors in process58_probe caused by empty /proc (rhbz#2008922)

Introduce support for Image Builder's Blueprint remediation type (rhbz#2020050)

Initialize crypto API only once (rhbz#1959570)

Add 'null' values handling to the yamlfilecontent probe (RHBZ#1981691)

Replace getlogin by cuserid

Waive known issue with hugepages in upstream testsuite (RHBZ#1912000)
Fix issues reported by the coverity scan
Introduce OSBuild 'blueprint' fix type

Fix changelog (add missing 1.3.3-6 entry)

Upgrade to the latest upstream release (RHBZ#1953092)
Fix segfault when using --stig-viewer option and latest XML file from DoD (RHBZ#1912000)
Improve doc about --stig-viewer (RHBZ#1918759)
Backport an upstream patch adding CentOS CPE (RHBZ#1907935)