v2023.7

A variety of things here. I think the new support for a "transient etc"
will be appreciated in many places. Note that to work with SELinux
the build system side needs to ensure the labels on /usr/etc match /etc.

Another important change is that the ostree HTTP layer now retries requests
by default; this closes a very longstanding RFE.

Also on the pull side, a longstanding bug was fixed where we'd still
try to fetch "loose" objects even when we were doing a delta pull.

There's a variety of clang-analyzer fixes (some false positives, some real
memory leaks, etc).

Even more in the below log; thanks to all contributors!

What's Changed

• Release by @cgwalters in #3005
• Misc c99 style 5 by @cgwalters in #3006
• 2023.6 coverity minor fixes by @cgwalters in #3013
• Refactor composefs warnings by @cgwalters in #2994
• More analyzer fixes 2 by @cgwalters in #3016
• More analyzer fixes 3 by @cgwalters in #3017
• mutable-tree: Quiet clang-analyzer warning by @cgwalters in #3019
• mutable-tree: Change some g_return_if_fail to g_assert() by @cgwalters in #3020
• build(deps): bump libglnx from c02eb59 to 54ad67d by @dependabot in #3023
• Clang analyzer fixes 5 by @cgwalters in #3024
• deploy: Remove global sync by default by @cgwalters in #2968
• sysroot: Promote the "early prune" behavior to default by @cgwalters in #3012
• build(deps): bump composefs from 1aed878 to 597a766 by @dependabot in #3018
• Drop cap-std from our public APIs by @cgwalters in #3027
• rust: Port to glib 0.18 by @cgwalters in #3029
• build(deps): bump composefs from 597a766 to d085fbf by @dependabot in #3028
• build(deps): bump composefs from d085fbf to af86742 by @dependabot in #3030
• rust/sys: Also bump semver for this by @cgwalters in #3035
• ci: Add an automatic labeler action by @cgwalters in #3037
• rust: Drop composefs from crate by @cgwalters in #3038
• lib/pull: Don't scan commit objects we fetch via deltas by @jlebon in #2054
• rust: Switch to using include by @cgwalters in #3039
• build(deps): bump libglnx from 54ad67d to aff1eea by @dependabot in #3047
• gitmodules: Use github GNOME mirror by @cgwalters in #3052
• rust/tests: Adjust for new ostree by @cgwalters in #3051
• boot/dracut: Add erofs and overlayfs kernel modules by @ericcurtin in #3053
• tests: Add an integration test for composefs signatures by @cgwalters in #3021
• docs: Add authenticated-repos.md by @cgwalters in #3058
• build(deps): bump composefs from af86742 to cca8be4 by @dependabot in #3046
• repo: Default bootloader to zipl on s390x by @cgwalters in #3059
• Revert "ci: Run cosa unprivileged" by @jlebon in #3049
• When exporting, use hardlinks for duplicated files by @owtaylor in #3060
• ci: Ensure composefs is enabled on Fedora by @cgwalters in #3067
• repo: Add an option to label /usr/etc as /etc by @cgwalters in #3063
• tests: Fix whiteout test by @alexlarsson in #3072
• Support transient /etc by @alexlarsson in #3062
• deploy: Improve error message for nonexistent stateroot by @cgwalters in #3073
• composefs: Add more error prefixing by @cgwalters in #3074
• deploy: Remove lock when re-staging by @cgwalters in #3077
• tests: Use ext4, re-enable composefs test by @cgwalters in #3075
• karg-delete: support multiple times by @HuijingHei in #3078
• ostree-fetcher-curl: handle non 404 errors as G_IO_ERROR_TIMED_OUT by @jmarrero in #2843
• lib/deploy: Log SELinux policy refresh by @jlebon in #3081

New Contributors

• @owtaylor made their first contribution in #3060

Full Changelog: v2023.6...v2023.7