1.0.0

What's Changed

• vm: Fix q35 guest NIC binding and tpm2 boot stall by @jetm in #164
• lockfile: relocate to top-level avocado.lock by @mobileoverlord in #165
• overlay: opt-in build-time preprocessing of overlay files by @mobileoverlord in #166
• ext: derive type: path mounts from config, drop ext-paths.json by @mobileoverlord in #167
• honor target-: overrides for rootfs/initramfs/kernel sections by @bsandu-peridio in #168
• Fix avocado deploy repo-server startup race (getfqdn hang) by @jetm in #169
• Add --connect-sign flag to avocado deploy by @jetm in #158
• deploy: surface the signing-key prerequisite for --connect-sign by @jetm in #172
• kernel/image: fix standalone avocado kernel image on non-arm targets by @bsandu-peridio in #171
• release: ship RCs as latest releases, not prereleases by @mobileoverlord in #170
• release: 1.0.0-rc.1 by @mobileoverlord in #174
• deploy: align --connect-sign help text with promote-root --key requirement by @jetm in #177
• Reap abandoned build volumes and clarify stale-volume errors by @jetm in #178
• Add --target-board flag for board interpolation by @jetm in #179
• fix(deploy): surface container script stderr instead of generic failure messages by @lee-reinhardt in #181
• connect/auth: honor --org before the zero-orgs shortcut by @jetm in #182
• Report the build commit in avocado --version by @jetm in #186
• fix: resolve registry-name signing keys in provision, sign, and sdk run by @lee-reinhardt in #189
• ci: test and publish against the 2024 'next' channel by @mobileoverlord in #191
• kos updates by @bsandu-peridio in #176
• Fix ext packaging against an rpm 4.20 SDK sysroot by @jetm in #197
• fix(remote): stop a skipped version check from looking like a passed one by @jetm in #187
• Container Dev Mode: host CLI, embedded registry, and VM push path by @jetm in #184
• fix(container): derive PTY allocation from the environment, not intent by @mobileoverlord in #194
• Stop reinstalling rootfs and initramfs on every sdk install by @mobileoverlord in #185
• ext/package: emit RPM-safe Version for pre-release semver by @mobileoverlord in #175
• exclude package-manager state from extension images by @mobileoverlord in #205
• make cpio reproducible by @bsandu-peridio in #199
• feat(config): resolve extension versions from the extension's source tree by @mobileoverlord in #192
• commands/sbom: emit an SPDX 3.0 SBOM of the installed packages by @hiagofranco in #198
• ext-cli: resolve $CC from the cross-canadian bindir, not the target sysroot by @mobileoverlord in #200
• sdk run: quote argv elements instead of joining them raw by @mobileoverlord in #201
• fix(image): fold permissions into the OS build id so they OTA by @nicksinas in #208
• wire source_date_epoch into rootfs and initramfs image builds by @mobileoverlord in #204
• fix(vm): reset var on a version bump so extensions match the rootfs by @lee-reinhardt in #196
• registry: allow result_large_err on the axum-idiom error path by @mobileoverlord in #213
• Provision and build declared device-tree overlays by @jetm in #183
• fix(vm): sync the new runtime into var instead of destroying it by @mobileoverlord in #212
• config: treat runtime package compile sections as active by @mobileoverlord in #202
• purge package-manager state from rootfs and initramfs images by @mobileoverlord in #203
• fix(stamps): hash overlay contents for verbatim overlays too by @nicksinas in #210
• feat(image): derive AVOCADO_OS_BUILD_ID from the assembled work tree by @nicksinas in #211
• feat(ext): inter-extension dependencies via depends_on by @mobileoverlord in #193
• fix(build): reject a stale rootfs or initramfs install stamp by @lee-reinhardt in #218
• fix(image): cover shipped var/cache and var/log content in the build id by @lee-reinhardt in #217
• fix(image): cover initramfs file ownership in the build id by @lee-reinhardt in #219
• fix(signing): a signature's length is the algorithm's, not always 64 by @mobileoverlord in #215
• feat(runtime): var.encrypt opts a runtime into an encrypted /var by @mobileoverlord in #216
• feat(ext): image.verity - dm-verity hash tree and root hash for extension images by @mobileoverlord in #220
• fix(ext/fetch): --locked fails on an unpinned extension and never writes the lock by @lee-reinhardt in #221
• release: 1.0.0-rc.2 by @mobileoverlord in #214
• fix(deploy): refuse extension verity only, not the rootfs root hash by @mobileoverlord in #225
• fix(install): fail a sysroot install that could not finish, instead of reporting success by @mobileoverlord in #222
• fix(provision): resolve --list's target the way every other command does by @mobileoverlord in #223
• fix(initramfs): actually write the build id into the shipped image by @mobileoverlord in #229
• fix(install): distro-sync the sysroot when the lock carries no pins by @mobileoverlord in #227
• feat(signing): sign the boot FIT from the key registry via signing.fit_key by @mobileoverlord in #224
• fix(container): send SDK entrypoint diagnostics to stderr by @mobileoverlord in #228
• feat(var): operator recovery key for the encrypted /var, and var.hardware by @mobileoverlord in #226
• fix(install): distro-sync the SDK and runtime sysroots when the lock carries no pins by @mobileoverlord in #230
• fix(runtime/build): run the platform build hook before stone bundle by @mobileoverlord in #231
• fix(var.encrypt): scope the opt-in with targets:, not default_target by @mobileoverlord in #232
• release: 1.0.0-rc.3 by @mobileoverlord in #233
• ci: publish the cli extension into 2026/next, not 2026/edge by @mobileoverlord in #237
• fix(stamps): name the target, volume and daemon in stamp errors by @lee-reinhardt in #234
• signing-keys create: reject a duplicate name before generating by @mobileoverlord in #235
• ext: mount path sources over a non-empty includes dir, and say where a path resolved by @mobileoverlord in #236
• Read one line of VERSION_CODENAME from os-release by @jetm in #240
• commands/sbom: compose per-runtime and per-extension SBOMs by @hiagofranco in #238
• build(deps): rustls 0.23.45 for RUSTSEC-2026-0285 by @mobileoverlord in #259
• feat(kernel): kernel.cmdline and kernel.cmdline_extra in project config by @mobileoverlord in #252
• fix(build): build the depends_on closure, not just the authored list by @mobileoverlord in #253
• fix(ext): let a package-sourced extension ship the overlay it declares by @mobileoverlord in #254
• hitl: a managed NFS server (start/status/stop/logs/sync) that actually serves by @mobileoverlord in #258
• feat(feeds): named package feeds — repos:, ordering, stage scoping, and client identity by @mobileoverlord in #241
• feat(cli): avocado login as a shortcut for connect auth login by @mobileoverlord in #261
• build: move the provisioning tail out of build and into provision by @mobileoverlord in #251
• runtime build: link images into var-staging, reflink work copies, hash once by @mobileoverlord in #264
• stamps: complete the input hashes, record output digests and chain them (STAMP_VERSION 2 → 4) by @mobileoverlord in #265
• feat(feeds): private org: feeds, and materialize once per invocation by @mobileoverlord in #262
• build: skip ext build/image and sysroot images whose inputs are unchanged by @mobileoverlord in #266
• feat(lockfile): record the feed set per target, and each package's origin by @mobileoverlord in #263
• container: exec into a reused per-shape session container instead of a run per step by @mobileoverlord in #268
• install: always assume yes; --force means reinstall, not "no prompts" by @mobileoverlord in #250
• runtime/build: clear the overlay staging dir on every build by @mobileoverlord in #255
• Document var.hardware, var.recovery, and var-key by @jetm in #269
• ext install: skip up-to-date extensions (idempotent install) by @mobileoverlord in #260
• stamps: invalidate ext install stamp on kernel version change by @mobileoverlord in #267
• release: 1.0.0-rc.4 by @mobileoverlord in #270
• Skip the compile script for a source the host cannot see by @jetm in #271
• Fix project-relative path resolution for a bare config filename by @jetm in #274
• ci(ext-test): drive the extension build with the CLI this PR builds by @mobileoverlord in #276
• install: one parallelism rule for the DAGs and the SDK phase by @mobileoverlord in #275
• build(deps): cryptoki 0.12.1 for RUSTSEC-2026-0286 by @mobileoverlord in #278
• ext install: keep the install stamp after a --dnf-arg transaction by @nicksinas in #272
• ext build: rebuild an extension whose post_build inputs are undeclared by @nicksinas in #279
• runtime build: re-key into a directory the build owns, not the dnf install root by @nicksinas in #281
• fix(kernel): restore the build-time kernel cmdline export by @mobileoverlord in #277
• release: 1.0.0-rc.5 by @lee-reinhardt in #282
• Expose provisioning profile inputs in human-readable --list output by @jetm in #284
• commands/sbom: attach image ids to extension scopes (ENG-2199) by @hiagofranco in #290
• feat(config): warn about avocado.yaml keys the cli ignores by @lee-reinhardt in #286
• fix(ext): Fetch git extensions by ref instead of guessing --branch by @literally-anything in #291
• feat(connect): upload one sbom per image and keep one package per rpm header by @lee-reinhardt in #292
• fix(feeds): make repos: feeds work under the avocado-vm (ENG-2739) by @nicksinas in #293
• fix(feeds): give the sdk target sysroot install its repos: feeds by @nicksinas in #294
• fix(deps): bump quinn-proto and rustls to clear the cargo audit failures by @jetm in #314
• fix(ext): name the extension dependency key the install comment documents by @jetm in #315
• chore(deps): bump quinn-proto to 0.11.19 and rustls to 0.23.46 by @nicksinas in #304
• volume: a volume that is already gone counts as removed (ENG-2761) by @nicksinas in #306
• sdk compile and text: no-compile-script error, five stale hints (ENG-2765, ENG-2766) by @nicksinas in #310
• tests: run the generated-shell tests on macOS by @nicksinas in #312
• permissions: fix member lists, membership checks, primary GID and GID mismatches (ENG-2763) by @nicksinas in #307
• ext install: probe the rpm database, not the directory, before skipping (ENG-2757) by @nicksinas in #302
• ext build: remove files the overlay and enable_services no longer provide (ENG-2764) by @nicksinas in #308
• lockfile: an explicit avocado.yaml pin wins over a stale lock entry (ENG-2760) by @nicksinas in #305
• build: carry kernel.cmdline_extra in the boot FIT by @mobileoverlord in #316
• kernel_resolver: anchor off-kernel excludes so an RT sibling can install by @mobileoverlord in #321
• build: take the erofs block size from the target SDK by @mobileoverlord in #322
• deps: bump rustls-webpki and webpki-root-certs (RUSTSEC-2026-0382, -0383) by @mobileoverlord in #324
• rootfs: keep the dm-verity tree out of the dnf install root by @mobileoverlord in #299
• feeds: enable an add-on feed by name in distro.feeds by @mobileoverlord in #323
• build: refuse rootfs verity when no initramfs rebuilds the FIT by @mobileoverlord in #318
• sdk: give target scriptlets OE's offline-install environment by @mobileoverlord in #319
• runtime build and config: one project root for src_dir projects (ENG-2758, ENG-2759) by @nicksinas in #303
• rootfs: remove files the overlay no longer provides (ENG-2772) by @nicksinas in #311
• schema: encode the signing and var exclusions, fix the repos example and the path text (ENG-2767) by @nicksinas in #309
• feat(init): default new projects to the 2026 edge feed by @mobileoverlord in #300
• vm: fix the idle state that slowed the guest 10x, mount the share with cache=mmap, drop bindfs under the VM by @nicksinas in #320
• rootfs: run depmod after the sysroot install so modules.dep is not empty by @nicksinas in #325
• version: an exact cli_requirement pin matches the full pre-release version by @nicksinas in #326
• deploy: end the ssh session when the link drops, stop the container on Ctrl+C, refuse a stale repo server by @nicksinas in #327
• config: add avocado config schema and avocado config validate (ENG-2775) by @nicksinas in #317
• container: check the workspace mount before capture steps (ENG-2788) by @nicksinas in #333
• container: mount a linked worktree's git common dir so git works on /opt/src by @nicksinas in #328
• ext: write modprobe entries when the extension has no kernel modules by @nicksinas in #330
• sdk: use the locked feed snapshot in sdk dnf, sdk run, sdk compile and the build commands by @nicksinas in #329
• clean: wait for removed containers to release the volume (ENG-2768) by @nicksinas in #332
• lockfile: a save keeps sibling entries that another install wrote (ENG-2769) by @nicksinas in #334
• build: take the OS bundle build id from the shipped image, and stamp images per runtime by @nicksinas in #336
• provision: fail when the device write is cancelled (ENG-2762) by @nicksinas in #335
• overlay: set attributes only on paths the overlay creates by @mobileoverlord in #337
• Add boot_config and stock device-tree overlays by @jetm in #313
• sdk: offline systemctl enables template instances, never the bare template by @mobileoverlord in #338
• initramfs: query the initramfs rpmdb for the build id by @nicksinas in #339
• Let a board declare which boot settings it delivers by @jetm in #331
• sdk: exit non-zero when sdk run command fails by @nicksinas in #340
• ext: gate the install fast-path skip on exact pin equality (ENG-2792) by @nicksinas in #342
• install: seed per-runtime extension sysroots on a multi-runtime install (ENG-2791) by @nicksinas in #341
• container: reuse session containers for main build/install steps by @nicksinas in #343
• device-tree: apply an extension's target overrides to boot settings by @mobileoverlord in #344
• fix(cli): route update and fetch through the avocado-vm (ENG-2799) by @nicksinas in #346
• cli: route save and load through the avocado-vm, stream the load import by @mobileoverlord in #347
• fix(cli): activate kernel compile sections reached via a top-level kernel reference (ENG-2801) by @nicksinas in #348
• fix(cli): hand build hooks the pinned kernel, not the first staged one by @mobileoverlord in #351
• container: isolate the SDK install from session reuse (ENG-2806) by @nicksinas in #350
• fix(cli): warn when a baked anchor will reject a locally-signed deploy (ENG-2802) by @nicksinas in #349
• fix(build): stop shipping a stale trust anchor after a switch to Level 0 by @mobileoverlord in #352
• release: 1.0.0 by @mobileoverlord in #345

New Contributors

• @jetm made their first contribution in #164
• @hiagofranco made their first contribution in #198
• @literally-anything made their first contribution in #291

Full Changelog: 0.41.2...1.0.0