3.0.0-beta

What's Changed

• Convert Issue Templates to Issue Forms by @iLikeToCode in #969
• Refactor issue-created.yml to have one donation message by @iLikeToCode in #971
• Resolve Kerberos issues by @dmulder in #973
• Build man pages and config from xml by @dmulder in #974
• Add Gemini as cargo vet helper by @dmulder in #979
• Add Stale Workflow by @iLikeToCode in #976
• OIDC auth no longer requires a domain name by @dmulder in #980
• Do not enumerate mapped users in NSS by @dmulder in #982
• Apply Firefox SSO policy via scripts by @dmulder in #983
• Fix container group mapping with subordinate range by @dmulder in #984
• Fix HSM pin migration failure on Debian/Ubuntu upgrades from v1.4.x by @dmulder in #989
• Script for pulling sensible backports to stable by @dmulder in #986
• Gracefully handle consent errors when fetching group names by @dmulder in #999
• fix(o365): Replace GitHub API with redirect-based version detection to avoid rate limiting by @bash-bandicoot in #966
• Fix OIDC provider online check for Keycloak compatibility by @dmulder in #1001
• Add OBS automation script and fix RPM spec generation by @dmulder in #1002
• NixOS: Deflakeify and bring module up to date by @Srylax in #942
• Skip OS version compliance checks when min/max values are empty by @TBK in #1007
• OIDC: remove trailing slash trimming for issuer url by @iLikeToCode in #1013
• Fix NSS lookup for mapped local users by @dmulder in #1017
• Move HSM PIN generation to systemd oneshot service by @dmulder in #1020
• Allow backporting to existing branches by @dmulder in #1019
• SELinux fixes for all RPM distros by @dmulder in #1021
• Hello PIN unlocks GNOME Keyring + packaging hardening (Debian + cross‑distro) by @bash-bandicoot in #1005
• Compile SELinux policy at install time for cross-distro compatibility by @dmulder in #1025
• More SELinux fixes by @dmulder in #1026
• docs: update nix usage to include npins by @dmulder in #1027
• Nightly build fixes by @dmulder in #1034
• /var/cache/private/himmelblaud should not be created tmpfiles by @dmulder in #1037
• Fix stale run by @iLikeToCode in #1039
• Resolve OIDC Authenticated user does not match error by @dmulder in #1047
• Improve error messages served to pam deny by @dmulder in #1049
• Prohibit kanidm update for stable-2.x branch by @dmulder in #1056
• feat: Add support for Amazon Linux 2023 by @tommywo in #1057
• Resolve Intune enrollment failure on first login prevents auth by @dmulder in #1068
• Bump bytes from 1.11.0 to 1.11.1 in the cargo group across 1 directory by @dependabot[bot] in #1066
• Handle SSPR error AADSTS50125 with device flow by @dmulder in #1070
• Add sign-in frequency optimization for console logins by @khronosd in #1055
• SSPR and password only fixes by @dmulder in #1076
• Add ubuntu 25.10 apparmor rules for o365 by @iLikeToCode in #1046
• Add himmelbot, a simple AI issue assistant Agent by @dmulder in #1082
• Add id-token: write to resolve CI failure by @dmulder in #1083
• himmelbot requires a git checkout by @dmulder in #1084
• Add missing checkout step to himmelbot_scheduled_post job by @Copilot in #1085
• Add missing AZURE_API_KEY environment variable to opencode workflow by @Copilot in #1086
• Fix himmelbot permissions and issue history by @dmulder in #1089
• Fix console password-only MFA bypassing ForceMFA by @khronosd in #1088
• Return PAM_IGNORE in chauthtok for local users by @khronosd in #1080
• Dependabot rollup main 20260209 by @dmulder in #1091
• Correct supported versions list by @dmulder in #1097
• Fix nightly build caused by Makefile issue by @dmulder in #1101
• Fix the legacy greeter transpiler by @dmulder in #1104
• Nix shell in flake by @iLikeToCode in #1103
• Fix backporting script by @dmulder in #1102
• Change makefile shell to /usr/bin/env by @iLikeToCode in #1105
• Better handle Intune API version by @dmulder in #1109
• Forbid Hello auth via remote session by @dmulder in #1112

New Contributors

• @bash-bandicoot made their first contribution in #966
• @tommywo made their first contribution in #1057
• @khronosd made their first contribution in #1055
• @Copilot made their first contribution in #1085

Full Changelog: 3.0.0-alpha...3.0.0-beta