v2.0.10

(v2.0.10 includes all changes from v2.0.9, but in released form)

What's new

Pi Connect for Organisations

• Enrol devices via a new wizard flow for Pi Connect for Organisations
• Register devices over HTTPS with on-device signing (ConnectDeviceRegistrar)
• Track organisation registration and provisioning tokens
• Register device identity with Connect automatically after a fastboot flash
• Fix Connect sign-in on more Linux desktop systems (#1564)

Secure Boot and CM5 re-provisioning

• In-place CM5 secure boot re-provisioning via a rewritten SecureBootProvisioner
• New BootloaderImage TLV editor for pieeprom.bin, with bootfile repacking
• Config-signature generation, RSA public-key extraction, and bootcode2712 signing
• AB-image support in BootloaderImage, with signing and extraction tests
• Debug toggles for force-secure-boot and sign-fastboot-gadget
• Fetch firmware from rpi-eeprom; improved reboot handling
• Set chosen storage as the first boot source via EEPROM (fastboot)

Accessibility

• Reduced motion support
• New FocusableText and FocusableHeading components
• Prevent VoiceOver crash on password fields (#1607)

Device I/O

• Read per-device I/O limits to inform write tuning

Improvements

OS customisation

• Cloud-init: drop enable_ssh in favour of systemctl runcmd
• Cloud-init: use user (not users) for user configuration
• Improve SSID handling with octet support and YAML escaping
• Vendor capital cities data locally; no longer fetch from the REST Countries API
• Improve wizard nextStep logic for "write another" mode

UI

• Major QML refactor: ImageWriter singleton, cachegen, lazy-loaded App Options and Debug Options dialogs
• Make App Options dialog scrollable; move Telemetry to the bottom
• Fix keyboard navigation on the write confirmation dialog
• Disable "clear customisation" during active writes
• Gate OTP programming visibility
• Align Secure Boot step container styling

Write operations

• Remove the 512-byte alignment requirement
• Do not emit success after a failed extraction (#1603)
• Set extract length when a manifest size is given
• Omit percentage progress when the extract size cannot be determined
• Parse zstd header for extract size with local .img.zst archives

Fastboot and rpiboot

• Capture INFO/TEXT lines for OEM commands
• Chunk file_server bulk transfers
• Resolve cache before fastboot flash
• Pause drive scan during auto-bootstrap
• Track naked rpiboot devices separately in the drive list
• Normalise custom gadget paths so local files can be used

Windows

• Propagate write error handling through FileOperations
• Advertise long path, DPI awareness, and UTF-8 codepage
• Geometric backoff for volume lock; wait for clean completion
• Uninstaller preserves user preferences; removes cache and customisation data
• Use secure memory erase for WiFi credentials

macOS

• Minimum macOS version is now 13
• Coalesce unaligned writes/reads to /dev/rdisk* (fixes .img.zst EINVAL)
• Scale release label in create-dmg
• Use secure memory erase for WiFi credentials

Linux

• Prefer kreadconfig6 with fallback to kreadconfig5; select via KDE_SESSION_VERSION
• AppImage: exclude libsystemd, libdbus-1, and libcap for desktop builds
• Build fixes

Embedded

• Move scaling choices into C++
• Deploy vendored tree without AppImage
• Drop NetworkAccessManagerFactory and OpenSSL
• create-embedded.sh: support custom ICU runtime libraries

Dependencies

• Upgrade curl, libarchive, libusb, nghttp2, and xz
• Single source of truth for curl user-agent
• Add nghttp2, libusb, and yescrypt to the licence manifest

Translations

• Updated French, Irish, and Turkish translation dictionaries

Bug fixes

• Fix CM5 re-provisioning support
• Always validate stale cached firmware assets
• Fix rpiboot storage handoff; PAL-ify RSA key fingerprint handling
• Re-bind RSA key visibility for debug options
• Prevent ImageWriter double-construction
• Reliably flag Windows system drives (#1558)
• Force disk status refresh on write errors (Windows)
• Prevent mach-port over-release crash on macOS (#1632)
• Better overflow handling for GPT/MBR partitions and FAT long filenames
• disk_formatter: handle extremely large sectors_per_fat
• cachemanager: fix TOCTOU on directory existence check
• Fix serial-if disabled handling in customisation
• Fix fastboot command truncation
• Fix French localisation typo and stray text

Documentation

• Update os-list schema
• Prune bmap spec document
• Update bmap-tools repository URL

PRs

• Update French translations by @martignoni in #1586
• i18n Update Irish translation by @aindriu80 in #1591
• fix: prefer kreadconfig6 with fallback to kreadconfig5 by @Ferdinaelectro1 in #1599
• fix(translation): correct typo in French localization by @Nixfo in #1600
• Update Turkish translations by @Sype0 in #1604
• Update bmap-tools repo URL by @lurch in #1616
• Don't show progress in percent if determining the extracted size failed. by @thatguywiththekids in #1617
• fix(mac): coalesce unaligned writes/reads to /dev/rdisk* (.img.zst EINVAL) by @tdewey-rpi in #1621
• 2.0.9: Fix roll-up by @tdewey-rpi in #1634

New Contributors

• @Nixfo made their first contribution in #1600
• @thatguywiththekids made their first contribution in #1617

Full Changelog: v2.0.8...v2.0.10