This release adds the following features:

• Add support for Redfish bearer token authentication
• Add support for several XMC SPI chips
• Parse JCat files in libfwupd without using libjcat

This release fixes the following bugs:

• Allow configuring a Redfish URI with a path prefix
• Avoid firmware matching errors for Cat-6 and Cat-12 modems
• Calculate and export a floating point percentage progress value
• Do not print clean remote success message if aborted
• Do not probe all Nordic devices with USB VID 0x1915
• Fix force table support in Elan IC types 0x13 and 0x14
• Fix Raydium information check flow to avoid incorrect validation
• Fix the Thunderbolt version number by ignoring the reserved bits
• Load well-known paths in dbxtool to prevent a regression
• Match a specific Raydium device to prevent resetting older hardware
• Only copy the HIDRAW USB properties if a DS-20 has been provided
• Use CA1 for a SK Hynix NVMe drive

This release adds support for the following hardware:

• SHIFT6mq and SHIFTphone 8

This release adds the following features:

• Add an HSI check for AMD SB-7033 aka EntrySign
• Add native CBOR parsing and drop libcbor2 as a dep
• Add server platform detection to suspend HSI checks
• Allow setting a maximum version number for a device
• Allow setting context flags from HWID matches
• Increment the progressbar when waiting for replug
• Require Windows 8+ for the MSI build artifact
• Support loading EFI authenticated variables with ContentInfo headers

This release fixes the following bugs:

• Add daemon support for modems that export ttyUSB devices
• Add decompression ratio limit to prevent parsing emulation ZIP bombs
• Add device activation flag for Dell servers after firmware upgrade
• Allow using a custom Telink HidToolVer quirk
• Check the UEFI capsule payload is less than 4GiB in size
• Cleanup all the user inhibits when required
• Do not allow using non-regular files like devnull as metadata
• Do not use capsule-on-disk on Lenovo ThinkCentre M60e Tiny
• Fix a buffer overread when parsing a malicious PE file
• Fix a CRC validation mistake in ZIP firmware parser
• Fix a maybe-impossible NULL pointer dereference when parsing netlink data
• Fix a small memory leak when writing Redfish firmware
• Fix accessing Nordic devices connected through a dongle
• Fix handling snapd payloads with only a default image
• Fix potential NULL pointer dereference in QMI firmware write
• Fix the auto-generated Redfish HBA device name
• Fix the displayed Thunderbolt version number by ignoring reserved bits
• Fix UF2 race with UDisks2 volume discovery during replug
• Fix warning when probing removable USB devices with no medium
• Guard HSI feature with platforms requirements
• Hardcode the modification timestamp in generated zip archive
• Increase the resolution of the progress bar updates
• Limit the maximum number of files that can be parsed from ZIP archives
• Prevent users from asking for unlimited system inhibits
• Properly handle Dell iDRAC when using Redfish
• Reject DFU sectors with zero size to prevent a possible infinite loop
• Restore the VID check in Algoltek USBCR probe function
• Set sensible parsing limits in each FuFirmware subclass
• Show a suitable version when the Novatek update is interrupted
• Support CAB image filenames longer than 255 chars
• Update the Focal touch firmware format to the latest release
• Use overflow-checked arithmetic for all offset calculations
• Use prepared queries when querying silos
• Validate CCGX record data size before flash write
• Validate Nordic HID peer index before accessing peers cache array
• Validate Synaptics cxaudio EEPROM size before trusting it
• Wait for mock snapd API socket to appear when running tests
• Wait for the new version when updating the Nordic TK059 Keyboard

This release adds support for the following hardware:

• Elan TP IC type 0x19
• Google Moonstone
• HP 400 and 405 Mouse
• Lenovo USB-4 dock
• LX Semicon SW42101 touch controller
• Parade USB hubs with GPIO control
• Pixart PLP239 devices
• Raydium TP devices
• Sunplus cameras

This release adds the following features:

• Add a new fwupd security check for HP Sure Start
• Add a new plugin to verify Intel CSME using SMBIOS data
• Add a new tpm-eventlog command to explain the TPM eventlog output
• Add CycloneDX and SPDX support to uSWID
• Add support for AMD Platform Secure boot
• Add support for changing AMD GPU UMA carveout size
• Add support for emulation for bluetooth devices
• Allow systems to use the udev event source without using systemd
• Disable the UEFI plugins on 32bit x86
• Drop support for GPG signing of metadata and firmware
• No longer depend on json-glib, libarchive or protobuf-c
• Remove the concept of blocked firmware
• Show translated problems when a device cannot be installed

This release fixes the following bugs:

• Add a timeout to the fwupd-refresh systemd unit
• Allow systemd service to access block-sr devices
• Always show the correct new firmware version in 'fwupdmgr get-history'
• Be more defensive with invalid Corsair device responses
• Cache the payload verification result to speed up installing modem firmware
• Check for integer overflow when constructing a partial stream
• Clear the remaining qc-firehose power reset logs
• Decompress a zip file in Aver HID rather than a bz2 archive
• Do not allow efivar update without TIME_BASED_AUTHENTICATED_WRITE_ACCESS
• Do not hang when parsing an invalid USB descriptor
• Do not include EV_NO_ACTION when calculating the TPM PCRs
• Do not return an error if the fastboot property is not provided
• Do not show all IDs as GUIDs if adding quirks after device setup
• Find shim when using systemd-boot and distro-specific locations
• Fix activation of dell-kestrel NVM when composite updates are completed
• Fix a dell-dock regression when enumerating the status component
• Fix a fuzzer timeout when parsing a Synaptics RMI SBL container
• Fix a missing error check when updating Genesys USB hubs
• Fix a potential heap OOB read in AMD Kria SOM EEPROM parser
• Fix a potential Logitech HID++ hang when parsing unexpected payload IDs
• Fix a potential out-of-bounds read in Dell dock
• Fix a regression causing MBIM QDU updates to fail
• Fix a regression when installing on the HP G5 dock
• Fix a small memory leak when removing a bluetooth device
• Fix an integer underflow when parsing a malicious PE file
• Fix get-updates --json silently skipping UPDATABLE_HIDDEN devices
• Fix the snapd-uefi request when multiple updates are processed
• Honor polkit auth for emulation tag modify device
• Make Logitech HID++ devices using RDFU actually work
• Only load the history database in the daemon when required
• Refactor the Snap support out into a new plugin
• Remove a warning when updating Intel GSC OPROMDATA
• Remove the bcm57xx recovery device support
• Require a CHID for generic ElanTP devices
• Speed up calculating the cabinet checksum by ~20%
• Support 8bitdo firmware with multiple packed images
• Try to claim the DFU USB interface more than once
• Use crc32() from zlib.h when computing the most common kind of CRC32
• Verify the uncompressed size when decompressing CAB files

This release adds support for the following hardware:

• Blestech Touchpads
• ELAN Haptic MCU devices
• FocalTouch devices
• Himax Touchscreens
• HP Engage One G2 Advanced Hub
• KATAR PRO Wireless Gaming Dongle
• Lenovo keyboard and mice accessories
• Lenovo Sapphire Folio Keyboard
• Lightware Taurus HC40 and HC60
• Novatek touchscreens
• PixArt Touchpads
• Rolling RW101-CAT12 modems
• Sunwinon HID devices

This release adds the following features:

• Add support for changing AMD UMA carveout size
• Warn the user if they are using the blocked-firmware functionality

This release fixes the following bugs:

• Disable the UEFI plugins on 32bit x86
• Do not hang when parsing an invalid USB descriptor
• Do not return an error if the fastboot property is not provided
• Fix a CCGX DMC regression when installing on the HP G5 dock
• Fix a harmless heap OOB read in AMD kria SOM EEPROM parser
• Fix a potential fastboot string over-read
• Fix a regression causing MBIM QDU updates to fail
• Honor polkit auth for emulation tag modify device
• Speed up calculating the cab checksum by ~21%
• Verify the uncompressed size when decompressing CAB files

This release adds support for the following hardware:

• HP Engage One G2 Advanced Hub
• PixArt PJP274 (Framework Laptop)
• Several new Jabra GNP devices

This release fixes the following bugs:

• Add timeout to fwupd-refresh.service systemd unit
• Fix a potential fastboot version buffer over-read
• Verify the uncompressed size when decompressing CAB files
• Warn the user if they are using the blocked-firmware functionality
• Use the UOD approach when updating dell-kestrel docks

This tagged release will probably be the last from the 1_9_X branch, and you should encourage your distributor to upgrade to 2.0.x as soon as possible.

This release adds the following features:

• Add two commands to fwupdtool to calculate and find CRCs
• Allow systems to use the udev event source without using systemd

This release fixes the following bugs:

• Always show the correct new firmware version in 'fwupdmgr get-history'
• Fix an integer underflow when parsing a malicious PE file
• Fix a regression when enumerating the dell-dock status component
• Fix the fuzzer timeout when parsing a synaptics-rmi SBL container
• Fix updating the Intel GPU FWDATA section
• Respect 'fwupdmgr --force' when installing firmware

This release adds support for the following hardware:

• Lenovo Sapphire Folio Keyboard

This release adds the following features:

• Add a MOTD message for devices needing reboot after staged updates
• Create the reboot-required file when a firmware update requires reboot
• Record the system state for each composite emulation
• Update USI docking station firmware without requiring a manual replug

This release fixes the following bugs:

• Add a MTD device problem if the Intel SPI BIOS lock is set
• Allow changing the child name when using PARENT_NAME_PREFIX
• Allow UpdateCapsule to work on systems that do not support SecureBoot
• Correctly parse the EFI_CAPSULE_RESULT_VARIABLE_HEADER
• Fall back to the SMBIOS version for BIOS MTD devices
• Fix a crash when trying to record an i2c emulation
• Fixed Huddly upgrade problems with major version changes
• Fix man page compatibility with apropos and whatis
• Fix parsing USB BOS descriptors
• Fix up the x86_64-specific capsule flags when deploying UEFI firmware
• Improve firmware stream searching speed by a huge amount
• Only convert the release uint32_t to device version format for UEFI devices
• Only handle SIGINT in fwupdtool when required
• Refactor the hypervisor and container detection to be usable from plugins
• Set PlatformArchitecture as the CPU architecture for RISC-V machines
• Use a sensible timeout when doing qc-s5gen2 HID requests

This release adds support for the following hardware:

• HP Portable USB-C 4K HDMI Hub
• Lenovo Legion Go 2 (as a HID device)
• Synaptics HapticsPad

This release fixes the following bugs:

• Add offline dbx hashes for 20250902
• Allow installing archives named as .CAB rather than .cab
• Clean up the fwupdtool lock file every time
• Fix the pending-activation dell-dock problem
• Fix the Thunderbolt controller rushing to finalize before onlining
• Ignore ilan dell-kestrel errors on writing the last page
• Only set the update error if not already setting a problem
• Relax the usi-dock DMC child device checks for new firmware
• Set commit-ca3 for Lexar SSDs
• Support very old versions of UDisks
• Turn off RTS hub firmware dell-kestrel auto-detection
• Use the 'unreachable' problem for the unconnected device state

This release adds the following features:

• Add support for client-side phased update deployment
• Add support for post-quantum signatures
• Allow clearing the cache dirirectory
• Allow fwupdtpmevlog to dump the raw eventlog data
• Build a NVMe GUID derived from the serial number
• Make fwupdtool extract work with deeply nested images
• Parse VSS and FTW variable stores from EFI volumes
• Reintroduce the FreeBSD CI target
• Support very old versions of UDisks

This release fixes the following bugs:

• Add 'fwupdmgr hwids' by exposing another daemon property
• Add offline hashes for the Microsoft 20250902 dbx
• Add the Framework-specific KEK and db hashes
• Allow updating IFD BIOS region via parent MTD
• Avoid showing reinstall prompts for composite devices
• Clean up the fwupdtool lock file in all cases
• Correctly match the correct historical composite component
• Do not allow PK or KEK updates when system has a test key installed
• Do not allow reinstalling when using ONLY_VERSION_UPGRADE
• Do not require AC power to run the installed tests
• Do not scan EFI volumes when constructing MTD BIOS devices
• Ensure REGION is always set for MTD IFD children
• Ensure SCSI instance IDs are valid ASCII values
• Fix a critical warning when parsing invalid Jabra firmware
• Fix an Ilitek parsing crash found when fuzzing
• Fix an inotify race when refreshing metadata
• Fix a pending-activation problem with Dell docking stations
• Fix a potential hang when creating a chunk array with aligned sizes
• Fix MTD emulation recording for PCI-backed devices
• Fix the device order when the parent specifies install-parent-first
• Fix the FLMSTR layout when reading IFD partitions
• Fix the thunderbolt controller rushing to finalize before onlining retimers
• Fix writing Intel GPU OptionROM data and OptionROM code
• Flush stale events to make the Logitech Rallybar more reliable
• Ignore all the Intel GPU MTD devices
• Ignore errors when writing the last page of Dell dock firmware
• Make an error message more specific
• Modify the Dell dock needs-activation flag after updates are installed
• Only add one devlink device for each PCI card
• Parse the FMAP SBOM area as uSWID when required
• Relax the USI dock DMC child device checks for new firmware
• Revert back to the flashrom deprecated API as the new API is unusable
• Rewrite the fwupdmgr manpage to be more useful
• Use higher delay when update status for Logitech peripheral devices

This release adds support for the following hardware:

• ASUS CX9406 (touch controller)
• Framework Copilot keyboard
• Genesys GL352530 and GL352360
• Huddly C1
• Lexar and Maxio NVMe SSDs
• Primax Ryder mouse 2

This release adds the following features:

• Add a 'search' feature to fwupdtool and fwupdmgr

This release fixes the following bugs:

• Fix missing release locations when loading from artifact
• Fix remaining issues to make updates on FreeBSD work