vcswatch reports that
this package seems to have a new changelog entry (version
1.17.2-2, distribution
UNRELEASED) and new commits
in its VCS. You should consider whether it's time to make
an upload.
Here are the relevant commit messages:
commit a8e00ba912df82dbdf3450e4e70653f4b7c5706b
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 15:22:56 2025 +0000
d/watch: Convert to v5 format
commit de3bb6d4a9ad67e2d3ebb34f30a68b88981a10be
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 15:21:57 2025 +0000
Update changelog
commit 3377e0318ec5da6607ed522bad9d366372e64179
Merge: f376ebe 1046942
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 15:20:35 2025 +0000
Merge branch 'sysusers' into 'debian/experimental'
Switch from adduser to dh-sequence-installsysusers
See merge request debian/flatpak!5
commit f376ebe4193d1377a86281e14f6a2eafa0b692e3
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 15:19:06 2025 +0000
Mark patch as applied upstream for 1.17.3
commit bf6ad892fed4de778bf9909997e79e99496ad204
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 15:17:54 2025 +0000
Update changelog
commit 9cdc8f1cd4634f2e03120b3d97afaaccb0e61056
Merge: 3e883ee bdd6045
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 15:17:13 2025 +0000
Merge branch 'debian/unstable' into debian/experimental
commit bdd60450247b45b3c280e87d56bbd939050f751b
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 11:38:34 2025 +0000
Release to unstable
commit d2fe7da7ccd9bf8b1ae8b6478ee47f5fde452886
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 11:38:15 2025 +0000
Add bug reference to changelog
commit 2c0a491a9b5d05ef15881a1cc9e78015512442c5
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 11:14:05 2025 +0000
Update changelog
commit 4da1bdbba2767f680124a09ee068bd7f91cfc05c
Author: Simon McVittie <smcv@debian.org>
Date: Wed Dec 17 10:33:48 2025 +0000
Install HTML documentation for the library
commit 42bb1ed037ac9b4e24d1c89f232614823c39b9f2
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 11:11:58 2025 +0000
New upstream stable release
commit 49e9eaec1ff69356515be44a69af545d8fb6254d
Merge: df61c75 1112a51
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 10:51:37 2025 +0000
Update upstream source from tag 'upstream/1.16.2'
Update to upstream version '1.16.2'
with Debian dir 436b2e58d02a6e0b8058519260a461cc420b480f
commit 1112a5113b08bc4021a25791edbf2e18bba82bff
Merge: 649c038 7c806e3
Author: Simon McVittie <smcv@debian.org>
Date: Fri Dec 19 10:51:33 2025 +0000
New upstream version 1.16.2
commit 7c806e340c9e8ece09c92e3cacfcafd1a37875cb
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Mon Dec 15 18:44:05 2025 +0100
Update translation files for 1.16.2
commit 631213c562ca4a6f9217a5656f6247b14b903761
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Mon Dec 15 18:43:29 2025 +0100
Update NEWS for 1.16.2
commit ec36a48446f3d4b6825326d75ea36a5e25a3923b
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Thu Aug 28 15:33:40 2025 +0200
tests/test-run.sh: Only test for trigger results if we have the deps
If the binaries are not available in the environment, the trigger will
not do anything. The tests will not know about this and fail. So only
test for the results of the triggers if they have the dependencies they
require.
(cherry picked from commit 78b3c47c131d86dfaaf6ca6451bd383006084f23)
commit 5c549cd5d0af97226bb5a60b07961c4f58ff0b52
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Thu Oct 30 16:09:00 2025 +0100
kill: Do not kill pid 0 and embrace races
There are a number of races, and failure conditions which can lead to a
pid of 0 being returned from flatpak_instance_get_child_pid. This would
lead to a whole bunch of things getting killed.
We will skip the instance in those cases now, and retry a few times. We
also notice when the instance just goes away by itself now.
This should make killing more robust, and especially not SIGKILL pid 0.
(cherry picked from commit 8354ee56cfe5b77afed1a31148dc557d46ca64ac)
commit 2acd59913f946e18687f75ab7d7bcd16643d38aa
Author: Georgia Garcia <georgia.garcia@canonical.com>
Date: Mon Oct 27 15:46:19 2025 -0300
common: Fix running_under_sudo check by checking euid
Sudo can be used in several ways other than calling a command with the
root user. For example, one can use -u to run the command as the
specified user, or -g to specify a primary group to run the command
as.
Flatpak adds a check when --user is used to prevent an installation in
the root's directory, for example, but it does it by only checking if
sudo was used. As stated previously, it does not necessarily imply
root, so this patch explicitly checks if the command is being run with
the root user.
Fixes: https://github.com/flatpak/flatpak/issues/5979
Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>
(cherry picked from commit f61d931da8a31713bbeb26dbf0cef71c40587fd1)
commit 2cd0b8c05eb3428d0462351dba36392272b13b33
Author: Kolja Lampe <razzeee@gmail.com>
Date: Tue Oct 28 00:42:58 2025 +0100
http: Add cancellation support for curl downloads and error handling
(cherry picked from commit b6775dc221103fe2904492498420129fabe18ee1)
commit e4271b82b2916deecfe48f273d3df644599b991c
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Thu Oct 9 18:06:39 2025 +0200
doc: Build libflatpak-doc.html
Closes #4591
(cherry picked from commit 815301f3410499fb8c6f85ea0f99a9adc1c28487)
commit 94b915352afdc849f538eaed71892d0ab184bdf6
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Mon Dec 1 15:03:11 2025 +0100
context: Canonicalize xdg dir and home dir paths
When an xdg dir is not available, it is supposed to point at $HOME. We
do not want to mount $HOME though in that case, so we just skip the xdg
dir instead.
The check compares the strings of the the xdg dir path and the home dir
path. So far it relied on the functions internally canonicalizing the
paths in the same way, but there was a glib regression:
https://gitlab.gnome.org/GNOME/glib/-/issues/3811
("g_get_user_special_dir doesn't strip trailing slash from $HOME")
Which then was fixed in cb3e9fe74 ("gutils: Strip all trailing
slashes").
We can however just canonicalize on the paths on the caller side to make
this more robust, so let's just do that.
Closes: #6323
(cherry picked from commit bb2d517bb1ccc5fa06c7ed685bdb141947311b3f)
commit f415c676a398923d23cdb7de68505d67c58eeef4
Author: joj <young2k15@tutanota.com>
Date: Wed Sep 10 18:15:05 2025 -0400
Enable VA-API extension for Intel GPUs if either i915 or xe is loaded
Xe module supports the discrete and new integrated GPUs (the Arc series) and
the i915 supports the older Intel integrated GPUs (Intel HD).
Closes: https://github.com/flatpak/flatpak/issues/5248
(cherry picked from commit f53cef00417955eebb0f3fecab82270097e2be15)
commit 4c5693b8923aa02ec9b53c32b2e4bc7622f56bb0
Author: Mary Strodl <ipadlover8322@gmail.com>
Date: Mon Oct 2 17:59:57 2023 -0400
common: support reinstall option on bundle installations
Fixes #2489
Adds and wires up a `reinstall` option to
`flatpak_dir_install_bundle`. Previously, bundle install
transactions would silently drop the reinstall flag.
(backported from commit 919d2922bf72bbbfab096d3b359be99d4ca4dd2d)
commit 159796af54778ca1df38836425520e6f0a221ac5
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Thu Aug 28 18:13:03 2025 +0200
oci: Actually only return the only manifest in get_only_manifest
Instead of using flatpak_oci_manifest_descriptor_get_ref which requires
the `org.opencontainers.image.ref.name` annotation, get any valid
manifest, and make sure to return NULL if there are multiple valid
manifests.
Closes: https://github.com/flatpak/flatpak/issues/6081
(cherry picked from commit 3773617f3054eeb3fc10476a29c24de6424d92db)
commit 3c007c97e200b96a67ab9057f4b8b39a0ba42946
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Thu Oct 30 21:08:02 2025 +0100
transaction: Handle --include-sdk if SDK is installed in other dir
If an SDK is already installed in a dir that is not targeted with a
flatpak transaction, and the transaction has auto_install_sdk set,
add_new_dep_op returns NULL in dep_op which is not correctly handled in
add_deps.
Fixes #5894
(cherry picked from commit c4af112df4d916ecb3bbd54786d00d41ec988ee9)
commit f98c5d1bc49562df70e3b41c23b90e0742fd0d18
Author: Chris Williams <chrisawign@gmail.com>
Date: Mon Jan 13 00:15:40 2025 -0500
dir: Also reload repo configuration after setting via system helper
Without doing so, flatpak_dir_get_config() won't reflect changes made
with flatpak_dir_set_config().
This fixes passing multiple patterns to `flatpak mask` for the system
installation.
Closes #5464
(cherry picked from commit a7ac4206c6042ac54c1c6a38a851d94ae6698c25)
commit 7127ef00d0e075781bedda11aacfbb8584a75c53
Author: bbhtt <bbhtt.zn0i8@slmail.me>
Date: Wed Oct 8 18:09:07 2025 +0530
utils-http: Fix an uninitialised variable warning
Fixes c75ba1c7e1587300be9a418116c02d0b6bf8b34e
```
In file included from /usr/lib/aarch64-linux-gnu/glib-2.0/include/glibconfig.h:9,
from /usr/include/glib-2.0/glib/gtypes.h:34,
from /usr/include/glib-2.0/glib/galloca.h:34,
from /usr/include/glib-2.0/glib.h:32,
from /usr/include/glib-2.0/gobject/gbinding.h:30,
from /usr/include/glib-2.0/glib-object.h:24,
from /usr/include/glib-2.0/gio/gioenums.h:30,
from /usr/include/glib-2.0/gio/giotypes.h:30,
from /usr/include/glib-2.0/gio/gio.h:28,
from ../common/flatpak-utils-http.c:23:
In function ‘glib_autoptr_clear_GFileEnumerator’,
inlined from ‘glib_autoptr_cleanup_GFileEnumerator’ at /usr/include/glib-2.0/gio/gio-autocleanups.h:69:1,
inlined from ‘flatpak_get_certificates_for_uri’ at ../common/flatpak-utils-http.c:284:34:
/usr/include/glib-2.0/glib/gmacros.h:1361:10: warning: ‘enumerator’ may be used uninitialized [-Wmaybe-uninitialized]
1361 | { if (_ptr) (cleanup) ((ParentName *) _ptr); } \
| ^
/usr/include/glib-2.0/glib/gmacros.h:1379:3: note: in expansion of macro ‘_GLIB_DEFINE_AUTOPTR_CLEANUP_FUNCS’
1379 | _GLIB_DEFINE_AUTOPTR_CLEANUP_FUNCS(TypeName, TypeName, func)
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/glib-2.0/gio/gio-autocleanups.h:69:1: note: in expansion of macro ‘G_DEFINE_AUTOPTR_CLEANUP_FUNC’
69 | G_DEFINE_AUTOPTR_CLEANUP_FUNC(GFileEnumerator, g_object_unref)
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~
../common/flatpak-utils-http.c: In function ‘flatpak_get_certificates_for_uri’:
../common/flatpak-utils-http.c:284:34: note: ‘enumerator’ was declared here
284 | g_autoptr(GFileEnumerator) enumerator;
```
(cherry picked from commit cd0212aa40247d8c02547679f0e3170634437426)
commit 5ef65d31ee7ea750b0184707808cf727f51bbf01
Author: Sebastian Wick <sebastian.wick@redhat.com>
Date: Thu Aug 21 20:39:39 2025 +0200
oci-registry: Fix leak by freeing certificates in finalize
(backported from commit 5a80ac679d0594591e417824846bf22c48892e16)
commit 228dfab479ee5a156e813833296eb7af0f6f828e
Author: taoky <me@taoky.moe>
Date: Tue Jan 14 02:08:50 2025 +0800
utils: Don't pass NULL remote to ostree_repo_get_remote_option
Fixes: #4662
(cherry picked from commit dd2a04f978596e1cadb2d862530ba4fe9acf0530)
commit c3c611ce19dec0873dd35d6a7de5c98b15814be2
Author: Michael Catanzaro <mcatanzaro@redhat.com>
Date: Tue Jun 24 16:36:50 2025 -0500
doc: update documentation of flatpak-spawn --watch-bus
The current documentation is misleading, and confused multiple
experienced developers for the past two years.
Fixes #5501
(cherry picked from commit 0152272d6caf2622536fad8869573a76001a493b)
commit a13fc5b72fb64e260b5ab0a89708435a305f1257
Author: Simon Chopin <simon.chopin@canonical.com>
Date: Wed Aug 27 17:56:12 2025 +0200
testlib: add expected argument to fcntl(F_DUPFD)
The F_DUPFD and its relative F_DUPFD_CLOEXEC both expect an int argument
as extra argument, being the minimal value for the new FD. This argument
must be within the accepted range (see ulimit -H -n).
This was detected in Ubuntu during testing against the latest glibc,
stracing resulted in:
107244 fcntl(1, F_DUPFD_CLOEXEC, 1847846346272) = -1 EINVAL (Invalid argument)
On the system in question (ppc64el machine running Ubuntu Questing), the
relevant limit is 524288.
For the fix we use 3 as a reasonable floor value, as in the first one
after stderr. It also happens to be the one used in revokefs/main.c.
Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/glibc/+bug/2121039
(cherry picked from commit 7399dea9603c30f142a45c3952626425dd91aca0)
commit d02c0bbec5060fff16133e908aaecb1e65d41b56
Author: Martin Schwenke <martin@meltin.net>
Date: Sun Jul 20 15:30:10 2025 +1000
session-helper: Avoid a memory leak
Apply the fix suggested more than a year ago in:
https://github.com/flatpak/flatpak/issues/5821#issuecomment-2121673464
Signed-off-by: Martin Schwenke <martin@meltin.net>
Fixes: https://github.com/flatpak/flatpak/issues/5821
(cherry picked from commit cd80e843435df5ce70d9a2b6710098135ceb9085)
commit 10469420e0bcee4f45ae63b350d76f383b2e4d73
Author: Luca Boccassi <luca.boccassi@gmail.com>
Date: Sun Oct 19 19:34:20 2025 +0100
Switch from adduser to dh-sequence-installsysusers
Upstream already ships a sysusers.d config file, just use it
with the dh addon instead of manually calling adduser in postinst
commit 378cb66230b2c8027aca580d99e9640caa28dd02
Author: Johannes Maibaum <jmaibaum@gmail.com>
Date: Sat Mar 1 14:30:30 2025 +0100
flatpak-build: Add empty /run/host/font-dirs.xml
flatpak run writes /run/host/font-dirs.xml, but flatpak build so far
didn't. This resulted in fontconfig writing:
Fontconfig error: Cannot load config file "/run/host/font-dirs.xml": No such file: /run/host/font-dirs.xml
to the stderr of all processes utilizing fontconfig and run during
flatpak build, as /run/host/font-dirs.xml is included via
/etc/fonts/50-flatpak.conf. This could cause issues for tests run during
building an application, for example.
Closes #6137
(cherry picked from commit 054f4f4a7b674067a8167fb2eed6e8d768852f94)
commit fef96436a3497e63021fe74f9eb1af1543242059
Author: Simon McVittie <smcv@collabora.com>
Date: Mon Sep 8 19:14:57 2025 +0100
Update NEWS
Signed-off-by: Simon McVittie <smcv@collabora.com>
commit b58fa8500a37ea57b46d47303fec56ad1d111c2f
Author: Piotr Drąg <piotrdrag@gmail.com>
Date: Wed Aug 27 17:36:14 2025 +0200
Update Polish translation
commit fd2049e0922b106ccd6b8e792a184b12ae39d383
Author: Georges Basile Stavracas Neto <georges.stavracas@gmail.com>
Date: Mon Sep 1 07:21:16 2025 -0300
ci: Add flatpak-1.16.x to branch allowlist
This lets CI run for the flatpak-1.16.x branch. Needs backporting to
fully work.
commit c8bd78dfb5899bc803f38221f1ff1763b35b4f9b
Author: Georges Basile Stavracas Neto <georges.stavracas@gmail.com>
Date: Sat May 10 23:44:21 2025 -0300
Post-release version bump
![[bug history graph]](https://qa.debian.org/data/bts/graphs/f/flatpak.png){kind=link}