## canonical/authd — v0.6.4…v0.7.0 _1198+ commits._ ### Features - **Add changelog entry for 0.7.0** (9de5295) - **e2e: Support provisioning VM with Copilot (#1984)** (a3848e8) - **Support archive-to-archive E2E migrations (#1930)** (91b03cd) - **e2e: support split migration baseline sources** (1eee8cb) - **e2e: Support archive-to-archive migrations** (b44d344) - **e2e: support explicit artifact and result paths** (7b971f9) - **e2e: support selecting source for system packages (#1911)** (03fe231) - **e2e: support selecting sources for authd and system packages** (3c54ffc) - **examplebroker: Always set the needed auth steps on new session (#1746)** (e397ca2) - **pam/integration-tests/native: Add test to authenticate MFA users multiple times** (b2bf24b) - **examplebroker: Always set the needed auth steps on new session** (18f2978) - **add context7.json to claim project** (603ba5c) ### Fixes - **e2e: Fix incorrect password prompt matched (#1987)** (6bde13c) - **e2e: Fix incorrect password prompt matched** (d4a277a) - **Fix e2e tests targeting stonking (#1988)** (ecc84bc) - **Keep vendored crate docs to fix `link-section` builds (#1977)** (891798a) - **Fix packaging change detection after artifact restore (#1974)** (ec2ce7b) - **Fix packaging change detection after artifact restore** (33993c8) - **e2e: Fix GNOME Shell not installed (#1969)** (ee817eb) - **e2e: Fix GNOME Shell not installed** (7729d85) - **Fix broker snap build with Snapcraft 9.1.1 (#1957)** (a6de2ca) - **snap: fix invalid shared-library prime glob** (9747d18) - **Fix trailing space** (a8be4f5) - **Redact Entra client secrets in bug reports (#1885)** (5e4b10c) - **Redact Entra client secrets in bug reports** (f724a24) - **Avoid bug reports for unknown Entra accounts (#1873)** (7c091d8) ### Backend - **Upload 0.7.0 to stonking** (1eb04e4) - **deps(rust): bump procfs from 0.17.0 to 0.18.0 (#1485)** (c2d6d71) - **Regenerate packaging files** (df9f079) - **e2e: choose a supported stable authd baseline** (f70652b) - **deps(rust): bump procfs from 0.17.0 to 0.18.0** (36b273d) - **Poll VM state without sudo** (cb33a9e) - **Skip sudo preflight in agent harnesses** (df40bea) - **deps(rust): bump the minor-updates group across 1 directory with 3 updates (#1965)** (8fb4a09) - **Vendor-doc filtering breaks link-section compilation** (a8b08ec) - **Regenerate packaging files** (301f21d) - **Debian builds: generate Rust metadata with Devel dh-cargo (#1966)** (81143cf) - **deps(rust): bump the minor-updates group across 1 directory with 3 updates** (1e8a411) - **Noble-generated Rust metadata breaks newer package builds** (234e83d) - **e2e: also record apt policy of yaru in test logs (#1975)** (0b4b0fb) - **e2e: fall back to PR event body on API errors** (7064cca) - **deps(submodule): bump e2e-tests/.yarf from `4a93842` to `b7204cf` (#1847)** (dd0f176) - **e2e: also record apt policy of yaru in test logs** (d0e7321) - **e2e: Log apt policies after migration** (cc735c3) - **Reduce OCR confidence threshold for GDM Username/Password fields** (6e3ed0e) - **e2e: Make rebooting VM during authd provisioning more robust (#1952)** (1e3f028) - **e2e: invalidate stable snapshots when sources change** (4c725af) - **Stop the e2e VM after passing tests (#1972)** (9f7118b) - **Improve GDM OCR readability on newer Ubuntu releases** (530e914) - **Make e2e tests easier to execute by agents (#1970)** (e7ccc3e) - **Stop the e2e VM after passing tests** (1369e7f) - **deps(submodule): bump e2e-tests/.yarf from `4a93842` to `b7204cf`** (2cb7c95) - **e2e: Reuse VM config from main worktree** (6f61a05) - **Prevent empty packaging regeneration commits (#1967)** (14d5ab3) - **e2e: keep resolute GNOME Shell available with stale PPA** (b31e96f) - **debian: Allow newer GNOME Shell versions on Resolute (#1950)** (fb6f5b0) - **Prevent empty packaging regeneration commits** (c9bb245) - **pam/gdm: serialize challenge setup with GDM stage (#1904)** (b313592) - **broker: avoid offering an unusable local security key (#1939)** (3c79d7d) - **e2e: cover FIDO TAP fallback** (8dfd266) - **debian: Allow newer GNOME Shell versions on Resolute** (07ad764) - **Temporarily bump libhimmelblau gitlink for password capability** (d92082d) - **broker: route FIDO challenges by available auth methods** (dc0227c) - **e2e: cover FIDO password fallback** (99c13a4) - **broker: bound canceled FIDO pre-flight** (04a7c3b) - **broker: verify local FIDO credentials before touch** (96ee717) - **broker: clarify local security-key prompts** (42c4633) - **broker: offer Entra password beside local FIDO** (00d1050) - **e2e: Treat an already stopped VM as shut down** (c026b4d) - **e2e: Poll VM state with supported virsh commands** (c861ed9) - **debian: Allow newer GNOME Shell versions on Resolute** (8650cfa) - **e2e: Make rebooting VM during authd provisioning more robust** (c427398) - **e2e: Upgrade gnome-shell from the selected PPA (#1949)** (7931b64) - **e2e: Upgrade gnome-shell from the selected PPA** (41386b3) - **Rewrap e2e-tests/TESTING.md to 80 char line length** (77d3f90) - **deps(submodule): bump authd-oidc-brokers/third_party/libhimmelblau from `48374c5` to `c619760` (#1938)** (655a6e7) - **deps(submodule): bump authd-oidc-brokers/third_party/libhimmelblau** (b6c2627) - **update incomplete logging guide** (d641c31) - **e2e: Test unlocking lock screen with password (#1918)** (5ccd26d) - **pam/gdm: work around PAM_MAXTRIES until GNOME Shell is fixed (#1919)** (a7d306e) - **Retry transient Entra authentication failures (#1874)** (fcfea92) - **Keep transient Entra retries bounded and cancellation-safe** (d93c3e1) - **Return cancellation after interrupted Entra initiation** (b6652e9) - **Retry transient Entra MFA initialization failures** (f8a1fe3) - **Keep transient Entra failures from denying logins** (f1799c6) - **e2e: select Ubuntu releases from PR descriptions (#1923)** (e8b2bb7) - **e2e: select Ubuntu releases from PR descriptions** (156235b) - **e2e: Rename "ubuntu-version" to "ubuntu-release"** (0e4766d) - **e2e: record installed package versions in test logs (#1913)** (55d1dd1) - **e2e: record installed package versions in test logs** (bc02afa) - **Work around GDM PAM_MAXTRIES until GNOME Shell is fixed** (951136f) - **Keep GDM terminal failures on one message path** (3d05060) - **Prevent duplicate GDM max-tries errors** (36918c1) - **broker: prevent AADSTS700025 on Entra device-code refresh (#1882)** (4e5e1e3) - **e2e: Test unlocking lock screen with password** (45f5a09) - **e2e: allow selecting individual Robot test cases (#1910)** (e4aaa35) - **e2e: check GDM user shell (#1917)** (aef7b9d) - **e2e: check GDM user shell** (1f9f8ac) - **broker: prevent AADSTS700025 on Entra device-code refresh** (ba48cd0) - **e2e-tests: keep recordings distinct per test case (#1905)** (36476c9) - **Avoid warning for unrelated D-Bus interfaces (#1907)** (24cced7) - **Make authctl home removal flag more clear (#1895)** (c81c462) - **Clarify authctl home removal flag** (ddf4e5d) - **e2e: document repeatable suite selection markers** (b743420) - **e2e: select Robot test cases from PR descriptions** (9144a22) - **e2e: allow selecting individual Robot tests** (e0622e8) - **Ensure cargo-c update commits are verified (#1897)** (34c8986) - **e2e-tests: keep recordings distinct per test case** (9321b41) - **Avoid warning for unrelated D-Bus interfaces** (a37279a) - **pam/gdm: serialize challenge setup with GDM stage** (ed7d25c) - **Ensure cargo-c update commits are verified** (5e77196) - **deps(go): bump the minor-updates group across 1 directory with 4 updates (#1887)** (07bc3f1) - **Regenerate packaging files** (bc7d9e3) - **deps(go): bump the minor-updates group across 1 directory with 4 updates** (51df91d) - **Require verified signatures for generated packaging commits (#1889)** (23de702) - **Require verified signatures for generated packaging commits** (fc07947) - **Preserve UTF-8 copyright holders in packaging CI (#1867)** (ee0af52) - **Preserve UTF-8 copyright holders in packaging CI** (89ff1fc) - **Document SSH key bypass for locked users (#1878)** (6319b2b) - **Redact client IDs with flexible INI spacing** (221b1d4) - **Handle flexible INI spacing in secret redaction** (e70bb1a) - **Speed up package installs in Dependabot workflow** (f073321) - **Document packaging job dependency rationale** (b4212ef) - **Avoid refreshing apt indexes twice in packaging workflow** (54184d3) - **deps(submodule): bump authd-oidc-brokers/third_party/libhimmelblau from `0e60f2b` to `48374c5` (#1880)** (6c980b4) - **deps(submodule): bump authd-oidc-brokers/third_party/libhimmelblau** (7ada9fb) - **Document SSH key bypass for locked users** (af601fd) - **Deny login for non-existent Entra accounts instead of an error** (c1de353) - **deps(submodule): bump authd-oidc-brokers/third_party/libhimmelblau from `eda382f` to `0e60f2b` (#1875)** (93ccecf) - **deps(submodule): bump authd-oidc-brokers/third_party/libhimmelblau** (0d474d3) - **Document safe removal of authd users (#1872)** (713af10) - **reorganize docs homepage** (0fbe1bf) - **e2e: prevent browser login from submitting partial text (#1869)** (8edbba8) - **Document safe removal of authd users** (1c60069) - **Improve error behavior when broker fails to start (#1832)** (b62bfd3) - **Classify broker initialization failures as unavailable** (ddc9832) ### Docs - **docs: recommend synctest for time-based tests (#1956)** (fa4a92d) - **docs: recommend synctest for time-based tests** (650487a) - **docs: update incomplete logging guide (#1937)** (7072c2d) - **docs: add context7.json to claim project (#1936)** (4ed6fbb) - **docs: clarify Entra password and `libpwquality` scope (#1891)** (9f50ab9) - **docs: clarify Entra password and `libpwquality` scope** (207a08f) - **docs: Correct spelling in SSH login documentation (#1876)** (e64cf73) - **docs: Correct spelling in SSH login documentation** (41ca4f8) - **docs: reorganize homepage (#1857)** (8ed8a67) - **docs: update architecture diagram (#1856)** (7dc528b) ### Chore - **ci: Avoid cancelling manually triggered e2e runs (#1981)** (7cc8af3) - **ci: Avoid cancelling manually triggered e2e runs** (bfac322) - **ci(e2e): stop running Google broker by default (#1908)** (544718b) - **ci(e2e): stop running Google broker by default** (e151d8b) _Recap by [Repo Wrapped](https://repowrapped.com/gh/canonical/authd?utm_source=github-action)._