Release 2025.8

[jmarrero]

Colin Walters (7):
      tree-wide: Run clang-format with clang 20.1.3
      test-container: Update for F42
      tests: Drop testing of ostree-container
      tests/container-image: Rework to handle container base
      tests/cached-sigs: Fix to handle container refspec by default
      tests: Drop override-kernel
      tests/override-replace-2: Update to support f42

Iain Collins (1):
      daemon/transaction-types: pass an empty dictionary instead of NULL to change_origin_refspec

Jonathan Lebon (19):
      treefile: Support inlined conditional includes
      treefile-apply: Add `--var` option
      treefile-apply: Handle `repos` key
      treefile-apply: Enable versionlock plugin when running dnf
      treefile-apply: Tweak `versionlock` hack
      core: Move sysusers docstring to the Rust side
      rust/core: Drop unnecessary Vec
      core: Process ostree layers before running sysusers
      core: Ignore replaced files in rpmdb write transaction
      core: Drop unused variable
      tests/compose: Bump f-c-c commit to f42
      tests/compose: Disable basic test
      tests/compose: Adapt for latest alternatives changes
      tests/compose: Temporarily disable ima test
      tests/compose: Better override opt-usrlocal
      rust/treefile: Fix edition defaulting
      testutils: Stop trying to mutate binaries in /usr/sbin
      libvm: Handle container case when changing refspec to vmcheck
      tests/kolainst: update client-layering-upgrade for f42

Joseph Marrero Corchado (3):
      ci: update cargo-deny-action
      deny.toml: allow LGPL-2.1-or-later WITH GCC-exception-2.0
      Release 2025.8

Timothée Ravier (2):
      rust/src/compose: Show full comment in command line help
      rust/src/compose: Add max-layers opt to compose image

New Contributors

• @IainCollins262 made their first contribution in 5c789dc

Full Changelog: v2025.7...v2025.8

[jmarrero]

/test images

[cgwalters]

The CI failure is just fallout I think from us having hardcoded package versions. It continually bites us. I'm fine to merge over red.
/override continuous-integration/jenkins/pr-merge

[openshift-ci]

@cgwalters: Overrode contexts on behalf of cgwalters: continuous-integration/jenkins/pr-merge

Details

In response to this:

The CI failure is just fallout I think from us having hardcoded package versions. It continually bites us. I'm fine to merge over red.
/override continuous-integration/jenkins/pr-merge

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.