release: 2.75

maykathm · maykathm · commit 465ba7a915ed · 2026-03-10T10:15:38.000+01:00
diff --git a/NEWS.md b/NEWS.md
@@ -1,3 +1,66 @@
+# New in snapd 2.75
+* FDE: run early boot check only once per boot
+* FDE: update secboot to revision 77bc2457cc76
+* FDE: add degraded state for status API
+* FDE: prevent resealing tasks from running together
+* FDE: enable using keyslot tokens to store protected keys for UC26+
+* FDE: Early commit kcmdline config transaction in update-gadget-cmdline to mitigate possible race condition
+* FDE: Ensure extra snapd kcmdline fragments are applied
+* LP: #2137543 Disable translations in formatted output for snapctl services
+* LP: #2142655 improve snap size reporting precision
+* LP: #2141461 allow s-u-n to read /proc/pid/auxv
+* Interfaces: allow xen blockdevs
+* Interfaces: add Tokey 3 FIDO to u2f-devices
+* Interfaces: add devlxd interface
+* Interfaces: allow reading pressure stall info in browser_support
+* Interfaces: allow kerberos-tickets to write to cache
+* Interfaces: expand permissions for network-setup-control
+* Interfaces: allow desktop to access kvantum, lxqt, and gtk4 config files
+* Interfaces: allow fd listing for system_observe
+* Interfaces: add ubuntu-pro-control
+* Prompting: add API endpoint to ask whether application should have access
+* Prompting: add support for audio-record prompting via API endpoint
+* Prompting: store snap name instead of apparmor label in requests
+* Prompting: respond with 503 to API requests when prompting subsystem is shutting down
+* Prompting: generalize prompting subsystem to support requests from outside AppArmor
+* Confdb: unset data for missing paths in set request
+* Confdb: return 400 on missing filter constraints
+* Confdb: add constraint placeholders validity check
+* Confdb: support typed constraints in confdb filtering
+* Confdb: fixed unmarshalling transaction with placeholder path in deltas
+* Remote device management: add skeleton device management manager
+* Remote device management: add message exchange loop
+* configcore: new option to set a message of the day
+* libsnap-confine-private: improve data handling error
+* snap-bootstrap: use libblkid for disk information to speed up boot
+* snap-confine: remove race condition triggered by hat profile
+* snap-confine: use ld cache from the app base for core26+
+* snap: add riscv detection for snaps
+* squashfs: reduce memory footprint
+* Add snap component command
+* Add snap delta format
+* Add component summary to snap info
+* Enable early download of seed snaps during refresh
+* Enable parallel downloads of essential snaps during refresh
+* Disallow removing components required by validation sets
+* Enforce validation sets when installing components
+* Fail on --validation=ignore if model has enforced validation-sets
+* Fix account for NFS home during removal without purge and error early
+* Fix correctly handling interrupted snap downloads
+* Fix handling of store throttling for refresh-app-awareness monitored snaps
+* Preserve stale connections of broken snaps
+* Refresh confdb-schema assertions also during manual refresh
+* Stop removed "endure" services on refresh
+* Install by default from the initramfs for UC26+, removing the need for a reboot after installation
+* Keep minidebuginfo in snapd snap
+* Opportunistic discarding of mount namespace when updating slot providers
+* Remove ensure-validation-sets need for network
+* Remove old secboot activation API calls
+* Require systemd-tracking for snaps based on core26+ and improve messaging around tracking
+* Skip 70-snap.*.rules when building dracut initramfs
+* Support for delaying updates of snap mount namespaces when refreshing slot providers
+* Use application CommonID as default source for desktop ID
+
 # New in snapd 2.74.1
 * FDE: measure DeployedMode and AuditMode variables if they appear as disabled in the event log to avoid a potential reseal-failure boot loop
 * LP: #2141328 FDE: reuse preinstall check context during install to account for user-ignored errors
diff --git a/packaging/arch/PKGBUILD b/packaging/arch/PKGBUILD
@@ -11,7 +11,7 @@ pkgdesc="Service and tools for management of snap packages."
 depends=('squashfs-tools' 'libseccomp' 'libsystemd' 'libcap' 'apparmor')
 optdepends=('bash-completion: bash completion support'
             'xdg-desktop-portal: desktop integration')
-pkgver=2.74.1
+pkgver=2.75
 pkgrel=1
 arch=('x86_64' 'i686' 'armv7h' 'aarch64')
 url="https://github.com/snapcore/snapd"
diff --git a/packaging/debian-sid/changelog b/packaging/debian-sid/changelog
@@ -1,3 +1,83 @@
+snapd (2.75-1) unstable; urgency=medium
+
+  * New upstream release, LP: #2143747
+    - FDE: run early boot check only once per boot
+    - FDE: update secboot to revision 77bc2457cc76
+    - FDE: add degraded state for status API
+    - FDE: prevent resealing tasks from running together
+    - FDE: enable using keyslot tokens to store protected keys for UC26+
+    - FDE: Early commit kcmdline config transaction in update-gadget-
+      cmdline to mitigate possible race condition
+    - FDE: Ensure extra snapd kcmdline fragments are applied
+    - LP: #2137543 Disable translations in formatted output for snapctl
+      services
+    - LP: #2142655 improve snap size reporting precision
+    - LP: #2141461 allow s-u-n to read /proc/pid/auxv
+    - Interfaces: allow xen blockdevs
+    - Interfaces: add Tokey 3 FIDO to u2f-devices
+    - Interfaces: add devlxd interface
+    - Interfaces: allow reading pressure stall info in browser_support
+    - Interfaces: allow kerberos-tickets to write to cache
+    - Interfaces: expand permissions for network-setup-control
+    - Interfaces: allow desktop to access kvantum, lxqt, and gtk4 config
+      files
+    - Interfaces: allow fd listing for system_observe
+    - Interfaces: add ubuntu-pro-control
+    - Prompting: add API endpoint to ask whether application should have
+      access
+    - Prompting: add support for audio-record prompting via API endpoint
+    - Prompting: store snap name instead of apparmor label in requests
+    - Prompting: respond with 503 to API requests when prompting
+      subsystem is shutting down
+    - Prompting: generalize prompting subsystem to support requests from
+      outside AppArmor
+    - Confdb: unset data for missing paths in set request
+    - Confdb: return 400 on missing filter constraints
+    - Confdb: add constraint placeholders validity check
+    - Confdb: support typed constraints in confdb filtering
+    - Confdb: fixed unmarshalling transaction with placeholder path in
+      deltas
+    - Remote device management: add skeleton device management manager
+    - Remote device management: add message exchange loop
+    - configcore: new option to set a message of the day
+    - libsnap-confine-private: improve data handling error
+    - snap-bootstrap: use libblkid for disk information to speed up boot
+    - snap-confine: remove race condition triggered by hat profile
+    - snap-confine: use ld cache from the app base for core26+
+    - snap: add riscv detection for snaps
+    - squashfs: reduce memory footprint
+    - Add snap component command
+    - Add snap delta format
+    - Add component summary to snap info
+    - Enable early download of seed snaps during refresh
+    - Enable parallel downloads of essential snaps during refresh
+    - Disallow removing components required by validation sets
+    - Enforce validation sets when installing components
+    - Fail on --validation=ignore if model has enforced validation-sets
+    - Fix account for NFS home during removal without purge and error
+      early
+    - Fix correctly handling interrupted snap downloads
+    - Fix handling of store throttling for refresh-app-awareness
+      monitored snaps
+    - Preserve stale connections of broken snaps
+    - Refresh confdb-schema assertions also during manual refresh
+    - Stop removed "endure" services on refresh
+    - Install by default from the initramfs for UC26+, removing the need
+      for a reboot after installation
+    - Keep minidebuginfo in snapd snap
+    - Opportunistic discarding of mount namespace when updating slot
+      providers
+    - Remove ensure-validation-sets need for network
+    - Remove old secboot activation API calls
+    - Require systemd-tracking for snaps based on core26+ and improve
+      messaging around tracking
+    - Skip 70-snap.*.rules when building dracut initramfs
+    - Support for delaying updates of snap mount namespaces when
+      refreshing slot providers
+    - Use application CommonID as default source for desktop ID
+
+ -- Katie May <katie.may@canonical.com>  Mon, 09 Mar 2026 17:10:13 +0100
+
 snapd (2.74.1-1) unstable; urgency=medium
 
   * New upstream release, LP: #2138629
diff --git a/packaging/fedora/snapd.spec b/packaging/fedora/snapd.spec
@@ -114,7 +114,7 @@
 %endif
 
 Name:           snapd
-Version:        2.74.1
+Version:        2.75
 Release:        0%{?dist}
 Summary:        A transactional software package manager
 License:        GPL-3.0-only
@@ -1009,6 +1009,83 @@ fi
 %endif
 
 %changelog
+* Mon Mar 09 2026 Katie May <katie.may@canonical.com>
+- New upstream release 2.75
+ - FDE: run early boot check only once per boot
+ - FDE: update secboot to revision 77bc2457cc76
+ - FDE: add degraded state for status API
+ - FDE: prevent resealing tasks from running together
+ - FDE: enable using keyslot tokens to store protected keys for UC26+
+ - FDE: Early commit kcmdline config transaction in update-gadget-
+   cmdline to mitigate possible race condition
+ - FDE: Ensure extra snapd kcmdline fragments are applied
+ - LP: #2137543 Disable translations in formatted output for snapctl
+   services
+ - LP: #2142655 improve snap size reporting precision
+ - LP: #2141461 allow s-u-n to read /proc/pid/auxv
+ - Interfaces: allow xen blockdevs
+ - Interfaces: add Tokey 3 FIDO to u2f-devices
+ - Interfaces: add devlxd interface
+ - Interfaces: allow reading pressure stall info in browser_support
+ - Interfaces: allow kerberos-tickets to write to cache
+ - Interfaces: expand permissions for network-setup-control
+ - Interfaces: allow desktop to access kvantum, lxqt, and gtk4 config
+   files
+ - Interfaces: allow fd listing for system_observe
+ - Interfaces: add ubuntu-pro-control
+ - Prompting: add API endpoint to ask whether application should have
+   access
+ - Prompting: add support for audio-record prompting via API endpoint
+ - Prompting: store snap name instead of apparmor label in requests
+ - Prompting: respond with 503 to API requests when prompting
+   subsystem is shutting down
+ - Prompting: generalize prompting subsystem to support requests from
+   outside AppArmor
+ - Confdb: unset data for missing paths in set request
+ - Confdb: return 400 on missing filter constraints
+ - Confdb: add constraint placeholders validity check
+ - Confdb: support typed constraints in confdb filtering
+ - Confdb: fixed unmarshalling transaction with placeholder path in
+   deltas
+ - Remote device management: add skeleton device management manager
+ - Remote device management: add message exchange loop
+ - configcore: new option to set a message of the day
+ - libsnap-confine-private: improve data handling error
+ - snap-bootstrap: use libblkid for disk information to speed up boot
+ - snap-confine: remove race condition triggered by hat profile
+ - snap-confine: use ld cache from the app base for core26+
+ - snap: add riscv detection for snaps
+ - squashfs: reduce memory footprint
+ - Add snap component command
+ - Add snap delta format
+ - Add component summary to snap info
+ - Enable early download of seed snaps during refresh
+ - Enable parallel downloads of essential snaps during refresh
+ - Disallow removing components required by validation sets
+ - Enforce validation sets when installing components
+ - Fail on --validation=ignore if model has enforced validation-sets
+ - Fix account for NFS home during removal without purge and error
+   early
+ - Fix correctly handling interrupted snap downloads
+ - Fix handling of store throttling for refresh-app-awareness
+   monitored snaps
+ - Preserve stale connections of broken snaps
+ - Refresh confdb-schema assertions also during manual refresh
+ - Stop removed "endure" services on refresh
+ - Install by default from the initramfs for UC26+, removing the need
+   for a reboot after installation
+ - Keep minidebuginfo in snapd snap
+ - Opportunistic discarding of mount namespace when updating slot
+   providers
+ - Remove ensure-validation-sets need for network
+ - Remove old secboot activation API calls
+ - Require systemd-tracking for snaps based on core26+ and improve
+   messaging around tracking
+ - Skip 70-snap.*.rules when building dracut initramfs
+ - Support for delaying updates of snap mount namespaces when
+   refreshing slot providers
+ - Use application CommonID as default source for desktop ID
+
 * Thu Feb 12 2026 Ernest Lotter <ernest.lotter@canonical.com>
 - New upstream release 2.74.1
  - FDE: measure DeployedMode and AuditMode variables if they appear
diff --git a/packaging/opensuse/snapd.changes b/packaging/opensuse/snapd.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Mar 09 16:10:13 UTC 2026 - katie.may@canonical.com
+
+- Update to upstream release 2.75
+
 -------------------------------------------------------------------
 Thu Feb 12 19:27:23 UTC 2026 - ernest.lotter@canonical.com
 
diff --git a/packaging/opensuse/snapd.spec b/packaging/opensuse/snapd.spec
@@ -100,7 +100,7 @@
 
 
 Name:           snapd
-Version:        2.74.1
+Version:        2.75
 Release:        0
 Summary:        Tools enabling systems to work with .snap files
 License:        GPL-3.0
diff --git a/packaging/ubuntu-16.04/changelog b/packaging/ubuntu-16.04/changelog
@@ -1,3 +1,83 @@
+snapd (2.75) xenial; urgency=medium
+
+  * New upstream release, LP: #2143747
+    - FDE: run early boot check only once per boot
+    - FDE: update secboot to revision 77bc2457cc76
+    - FDE: add degraded state for status API
+    - FDE: prevent resealing tasks from running together
+    - FDE: enable using keyslot tokens to store protected keys for UC26+
+    - FDE: Early commit kcmdline config transaction in update-gadget-
+      cmdline to mitigate possible race condition
+    - FDE: Ensure extra snapd kcmdline fragments are applied
+    - LP: #2137543 Disable translations in formatted output for snapctl
+      services
+    - LP: #2142655 improve snap size reporting precision
+    - LP: #2141461 allow s-u-n to read /proc/pid/auxv
+    - Interfaces: allow xen blockdevs
+    - Interfaces: add Tokey 3 FIDO to u2f-devices
+    - Interfaces: add devlxd interface
+    - Interfaces: allow reading pressure stall info in browser_support
+    - Interfaces: allow kerberos-tickets to write to cache
+    - Interfaces: expand permissions for network-setup-control
+    - Interfaces: allow desktop to access kvantum, lxqt, and gtk4 config
+      files
+    - Interfaces: allow fd listing for system_observe
+    - Interfaces: add ubuntu-pro-control
+    - Prompting: add API endpoint to ask whether application should have
+      access
+    - Prompting: add support for audio-record prompting via API endpoint
+    - Prompting: store snap name instead of apparmor label in requests
+    - Prompting: respond with 503 to API requests when prompting
+      subsystem is shutting down
+    - Prompting: generalize prompting subsystem to support requests from
+      outside AppArmor
+    - Confdb: unset data for missing paths in set request
+    - Confdb: return 400 on missing filter constraints
+    - Confdb: add constraint placeholders validity check
+    - Confdb: support typed constraints in confdb filtering
+    - Confdb: fixed unmarshalling transaction with placeholder path in
+      deltas
+    - Remote device management: add skeleton device management manager
+    - Remote device management: add message exchange loop
+    - configcore: new option to set a message of the day
+    - libsnap-confine-private: improve data handling error
+    - snap-bootstrap: use libblkid for disk information to speed up boot
+    - snap-confine: remove race condition triggered by hat profile
+    - snap-confine: use ld cache from the app base for core26+
+    - snap: add riscv detection for snaps
+    - squashfs: reduce memory footprint
+    - Add snap component command
+    - Add snap delta format
+    - Add component summary to snap info
+    - Enable early download of seed snaps during refresh
+    - Enable parallel downloads of essential snaps during refresh
+    - Disallow removing components required by validation sets
+    - Enforce validation sets when installing components
+    - Fail on --validation=ignore if model has enforced validation-sets
+    - Fix account for NFS home during removal without purge and error
+      early
+    - Fix correctly handling interrupted snap downloads
+    - Fix handling of store throttling for refresh-app-awareness
+      monitored snaps
+    - Preserve stale connections of broken snaps
+    - Refresh confdb-schema assertions also during manual refresh
+    - Stop removed "endure" services on refresh
+    - Install by default from the initramfs for UC26+, removing the need
+      for a reboot after installation
+    - Keep minidebuginfo in snapd snap
+    - Opportunistic discarding of mount namespace when updating slot
+      providers
+    - Remove ensure-validation-sets need for network
+    - Remove old secboot activation API calls
+    - Require systemd-tracking for snaps based on core26+ and improve
+      messaging around tracking
+    - Skip 70-snap.*.rules when building dracut initramfs
+    - Support for delaying updates of snap mount namespaces when
+      refreshing slot providers
+    - Use application CommonID as default source for desktop ID
+
+ -- Katie May <katie.may@canonical.com>  Mon, 09 Mar 2026 17:10:13 +0100
+
 snapd (2.74.1) xenial; urgency=medium
 
   * New upstream release, LP: #2138629
