5.5
- kas: Make sure to always warn about abbreviated git commit hashes (GHSA-6p9r-86f2-f954)
- kas: Fail if read-back commit sha is deviating from specified one (GHSA-6p9r-86f2-f954)
- kas: Add support for hash equivalence servers
- kas: Make colorlog a mandatory dependency
- kas: Add kas-wide support for NO_COLOR env var or --no-color option
- kas-container: add kvm passthrough argument option
- kas-container: Ship kas-container script with container again
- kas-container: Account for race during binfmt_misc setup, specifically in CI
- kas-container: Restore appending to runtime-args on repeated usage
- kas-container: Fix subuid/subgid range computation for isar-rootless mode
- docs: Improve setup description for kas-container
- docs: Add host kernel version dependency for isar-rootless
- docs: Refer to subcommands as commands, rather than plugins
- release: Stop signing pip packages, PyPI does not support that anymore

5.4
- kas: only disable ssh host key checking in CI environments (CVE-2026-54548)
- kas: add support for isar-rootless build system
- kas: allow overriding the url property
- kas: allow overrides to remove commit ID
- kas: consistently use openembedded as default build_system
- kas: Suppress unpinned repo warnings when running lock plugin
- kas: Do not warn about unpinned local repos
- kas: Do not warn about unpinned repos on enforced update
- kas: Avoid GPG warning on check if key is cached
- kas-container: add git credential cache socket support
- kas-container: let buildsystem set via CLI take precedence
- kas-container: Prefer podman over docker for new isar-rootless build mode
- kas-container: Fail container start if binfmt_misc cannot be initialized
- kas-container: Drop support for loop device
- kas-container: show --help also in absence of container engine
- kas-container: Avoid directory creations for only showing --help
- kas-container: Ensure that --runtime-args are always appended last
- docs: Fold Command Line Usage section into User Guide

5.3
- kas: git: Avoid checking out sha-like branches as commits (CVE-2026-47191)
- kas: verify signatures prior to checkout (CVE-2026-47192)
- kas: strip credentials from attestation also if token is used
- kas: ensure _source_dir is only set from main config file
- kas: ensure git-clone path is not processed as option
- kas: drop never correctly support for absolute include path
- kas: limit include path traversals to repository
- kas: Warn about repos with branches but without commit or lock file
- kas: create a CACHEDIR.TAG in the kas build directory
- kas: add Arch Linux to supported distros for locale settings
- kas: schema: switch default distro to nodistro
- kas: schema: enforce signer config constraints via schema
- kas: dump: Use 2 spaces as indention in generated yaml
- kas: Properly convert error list to string prior to output
- kas: improve printing of os version
- kas-container: do not construct image name if providing KAS_CONTAINER_IMAGE
- kas-container: Fix podman detection
- kas-container: do not process locale aliases
- kas-container: query system docker path in isar mode, not assuming it
- docs: Document a simpler way to disable layers in a repo
- docs: Clarify environment variable handling
- release: Publish both source and wheel to PyPI

5.2
- kas: Add support for layer priorities
- kas: Add support for AWS SSO login credentials
- kas: Allow to specify commits via id of annotated tags as well
- kas: Avoid unneeded commit ID updates in lockfiles
- kas: Catch error when updating an invalid commit in a lockfile
- kas: Disable terminal prompts in git
- kas: Improve error logging on failed fetches
- kas: Avoid redundant error logging of invoked commands
- kas: Improve error logging of failed for_all_repos commands
- docs: Add community support section to getting started guide
- docs: Show schema defaults that evaluate to false
- docs: Show allowed integer ranges in the schema
- ci: Fix pushing of latest container tag on releases

5.1
- kas: use DL_DIR environment variable on cleanall
- kas: Print distro name and version on startup
- kas-container: Install binfmts for qemu manually
- kas-container: add custom git path to safedirs
- kas-container: restore debian sources list after installation
- docs: Update installation instructions
- docs: add missing property to buildtools examples

5.0
- kas: introduce buildtools support
- kas: Allow branch override
- kas: Dump output of init-build-env scripts at debug log-level
- kas: fail on fetch errors, rather than warn and continue
- kas: only fetch repos on update if commit is not pinned
- kas: call sudo only once in ISAR mode of clean plugin
- kas: avoid redundant diff output of filename
- kas: print commit log on lock update
- kas-container: Provide images based on both Debian 12 and 13
- kas-container: allow to select specific image distribution
- kas-container: add support for KAS_BUILDTOOLS_DIR
- kas-container: add partial support for run0
- docs: add oe-core nodistro example

4.8.2
- kas: clean: avoid creation of tmp data to recover from full-disk scenario
- kas: avoid duplicate creations of tmpdir
- kas-container: fix host timezone propagation, resolving yocto breakage
- kas-container: restore git safe.directory exception outside of kas for GitLab CI
- kas-container: avoid collision of internal vars with environment
- kas-container: fallback to xterm if a TERM value is not supported
- docs: precisely describe where SHELL env var is in effect
- docs: add note on YAML support and its limitations
- docs: remove GnuPG limitation of repo verification
- docs: sphinx_kas_schema.py: support numbers in regex

4.8.1
- kas-container: Update new version variable on release, fixing mismatch in 4.8

4.8
- kas: Add diff plugin to compare config files and repos
- kas: add support to verify signatures of git repos
- kas: add support for distributed lock file updates
- kas: add purge command to remove all managed data
- kas: add support for NPMRC_FILE environment variable
- kas: GitLab CI: add git safe dir for project root
- kas: Lift minimal Python version to 3.9
- kas: drop overrides from output of dump when using --resolve-refs
- kas: inject current version of kas into config dumps
- kas: enforce allowed values for layer enabling/disabling
- kas: deprecate various magic values to disable a layer
- kas: consistently check for the validity of path provided via env vars
- kas: skip shallow cloning for reference repos
- kas: improve reporting of yaml format errors
- kas: truly make kconfiglib a weak dependency
- kas: fix output on patching errors
- kas: perform packaging via pyproject.toml
- kas-container: add limited support for docker rootless
- kas-container: propagate timezone information into container
- kas-container: warn if script version does not match container
- kas-container: prepare for looser coupling of script and container versions
- kas-container: install python3-cairo for pybootchartgui support
- kas-container: add bubblewrap package to kas-isar
- kas-container: do not ship kas-container script within the container
- kas-container: do not ship unneeded artifacts of kas repository
- docs: precisely describe how config files are merged
- docs: make documentation of project layout more precise
- docs: specify envs that are processed prior to reading the config

4.7
- kas: preserve history across shell plugin invocations
- kas: adjust/improve dirty repo detection
- kas: only sort keys in dump plugin output if explicitly requested
- kas: ensure consistent config ordering in dump output
- kas: enforce maximum header version when merging configs
- kas: only include config in attestation if not tracked
- kas: fix repo type identifier for mercurial in attestations
- kas: improve annotation of kas-generated repo commits
- kas: improve schema validation error messages
- kas: show both commit ids in error message on tag commit mismatch
- kas-container: do not create KAS_WORK_DIR
- kas-container: add support for git worktrees
- kas-container: add support for Ubuntu 24.04 hosts
- kas-container: account for lock plugin in container entrypoint
- kas-container: make AWS_WEB_IDENTITY_TOKEN_FILE errors more precise
- docs: document rules for provided directories
- docs: describe steps needed to add a new plugin
- docs: auto add enum values of schema node

4.6
- kas: move lock file handling to new lock plugin
- kas: add support for running inside vscode devcontainer
- kas: keep repos in their current state when using -k
- kas: permit kas config snippets in git submodules of main repo
- kas: do not apply patches to unclean repos
- kas: GitLab CI: allow ssh config adjustments in more cases
- kas: add override to remove default tag or branch
- kas: order layers by repo and layer name in bblayers.conf
- kas: deprecate non full-length digests for git repos
- kas: mercurial: create valid branch names on patching
- kas: attestation: make repo digest sha256-aware
- kas: make version property in json schema more strict
- kas: fix repo processing in the presence of identical names
- kas: fix resource leaks on command execution error
- kas: fix/improve event loop and termination handling
- kas: Drop -d option
- kas-container: Drop already deprecated -d and -v options
- kas-container: gracefully handle rate-limits of snapshot.d.o
- docs: document kas-container command
- docs: enhance json schema with descriptions
- docs: kas-container: document how to select image
- docs: add note about snack test dependency

4.5
- kas: avoid bitbake parsing due to non-deterministic layer patches
- kas: correctly handle upstream ff merges on fetch
- kas: keep git committer identity if provided in .gitconfig
- kas: add support for container registry authentication
- kas: Improve GitLab CI rewrite rules for git
- kas-container: Use official snapshot.debian.org
- kas-container: Fix positional argument processing with for-all-repos
- kas-container: allow recent Ubuntu builds via isar
- kas-container: re-add deterministic metadata
- docs: document difference between file and env credentials
- sign pip packages on release

4.4
- kas: Auto-import runner-provided .gitconfig also inside GitLab-CI
- kas: Auto-inject git credentials on gitlab ci
- kas: Add --keep-config-unchanged to preserve repos and configs on actions
- kas: Fix --skip'ing multiple steps
- kas: List --skip'able steps in --help
- kas: Add support for shallow clones
- kas: Add support to create provenance build attestations
- kas: Add config key to describe build artifacts (used by attestation)
- kas: Add option to dump-plugin to include VCS info of local repos
- kas-container: Handle missing extra argument in subcommands gracefully
- kas-container: improve container reproduction using git commit date
- docs: Several format improvements
- docs: Add simple examples

4.3.2
- kas: don't add comments to .netrc, fixing gitlab-ci
- kas: make file permissions on credentials more strict (not a security fix)
- kas: align hg semantics of repo dirty checking
- kas-container: fix warnings from shellcheck 0.9.0
- docs: do not build docs against installed version
- docs: update to match bitbake variable changes
- docs: unify spelling of kas
- docs: document scope of environment variables

4.3.1
- kas: Fix regression of 4.3 when using SSH_PRIVATE_KEY[_FILE]
- kas-container: Update to debian:bookworm-20240311-slim (implicitly)

4.3
- kas: fix including from transitively referenced repos
- kas: Add support for .gitconfig pass-through
- kas: Optimize checkout of repos in larger configurations
- kas: Reduce verbosity of kas startup output
- kas: check if branch contains commit if both are set
- kas: Improve error reporting in several places
- kas-container: Bit-identically reproducible images
- kas-container: Enrich manifests with provenance information
- kas-container: Add bash completion for kas
- docs: Separate man pages per subcommand
- docs: Various smaller improvements

4.2
- kas: Fix lock files when references repos by tags
- kas: add forgotten `tag` key to repos `defaults`
- kas: add support for OAuth2 worflow
- kas-container: add python3-websockets
- kas-container: unify error handling

4.1
- kas: Add "tag" property to repo, to replace usage of refspec
- kas: generalize revision locking to all included files
- kas: allow for --skip repos_checkout
- kas: forward SSTATE_MIRRORS environment variable
- kas: Allow PyYAML 6, fixing dependency conflicts
- kas: Add Python 3.12 support
- kas: Update jsonschema upper version limit
- kas: menu plugin: Reorder help and exit buttons
- kas: menu plugin: Add separate return button for submenus
- kas: Fix Mercurial's branch resolution
- kas-container: detect build system on clean commands
- kas-container: report error if ssh-agent is requested but not running

4.0
- kas container: Switch to Debian bookworm
- kas-container: Make kas-isar ready for mmdebstrap

3.3
- kas: Introduce commit and branch as alternative to refspec key
- kas: Warn if a repo uses legacy refspec
- kas: add support for lock files via dump plugin
- kas: track root repo dir config files of menu plugin
- kas: add support for --log-level argument
- kas: add GIT_CREDENTIAL_USEHTTPPATH environment variable
- kas: improve error reporting
- kas: drop support for Python 3.5
- kas-container: fix invocations with --isar for some layers
- kas-container: Purge tmp* on clean
- kas-container: enable colored logging

3.2.3
- kas-container: mount KAS_REPO_REF_DIR rw to support auto-creation
- kas-container: fix --ssh-dir (3.2.2 regression)
- container: Use original UID/GID when run without kas-container (3.2.2 regression)

3.2.2
- kas-container: Start as non-root when running without kas-container
- kas-container: Disable git safe.directory when running without kas-container
- kas-container: Make sure privileged podman will find sbin tools
- docs: Leave notice on inherit integrity weaknesses of repo fetches
- docs: Add a SECURITY.md

3.2.1
- kas-container: Add unzip package to kas-base
- docs: Fix description of container image generation
- docs: Fix description of bblayers_conf_header and local_conf_header

3.2
- kas: add conditional, default-free environment variables
- kas: add plugin to dump flattened config and resolve repo refs
- kas: auto-create repo refs when KAS_REPO_REF_DIR is set
- kas: print build bitbake command when running shell
- kas: forward BB_NUMBER_THREADS and PARALLEL_MAKE env vars into build
- kas-container: Fix engine detection when docker is an alias for podman
- kas-container: forward DISTRO_APT_PREMIRRORS environment variable
- kas-container: reduce log chattiness of container runtime
- kas-container: write debug messages to stderr
- kas-container: Refresh Yocto build dependency list
- kas-container: Rework generation of kas images, shrinking kas-isar
- kas-container: avoid deploying the python pip cache

3.1
- kas: Add support for authentication with gitlab CI
- kas: Add NETRC_FILE to allow passing credentials into kas home
- kas: for-all-repos: Add option to keep current env
- kas: Avoid whitespace warnings when applying repo patches
- kas: Use relative layer dirs to make build relocatable
- kas: Allow "deleting" url/path of repo in override
- kas: Fix repo-relative include file handling if no config file is given
- kas: Fix include errors from repos defined via multiple yaml files
- kas: Fix handling of -- separator in the absence of a config file
- kas: Bundle kas-container script
- kas-container: Add support for podman >= 4.1
- kas-container: Add '--ssh-agent' option
- kas-container: Add telnet to image
- kas-container: Remove obsolete schroot mntpoint
- kas-container: Reduce the image size a bit

3.0.2
- kas-container: Fix the fix for chatty sbuild-adduser in kas-isar

3.0.1
- kas-container: Silence chatty sbuild-adduser in kas-isar

3.0
- kas: git fetch always with quiet flag, suppressing false error messages
- kas: Add BB_ENV_PASSTHROUGH_ADDITIONS support
- kas: shell: Add option to keep current environment
- kas: Raise an error on missing repo refspec
- kas-container: Base containers on bullseye
- kas-container: Add pigz package to container to enable parallel compression
- kas-container: Support for sbuild in kas-isar
- kas-container: podman: Remove --pid=host
- kas-container: Start init service inside container
- kas-container: Add cleansstate and cleanall
- kas-container: Pass http_proxy et.al through sudo
- kas-container: Address shellcheck findings in container-entrypoint
- docs: Add recommendation for repo-id naming
- docs: Clarify local file include paths

2.6.3
- kas: Do not overwrite existing .ssh/config
- kas: Properly describe package build
- kas-container: create KAS_WORK_DIR if it not exists
- kas-container: validate KAS_REPO_REF_DIR correctness
- docs: Fix generation
- docs: Extended "layers" section in the user guide.

2.6.2
- kas-container: Restore oe-git-proxy location (/usr/bin)
- kas-container: Drop world-write permission from /kas folder

2.6.1
- kas: fix installation via pip

2.6
- kas: Add kconfiglib-based menu plugin
- kas: Enable kas to checkout repositories using git credentials
- kas: Enable gerrit/gitlab/github refspecs
- kas: Write more bblayers.conf boilerplate settings
- kas: Add environment variable SSH_PRIVATE_KEY_FILE
- kas: Add support for relative KAS_WORK/BUILD/REPO_REF_DIR paths
- kas: Move config json schema to standalone json file
- kas: Avoid duplicate cloning of repos in command line includes
- kas: for_all_repos: Exit on command failure
- kas: for_all_repos: Fix KAS_REPO_URL or unversioned repos
- kas: Declare proxy_config obsolete
- kas-container: install lz4
- kas-container: install g++-multilib
- kas-container: install newer git-lfs
- kas-container: Enter with /repo as current dir
- kas-container: Carry oe-git-proxy locally and relocate to /usr/local/bin

2.5
- kas: Apply patches before doing an environment setup
- kas: repos: strip dot from layer name
- kas: Introduce KAS_BUILD_DIR environment variable
- kas: add GIT_CREDENTIAL_HELPER environment variable
- kas-container: add `--git-credential-store` options
- kas-container: mount /repo as read-write for shell command
- kas-container: add an argument to get version information
- kas-container: Add support for checkout and for-all-repos
- kas-container: add support to set a custom container images location
- kas-container: Fix mounting of custom KAS_REPO_REF_DIR
- kas-container: Add skopeo and umoci to ISAR image
- kas-container: add sudo to standard kas image

2.4
- kas: Silence "Exception ignored when trying to write to the signal wakeup fd"
- kas: drop bitbakes "-k" from the default args
- kas: fix repos path if no url, but path given
- kas: Set upper version limit for dependencies
- kas-container: Add support for rootless podman with userns keep-id
- kas-container: Add support for multi-word --command arguments
- kas-container: make sure that we pass shellcheck
- kas-container/kas*: Add support for multi-arch containers
- kas-container/kas: Pull all Python dependencies from Debian
- kas-container/kas-isar: Drop grub package

2.3.3
- Fix binfmt setup in kas-isar container image

2.3.2
- Fix release script fix /wrt kas-container image version updates

2.3.1
- Fix release scripting

2.3
- kas: add "checkout" and for-all-repos subcommands
- kas: add python 3.9 compatibility
- kas: improve documentation
- config: add build_system property to pre-select OE/Yocto or Isar
- kas-container: rename from kas-docker
- kas-container: add support for build_system property (making --isar optional)
- kas-container: adjust environment variables interface
- kas-container: switch to github container repository
- kas-container: add support for Debian bullseye cross building
- kas-container: add zstd package

2.2
- kas: allow extra bitbake arguments to be passed
- kas: add --force-checkout and --update arguments to ease CI usage
- kas: allow for layer-free repositories
- kas: fix cloning of repos without default branch
- kas: enable standard-conforming .yaml file extensions
- kas-docker: enhance with podman support
- kas-docker: switch to /bin/bash as SHELL per default
- config: Allow a default refspec to be specified
- config: Allow a default repo to be specified for patches

2.1.1
- repos: Silence pycodestyle error (that broke docker image generation)

2.1
- Add support for S3 fetcher to docker image
- Lift Python minimal requirements to 3.5
- Fix reporting of of repo patch IDs
- config: use 'qemux86-64' instead of 'qemu' as default for KAS_MACHINE
- Ensure SSH key ends with newline
- kas-docker: Make it harder to run as root
- kas-docker: Make loop device passing optional
- kas-docker: Various fixes

2.0
- Add support for Yocto 3.0 / latest Isar
- Move docker image to Debian buster
- Add git-lfs support to docker image
- Add Yocto testimage dependencies to docker image

1.1
- Restore mercurial support
- Add -c and --cmd as aliases for --task
- Fix repo patching when using a branch name as refspec
- Update repo remote URL on kas file changes
- kas-docker: fix SHELL forwarding
- kas-docker: use released image, rather than "latest"
- kas-docker: allow to define custom image version
- kasproject/kas: enable devshell and menuconfig targets
- kasproject/kas image: add gnupg and quilt
- kasproject/kas-isar image: fix /var/tmp handling

1.0
- isar: Take qemu-user-static from buster and adjust binfmt setup

0.20.1
- kas-docker: Restore KAS_PREMIRRORS support

0.20.0
- kas-docker: enable passing SSH configs
- kas-docker: add --no-proxy-from-env option
- kas-docker: Pass in NO_PROXY
- Add KAS_PREMIRRORS support
- Remove SSH_AGENT_PID forwarding

0.19.0
- Recursive include handler refactoring and cleanups
- A lot of code cleanups, refactoring and bug fixings
- Isar docker support improvements

0.18.0
- Add patch support for repos
- Use git diff-index to check if repo is dirty
- docker: add debootstrap and qemu-user-static

0.17.0
- Add iproute and zx-utils to the docker image
- Fix relative path for repos
- Write MACHINE and DISTRO as weak defaults

0.16.0
- Support Mercurial repos
- Support Gentoo distro

0.15.0
- Environment variable passthrough
- Support major distro variants
- Add initial support for multiconfig

0.14.0
- Multi-target support
- Avoid downloading same repo twice

0.13.0
- Increase config file version

0.12.0
- Remove dynamic configuration support (Python config files)
- Shell command prepares complete bitbake configuration
- Add to define task in config and environment
- Improved error handling and reporting

0.11.0
- Allow in-tree repos not to be in a git repo
- Pass through git proxy related environment variables
- Write deterministic local.conf and bblayers.con
- Make configuration file versioning independent of project version
- Cleanups for uploading project to PyPI
- Print proper error message for config file format exception

0.10.0
- Docker image creation (Debian Stretch), pushed on kasproject/kas
- Restructure documentation add support for Sphinx export it to readthedocs
- Add support for include feature for Yaml files
- Add support for Isar build system
- Handling of SIGTERM/TERM improved
- Parallel download of git sources
- Allow environment to overwrite proxy, target, machine and distro
- Add unit testing for include/merge config file handling
- Rename sublayers back to layers
- pylint & pep8 cleanups
- Allow to define workdir via KAS_WORK_DIR
- Shell honors SHELL and TERM environment variable

0.9.0
- initial public release
