v0.7.0

What's Changed

• (dff3850) Bump minor version to 0.7.0
• (81a8112) fix(disk-persistent): handle dirty COW device in dm-snapshot setup
• (7c9a3e8) ci(test-convert): replace fixed 4-case matrix with 3-dimensional 12-case matrix
• (4a78a04) fix(ubuntu): add zram module support for Ubuntu cloud images
• (f02e28f) fix(module-setup): add zram and dm-snapshot modules to initramfs
• (8d10d30) docs: add pre-push checks for gpgsig and Claude committer identity
• (76bf9df) ci: reduce memory and disk usage in test-convert jobs
• (8fd33a6) docs: add pre-commit check requirements to CLAUDE.md
• (ae301b7) fix(nbd): make udev rule reload non-fatal with fallback for container environments
• (e1f04eb) fix(test): use container_name instead of container_id in QEMU boot test
• (32ef251) ci: fix RPM path handling and add QEMU boot test
• (9365aa8) ci: fix artifact download in test-convert job
• (645459b) ci: fix docker create command for scratch-based test image
• (02195e8) ci: add test image workflow and optimize CI test performance
• (191dd0a) fix(ci): increase tmpfs to 20GB for test container
• (e006457) fix(ci): increase tmpfs size to 10GB for test container
• (d8b7ac5) fix(ci): load nbd module on host before container tests
• (81f2c22) fix(ci): skip test gracefully when nbd module unavailable
• (2f65547) fix(ci): resolve test-convert CI failures
• (af8ca2a) ci: add integration tests for cryptpilot-convert
• (3e4dc4e) docs: add CLAUDE.md with git commit requirements
• (a095bb9) docs: reorganize docs/ directory structure
• (09f09f5) fix: clarify IMDS reachability error instead of "not an ECS instance"
• (4afaad4) docs: fix dm-integrity kernel config option

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• (7b029e4) build: split monolithic Dockerfile into component-specific Dockerfiles
• (38cdc4c) Bump minor version to 0.6.0
• (74effb9) fix(convert): update essential packages for Debian/Ubuntu rootfs
• (8f0424d) rpm: separate SRPM and RPM build steps in buildspec templates
• (3a4c902) docs: fix UKI parameter name in quick-start guides
• (ac1abfd) refactor(kernel): make module loading non-fatal with modprobe detection
• (adbdd48) feat(kernel): add kernel module loading helper with static kernel support
• (6e1c5cc) ci: add workflow to build and publish test images to GHCR
• (fc5ad6b) build: add Docker image build support with RPM-based workflow
• (11b85cb) docs(fde): add UKI measure-only example and reference value documentation
• (9d8196d) build: configure yum for faster parallel downloads
• (e4ed1db) ci: complete removal of cryptpilot main package from CI artifacts

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

• (a117e9e) Bump minor version to 0.5.0
• (60c45d3) build: improve version tag detection robustness
• (d0bb28f) ci: upgrade GitHub Actions to v6/v8 for Node.js 24 compatibility
• (86c7975) build(makefile): update RPM spec Version field during version bump
• (2d354ff) ci: add GitHub Release notes generation workflow
• (966e1af) build(makefile): filter stable version tags for changelog generation
• (462a2cf) build(rpm): remove cryptpilot main package from build outputs
• (9f3c890) build: fix DEB packaging version and add automated version bump targets
• (1087b87) refactor(fde): rename volume and configuration concepts
• (1b5fa65) docs(cryptpilot-fde): remove deprecated --stage flag from show-reference-value examples
• (8926ff9) feat(cryptpilot-fde): add dm-snapshot backend support for writable rootfs
• (efaf9ba) fix(cryptpilot-convert): correct help text for --rootfs-no-encryption option
• (fee48be) build: preserve uncommitted changes when creating source tarball
• (6f0cc5a) feat(cryptpilot-fde): remove /data directory from encrypted system image and adjust rw_overlay scope
• (fb71c95) docs(cryptpilot-fde): enhance boot documentation with UKI/GRUB modes and technical details

Full Changelog: v0.4.0...v0.5.0

v0.5.0-alpha.2

What's Changed

• (a117e9e) Bump minor version to 0.5.0
• (60c45d3) build: improve version tag detection robustness
• (d0bb28f) ci: upgrade GitHub Actions to v6/v8 for Node.js 24 compatibility
• (86c7975) build(makefile): update RPM spec Version field during version bump
• (2d354ff) ci: add GitHub Release notes generation workflow
• (966e1af) build(makefile): filter stable version tags for changelog generation
• (462a2cf) build(rpm): remove cryptpilot main package from build outputs
• (9f3c890) build: fix DEB packaging version and add automated version bump targets
• (1087b87) refactor(fde): rename volume and configuration concepts
• (1b5fa65) docs(cryptpilot-fde): remove deprecated --stage flag from show-reference-value examples
• (8926ff9) feat(cryptpilot-fde): add dm-snapshot backend support for writable rootfs
• (efaf9ba) fix(cryptpilot-convert): correct help text for --rootfs-no-encryption option
• (fee48be) build: preserve uncommitted changes when creating source tarball
• (6f0cc5a) feat(cryptpilot-fde): remove /data directory from encrypted system image and adjust rw_overlay scope
• (fb71c95) docs(cryptpilot-fde): enhance boot documentation with UKI/GRUB modes and technical details

Full Changelog: v0.4.0...v0.5.0-alpha.2

v0.5.0-alpha

What's Changed

• (8eff60f) Bump minor version to 0.5.0
• (d0bb28f) ci: upgrade GitHub Actions to v6/v8 for Node.js 24 compatibility
• (86c7975) build(makefile): update RPM spec Version field during version bump
• (2d354ff) ci: add GitHub Release notes generation workflow
• (966e1af) build(makefile): filter stable version tags for changelog generation
• (462a2cf) build(rpm): remove cryptpilot main package from build outputs
• (9f3c890) build: fix DEB packaging version and add automated version bump targets
• (1087b87) refactor(fde): rename volume and configuration concepts
• (1b5fa65) docs(cryptpilot-fde): remove deprecated --stage flag from show-reference-value examples
• (8926ff9) feat(cryptpilot-fde): add dm-snapshot backend support for writable rootfs
• (efaf9ba) fix(cryptpilot-convert): correct help text for --rootfs-no-encryption option
• (fee48be) build: preserve uncommitted changes when creating source tarball
• (6f0cc5a) feat(cryptpilot-fde): remove /data directory from encrypted system image and adjust rw_overlay scope
• (fb71c95) docs(cryptpilot-fde): enhance boot documentation with UKI/GRUB modes and technical details
• (d442213) chore: bump version to 0.4.0
• (be52d58) spec: add cloud-utils-growpart as dependency for cryptpilot-fde
• (b5f276f) cryptpilot-enhance: support CRYPTPILOT_ENHANCE_VIRT_CUSTOMIZE_OPTS env var
• (f1a1c81) feat(fs): replace is_empty_disk with more precise has_valuable_data
• (58b23f9) refactor(ci): add multi-arch RPM build with SLSA provenance support

Full Changelog: v0.3.4...v0.5.0-alpha

v0.4.0

chore: bump version to 0.4.0

v0.3.4

chore: bump version to 0.3.4

Signed-off-by: Kun Lai <laikun@linux.alibaba.com>

v0.3.3

chore: bump version to 0.3.3

Signed-off-by: Kun Lai <laikun@linux.alibaba.com>

v0.3.2

chore: bump version to 0.3.2

Signed-off-by: Kun Lai <laikun@linux.alibaba.com>

v0.3.1

feat(open): add `--check-fs` to verify filesystem initialization on open

- Added `--check-fs` flag to `cryptpilot-crypt open` (default: false)
- When enabled, checks if the volume’s filesystem is initialized — fails with clear error if empty (but `makefs` is configured)
- Helps prevent silent boot failures by catching uninitialized volumes early
- Updated README and CLI help text; removed deprecated `--skip-check-passphrase`
- Auto-open during boot now skips fs check (for compatibility)

Signed-off-by: Kun Lai <laikun@linux.alibaba.com>