What's Changed

• postprocess: Don't hardcode "targeted" policy by @alexlarsson in https://github.com/coreos/rpm-ostree/pull/5382
• rust/bwrap: child_wait_check: let gio check status by @dustymabe in https://github.com/coreos/rpm-ostree/pull/5387
• docs: Describe how to map container -> ostree by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5385
• rust/bwrap: don't swallow STDERR when running commands by @dustymabe in https://github.com/coreos/rpm-ostree/pull/5388
• main: Silence SELinux log spam by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5352
• tests/override-replace-2: increase reliability of selinux override by @dustymabe in https://github.com/coreos/rpm-ostree/pull/5389
• compose: Cache RPMs if cache dir on separate filesystem by @jlebon in https://github.com/coreos/rpm-ostree/pull/5391
• libpriv/kernel: Pass through DRACUT_NO_XATTR when running dracut by @jlebon in https://github.com/coreos/rpm-ostree/pull/5397
• passwd: Prep work for fixing https://github.com/coreos/rpm-ostree/issues/5365 by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5398
• libpriv/kernel: Pass through DRACUT_NO_XATTR more cleanly by @jlebon in https://github.com/coreos/rpm-ostree/pull/5404
• fix(compose): move usermod sysusers.d fragments to correct directory by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5394
• rust/src/compose: add --write-lockfile-to / --lockfile-strict by @champtar in https://github.com/coreos/rpm-ostree/pull/5412
• scripts: suppress error about glibc.posttrans scriptlet by @keszybz in https://github.com/coreos/rpm-ostree/pull/5415
• Update to bootc 1.3.0 by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5410
• rechunker: Add --format-version=2 by @jeckersb in https://github.com/coreos/rpm-ostree/pull/5421
• core: Run sysusers after doing passwd/group layering dance by @jlebon in https://github.com/coreos/rpm-ostree/pull/5403
• Add support for skipping lua scripts via a magic comment by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5425
• Sync repo templates ⚙ by @coreosbot-releng in https://github.com/coreos/rpm-ostree/pull/5426
• kernel: Drop check for ostree-container by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5430
• Un-hide finalization APIs by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5424
• treefile: Add sysusers: knob by @jlebon in https://github.com/coreos/rpm-ostree/pull/5427
• Release 2025.9 by @cgwalters in https://github.com/coreos/rpm-ostree/pull/5432

New Contributors

• @champtar made their first contribution in https://github.com/coreos/rpm-ostree/pull/5412

Full Changelog: https://github.com/coreos/rpm-ostree/compare/v2025.8...v2025.9