Changes going from 77bc2457cc76 (2.75.2) to 3f8b98c2db70 (2.74.1) - #545

Draft

ernestl wants to merge 31 commits into

review-head-77bc2457from

review-base-3f8b98c2

Commits on Feb 18, 2026

efi, efi/preinstall: Allow opt-in to secure boot being in user mode
chrisccoulson
committed

Commits on Feb 27, 2026

tpm2: Update go-tpm2 version to v1.15.0
chrisccoulson
committed

Commits on Mar 2, 2026

Commits on Mar 9, 2026

tpm2: Add a comment to the use of Policy.Execute
chrisccoulson
committed
efi/preinstall: relax checkSecureBootPolicyForDegradedFirmwareSettings
chrisccoulson
committed
efi/preinstall: refine the checks for manufacturing mode on Intel
chrisccoulson
committed

Commits on Mar 10, 2026

Commits on Mar 16, 2026

efi/preinstall: Permit pre-OS image verification events to be measured before the separator
chrisccoulson
committed

Commits on Mar 17, 2026

Commits on Mar 20, 2026

Commits on Mar 26, 2026

Commits on Mar 27, 2026

Commits on Apr 7, 2026

efi/preinstall,tpm2: Don't fail due to lack of TPM_CAP_AUTH_POLICIES
chrisccoulson
committed

Commits on Apr 8, 2026

efi/preinstall: Fall back to checking the BootGuard status MSR in HAP mode
chrisccoulson
committed

Commits on Apr 9, 2026

Commits on Apr 10, 2026

efi/preinstall: Stop relying on BootCurrent (#536)
chrisccoulson
authored