What's Changed

• Use become_root_cmd() when running systemd-repart in run_shell() as well by @DaanDeMeyer in #3425
• Use shutil.copy() to copy ovmf variables by @DaanDeMeyer in #3426
• The dpkg architecture name for loongarch64 is loong64 by @bluca in #3428
• mkosi-initrd: Add two more modules by @DaanDeMeyer in #3430
• Check if list matches are empty if empty string is matched against by @DaanDeMeyer in #3429
• opensuse: fix package name: btrfs-progs -> btrfsprogs by @aafeijoo-suse in #3432
• Log command line for abnormal signals by @DaanDeMeyer in #3433
• zypper: set $releasever variable by @aafeijoo-suse in #3434
• Tools tree improvements by @DaanDeMeyer in #3436
• mkosi-initrd: handle PermissionError when reading /etc/crypttab by @aafeijoo-suse in #3438
• Move want_uki() check out of build_uki_profiles() by @DaanDeMeyer in #3441
• mkosi-sandbox: Improve formatting of error messages by @DaanDeMeyer in #3443
• Fix verity signature check in case keys are configured by @hundeboll in #3447
• Treat terminal as dumb if either stdout or stderr is not a tty by @DaanDeMeyer in #3448
• Various cache fixes by @DaanDeMeyer in #3446
• config: add mkosi-addon by @bluca in #3449
• Calculate PE section size correctly by @DaanDeMeyer in #3450
• Use directory in user's home as output directory if possible by @DaanDeMeyer in #3453
• Fix condition when removing duplicate files from the overlay by @DaanDeMeyer in #3451
• Make secure boot keys/crts/source config universal by @labichn in #3455

Full Changelog: v25.2...v25.3