v25.3

What's Changed

• Use become_root_cmd() when running systemd-repart in run_shell() as well by @daandemeyer in #3425
• Use shutil.copy() to copy ovmf variables by @daandemeyer in #3426
• The dpkg architecture name for loongarch64 is loong64 by @bluca in #3428
• mkosi-initrd: Add two more modules by @daandemeyer in #3430
• Check if list matches are empty if empty string is matched against by @daandemeyer in #3429
• opensuse: fix package name: btrfs-progs -> btrfsprogs by @aafeijoo-suse in #3432
• Log command line for abnormal signals by @daandemeyer in #3433
• zypper: set $releasever variable by @aafeijoo-suse in #3434
• Tools tree improvements by @daandemeyer in #3436
• mkosi-initrd: handle PermissionError when reading /etc/crypttab by @aafeijoo-suse in #3438
• Move want_uki() check out of build_uki_profiles() by @daandemeyer in #3441
• mkosi-sandbox: Improve formatting of error messages by @daandemeyer in #3443
• Fix verity signature check in case keys are configured by @hundeboll in #3447
• Treat terminal as dumb if either stdout or stderr is not a tty by @daandemeyer in #3448
• Various cache fixes by @daandemeyer in #3446
• config: add mkosi-addon by @bluca in #3449
• Calculate PE section size correctly by @daandemeyer in #3450
• Use directory in user's home as output directory if possible by @daandemeyer in #3453
• Fix condition when removing duplicate files from the overlay by @daandemeyer in #3451
• Make secure boot keys/crts/source config universal by @labichn in #3455

Full Changelog: v25.2...v25.3