This release adds the following features:

• Add an HSI check for AMD SB-7033 aka EntrySign
• Add native CBOR parsing and drop libcbor2 as a dep
• Add server platform detection to suspend HSI checks
• Allow setting a maximum version number for a device
• Allow setting context flags from HWID matches
• Increment the progressbar when waiting for replug
• Require Windows 8+ for the MSI build artifact
• Support loading EFI authenticated variables with ContentInfo headers

This release fixes the following bugs:

• Add daemon support for modems that export ttyUSB devices
• Add decompression ratio limit to prevent parsing emulation ZIP bombs
• Add device activation flag for Dell servers after firmware upgrade
• Allow using a custom Telink HidToolVer quirk
• Check the UEFI capsule payload is less than 4GiB in size
• Cleanup all the user inhibits when required
• Do not allow using non-regular files like devnull as metadata
• Do not use capsule-on-disk on Lenovo ThinkCentre M60e Tiny
• Fix a buffer overread when parsing a malicious PE file
• Fix a CRC validation mistake in ZIP firmware parser
• Fix a maybe-impossible NULL pointer dereference when parsing netlink data
• Fix a small memory leak when writing Redfish firmware
• Fix accessing Nordic devices connected through a dongle
• Fix handling snapd payloads with only a default image
• Fix potential NULL pointer dereference in QMI firmware write
• Fix the auto-generated Redfish HBA device name
• Fix the displayed Thunderbolt version number by ignoring reserved bits
• Fix UF2 race with UDisks2 volume discovery during replug
• Fix warning when probing removable USB devices with no medium
• Guard HSI feature with platforms requirements
• Hardcode the modification timestamp in generated zip archive
• Increase the resolution of the progress bar updates
• Limit the maximum number of files that can be parsed from ZIP archives
• Prevent users from asking for unlimited system inhibits
• Properly handle Dell iDRAC when using Redfish
• Reject DFU sectors with zero size to prevent a possible infinite loop
• Restore the VID check in Algoltek USBCR probe function
• Set sensible parsing limits in each FuFirmware subclass
• Show a suitable version when the Novatek update is interrupted
• Support CAB image filenames longer than 255 chars
• Update the Focal touch firmware format to the latest release
• Use overflow-checked arithmetic for all offset calculations
• Use prepared queries when querying silos
• Validate CCGX record data size before flash write
• Validate Nordic HID peer index before accessing peers cache array
• Validate Synaptics cxaudio EEPROM size before trusting it
• Wait for mock snapd API socket to appear when running tests
• Wait for the new version when updating the Nordic TK059 Keyboard

This release adds support for the following hardware:

• Elan TP IC type 0x19
• Google Moonstone
• HP 400 and 405 Mouse
• Lenovo USB-4 dock
• LX Semicon SW42101 touch controller
• Parade USB hubs with GPIO control
• Pixart PLP239 devices
• Raydium TP devices
• Sunplus cameras