Announcing dbus 1.16.0 (new stable branch)

[Simon McVittie]

dbus is the reference implementation of D-Bus, a message bus for
communication between applications and system services.

This is the first release of a new 1.16.x stable branch, superseding the
1.14.x old-stable branch and the 1.15.x development branch.

<http://dbus.freedesktop.org/releases/dbus/dbus-1.16.0.tar.xz>
<http://dbus.freedesktop.org/releases/dbus/dbus-1.16.0.tar.xz.asc>
git tag: dbus-1.16.0

Release notes
=============

Summary of major changes between 1.14.x and 1.16.0
--------------------------------------------------

Build system and dependencies:

• The Meson build system is the recommended way to build dbus on Unix.
  This requires Meson 0.56 and Python 3.5.
  · Projects that depend on libdbus can build it as a Meson subproject.
    See tests/use-as-subproject/meson.build for suggested build options.

• CMake continues to be available as an alternative build system,
  and is recommended on Windows. This requires CMake 3.10.

• A C99 compiler such as gcc, clang, or Visual Studio 2015 is required.
  A C11 compiler such as gcc, clang, or Visual Studio 2019 is recommended.

• On platforms with larger-than-64-bit pointers, a C11 compiler is required

Behaviour changes:

• On Unix, the well-known system bus socket is in the runtime state
  directory by default (normally /run)
  (see 1.15.4 for more details)

• On Linux with systemd, dbus-daemon starts as the target user/group
  (retaining CAP_AUDIT_WRITE) instead of starting as root and
  dropping privileges

Feature removals:

• Autotools build system

• pam_console/pam_foreground integration
  (Autotools --with-console-auth, CMake -DDBUS_CONSOLE_AUTH_DIR)

New features and significant bug fixes:

• ProcessFD in GetConnectionCredentials() on Linux
  (see 1.15.8 for more details)

• On Unix, the system message bus now loads .service files from /etc and /run

• Use close_range() to close unwanted file descriptors or mark them
  close-on-exec, if available

• Use 64-bit timestamps internally on 32-bit platforms, for Y2038 safety

• Use APIs that can return 64-bit timestamps and inode numbers on
  32-bit glibc

• AF_UNIX sockets are available on sufficiently recent Windows

• dbus-send can send arrays of variants, variant values in dictionaries,
  and nested variants

• Portability to CPU architectures with larger-than-64-bit pointers

Changes since 1.15.92 release candidate
---------------------------------------

Dependencies:

• Building with CMake now requires CMake ≥ 3.10.

Bug fixes:

• Avoid deprecation warnings with newer Meson versions
  (dbus!507, Simon McVittie)

• Avoid deprecation warnings with newer CMake versions
  (dbus#541, Ralf Habacker)

Tests and CI enhancements:

• When building with CMake, set the same environment variables as Meson.
  This improves test coverage. (dbus#533, Ralf Habacker)

• Remove a remaining reference to Debian 11, which is EOL
  (dbus!508, Simon McVittie)

Security support changes
========================

The 1.16.x stable branch is the recommended branch to include in new
stable OS distributions. It is intended to receive maintenance releases
on an as-needed basis for at least as long as the Debian security and
release teams are maintaining Debian 13, including security updates,
and also including non-security bug fixes if the risk of regressions is
believed to be sufficiently low (similar to the way the 1.14.x branch
has been handled until now).

The 1.15.x development branch is now end-of-life and will not receive
any more releases, even if security vulnerabilities are found.
If you were previously using this development branch, please upgrade
to 1.16.x, which is a direct replacement for 1.15.x.

The 1.14.x old-stable branch is intended to receive maintenance releases
on an as-needed basis for as long as the Debian security and release teams
are maintaining Debian 12, which means its security support is expected
to end about 1 year after the release of Debian 13. However, non-security
bug fixes are increasingly unlikely to be backported to 1.14.x.

-- 
Simon McVittie, Collabora Ltd. / Debian
on behalf of the dbus maintainers
release signing key: gpg --locate-external-keys smcv at debian.org