# Release notes

This is the **canonical, customer-facing release history** for the
SurePassID Linux PAM module. It records the product-relevant changes
that matter to administrators — new platform support, new features,
and fixes that affect how the module is deployed or used.

The format follows [Keep a Changelog](https://keepachangelog.com/).
The newest release is at the top.

<!--
Maintenance / curation policy (docs review items 3.3 and 4.8):

- This file is the single release-notes source. It replaces the former
  admin-guide "release notes" chapter; the admin guide links here.
- Entries are CUSTOMER-FACING. Describe product-relevant changes in
  plain language: new platforms, new authentication features, and
  fixes that affect administrators. Do NOT log internal refactors,
  test/CI churn, or developer tooling changes.
- Group entries under the standard Keep a Changelog headings
  (Added / Changed / Fixed / Deprecated / Removed / Security).
- Accumulate changes under "Unreleased" during development. The release
  workflow stamps the version (derived from the git tag / release date
  by scripts/compute-version.sh — see docs/dev/versioning.md) and the
  dated section is published.
- The deploy job copies this file to the downloads page at
  https://downloads.surepassid.com/PAM/linux/CHANGELOG.md so the same
  history is reachable from customer materials and the HubSpot product
  overview (docs/product/).
-->

## Unreleased

### Added

- Rocky Linux 10 (EL10) support on both x86_64 and aarch64.
- Ansible collection `surepassid.linux_pam` for automated, repeatable
  deployment of the PAM module across a fleet of hosts.
- Manual pages (`pam_surepassid`, `pam_surepassid-configure`) are now
  installed with the RPM and DEB packages.

### Changed

- RPM and DEB packages are now GPG-signed and published through a signed
  package repository, so hosts can verify package authenticity on
  install and update.

### Fixed

- Re-running the Ansible PAM wiring step is now idempotent and no longer
  reports a spurious change.

<!--
Published releases appear below as dated sections once the release
workflow stamps a version, e.g.:

## 25.03.13 — 2025-03-13

### Added
- ...
-->