# PAM Module Changelog

All notable changes to the SurePassID Linux PAM module are documented
in this file. The format follows [Keep a Changelog](https://keepachangelog.com/).

<!-- Newest release at the top. The deploy job copies this file to the
     downloads page at https://downloads.surepassid.com/PAM/linux/CHANGELOG.md -->

## Unreleased

- Added CI/CD pipeline with automated build, sign, SBOM, release, and deploy.
- All RPM and DEB packages are now GPG-signed.
- Added Rocky Linux 10 (EL10) support (aarch64 + x86_64).
- Man pages (`pam_surepassid.8`, `pam_surepassid-configure.8`) now
  included in RPM and DEB packages.
- Added Ansible collection `surepassid.linux_pam` with Molecule testing
  (el9 + bookworm scenarios) running in CI after deploy.
- Fixed Ansible role idempotence for the "Wire PAM services" task
  (`changed_when` now matches the actual CLI output).