New (short version) in 2.16:

* libgcrypt 1.12.2.
* libtasn1 4.21.0.
* ML-DSA post-quantum signature support for appended signatures.
* Certificate revocation (dbx) checks for appended signatures.
* PKCS#7 signedAttrs verification and X.509 validity period checking.
* NVMe native disk support.
* NVMe over Fibre Channel and multiple NVMe boot paths on IEEE 1275.
* virtio-net driver.
* AMBA PL011 UART support.
* DHCPv6 support and network configuration from the UEFI device path.
* Argon2 password hashing for GRUB users and the grub-mkpasswd-argon2 utility.
* Access levels for authentication in grub-mkconfig.
* MFA key protector.
* TPCM (Trusted Platform Control Module) verifier on x86_64 EFI.
* New tpm_record_pcrs command exposing a TPM PCR snapshot to the OS.
* New efibootnext module and 31_efi_bootnext script for one-shot boot entries.
* New connectefi, lsefivar, btrfs-info, btrfs-list-subvols and
  btrfs-get-default-subvol commands.
* Downstream SBAT support and SBAT level validation in grub-mkimage.
* Serial port addresses restricted to firmware-described UARTs under lockdown.
* Drop UGA Draw and Console Control protocols support.
* GitLab CI with multi-architecture builds, clang jobs and weekly Coverity scans.
* Cygwin and mingw cross-build fixes.
* Filesystems hardening and fixes.
* Video readers and font fixes found by fuzzing.
* EFI code improvements and fixes.
* Network stack fixes.
* Coverity and memory leak fixes.
* ofpath and grub-install host utility robustness fixes.
* Tests improvements.
* Documentation improvements.
* ... and tons of other fixes and cleanups...

New (long version) in 2.16:

* New/improved filesystem and disk support:
  * Native NVMe disk driver, allowing boot from NVMe devices on coreboot and on
    systems whose firmware cannot reach them. (833f3b5f9)
  * NVMe over Fibre Channel support and multiple NVMe boot paths on IEEE 1275,
    including fibre channel discovery for ofpathname and FCP methods for WWPN
    and LUNs. (1ffe804c0, 0f13508bc, dab8ef7f8, adeeeeda3, d0773a062,
    edcdf6598)
  * New `btrfs-info', `btrfs-list-subvols' and `btrfs-get-default-subvol'
    commands. (9ade9d031, e31292f7d, 8b23e97f1)
  * Btrfs on-disk structures are now explicitly packed. (96f2dfb92)
  * Bound directory iteration, symlink sizes and superblock fields in f2fs, and
    reject zero-length directory entry names. (a11cc4333, 6fbc6055b, 994e63b1d,
    8c345080c)
  * Bound the symlink target size in HFS+. (b157604e0, b1d888d70)
  * Fix undefined behaviour and uninitialised reads on malformed ext2
    filesystems. (d1d53ed56, 8908f4bc9)
  * Fix uninitialised reads in FAT and a possible infinite loop in exFAT.
    (56d859d14, ba8d0bae2)
  * Fix an incorrect runlist offset boundary check in NTFS. (ae0143f1d)
  * Handle root inode read failure when mounting XFS. (006994468)
  * Fix null pointer member access on mount failure in nilfs2, f2fs and erofs.
    (246ade44d)
  * Free the block list on file close and fix a node leak in fshelp.
    (fc5d56b44, adc0cdd58)
  * Fix root dataset detection on encrypted ZFS pools, and mark the ZFS
    bookmark_v2 and bookmark_written features as supported. (248fc0ea7,
    8cda718c0)
  * Fix logical partition numbering when no primary partitions exist.
    (27c157c1e, a4257251f)
  * LVM metadata buffers are now allocated from the raw contents. (e219cc41e)
  * Fix raid_disks decoding for mdraid 1.x on big-endian systems. (dcfb9f917)
  * Reuse free slots when attaching USB mass storage devices. (00f8ad96c)
  * Disk cache slot thrashing, cache locking and hit-ratio accounting fixes.
    (63c601d8f, dc0b2735b, 490e0e57f)

* New/improved terminal and video support:
  * AMBA PL011 UART support. (fcff8f881)
  * Scan all BARs on PCI serial devices when looking for an I/O port.
    (af8c7012e)
  * Jump- and delete-word shortcuts in the command line editor. (ad4cf56cc)
  * Drop support for the UGA Draw and Console Control protocols; efi_uga is now
    loaded only on x86 EFI platforms. (ef6ee4ad4, 129588e49)
  * Fix integer overflow and shift undefined behaviour in the PNG and JPEG
    decoders, and EOF misdetection in the PNG, JPEG and TGA readers.
    (368b11823, f08903403, 1d4899bae)
  * Reject out-of-range and overflowing proportional-spec values in gfxmenu.
    (b10f26d9b)
  * Free cached glyphs when freeing a font, plus font memory leak fixes found
    by fuzzing. (ac4b9c3f5, f3e63f295)

* Boot protocol improvements:
  * Set the loaded image device path for the EFI Linux and chainloader loaders
    when firmware leaves it missing. (b13e52e0a, 07243a5e9, b681823b9)
  * Use device tree bootargs for the EFI Linux loader when no command line is
    given. (cfba8a4ef, 7272ed9ec)
  * Ensure the FDT blob is 8-byte aligned. (bcc8f0d71)
  * Allow xen_hypervisor and xen_module on x86_64-efi. (5754c5a51)
  * Restrict the x86 relocator preamble page table to FreeBSD, clear its unused
    entries and move runtime-patched stubs to the .data section. (62289192b,
    f8617b653, 577272de9, c7a81c2f1, 4347e1bfc)
  * Inherit the firmware PML4 in the x86 relocator preamble page table and
    identity map the full 512G of every PML4 entry GRUB overwrites, so that
    MMIO and EFI boot services mappings above the top of RAM stay reachable.
    (f40e41a31, 8773969ac)
  * Append the version to BLS entry titles and the uname to UKI entry titles,
    and skip UKIs with no PRETTY_NAME. (7f46a3987, 9be1b7564, 00f09ed61)

* New/improved network support:
  * New `net_dhcp6' command providing DHCPv6 support. (b175570c4, 31a40660a,
    42bff9bdb)
  * Configure the network from the UEFI device path and set the DNS server from
    the UEFI protocol. (2386c1909, fe0a09e85)
  * Process the DHCPACK packet during HTTP Boot. (3e20a68f9)
  * Print URI and DNS device path information, and correct the endianness of
    IPv6 device paths. (a59e894a5, 945fc8647)
  * Return the HTTP status code from http_establish and handle HTTP error
    responses more cleanly. (e2cdb5c4c, 176ba4445)
  * Fix a hang when a TFTP file is a directory. (74a33ddd4)
  * Fix an uninitialised cmd_server.option causing DNS failures. (7e864f345)
  * Fix a logical operator in the DHCP option overload check. (9dcd6f100)
  * Check the result of grub_netbuff_put() in http_receive(). (e5fce9d0c)
  * New virtio-net driver. (6ebf1c8eb, abfba8add, 65bb6c229)

* New/improved platform support:
  * New `connectefi' command, connecting UEFI Disk I/O and SCSI I/O devices so
    that network-booted GRUB can chainload from a local disk. (80d59ed3e)
  * New `lsefivar' command to dump UEFI runtime variables. (f296813a0,
    f107c2ad7, bcb738d8c)
  * New `efibootnext' module and 31_efi_bootnext script for one-shot boot
    entries, keyed off the ESP PARTUUID and vendor directory. (3d0a81dc0,
    6b8d690e3, 53b7b754b, ba20519fc, 9cc5ebba6, 69a08ed5f)
  * Complete the UEFI status code definitions. (72792baa7)
  * Fix UTF-16 to UTF-8 conversion and variable enumeration in the EFI
    commands. (c0aaffa8b, e1da075fe)
  * Try allocating in the lower 4GB first, and limit arm64 allocations to the
    4GB boundary. (091e50562, 1cae86131)
  * Enable (u)divdi3 and (u)moddi3 for MIPS and implement __aeabi_uldivmod.
    (22a15660c, 7dfe88fcc)
  * Only flush the cache on VIA CPUs when the cpuid family matches. (3b3458f72)
  * Mandatory install device check for PowerPC. (456ab994a)
  * Convert several PowerPC IEEE 1275 error logs to debug logs. (147a52298)
  * Fix a left shift overflow on ia64. (42889fea3)

* Security:
  * ML-DSA post-quantum signature support for appended signatures, including
    the algorithm OID parser and test vectors. (c59c042bf, a37b0c0db,
    d8da70576, 3394f6f9f, ef122da81, ce3ac8f2b, 41081d572, 4e1510370)
  * Complete dbx image and certificate revocation checks for appended
    signatures, with db and dbx read at module load on PowerPC IEEE 1275.
    (15413acb6, e40793ccf)
  * Parse and verify PKCS#7 signedAttrs -- contentType, messageDigest and
    signingTime -- against the content and the signer certificate, and decode
    X.509 certificate validity periods. (d86ddefba, 9badd596c, 59fd2c25a,
    928904041, 549b988e0, 07635d644, bd9ded192, 96dcc3c29, f7c25f1fa,
    19200af70, 19abb28a2)
  * Parse the signer issuer and serial number and the signature algorithm from
    PKCS#7 signerInfos, and enforce signature length validation. (32855cf73,
    31c6b0a98, 59fd2c25a)
  * Large refactor of the appendedsig module: X.509 handling isolated, RSA
    verification extracted into a pk module, db/dbx hash lists converted to
    linked lists. (ec5877a3e, 70aa3f557, f0dab014d, 487cd55c6, 719adb7f4,
    c000ff57e, 6cce77cdd)
  * TPCM (Trusted Platform Control Module) verifier on x86_64 EFI. (096aa1da6,
    f5e0c076c, 558411534, 5e4648a61)
  * New `tpm_record_pcrs' command recording a TPM PCR snapshot for the OS, via
    an EFI variable or, on PowerPC IEEE 1275, the /chosen device tree node.
    (1bd155080, 9a8369807, 0e346a131, 178144cb5, 6aa93964c)
  * Skip TPM measurement of inspection-only file types. (4c6efaca3)
  * New `password_argon2' command and grub-mkpasswd-argon2 utility, adding
    Argon2 hashes for GRUB user passwords. (0511c84c0, a2b9258d5, ccc3620a0)
  * Access levels for authentication in grub-mkconfig, used by all the default
    grub.d scripts. (9ef06ff1d, 530a02f36, abf868b1b, ed5fbe400)
  * MFA key protector. (40a1f9e5b, 9ca263d81, 1ea9e4f86)
  * Downstream SBAT support: an sbat.csv template, validation of the SBAT CSV
    against the build-time SBAT level, and an empty --sbat now meaning the
    bundled sbat.csv. (99ab9d04b, bb483e1f4, 3777c2071, 1a7158490)
  * Reject caller-supplied serial port and MMIO addresses under lockdown: the
    `serial' command now only accepts a raw address when a port is already
    registered at it, so it can no longer be used to write to arbitrary memory.
    Lookups by name and `auto' are unaffected, as is the behaviour outside of
    lockdown. (26beaa3b2, 92a2f034e)
  * Print human readable authentication failure messages instead of the source
    location of the failing check. (0c2822769)
  * Exclude PKS support from grub-emu in the appendedsig module. (aaaf50378)
  * Fix an off-by-one out-of-bounds read of the PGP issuer key-ID subpacket,
    fix new-format packet length parsing, look for the key ID in hashed
    signature subpackets, and warn when a secret key packet is found.
    (d0902e62a, 5ee2e04db, f9fe263f0, 6f71f6502, 0a0c5e6bb)
  * Fix a heap overflow reading the NVMe-oF address in ofpath. (284aa65ef)
  * Fix an integer overflow in the mmap binary search. (170221b35)
  * Fix boot failure when shim validation is disabled. (089d0567c)
  * Cap the PCR unconditionally in the TPM2 key protector. (75f6ee3bb)
  * Handle cryptodisk_passphrase_tries=0 correctly. (c605317e0)
  * Do not require authentication to exit a submenu. (6f5955148)

* Performance:
  * Optimise grub_memmove() with word-by-word copying, restore grub_memcpy() as
    an inline function, and add a memmove benchmark. (ace5fddc2, 2f0547739,
    c82f5c540)
  * Reduce disk cache slot thrashing. (63c601d8f)
  * Require SSE before enabling AVX and avoid duplicate enable/reset calls in
    the libgcrypt hardware feature detection. (4aa3a7995, 4cdb8b163, 3b17bc627,
    bb8d22837, 14e526983, 63c32fde3)

* Installation and other utility improvements:
  * grub-install skips EFI registration when GRUB is already registered and
    passes GRUB_DISTRIBUTOR directly for the bootloader ID. (9f682bf19,
    ddb8f4c1f)
  * grub-editenv removes a stale env_block on unsupported filesystems.
    (a0476c1a3)
  * grub-mkstandalone warns on non-regular files. (7d3e803e3)
  * Force the device path for diskfilter and dmraid roots in 10_linux and
    20_linux_xen. (928df0770)
  * Use findfs for UUID and PARTUUID device lookup in the templates.
    (26f82dc61)
  * Default gfxpayload=keep only when booting using EFI. (bcc760dc5)
  * Skip mount points in grub_find_device. (715c60967)
  * Support canonical paths not starting with / in render-label. (b4800d434)
  * Do not treat non-GPT partitions as an error in the bli command. (7b037605e)
  * Fix an rmmod underflow on autoloaded modules. (74fca99f2)
  * New grub_list_length() helper counting the elements of a list. (3e1ab0ee0)
  * ofpath robustness fixes: correct the path_size calculation, bound the
    fscanf string and read sizes in of_fc_port_name(), initialise nsid in
    of_path_get_nvme_nsid(), handle lstat errors and harden the strncpy() and
    strstr() calls. (b71ae6db2, 675d85810, 3b2aff5d4, 02efab276, c6f759f9c,
    0ff251503, f81b844e9)
  * Check for NULL in add_multiple_nvme_bootdevices() and initialise sectors
    and nsec in grub-setup. (ddf942168, 79b76893c)
  * Save the str[r]chr() return values into const pointers in grub-probe and
    the device name resolver. (9f4a586f1, ce6f2b57f)
  * Skip .mo and .gmo directory entries in copy_locales(). (25e9f2154)
  * Memory and resource leak fixes across ofpath, getroot, platform,
    grub-mkrescue, efidisk, appendedsig and the configuration parser.
    (284aa65ef, fc9f05fe2, 0a1877cb1, e6e3ece5b, 28ee8ff77, d67dec8d2,
    92eb0acb2, 7cafb2fa7, bb2c5c740, dd6cb6deb, 7115cf2ad, 52f113a86)

* Testing and debugging:
  * New unit and functional tests: tpcm_unit_test, mfa_key_protector_test,
    rmmod_test, net_http_transfer_test, network protocol integration tests,
    loadenv unit and end-to-end tests, FDT and Image processing unit tests,
    MLDSA tests and a memmove benchmark. (558411534, 1ea9e4f86, 807a3f1d9,
    abfba8add, b74260f8c, 4379c4e02, feb0f7be5, 916327d56, dc74b43b5,
    3394f6f9f, ef122da81, c82f5c540)
  * Run the libtasn1 coding-long-oid and Test_errors self-tests. (424b36804)
  * Serial tests enabled for arm*-efi and loongarch64-efi. (9e9efbe3c,
    6d76ae440)
  * New partmap_test case for logical partitions without primaries. (2d9f8846b,
    df576cac8)
  * PGP signature tests against Sequoia-PGP generated keys and signatures.
    (5ef6337a2, 1d0b9fd17)
  * Fix a loop device race condition in the ext tests. (278263d39)
  * Fix the -f test on files served over TFTP and HTTP, and clarify what that
    test guarantees. (ffc05ec96, 83cc0e322)
  * Distribute the network test scripts. (02d4b7b7b)
  * Teach grub-fs-tester about luks2_test and remove the emu device.map in the
    grub-shell cleanup. (03fa65f1f, add20d17b)

* Build system:
  * libgcrypt 1.12.2, including Dilithium/ML-DSA and support for verifying raw
    data larger than 65535 bytes. (9469e618d, d5ca1a78b, ce3ac8f2b, c33dadaac)
  * libtasn1 4.21.0. (7a30313dc, d21625937, 234bb2aaf, 49ef3593a)
  * Cygwin and mingw cross-compilation fixes: updated i386-cygwin linker
    script, stripped extra sections, a pei386 runtime relocator stub and
    correct PE relocation section flags. (7d0a4c07a, 3dce38eb1, 3a509d3b0,
    6d32b5a87, 87fef5611, a23d4a235, 172a50f07, 747275485, 2e8c7b4c1,
    feb3115f7)
  * clang build fixes across x86_64, PowerPC IEEE 1275 and the tests, and
    llvm/lld link flag fixes for LoongArch, PowerPC, SPARC and MIPS.
    (047ee58ef, 990544b46, 0459424d3, e35f31246)
  * i386-pc kernel image generation reworked around --image-base rather than
    -Ttext. The 2.14 --image-base linker probe and the GNU Autoconf Archive
    requirement it brought in were reverted in favour of this approach.
    (ba2f35114, 86283bfd4, ab6f73517, 9922ed133, 1dc2986c7, 7b72d6cbd,
    935e889ab)
  * Parallel build support and a parallel build failure fix. (304ba2637,
    c2a215245)
  * Fix a linker error on macOS hosts and a build failure with platform=emu and
    libzfs. (8a58da21a, 943ce33da)
  * Stop forcibly distributing all gnulib headers. (dc827846a)
  * Compiler warning cleanups across ofpath, bootp, platform, gnulib,
    grub-protect and the arm64 Xen boot loader. (6a7fb8f74, 23becbaaf,
    f2601de58, 1ae2a2cf3, 6a9d21eaf, 081347a87, cf8b48019)
  * Replace codecs.open() in util/import_gcry.py and drop the unused
    SHA1_DIGEST_SIZE definition. (89ce24a7b, c592a9d46)

* Continuous integration:
  * GitLab CI introduced for GRUB, with builds and checks across multiple
    architectures, a powerpc64le-linux-gnu/ieee1275 job, clang jobs, scheduled
    Windows mingw builds, weekly Coverity scans, a Signed-off-by check and a
    release pipeline. (15c99a7a6, da0200d5a, 7bba0975e, ee4a4aa35, 4345af6d3,
    a3b64ccb1, 5fd3a91e7, b7c5ed972, addd5742c, f89af02ce, 1b9d412ba,
    a40d8f3fc, 1ab34666a, c1d8befec, e511c82bc)
  * CI coverage and turnaround improvements: wider clang platform coverage on
    x86_64, the bootnext functional tests added to the native and non-native
    test matrices, duplicate target/platform entries removed, failing checks
    re-run with debug information, bash xtrace enabled in the scripts, build
    artifacts always stored with a 30 day lifetime for check, and the pages job
    limited to index.html changes. (4482637b4, 4cdcb3dfa, ae199dfec, 920a440c3,
    edd057b5c, 206d331b8, c5aa88220, ae792be6b, 94a457f18, c7bf1d032,
    4a1a96a8e)

* Documentation and project infrastructure:
  * Documentation for the new commands and features: ML-DSA appended
    signatures, tpm_record_pcrs, lsefivar, the Btrfs commands, virtionet,
    net_dhcp6, access levels, the MFA key protector, password_argon2 and
    grub-mkpasswd-argon2, and device tree boot arguments. (19b933baa,
    93aedcb21, f107c2ad7, e36337934, 65bb6c229, 42bff9bdb, ed5fbe400,
    9ca263d81, ccc3620a0, 32a720f36, 7272ed9ec)
  * Document the serial port restrictions under lockdown, add the missing
    connectefi entry to the command-line command list, note that cryptomount
    now supports Argon2 and fix assorted typos in the comments and the
    documentation. (92a2f034e, 4e284ff4d, 53fae3e8a, c160b5861)
  * The 'Authentication and Authorisation' section was renamed and access level
    documentation added. (abf868b1b, ed5fbe400)
  * CONTRIBUTING and a Code of Conduct were added, and MAINTAINERS and the
    SECURITY policy were updated. (754a3d867, 9b74ffa69, da3675583, 14949bbd1,
    b07cc37ca, 342661cb8)

* Hosting moved from Savannah to freedesktop.org. (87e5dda9a)

New in 2.14:

* libgcrypt 1.11.
* LVM LV integrity and cachevol support.
* EROFS support.
* GRUB environment block inside the Btrfs header support.
* NX support for EFI platforms.
* shim loader protocol support.
* BLS and UKI support.
* Argon2 KDF support.
* TPM2 key protector support.
* Appended Signature Secure Boot Support for PowerPC.
* New option to block command line interface.
* Support dates outside of 1901..2038 range.
* zstdio decompression support.
* EFI code improvements and fixes.
* TPM driver fixes.
* Filesystems fixes.
* CVE and Coverity fixes.
* Tests improvements.
* Documentation improvements.
* ... and tons of other fixes and cleanups...

New in 2.12:

* GCC 13 support.
* clang 14 support.
* binutils 2.38 support.
* Unification of EFI Linux kernel loader across architectures.
* Transition to EFI Linux kernel stub loader for x86 architecture.
* Initial support for Boot Loader Interface.
* Support for dynamic GRUB runtime memory addition using firmware calls.
* PCI and MMIO UARTs support.
* SDL2 support.
* LoongArch support.
* TPM driver fixes.
* Many filesystems fixes.
* Many CVE and Coverity fixes.
* Debugging support improvements.
* Tests improvements.
* Documentation improvements.
* ...and tons of other fixes and cleanups...

New in 2.06:

* GCC 10 support.
* clang 10 support.
* SBAT support.
* LUKS2 support.
* Drop small MBR gap support.
* Xen Security Modules (XSM/FLASK) support.
* The lockdown mechanism similar to the Linux kernel one.
* Disable the os-prober by default.
* Many backports of GRUB distros specific patches.
* BootHole and BootHole2 fixes.
* ...and tons of other fixes and cleanups...

New in 2.04:

* GCC 8 and 9 support.
* Gnulib integration overhaul.
* RISC-V support.
* Xen PVH support.
* Native UEFI secure boot support.
* UEFI TPM driver.
* New IEEE 1275 obdisk driver.
* Btrfs RAID 5 and RIAD 6 support.
* PARTUUID support.
* VLAN support.
* Native DHCP support.
* Many ARM and ARM64 fixes.
* Many SPARC fixes.
* Many IEEE 1275 fixes.
* ...and tons of other fixes and cleanups...

New in 2.02:

* New/improved filesystem and disk support:
  * Big-endian UFS1.
  * Experimental 64-bit ext2 support.
  * Various fixes for non-512-byte sector devices.
  * New `proc' filesystem framework, used by LUKS disks.
  * Fix DM-RAID partition handling.
  * New `nativedisk' command to switch from firmware to native disk drivers.
  * Compressed HFS+.
  * DragonFly BSD labels.
  * CBFS (coreboot).
  * Handle partitioned LVM properly.
  * Use LVM UUIDs whenever possible.
  * GPT PReP.
  * New `progress' module that shows progress information while reading
    files.
  * ZFS features support.
  * ZFS LZ4 support.
  * XFS V5 format support.
  * LVM RAID1 support.

* New/improved terminal and video support:
  * Monochrome text (matching `hercules' in GRUB Legacy).
  * Morse code output using system speaker.
  * `spkmodem' output (simple data protocol using system speaker).
  * Handle Japanese special keys.
  * coreboot framebuffer.
  * Serial on ARC.
  * Native vt100 handling for grub-emu, replacing the use of the curses
    library.
  * New gfxmenu options for terminal window positioning, theme background
    image handling, and scrollbar padding, plus `item_pixmap_style' and
    `highlight_overlay'.
  * Support several more image types (paletted and greyscale).

* Boot protocol improvements:
  * Support Apple FAT binaries on non-Apple platforms.
  * Improve FreeDOS direct loading support compatibility.
  * Enable `linux16' on all x86 platforms, not just BIOS.
  * New TrueCrypt ISO loader.
  * multiboot2 boot-services EFI specification.
  * multiboot2 EFI memory map specification.
  * multiboot2 full-file specfication.

* New/improved network support:
  * New variables `net_default_*' containing properties of the default
    interface.
  * Autoload `http' and `tftp' modules if necessary.
  * Improve TFTP robustness.
  * Parse `nd' disk names in GRUB Legacy configuration files.
  * Issue separate DNS queries for IPv4 and IPv6.
  * Support IPv6 Router Advertisement to configure default router.
  * New variable net_<interface>_next_server containing next server
    from BOOTP reply.

* Coreboot improvements:
  * CBFS support both in on-disk images (loopback) and flash.
  * Ability to launch another payload from flash or disk
  * Coreboot framebuffer
  * CBMEMC support (both logging and inspecting logs)
  * Command for inspecting coreboot timestamps (`coreboot_boottime').
  * Command for inspecting coreboot tables (`lscoreboot').
  * New target default_payload.elf.
  * Increased maximal core size.
  * Prefer pmtimer for TSC calibration.

* New/improved platform support:
  * New `efifwsetup' and `lsefi' commands on EFI platforms.
  * New `cmosdump' and `cmosset' commands on platforms with CMOS support.
  * New command `pcidump' for PCI platforms.
  * Improve opcode parsing in ACPI halt implementation.
  * Use the TSC as a possible time source on i386-ieee1275.
  * Merge PowerPC grub-mkrescue implementation with the common one.
  * Support grub-mkrescue on i386-ieee1275, sparc64, bootinfo machines such
    as pSeries, and mips-arc.
  * Make grub-mkrescue better support Apple Intel Macs on CD.
  * Enable GRUB Legacy configuration file parsing on EFI.
  * Support halt for Loongson 2E.
  * ARM U-Boot and EFI ports.
  * Reorganise platform-dependent code in utilities to avoid #ifdef mess.
  * AROS and Haiku support for userspace utilities.
  * Xen PV port.
  * Fix EFI stack alignment.
  * ARM64 EFI port.
  * On Linux, read partition start offsets from sysfs if possible.
  * New grub-macbless utility, and better integration with Mac firmware in
    grub-install.
  * Support Yeeloong 3A.
  * Add `cpuid --pae' option to detect Physical Address Extension on x86.
  * Support for USB debug dongles.
  * Support for *-emu on all platforms (previously only i386/x86_64 worked).
  * Support *-emu on Windows.
  * New platform `none' which builds only user level utilities. This is now
    default if target CPU is not supported.
  * Support for booting little-endian Linux kernel on powerpc.
  * Support network boot with Oracle sun4v vnet devices.
  * Added SAS disks to the IEEE 1275 Open Firmware device list.
  * Try multiple methods for TSC (timestamp counter) calibration - PIT, pmtimer,
    EFI Stall. If everything fails, use hardcoded frequency 800MHz.
  * Support Hyper-V Gen2 platforms which lack PIT for TSC calibration.
  * Map UEFI Persistent Memory to E820 persistent memory.
  * New Xen loader on ARM64.
  * Respect alignment requirement for block device IO buffers on EFI.

* Security:
  * Add optional facility to enforce that all files read by the core image
    from disk have a valid detached digital signature.

* Performance:
  * Avoid costly division operations in many places.
  * New boot time analysis framework (`./configure --enable-boot-time').
  * Initialise USB ports in parallel.
  * New `testspeed' command to test file read speed.
  * Speed-up gfxterm by storing intermediate results in more compact format.
  * Lazy LVM/mdraid scan.
  * Disk hints.

* Scripting:
  * New `eval' and `tr' commands.
  * grub-script-check fails on scripts containing no commands.

* Installation and other utility improvements:
  * Add option to compress files on installation or image creation.
  * Using grub-reboot no longer requires setting `GRUB_DEFAULT=saved'.
  * Support probing EFI System Partition (requires os-prober >= 1.58).
  * Fix inconsistent use of `GRUB_CRYPTODISK_ENABLE' and
    `GRUB_ENABLE_CRYPTODISK'; the latter is now used consistently.
  * grub-mount handles symbolic links to directories.
  * Support disabling submenus with `GRUB_DISABLE_SUBMENU' configuration key
    for grub-mkconfig.
  * grub-install, grub-mknetdir, grub-mkrescue, and grub-mkstandalone
    rewritten in C.  They should now work in supported non-Unix-like
    environments.
  * Native mingw support.
  * Ability to install on EFI under windows.
  * Reorganise timeout handling using new `timeout_style' environment
    variable and `GRUB_TIMEOUT_STYLE' configuration key for grub-mkconfig.
    Menu hotkeys pressed during a hidden timeout now boot the corresponding
    menu entry immediately.
  * New `file' command and grub-file utility to check file types.
  * New syslinux configuration file parser.
  * Set menu entry class to primary OS name returned by os-prober to display
    OS specific icon.
  * On Linux x86 detect EFI word size in grub-install and automatically select
    correct platform (x86_64-efi or i386-efi) to install. Requires Linux kernel
    4.0 or higher.

* Build system:
  * Remove all uses of nested functions; GRUB no longer requires an
    executable stack.
  * Fix documentation build with Texinfo >= 5.1.
  * More robust and documented cross-compiling support.
  * Partial clang support for some platforms (experimental).
  * Partial mingw64 x86_64-efi compile support (highly experimental).
  * Partial mingw32 i386-* (other than already present i386-pc)
    compile support (highly experimental).
  * Support for grub-mkpasswd on Windows.
  * Eliminate the use of AutoGen.  This allowed some performance
    improvements to the build system.
  * Remove variable length arrays.
  * OpenBSD compile and tools support (NetBSD and FreeBSD were already supported).
  * Fix build with FreeType >= 2.5.1.
  * Make gentpl.py compatible with Python 3.  It now requires at least
    Python 2.6.
  * modinfo.sh contains build information now.
  * Added many new tests to improve robustness.
  * Target is built without libgcc now. Necessary builtins are reimplemented
    directly. This removes requirement for target-specific runtime on build
    system.
  * emu libusb support removed (was broken and unmaintained).
  * powerpc64le compile support.
  * Use fixed timestamp when generating GRUB image for reproducible builds.
  * Verify at build time that modules contain only supported relocations and their
    structure matches what boot-time module loader expects.
  * Do not require fonts on powerpc-ieee1275.

* Revision control moved to git.

New in 2.00:

* Appearance:
  * Official theme for gfxmenu (starfield)
  * Menu is organised with submenus.
  * Better default video mode selection using EDID.

* New platforms:
  * Itanium port.
  * Fuloong2F support (including GRUB as firmware)
  * Fuloong2E support (except GRUB as firmware)
  * ARCS (SGI machines) port.
  * qemu -M mips port.

* grub-mount to mount filesystems using GRUB FS drivers and FUSE.

* Changed security default so entries are locked by default if any superuser is
  defined. 

* New drivers:
  * EHCI.
  * AHCI.
  * ESCC serial.
  * IEEE1275 serial.
  * EFI serial.
  * Network stack for BIOS, IEEE1275, EMU and EFI, including TFTP, HTTP and DNS.

* New filesystem, filters and disks formats:
  * DVH partition map.
  * Plan9 partition map.
  * Big-endian mdraid.
  * Big-endian cpio.
  * ODC and NEWC cpio.
  * ExFAT.
  * Minix3fs.
  * Big-endian minixfs.
  * RomFS.
  * Squash4.
  * Support non-512B disk blocks.
  * LUKS and GELI support.
  * LDM read support (no install yet).
  * LZOP.

* Improved filesystem and disks formats support:
  * HFS+ label support.
  * Improved reiserfs support.
  * multidevice, mirrored and raidz(2,3) ZFS support.
  * RAID LVM (internal RAIDing) support.
  * ZFS crypto support.
  * ZLE, LZ4 and GZIP on ZFS support.
  * Support ZFS up to 33.
  * HFS string is now treated like mac-roman and not UTF-8
  * HFS mtime support.
  * Improved AFFS and SFS support.
  * LZO-compressed btrfs support.
  * cpio and tar symlinks support.
  * Better FS detection to reduce false positives.

* New boot protocols:
  * Ability to load another coreboot payload when on coreboot.
  * Plan9.
  * Freedos.
  * Ntldr/bootmgr (to load Windows bootloader).
  * chainloader --bpb support to patch FAT or NTFS BPB in memory to correct
    wrong partition offset.
  * PXE chainloading support.
  * Darwin 11 (Mac OS X Lion) protocol support.

* Boot protocol improvements:
  * Multiple initrd support.
  * Basic illumos and xnu autoconfig.

* Testing and debugging:
  * New grub-fstest commands: cat, zfsinfo, testload xnu_uuid
  * grub-fstest recursive directory compare for quickly checking that
    a directory is read correctly.
  * Backtace on crash (if gdb module is loaded, x86 only)
  * Disk cache statistics gathering.
  * GDB stub and GDB support script.
  * "make check" and "make bootcheck" expanded to almost all platforms
    (except i386-ieee1275, mips-arc, sparc64-ieee1275, ia64-efi and emu)
  * New `time' command.

* Performance:
  * Lazy scanning to avoid accessing devices which aren't really used.
    This avoids boot delay due to slow device scanning.
  * Use CPU cache when accessing video memory.
  * Search hints to first try the most likely device when searching for a
    device with given UUID. This avoids slow scanning in most cases.

* Internationalisation:
  * Updated to Unicode 6.0.
  * $"..." syntax for translation in grub scripting language. This allows easy
    translation of grub.cfg at runtime.
  * Translations to many languages included in official distribution.

* Scripting:
  * $grub_cpu and $grub_platform variables for conditioning grub.cfg on platform
    at runtime.
  * $feature_* variables to condition scripts on available features.
  * Use of ids to identify menu entries.
  * all_video module which is empty but depends on all video modules thus
    allowing easy loading of all of them.

* Installation:
  * grub-mknetdir script for easy creation of netbootable GRUB directory.
  * Itanium and mips support in grub-mkrescue.
  * grub-install support for all platforms except emu.
  * PreP partition install support.
  * No files conflict between flavours (except grub-mkrescue for ppc). This
    allows easy install of GRUB for several platforms.
  * grub-mkstandalone script for easy creating of image including all modules
    for platforms with generous limit on image size.
  * program-transform-name now functions according to usual conventions.
    Use --grubdir and --bootdir to get old behaviour.

* ADLER32 and CRC64 support (for XZ and hashsum).

* ofconsole renamed to console

* Experimental support for compiling with Apple toolchain.

* grub-mkdevicemap removed. Now all devices are detected on invocation of
  any grub utility.

New in 1.99:

* Keyboard layouts support.

* New `lsapm' command (i386-pc only).

* Parser for GRUB Legacy configuration files.

* Support RAID on virtio devices.

* Remove deprecated `root' command.

* New `euro.pf2' font which supports most European languages.

* Avoid opening the same device twice on Open Firmware platforms.

* Extend `vbeinfo' and `vbetest' commands to non-VBE graphics, as
  `videoinfo' and `videotest'.

* New `lsefisystab', `lssal', and `lsefimmap' commands on EFI platforms.

* Support explicit user claim that a device is BIOS-visible.  Devices
  listed in device.map will be assumed to be readable using only BIOS
  facilities, rather than anything more complex such as LVM or RAID.

* New bash-completion script for GRUB utilities.

* Use ACPI to shut down if possible.

* New `lsacpi' command.

* Btrfs support.

* New `--boot-directory' option to `grub-install', `grub-reboot', and
  `grub-set-default', with clearer semantics than the previous
  `--root-directory' option.

* Rename CD-ROM device to "cd" on BIOS platforms.

* Transparent decompression filters.

* Simpler PXE image generation.  New `grub-mknetdir' utility to generate
  netboot directory trees.

* New relocator.  Allows for more kernel support and more
  straightforward loader writing.

* Handle USB pendrives exposed as floppies.

* New Automake-based build system.

* Add `sendkey' command (i386-pc only).

* ZFS support.

* Support 1.x versions of mdadm metadata.

* Fix corruption when reading Reiserfs directory entries.

* Bidirectional text and diacritics support.

* Skip LVM snapshots.

* MIPS Yeeloong firmware port.

* Change grub-mkdevicemap to emit /dev/disk/by-id/ names where possible
  on GNU/Linux.

* Add `grub-mkconfig' support for Xen with Linux.

* Add `grub-mkconfig' support for initrd images on Fedora 13.

* Support >3GiB and <16MiB RAM in i386-qemu.

* Add support for Cirrus 5446 and Bochs video cards.

* Load more appropriate video drivers automatically in `grub-mkconfig'.

* USB improvements, including hotplugging/hotunplugging, hub support,
  and USB serial support.

* AMD Geode CS5536 support.

* Extensive updates to the Texinfo documentation.

* Handle symbolic links under /dev/mapper on GNU/Linux.

* Handle installation across multiple partition table types.

* Add `cmostest' command (i386/x86_64 only).

* Add support for DM-RAID disk devices on GNU/Linux.

* Remove `grub-mkisofs'.  `grub-mkrescue' now uses GNU xorriso to build
  CD images.

* `grub-mkrescue' support for EFI, coreboot, and QEMU platforms.

* Unify `grub-mkimage', `grub-setup', and `grub-install' source code
  across platforms.

* Fix VGA (as opposed to VBE) video driver, formerly a terminal driver.

* Add menu hotkey support.

* Add support for the nilfs2 filesystem.

* `grub-probe' and `grub-mkconfig' support for NetBSD.

* Support setting a background image in `grub-mkconfig'.

* Support multiple terminals in `grub-mkconfig'.

* Regexp support.

* MIPS multiboot2 support.

* Multiboot2 tag support.

* sunpc partition table support.

* Add a number of new language features to GRUB script: `for', `while',
  `until', `elif', function parameters, `break', `continue', `shift',
  multi-line quoted strings, positional parameters with `setparams',
  `return', filename wildcard expansion, and `!'.

* Support nested partition tables.  GRUB now prefers to name partitions
  in the form `(hd0,msdos1,bsd1)' rather than `(hd0,1,a)'.

* Speed up consecutive hostdisk operations on the same device.

* Compile parts of `grub-emu' as modules.

New in 1.98 - 2010-03-06:

* Multiboot on EFI support.

* Graphical menu support.

* MIPS support.

* Saved default menu entry support, with new utilities `grub-reboot' and
  `grub-set-default'.

* Unit testing framework.

* Support for multiple terminals.

* Encrypted password support, with a new utility `grub-mkpasswd-pbkdf2'.

* `grub-mkfloppy' removed; use `grub-mkrescue' to create floppy images.

* Add grub-probe support for GNU/Hurd.

* Add support for gettext.

New in 1.97:

* Add support for loading XNU (MacOS X kernel).

* ACPI override support.

* Integrated gptsync.

* Password protection support.

* Partition manipulation tool.

* Add `keystatus' command.

* Unicode fonts are now used by default.

* Add `hdparm' command.

* Add support for getting the current date and time from CMOS as variables.

* Add `drivemap' command.

* Add support for RAID levels 4,6 and 10.

* update-grub is replaced by grub-mkconfig.

* When booting from PXE, PXE can be used to load files.

* High resolution timer support.

* Image loaders now support IO buffering.

* Add `crc' command.

* Add Cygwin support.

* Add x86_64 EFI support.

* Use LZMA compression instead of LZO.

* Support for saving the environment from and loading the environment
  from a file.

* Allow the UUID to be used as device name.

* The `search' command can use UUIDs now.

* Add support for IEEE 1275 on i386.

* Create partmap.lst and use it to automatically load partition map
  modules.

* grub-mkconfig supports os-prober to add operating systems to the
  boot menu.

* The ATA driver supports devices bigger than 2 TiB.

* Add support for the UDF, AFS and EXT4 filesystems.

* The ISO9660 filesystem supports the Joliet extension

* Add support for loading kernels of FreeBSD, NetBSD and OpenBSD.

* Add new command `sleep'.

* Support for direct access to AT keyboards.

* New utility `grub-fstest'.

New in 1.96 - 2008-02-03:

* The license term is changed to GNU General Public License Version 3.

* grub-emu is made optional.  Now you have to use
  `--enable-grub-emu' to enable it.

* Add Multiboot2 support.

* grub-emu can access the host filesystem now.

* Add support for the NTFS, cpio/tar and Reiserfs filesystems.

* Add support for ATA/ATAPI.

* Add update-grub script to generate grub.cfg.

* Add grub-mkrescue script to generate floppy or ElTorito images
  (i386-pc only).

* Add support for background images in gfxterm (background_image command).

* Add support for detection of 64-bit support in CPU (cpuid command).

* GPT is now enabled in i386-pc target.

* Add grub-install for EFI.

* Ported to the following new platforms: Efika, coreboot (a.k.a. LinuxBIOS),
  OLPC XO.

* Add support for colored menu (menu_color_normal and menu_color_highlight
  variables).

* Fix support for loading Linux zImages (such as memtest86).

New in 1.95 - 2006-10-15:

* Number partitions from 1 instead of 0. For instance, the first
  partition of "hd0" is now "hd0,1" but not "hd0,0".

* grub-probefs is renamed to grub-probe, and supports printing a
  guessed OS device name and a GRUB drive name.

* RAID and LVM support is added.

* New command, echo.

* The disk API is changed to support 64-bit addressing.

* A TGA loader is added for the video API.

New in 1.94 - 2006-06-04:

* Fix several serious bugs in HFS+.

* Add experimental EFI support. Chainloading and Linux loading are
  supported at the moment.

* Add a new command "blocklist" to show a block list.

* Use --with-platform to specify a boot environment. For now, efi,
  ieee1275 and pc are supported.

* Use the filename "kernel.elf" instead of "grubof" on ieee1275.

* Install GRUB into pkglibdir instead of pkgdatadir.

* Support environmental variables. You can export variables by the
  command "export".

* Remove the commands "default" and "timeout". They are now variables.

* Add the commands "source" and "." to include a file.

* Implement experimental Video API and a new terminal "gfxterm" based
  on the Video API.


New in 1.93 - 2006-03-10:

* Add support for the HFS+ wrapper.

* Major improvements to scripting support.

* Menu entries are now scriptable.


New in 1.92 - 2005-12-25:

* Add support for GPT partition table format.

* Add a new command "play" to play an audio file on PC.

* Add support for Linux/ADFS partition table format.

* Add support for BASH-like scripting.

* Add support for Apple HFS+ filesystems.


New in 1.91 - 2005-10-15:

* Add support for LZO version 2.

* Support completion in the entry editor.

* Add VBE support.

* New commands, "search", "vbetest" and "vbeinfo".

* The option BOOT_IMAGE is passed to Linux.

* Add support for automatic decompression for gzip.

* Add support for terminfo and serial.

* Add support for x86_64.

* GRUB itself is a Multiboot-compliant kernel.

* Add new filesystems: XFS, SFS, and AFFS.


New in 1.90 - 2005-08-07:

* Rename the project name PUPA to GRUB. Now this version is the
  developmental version of GRUB officially.

* The GRUB emulator ``grub-emu'' is added.

* Add support for newworld Mac. This should work with other
  PowerPC-based machines as well, if they use IEEE 1275
  (Open Firmware).

* Too many changes to describe. Look at ChangeLog for more details.


New in 0.7:

* Problems in cross-compiling PUPA are fixed.

* Use -mrtd and -mregparm=3 to reduce the generated code sizes.	This
  means that any missing prototypes could be fatal. Also, you must take
  care when writing assembly code. See the comments at the beginning of
  startup.S, for more details.

* New utility, ``pupa-setup''. This sets up PUPA to make it bootable
  from a real disk.

* New commands, "prefix", "insmod", "rmmod" and "lsmod" are added into
  the rescue mode to manipulate PUPA modules.

* Linux support is added. Initrd is not support yet.

* Reduce the size of a core image significantly by compressing a large
  part of the core image and decompressing itself at boot time. The
  currently used algorithm is LZO (more precisely, LZO1X-999). So you
  have to install LZO to build PUPA. See
  <http://www.oberhumer.com/opensource/lzo/>, for more information.


New in 0.6 - 2002-12-27, Yoshinori K. Okuji:

* The chainloader and the FAT filesystem are modularized.

* The structure of the source tree is a bit changed.

* Support for building loadable modules is added.

* Some generic parts of pupa-mkimage are segregated.

* Some documentation files are added, according to the GNU Coding
  Standards.
