Warning

KB5007651 cannot be installed due to some indeterminate bug, so this release will be stuck in a reboot loop unless you ignore that KB with something like:

  provisioner "windows-update" {
    filters = [
      # exclude KB5007651:
      #   Update for Windows Security platform - KB5007651 (Version 10.0.29510.1001)
      # NB it can only be applied while the user is logged in.
      "exclude:$_.Title -like '*KB5007651*'",
      "include:$true",
    ]
  }

Changelog

• 632974b bump version
• 1d2fc27 show how to exclude KB5007651
• d074bd7 update the referenced documentation urls
• c9a775a upgrade dependencies
• 561d24b Always reboot after installing updates (#162) (from v0.18.0)

Warning

KB5007651 cannot be installed due to some indeterminate bug, so this release will be stuck in a reboot loop unless you ignore that KB with something like:

  provisioner "windows-update" {
    filters = [
      # exclude KB5007651:
      #   Update for Windows Security platform - KB5007651 (Version 10.0.29510.1001)
      # NB it can only be applied while the user is logged in.
      "exclude:$_.Title -like '*KB5007651*'",
      "include:$true",
    ]
  }

Changelog

• 561d24b Always reboot after installing updates (#162)
• ab3adc2 bump version

Changelog

• b58465e upgrade dependencies

Changelog

• 875de78 sign the release checksum artifact

Changelog

• 2dce233 Upgrade dependencies to mitigate software vulnerabilities (CVE-2025-58058)
• fe8eafe restart the pending restart session when interrupted
• 929b359 upgrade dependencies

Changelog

• 5bca8d7 add support for testing the uefi image flavor
• 5671726 restart the update provisioning session when interrupted
• 306d203 upgrade dependencies

Changelog

• 309ab64 Upgrade dependencies to mitigate software vulnerabilities
• 2d562e3 add devcontainer
• ff14adb upgrade dependencies

Changelog

• 0f751b1 upgrade dependencies

Changelog

• c372121 add link to the windows 11 known issue about the windows update api
• f75bd00 upgrade dependencies

Changelog

• 2630608 try to repair the windows update settings to work in non-preview mode