{"schema_version":"1.7.5","id":"SUSE-SU-2026:21989-1","published":"2026-06-03T12:17:52Z","modified":"2026-06-06T18:24:19.047719615Z","related":["CVE-2025-22868","CVE-2025-22869","CVE-2025-58181","CVE-2026-33186","CVE-2026-33814","CVE-2026-34986"],"upstream":["CVE-2025-22868","CVE-2025-22869","CVE-2025-58181","CVE-2026-33186","CVE-2026-33814","CVE-2026-34986"],"summary":"Security update for google-guest-agent","details":"This update for google-guest-agent fixes the following issues:\n\nUpdate to version 20260430.00\n\n  * Update THIRD_PARTY_LICENSES to be package specific location. (#608)\n  * Update dependencies and go version to 1.26.2 (#607)\n    (bsc#1265762, CVE-2026-33814)\n  * Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)\n    (bsc#1260264, CVE-2026-33186)\n  * Backport oslogin changes for sles16 to legacy agent (#603)\n  * Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)\n  * Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)\n  * Actually finally fix the RPM spec (#601)\n  * Correct guest telemetry build target (#600)\n  * Add packaging for new telemetry extension (#599)\n  * Implement new scheduled job for routes monitor (#598)\n  * Add packaging changes for locally bundled extensions feature support (#593)\n  * Ensure the uninstall script handles GCE metadata endpoint unavailability. (#591)\n  * Disable certificates when security keys are enabled (#588)\n  * Move sourcing of per-user configs to the end of sshd_config, fixing 2FA logins. (#590)\n  * Source the contents of /var/google-users.d config files. (#586)\n  * Force remove core plugin configuration for windows (#587)\n  * network: force address manager to always consolidate the OS state (#585)\n  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)\n    (bsc#1239334, CVE-2025-22869, bsc#1253889, CVE-2025-58181)\n  * Don't delete the authorized_keys file when an empty key list\n    is passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20260424.00\n  * Bring topic-stable up to latest point. (#606)\n  * Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)\n  * fix start mode for windows on stable release (#584)\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20260423.01\n  * Update THIRD_PARTY_LICENSES to be package specific location. (#608)\n- from version 20260423.00\n  * Update dependencies and go version to 1.26.2 (#607)\n  * Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)\n  * Backport oslogin changes for sles16 to legacy agent (#603)\n  * Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)\n  * Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)\n  * Actually finally fix the RPM spec (#601)\n  * Correct guest telemetry build target (#600)\n  * Add packaging for new telemetry extension (#599)\n  * Implement new scheduled job for routes monitor (#598)\n  * Add packaging changes for locally bundled extensions feature support (#593)\n  * Ensure the uninstall script handles GCE metadata endpoint unavailability. (#591)\n  * Disable certificates when security keys are enabled (#588)\n  * Move sourcing of per-user configs to the end of sshd_config, fixing 2FA logins. (#590)\n  * Source the contents of /var/google-users.d config files. (#586)\n  * Force remove core plugin configuration for windows (#587)\n  * network: force address manager to always consolidate the OS state (#585)\n  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)\n  * Don't delete the authorized_keys file when an empty key\n    list is passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20260422.01\n  * Bring topic-stable up to latest point. (#606)\n  * Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)\n  * fix start mode for windows on stable release (#584)\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20260422.00\n  * Update dependencies and go version to 1.26.2 (#607)\n  * Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)\n  * Backport oslogin changes for sles16 to legacy agent (#603)\n  * Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)\n  * Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)\n  * Actually finally fix the RPM spec (#601)\n  * Correct guest telemetry build target (#600)\n  * Add packaging for new telemetry extension (#599)\n  * Implement new scheduled job for routes monitor (#598)\n  * Add packaging changes for locally bundled extensions feature support (#593)\n  * Ensure the uninstall script handles GCE metadata endpoint unavailability. (#591)\n  * Disable certificates when security keys are enabled (#588)\n  * Move sourcing of per-user configs to the end of sshd_config, fixing 2FA logins. (#590)\n  * Source the contents of /var/google-users.d config files. (#586)\n  * Force remove core plugin configuration for windows (#587)\n  * network: force address manager to always consolidate the OS state (#585)\n  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)\n  * Don't delete the authorized_keys file when an empty key\n    list is passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20260421.00\n  * Bring topic-stable up to latest point. (#606)\n  * Bring stable branch up to 822ad49fd52b4d29869604af836a33cb22a667ba (#592)\n  * fix start mode for windows on stable release (#584)\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20260414.00\n  * Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#604)\n- Bump Go API version to 1.26\n\n- Fix crafted JWE input with a missing encrypted key can lead to a denial\n of service (bsc#1262926, CVE-2026-34986)\n\n- Update to version 20260402.00: (bsc#1257010)\n  * Backport oslogin changes for sles16 to legacy agent (#603)\n  * Bump go.opentelemetry.io/otel/sdk from 1.37.0 to 1.40.0 (#596)\n  * Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602)\n  * Actually finally fix the RPM spec (#601)\n  * Correct guest telemetry build target (#600)\n  * Add packaging for new telemetry extension (#599)\n  * Implement new scheduled job for routes monitor (#598)\n  * Add packaging changes for locally bundled extensions feature support (#593)\n  * Ensure the uninstall script handles GCE metadata endpoint unavailability. (#591)\n  * Disable certificates when security keys are enabled (#588)\n  * Move sourcing of per-user configs to the end of sshd_config, fixing 2FA logins. (#590)\n\n- Update to version 20260108.00\n  * Source the contents of /var/google-users.d config files. (#586)\n\n- Update to version 20251223.00\n  * Force remove core plugin configuration for windows (#587)\n  * network: force address manager to always consolidate the OS state (#585)\n  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)\n  * Don't delete the authorized_keys file when an empty key list\n    is passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251218.01\n  * fix start mode for windows on stable release (#584)\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251218.00\n  * Force remove core plugin configuration for windows (#587)\n  * network: force address manager to always consolidate the OS state (#585)\n  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)\n  * Don't delete the authorized_keys file when an empty key list\n    is passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251216.00\n  * fix start mode for windows on stable release (#584)\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251215.00\n  * Force remove core plugin configuration for windows (#587)\n  * network: force address manager to always consolidate the OS state (#585)\n  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)\n  * Don't delete the authorized_keys file when an empty key list\n    is passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251210.00\n  * fix start mode for windows on stable release (#584)\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251209.00\n  * Force remove core plugin configuration for windows (#587)\n\n- Update to version 20251208.00\n  * network: force address manager to always consolidate the OS state (#585)\n  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)\n  * Don't delete the authorized_keys file when an empty key list is passed\n    to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251206.00\n  * fix start mode for windows on stable release (#584)\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251205.00\n  * network: force address manager to always consolidate the OS state (#585)\n  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)\n  * Don't delete the authorized_keys file when an empty key list\n    is passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n\n- Update to version 20251120.01\n  * fix start mode for windows on stable release (#584)\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251120.00\n  * Don't delete the authorized_keys file when an empty key list\n    is passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251117.00\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251115.00\n  * Don't delete the authorized_keys file when an empty key list is\n    passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251108.00\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251107.01\n  * Don't delete the authorized_keys file when an empty key list is\n    passed to updateAuthorizedKeysFile (#582)\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251031.00\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251030.02\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251030.01\n  * Update agent_uninstall.ps1 (#558) (#580)\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251030.00\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251011.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20251009.01\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251009.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n\n- Update to version 20251007.00\n  * Add Tyler, Saswat, Hank to OWNERS (#577)\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251006.01\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- from version 20251006.00\n  * Honor core plugin setting on windows package update (#576)\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20251005.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- from version 20250930.01\n  * Honor core plugin setting on windows package update (#576)\n- from version 20250929.01\n  * Restart agent if core plugin is disabled (#575)\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250929.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- from version 20250926.00\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250924.02\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- from version 20250924.01\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250924.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n\n- Update to version 20250923.01\n  * Add extra debug logging around toggling OS Login (#572)\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250923.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20250921.00\n  * Add extra debug logging around toggling OS Login (#572)\n- from version 20250920.01\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250920.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20250918.01\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250917.01\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20250917.00\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250916.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20250915.00\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- Disable missing daemon google_guest_agent_manager referenced by google-startup-scripts.service\n\n- Update to version 20250908.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- from version 20250907.00\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250905.01\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- from version 20250905.00\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250902.00\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- Build and install new gce_workload_cert_refresh binary\n- Fix installation source of google_metadata_script_runner_adapt script\n- Install new systemd service file\n  * gce-workload-cert-refresh.service\n\n- Update to version 20250901.00\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250831.03\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- from version 20250831.02\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250831.01\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent\n    and disable core plugin (#557)\n- from version 20250831.00\n  * Update go version to 1.25 (#565)\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250830.02\n  * Update go version for stable branch to 1.25 (#571)\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent\n    and disable core plugin (#557)\n- from version 20250830.01\n  * Update go version to 1.25 (#565)\n- from version 20250830.00\n  * Add compat adapt script to windows in agent sysprep (#569)\n  * Fix adapt to use more portable shebang line (#567)\n  * Remove routes script from packaging (#566)\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250828.00\n  * Add adapt script in stable branch as per #569 (#570)\n  * Backport fix from #567 to stable branch (#568)\n- from version 20250826.00\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and\n    disable core plugin (#557)\n- from version 20250821.01\n  * Remove routes script from packaging (#566)\n- Update Go API version to 1.25\n\n- Update to version 20250718.00\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n\n- Update to version 20250709.02\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20250709.01\n  * Update adapt script to run on startup/shutdown both (#561)\n  * Update agent_uninstall.ps1 (#558)\n  * Stop core plugin before removing agent package (#554)\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n- from version 20250709.00\n  * Revert compat behavior and call known binary directly (#560)\n  * Revert compat behavior and call known binary directly (#559)\n  * Build rollforward package to re-enable original agent and disable core plugin (#557)\n- from version 20250702.00\n  * Update adapt script to run on startup/shutdown both (#561)\n- from version 20250701.01\n  * Update agent_uninstall.ps1 (#558)\n- from version 20250701.00\n  * Stop core plugin before removing agent package (#554)\n- from version 20250628.00\n  * Startup scripts should start after agent manager instead (#553)\n  * Update presets and install dependencies on systemd units (#552)\n  * Ensure agent service is disabled (#551)\n- from version 20250626.00\n  * Disable legacy agent to enable core plugin (#550)\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n  * startup script: wrap compatibility decision into its own scripts (#538)\n  * Reapply \"oslogin: Correctly handle newlines at the end of modified files (#520)\" (#523) (#540)\n- from version 20250625.00\n  * prepare stable release.\n- Install google_metadata_script_runner_adapt script (bsc#1245759)\n\n- Update to version 20250624.00\n  * Final fix for RHEL packaging for routes setup (#549)\n  * Fix RHEL packaging for routes scripts (#548)\n  * Packaging changes to include routes script installation (#542)\n  * Update CLI name in packaging (#543)\n  * systemd should manage only the main process (#544)\n  * startup script: wrap compatibility decision into its own scripts (#538)\n  * Reapply \"oslogin: Correctly handle newlines at the end of modified\n    files (#520)\" (#523) (#540)\n- from version 20250611.01\n  * prepare stable release.\n- from version 20250611.00\n  * startup script: wrap compatibility decision into its own scripts (#538)\n  * Reapply \"oslogin: Correctly handle newlines at the end of modified\n    files (#520)\" (#523) (#540)\n- from version 20250609.00\n  * prepare stable release.\n- from version 20250605.00\n  * startup script: wrap compatibility decision into its own scripts (#538)\n  * Reapply \"oslogin: Correctly handle newlines at the end of modified\n    files (#520)\" (#523) (#540)\n  * Make sure agent added connections are activated by NM (#534)\n  * wrap NSS cache refresh in a goroutine (#533)\n  * Wicked: Only reload interfaces for which configurations are\n    written or changed. (#524)\n  * Add AuthorizedKeysCompat to windows packaging (#530)\n  * Remove error messages from gce_workload_cert_refresh and metadata\n    script runner (#527)\n  * Update guest-logging-go dependency (#526)\n  * Add 'created-by' metadata, and pass it as option to logging library (#508)\n  * Revert \"oslogin: Correctly handle newlines at the end of\n    modified files (#520)\" (#523)\n  * Re-enable disabled services if the core plugin was enabled (#522)\n  * Enable guest services on package upgrade (#519)\n  * oslogin: Correctly handle newlines at the end of modified files (#520)\n  * Fix core plugin path (#518)\n  * Fix package build issues (#517)\n  * Fix dependencies ran go mod tidy -v (#515)\n  * Fix debian build path (#514)\n  * Bundle compat metadata script runner binary in package (#513)\n  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)\n  * Update startup/shutdown services to launch compat manager (#503)\n  * Bundle new gce metadata script runner binary in agent package (#502)\n  * Revert \"Revert bundling new binaries in the package (#509)\" (#511)\n\n- Update to version 20250604.00\n  * Preparing stable build.\n- from version 20250602.00\n  * Make sure agent added connections are activated by NM (#534)\n  * wrap NSS cache refresh in a goroutine (#533)\n  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)\n  * Add AuthorizedKeysCompat to windows packaging (#530)\n  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)\n  * Update guest-logging-go dependency (#526)\n  * Add 'created-by' metadata, and pass it as option to logging library (#508)\n  * Revert \"oslogin: Correctly handle newlines at the end of modified files (#520)\" (#523)\n  * Re-enable disabled services if the core plugin was enabled (#522)\n  * Enable guest services on package upgrade (#519)\n  * oslogin: Correctly handle newlines at the end of modified files (#520)\n  * Fix core plugin path (#518)\n  * Fix package build issues (#517)\n  * Fix dependencies ran go mod tidy -v (#515)\n  * Fix debian build path (#514)\n  * Bundle compat metadata script runner binary in package (#513)\n  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)\n  * Update startup/shutdown services to launch compat manager (#503)\n  * Bundle new gce metadata script runner binary in agent package (#502)\n  * Revert \"Revert bundling new binaries in the package (#509)\" (#511)\n- from version 20250521.00\n  * Preparing stable build.\n- from version 20250515.00\n  * Make sure agent added connections are activated by NM (#534)\n  * wrap NSS cache refresh in a goroutine (#533)\n  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)\n  * Add AuthorizedKeysCompat to windows packaging (#530)\n  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)\n  * Update guest-logging-go dependency (#526)\n  * Add 'created-by' metadata, and pass it as option to logging library (#508)\n  * Revert \"oslogin: Correctly handle newlines at the end of modified files (#520)\" (#523)\n  * Re-enable disabled services if the core plugin was enabled (#522)\n  * Enable guest services on package upgrade (#519)\n  * oslogin: Correctly handle newlines at the end of modified files (#520)\n  * Fix core plugin path (#518)\n  * Fix package build issues (#517)\n  * Fix dependencies ran go mod tidy -v (#515)\n  * Fix debian build path (#514)\n  * Bundle compat metadata script runner binary in package (#513)\n  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)\n  * Update startup/shutdown services to launch compat manager (#503)\n  * Bundle new gce metadata script runner binary in agent package (#502)\n  * Revert \"Revert bundling new binaries in the package (#509)\" (#511)\n\n- Update to version 20250508.00\n  * Preparing stable build.\n\n- from version 20250506.01 (bsc#1243254, bsc#1243505)\n","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621989-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210938"},{"type":"REPORT","url":"https://bugzilla.suse.com/1239334"},{"type":"REPORT","url":"https://bugzilla.suse.com/1239944"},{"type":"REPORT","url":"https://bugzilla.suse.com/1243254"},{"type":"REPORT","url":"https://bugzilla.suse.com/1243505"},{"type":"REPORT","url":"https://bugzilla.suse.com/1245759"},{"type":"REPORT","url":"https://bugzilla.suse.com/1253889"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257010"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260264"},{"type":"REPORT","url":"https://bugzilla.suse.com/1262926"},{"type":"REPORT","url":"https://bugzilla.suse.com/1265762"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-22868"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-22869"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-58181"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-33186"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-33814"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-34986"}]}