linux-patch-api (1.2.0) unstable; urgency=medium

  * Add auto-enrollment on startup when certs are missing/invalid
  * Add cert validation (existence, parse, expiry, key match, CA trust)
  * Add --renew-certs CLI flag for manual cert renewal
  * Fix --enroll to exit after completion (no port conflict)
  * Add SO_REUSEADDR to prevent Address already in use errors
  * Add polling token persistence for enrollment resume after restart
  * Add exit code strategy (0=clean, 1=error, 2=enrollment in progress)
  * Increase RestartSec to 10s and add StartLimitBurst=5
  * Add cert and enrollment URL check in postinst
  * Fix misleading "Listening on" log before actual bind

 -- Echo <echo@moon-dragon.us>  Thu, 29 May 2026 10:20:00 -0500

linux-patch-api (1.1.17) unstable; urgency=medium

  * Add mandatory package cache refresh before patch_apply
  * Add health check cache refresh when stale (>4h)
  * Add cache status fields to health response

 -- Echo <echo@moon-dragon.us>  Thu, 22 May 2026 12:00:00 -0500