systemd/259 package update

systemd.yaml

@@ -1,6 +1,6 @@
 package:
   name: systemd
-  version: "258.3"
+  version: "259"
   epoch: 0
   description: The systemd System and Service Manager
   copyright:
@@ -12,6 +12,13 @@ package:
     runtime:
       - dbus
       - kmod
+      - libacl1
+      - libarchive
+      - libaudit
+      - libblkid
+      - libmount
+      - libseccomp
+      - libselinux
       - merged-lib
       - merged-sbin
       - merged-usrsbin
@@ -53,7 +60,6 @@ environment:
       - findutils
       - gnutar
       - gperf
-      - iptables-dev
       - kmod
       - kmod-dev
       - libarchive-dev
@@ -73,6 +79,7 @@ environment:
       - linux-pam-dev
       - llvm-${{vars.llvm-vers}}
       - meson
+      - nftables-dev
       - ninja
       - openssf-compiler-options
       - pcre2-dev
@@ -93,11 +100,7 @@ pipeline:
     with:
       repository: https://github.com/systemd/systemd
       tag: v${{package.version}}
-      expected-commit: 56a85121cd3502e824ed368a6b06dda924932bcf
-
-  - uses: patch
-    with:
-      patches: pkgconf-expose-variables-for-system-alloc-uid-gid-min.patch
+      expected-commit: 9ca433482f2281d71718718705ca8cd3bf562ad6
 
   # systemd-detect is currently broken for aarch64 GCP VM's https://github.com/systemd/systemd/pull/38125
   # https://github.com/chainguard-dev/internal-dev/issues/17776
@@ -188,6 +191,8 @@ subpackages:
             # 2025/03/28 11:52:30 INFO Assertion 'mkdtemp_malloc("/tmp/test-rm-rf.XXXXXXX", &d) >= 0' failed at src/test/test-rm-rf.c:19, function test_rm_rf_chmod_inner(). Aborting.
             # 2025/03/28 11:52:30 INFO (setresuid) terminated by signal ABRT.
             # 2025/03/28 11:52:30 INFO Assertion 'r >= 0' failed at src/test/test-rm-rf.c:100, function test_rm_rf_chmod(). Aborting.
+            # test-firewall-util - Assertion failed: "r = fw_nftables_add_masquerade(nfnl, true, AF_INET6, &u1, 128)" failed with unexpected error: -2/ENOENT
+            # test-hostname-setup - does not work in Docker (Assertion failed: Expected "unshare(CLONE_NEWUTS)" to succeed, but got errno: 1/EPERM)
             /usr/lib/systemd/tests/run-unit-tests.py -u \
             -s test-sd-device \
             -s test-path-util \
@@ -203,7 +208,9 @@ subpackages:
             -s test-namespace \
             -s test-mount-util \
             -s test-bpf-foreign-programs \
-            -s test-execute
+            -s test-execute \
+            -s test-firewall-util \
+            -s test-hostname-setup
 
   - range: standalone-binaries
     name: ${{range.key}}-standalone
@@ -402,7 +409,7 @@ subpackages:
     description: "systemd container tools"
     dependencies:
       runtime:
-        - gnutar
+        - libarchive
         - merged-lib
         - merged-sbin
         - merged-usrsbin
@@ -458,7 +465,7 @@ subpackages:
           # without openssl-provider-legacy import errors referencing CRYPTOGRAPHY_OPENSSL_NO_LEGACY
           packages:
             - curl
-            - gnutar
+            - libarchive
       pipeline:
         - uses: test/verify-service
         - runs: |
@@ -808,6 +815,11 @@ test:
         - systemd-dev
         - libsystemd
   pipeline:
+    - runs: |
+        if [ '${{package.version}}-r${{package.epoch}}' != '259-r0' ]; then
+          echo 'Check if unit test test-firewall-util can be enabled now!'
+          exit 1
+        fi
     - uses: test/verify-service
       with:
         skip-files: syslog.socket # intentionally shipped without a corresponding service