From acc8de40452c54b051ce896d4f30a79bce044506 Mon Sep 17 00:00:00 2001
From: Antony Messerli <antony@mes.ser.li>
Date: Sat, 24 Jan 2026 10:19:44 -0600
Subject: [PATCH] Bump version to 3.x series for code signing certificate
 update

- Update version.txt from 2.0.90 to 3.0.0
- Update boot_version from 2.x to 3.x in defaults/main.yml
- Update hardcoded version references in script/build_release
- Update example in user_overrides.yml
- Add 3.0.0 changelog entry with breaking change notice
- Users with 2.x bootloaders will auto-upgrade to 3.x on boot

IMPORTANT: Updated binaries should be downloaded to pull latest
netboot.xyz with updated code signing certificates embedded for
image signature verification.
---
 CHANGELOG.md                       | 10 +++++++++-
 roles/netbootxyz/defaults/main.yml |  2 +-
 script/build_release               |  6 +++---
 user_overrides.yml                 |  2 +-
 version.txt                        |  2 +-
 5 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a2252e81..585da341 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,7 +3,15 @@
 
 All notable changes to this project will be documented in this file.
 
-## [2.0.90] - Unreleased
+## [3.0.0] - Unreleased
+
+### Changed
+
+- **BREAKING**: Updated embedded certificates used for image signature verification in iPXE bootloaders
+- Users with 2.x bootloaders will be automatically upgraded to 3.x on first boot
+- Bumped major version to 3.x series due to code signing certificate updates requiring bootloader update
+
+## [2.0.90] - 2025-01-24
 
 ## [2.0.89] - 2025-11-08
 
diff --git a/roles/netbootxyz/defaults/main.yml b/roles/netbootxyz/defaults/main.yml
index 0d5e3874..d73f1a4e 100644
--- a/roles/netbootxyz/defaults/main.yml
+++ b/roles/netbootxyz/defaults/main.yml
@@ -1,6 +1,6 @@
 boot_domain: boot.netboot.xyz
 boot_timeout: 300000
-boot_version: 2.x
+boot_version: 3.x
 bootloader_disks:
 - netboot.xyz
 bootloader_http_enabled: true
diff --git a/script/build_release b/script/build_release
index dff2e905..55f2443d 100755
--- a/script/build_release
+++ b/script/build_release
@@ -2,8 +2,8 @@
 set -e
 
 TYPE=$1
-HARD_RELEASE="2.x"
-HARD_RC="2.x-RC"
+HARD_RELEASE="3.x"
+HARD_RC="3.x-RC"
 DEV_URL="dev.boot.netboot.xyz"
 STAGING_URL="staging.boot.netboot.xyz"
 PROD_URL="boot.netboot.xyz"
@@ -24,7 +24,7 @@ elif [[ "${TYPE}" == "release" ]]; then
   BOOT_VERSION=$(cat version.txt)
   BOOT_DOMAIN="${PROD_URL}/${BOOT_VERSION}"
 elif [[ "${TYPE}" == "rolling" ]]; then
-  HARD_RELEASE="2.x"
+  HARD_RELEASE="3.x"
   PROD_URL="boot.netboot.xyz"
 fi
 
diff --git a/user_overrides.yml b/user_overrides.yml
index f14cb50a..35eb3d22 100644
--- a/user_overrides.yml
+++ b/user_overrides.yml
@@ -14,7 +14,7 @@ make_num_jobs: 1
 # boot_domain: boot.mysitename.com
 
 # set boot version
-# boot_version: "2.x"
+# boot_version: "3.x"
 
 # bootloader_tftp_enabled: false
 # bootloader_https_enabled: true
diff --git a/version.txt b/version.txt
index 36831c3e..4a36342f 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-2.0.90
+3.0.0