From 4559aa6c70f57d963d093827ea076beef10c8e98 Mon Sep 17 00:00:00 2001
From: Miguel Jacq <mig@mig5.net>
Date: Mon, 3 Aug 2026 15:59:43 +1000
Subject: [PATCH] 0.8.2

---
 CHANGELOG.md     | 1 +
 debian/changelog | 6 ++++++
 rpm/enroll.spec  | 4 +++-
 3 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c4d97be..00a58b5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,7 @@
 # 0.8.2
 
  * Bump dependencies
+ * Make remote harvest zipapp stdlib-only
 
 # 0.8.1
 
diff --git a/debian/changelog b/debian/changelog
index dbbc03c..d395d98 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+enroll (0.8.2) unstable; urgency=medium
+
+  * Make remote harvest zipapp stdlib-only
+
+ -- Miguel Jacq <mig@mig5.net>  Mon, 03 Aug 2026 16:00:00 +1000
+
 enroll (0.8.1) unstable; urgency=medium
 
   * Security: fix a TOCTOU in remote harvest.
diff --git a/rpm/enroll.spec b/rpm/enroll.spec
index 5253c80..42399b9 100644
--- a/rpm/enroll.spec
+++ b/rpm/enroll.spec
@@ -1,4 +1,4 @@
-%global upstream_version 0.8.1
+%global upstream_version 0.8.2
 
 Name:           enroll
 Version:        %{upstream_version}
@@ -44,6 +44,8 @@ Enroll a server's running state retrospectively into Ansible.
 
 %changelog
 * Mon Aug 03 2026 Miguel Jacq <mig@mig5.net> - %{version}-%{release}
+- Make remote harvest zipapp stdlib-only
+* Mon Aug 03 2026 Miguel Jacq <mig@mig5.net> - %{version}-%{release}
 - Security: fix a TOCTOU in remote harvest.
 * Mon Jul 13 2026 Miguel Jacq <mig@mig5.net> - %{version}-%{release}
 - Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering window created by recursively chowning the bundle before packaging without making the plaintext archive world-readable.