This is a bugfix release.

Most of the fixes are related to warnings highlighted by `gcc -fanalyzer` static source analysis.
Performance of pruning logic has been improved, avoiding unnecessary trips through redundant serialization (#2484).
A regression has been fixed so that `ostree` is properly behaving again when used from the initramfs, at a point where `/sysroot` may not be mounted yet (#2486).
A race condition related to `sysroot.readonly` has been addressed by directly setting up sysroot readonly in initramfs (#2187).

---

```
Colin Walters (14):
      Remove OstreeTlsCertInteraction bits from introspection
      remote: Fix gcc `-fanalyzer` warning
      deployment: Fix gcc `-fanalyzer` warning
      sysroot: Fix gcc `-fanalyzer` warning
      fetcher/soup: Fix gcc `-fanalyzer` warning
      static-delta: Fix probably not actually possible NULL deref
      utils: Fix unreachable `NULL` deref by adding assertion
      variantutil: Fix gcc `-fanalyzer` warnin
      Attempt to update packit flow to build in COPR
      libglnx: Bump to ef502aabf7d3a0d37f9c4d228f870ac93404447b
      ci: Enable -fanalyzer
      tests/rollsum: Use `g_malloc` not `malloc`
      prepare-root: Set up sysroot readonly in initramfs
      ci: Require `libcap2-bin` for `capsh`

Dan Nicholson (1):
      lib/prune: Avoid unnecessary object serialization

Jonathan Lebon (1):
      app: Only remount /sysroot if needed

Luca BRUNO (8):
      prepare-root: tweak log messages to clarify errors
      repo/private: move OstreeRepoAutoTransaction to a boxed type
      tests/var-mount: tweak test setup
      prepare-root: make all mount operations silent
      prepare-root: check return codes for errors when assembling paths
      prepare-root: get rid of a global variable
      prepare-root: check for read-only sysroot status early on
      Release 2021.6

Ryan Gonzalez (1):
      lib: Avoid dereferencing NULL error values

Simon McVittie (1):
      test-commit-sign.sh: Skip a unit test when running as an installed-test

Timothée Ravier (1):
      docs: Do not convert -- & --- to en/em-dash

Valentin David (1):
      lib: Fix a bad call to g_file_get_child

Šimon (Simon) Rataj (1):
      Added Fedora Kinoite link
```

Git-EVTag-v0-SHA512: 68f80d5f3585642ca98a9e9f462a12047735038b97e4e50b8ca338935a660f3da691ae1360b06f648a04ed264e9f2e4c39714cb8b7063f25152a542da8c1bba8
-----BEGIN PGP SIGNATURE-----
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=3wKo
-----END PGP SIGNATURE-----