I've been (ab?)using Claude to find bugs in my software, and although it's found quite a few false positives, it's also found a lot of actual real bugs. Nothing CVE-worthy, but still important to fix. Releases include:

* passim: https://github.com/hughsie/passim/releases/tag/0.1.11
* libxmlb: https://github.com/hughsie/libxmlb/releases/tag/0.3.26
* libjcat: https://github.com/hughsie/libjcat/releases/tag/0.2.6

will follow, when all ^^^ has hit the various build-roots. If anyone wants to polish the translations in the meantime, it's the normal place: https://hosted.weblate.org/projects/fwupd/fwupd/