I have done f41/rawhide.
(This is just: ' koji tag-pkg f41-pending shim-15.8-2 shim-unsigned-aarch64-15.8-2 shim-unsigned-x64-15.8-2' which will also work for f40-pending, but for f39 we will need to tag into f39-signing-pending and wait for it to be signed, then tag it into f39-updates).

we also tagged it into the latest F40 Beta candidate (Beta-1.7) but not yet into f40 stable.

Could you expand on "We also need to figure out what ELN wants to do here."? I'm not clear on what is being asked.

shim is a weird package. Because we need to build it and then get that exact build signed. For fedora we do this by building in the oldest stable release and then getting that build signed, then manually tagging it into all the other releases. So they all use that exact same build.

Does eln want us to tag shim-15.8-2 into eln like we do for all the Fedora branches?
Or does eln want to do some seperate build and get it seperately signed?
Or does eln want to keep the current shim version ( shim-15.6-2 ) because the newer one doesn't affect them?

Please just build and tag shim into ELN and keep it aligned with whatever is in Rawhide. We don't need any special handling beyond that.

Well, we don't build it, we just use the existing already signed one. ;)

I'll tag that in then.

FYI, https://bodhi.fedoraproject.org/updates/FEDORA-2024-d6b824677a

ok, tagged in everywhere.