# What changed in zbus_polkit

> 14 changes in zbus_polkit 5 to 6 from its official release notes, upgrade guides and advisories: 10 breaking, 1 security, 2 new APIs and options. Each one cited. Sources checked 2026-11-12. HTML: https://unstale.sh/cargo/zbus_polkit/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## zbus_polkit 6

### Breaking changes

- AuthorityFeatures is now a bitflags type, changing how developers represent and use its flags. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- The options argument changes type because zbus::zvariant::Value is now zbus::Variant. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- AuthorityProxyBlocking is dropped because zbus 6 has no blocking API. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- The blocking-api feature is dropped because zbus 6 has no blocking API. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- CheckAuthorizationFlags is now a bitflags type, changing how developers represent and use its flags. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- Identity::identity_details changes type because zbus::zvariant::Value is now zbus::Variant. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- The minimum supported Rust version is raised to 1.89. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- Subject fields are hidden; its kind is available through Subject::kind. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- Subject::new_for_owner now passes a pidfd. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)
- The PID-based Subject::new_for_owner is renamed to Subject::new_for_pid. (6.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-6.0.0)

## zbus_polkit 5

### Security

- `zbus_polkit`: authorization bypass via PID reuse (5.1.0) — [security advisory](https://osv.dev/vulnerability/RUSTSEC-2026-0278)

### New APIs and options

- Implements serde::Serialize for TemporaryAuthorization, allowing it to be serialized. (5.1.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-5.1.0)
- Adds a Cargo feature that mostly proxies the corresponding zbus feature. (5.0.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-5.0.0)

### Fixes and other changes

- Uses the correct type for sending UID to polkit. (5.1.0) — [release notes](https://github.com/z-galaxy/zbus_polkit/releases/tag/zbus_polkit-5.1.0)