Add pesigcheck on UEFI platforms

And turn off patches test in rpminspect.

Signed-off-by: Marta Lewandowska <mlewando@redhat.com>

grub2.spec

@@ -16,7 +16,7 @@
 Name:		grub2
 Epoch:		1
 Version:	2.06
-Release:	131%{?dist}
+Release:	134%{?dist}
 Summary:	Bootloader with support for Linux, Multiboot and more
 License:	GPLv3+
 URL:		http://www.gnu.org/software/grub/
@@ -304,6 +304,12 @@ ln -s ../%{name}-systemd-integration.service \
 
 %undefine buildsubdir
 
+%check
+%if 0%{with_efi_arch}
+pesigcheck -i $RPM_BUILD_ROOT%{efi_esp_dir}/%{grubefiname} -n0 -c %{sb_cer}
+pesigcheck -i $RPM_BUILD_ROOT%{efi_esp_dir}/%{grubeficdname} -n0 -c %{sb_cer}
+%endif
+
 %pre tools
 if [ -f /boot/%{name}/user.cfg ]; then
     if grep -q '^GRUB_PASSWORD=' /boot/%{name}/user.cfg ; then
@@ -546,6 +552,18 @@ fi
 %endif
 
 %changelog
+* Wed Jul 29 2026 Marta Lewandowska <mlewando@redhat.com> 2.06-134
+- Add pesigcheck to check for correct SB signature on UEFI
+- Resolves: RHEL-188360
+
+* Fri Jul 24 2026 Leo Sandoval <lsandova@redhat.com> - 2.06-133
+- Run grub2-install automatically on grub2-pc posttrans
+- Resolves: #RHEL-216339
+
+* Mon Jul 21 2026 Josue Hernandez <josherna@redhat.com> - 2.06-132
+- Remove creation of /boot/loader/entries
+- Resolves: #RHEL-212729
+
 * Mon Jul 06 2026 Rolv Apneseth <rapneset@redhat.com> - 2.06-131
 - mdraid: fix metadata 1.0 detection in userspace utilities on IEEE1275
 - grub-install: use search.fs_uuid for RAID1 on IEEE1275

rpminspect.yaml

@@ -2,6 +2,7 @@
 
 inspections:
   abidiff: off
+  patches: off
 
 ---
 # Disable annobin stack check since grub's initialization code doesn't support it