update TODO

diff --git a/TODO b/TODO
index 65a987f52c12f4a5371df43177db929a060f50d5..d710bc252e6f1818ad158116284c1c80678beaad 100644 (file)
--- a/TODO
+++ b/TODO
@@ -117,6 +117,9 @@ Deprecations and removals:
 
 Features:
 
+* gpt-auto: generate mount units that reference partitions via
+  /dev/disk/by-diskseq/… so that they can't be swapped out behind our back.
+
 * lock down acceptable encrypted credentials at boot, via simple allowlist,
   maybe on kernel command line:
   systemd.import_encrypted_creds=foobar.waldo,tmpfiles.extra to protect locked