flatpak 1.0.3 and flatpak-builder 1.0.1 releases.

flatpak 1.0.3:

• run: You can now use --system to run an app that otherwise would run the user version.
• New permission --allow=canbus that filters out access to AF_CAN sockets.
• lib: New install flags FLATPAK_INSTALL_FLAGS_NO_TRIGGERS and new function flatpak_installation_run_triggers()
• lib: Better error reporting, including some new error values that replace the generic FAILED.
• uninstall --unused: Improve handling of which .Locale extensions are used
• run: Make flatpak run on systems where $XDG_RUNTIME_DIR contains a symlink beneath /var (commonly /var/run -> /run).
• Don't export any desktop/dbus/mimetype files in subdirectories.
• build-init: We now record the base ref (if used) in the metadata. Nothing uses this atm, but it can be used by tools.
• We now respect the upstream ostree.deploy-collection-id instead of the flatpak-specific xa.collection-id metadata key to decide whether to switch to collection ids for a remote. This is useful, because if you use the new one, only new clients (that support it better) will use it.
• create-usb: Fix assertion failure in some error cases
• create-usb: Always create archive-z2 repos
• create-usb: Don't create unnecessary summary in repo
• permissions: Avoid errors if there is no permissions table
• repo: Fix flatpak repo sometimes using the wrong ostree-metadata ref.
• Avoid fsync when updating $installation/.changed.
• Add the missing appstream2 ref to the xa.cache metadata
• The test-suite got some modifications to make it easier to maintain.
• Documentation updates
• Translation updates

flatpak-builder 1.0.1:

• Run appstream-util mirror-screenshots in the sandbox, rather than on the host, as the host might not have a new enough appstream-glib.
• Fix build cache when a module has uncommon characters in the name.