# changelog

author: Filipe Rosset <rosset.filipe@gmail.com> - 0.9.5-5
changelog:
  - Modernized spec file for rawhide/epel10 - Removed redundant %%global
    _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
    %%make_build for better compliance - Updated %%install to use more
    idiomatic install commands - Listed binaries explicitly in %%files to
    avoid warnings - Improved man page globs to be compression-neutral -
    Ensured correct directory ownership for logs


author: Simone Caronni <negativo17@gmail.com> - 1:1.4.36-1
changelog:
  - All references to 1.4.36.0 have disappeared completely from the git
    repository and 1.4.36 has been released in place. Bump Epoch to point to
    a real release.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.48-1
changelog:
  - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4,
    fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7-2
changelog:
  - Porting to qt6
  - Add %{name}-3.7-qwtconfig.pri.patch
  - Remove "env QT_QPA_PLATFORM=xcb" from GoldenCheetah.desktop


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7.1-1
changelog:
  - This is a patch release update for v3.7 to include high priority fixes for
    stability and security and to make new planning and calendar functionality
    available to a wider audience


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:25.0.0-1
changelog:
  - Updated to v25.0.0.
  - Subpackage GtkAda3-devel now requires the GTK+-3.0 and GLib 2.0 development
    files.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.13.3-29
changelog:
  - Use the bundled gtest. GTest 1.17.1 will require C++17, and this version of
    ITK can’t be compiled as C++17.


author: Jerry James <loganjerry@gmail.com> - 1.26.05-1
changelog:
  - Version 1.26.05
  - Update to normaliz 3.11.1
  - Build with jansson support
  - Remove Lmod workaround
  - Unbundle pythoncapi-compat


author: Íñigo Huguet <ihuguet@riseup.net>
changelog:
  - Update to 1.56-rc2 release
  - Fixes CVE-2025-9615. To achieve it, remove normal users' permission to modify system connections.


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.56.0-1
changelog:
  - Update to 1.56.0 release
  - Enable polkit_noauth_group=wheel (rhbz#2437985)
  - Fix bugs related to secrets handling and permissions


author: Douglas Kosovic <doug@uq.edu.au> - 1.20.20-5
changelog:
  - Add README.Fedora for Fedora or README.EPEL for EPEL
  - Use (go-l2tp or xl2tpd) dependency for Fedora 43 to handle upgrades
    from earlier Fedora versions that had xl2tpd installed.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.0-1
changelog:
  - Updated to 1.52.0 release
    Verify file permissions for private connections to prevent unprivileged
    user from using other user's certs (CVE-2025-9615)
  - Ensure NetworkManager dependency has CVE-2025-9615 update.
  - Correct sed example in generated README.Fedora and README.EPEL files.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.2-1
changelog:
  - Updated to 1.52.2 release which has experimental IPv6 support.
  - Update CVE-2025-9615 related Requires and BuildRequires.
  - Fix typos found by codespell.


author: Dan Fruehauf <malkodan@gmail.com> - 1.4.1-1
changelog:
  - Update to upstream 1.4.1
  - Local bind support
  - Remote bind support
  - Support for no remote device, sudo command, and no remote command


author: Dan Fruehauf <malkodan@gmail.com> - 1.4.3-1
changelog:
  - Always run autoreconf -fvi
  - Fix file access for private key and known hosts (rhbz#2428396)
  - Fix pkg-config macro
  - Move D-Bus policy file to /usr/share/dbus-1/system.d/


author: John Marshall <jmarshall@hey.com> - 2.4.1-4
changelog:
  - Avoid incorrect "Provides: libhts.so.3" from internal shared library
  - Update description to reflect that 2.4.1 contains HTSlib 1.15.1


author: Al Stone <ahs3@fedoraproject.org> - 20240322-1
changelog:
  - Update source tree to 20240322 version from upstream.  NB: this update
    is done in conjunction with removing s390x support due to the large
    number of patches that are now rendered obsolete.  Closes BZ#2138250.
  - Note, too, that the upstream version of the tarball is missing two
    commits and has the wrong name; discussed this with upstream and
    included a patch with the two commits to correct this, and renamed
    the tarballs to try to maintain consistency. So, upstream is actually
    named version 20240321, but it should be 20240322 according to their
    own git tree (see tag G20240322 on github).
  - Removed executable bit from all the upstream source files
  - Remove big-endian support, aka s390x.  Closes BZ#2298855.
  - Remove several 32-bit only patches that are also obsolete since they
    are for unsupported architectures (thanks to pbonzini and PR#5).
  - Remove PIE patches since that is currently the default (again, thanks
    to pbonzini and PR#5)


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.15-1
changelog:
  - update to 3.6.2.15 (resolves rhbz#2416531)
  - drop serial ctest call work-around, fixed upstream
    (https://github.com/adventuregamestudio/ags/pull/2910)


author: Björn Persson <Bjorn@Rombobjörn.se> - 2.9-1
changelog:
  - Upgraded to 2.9.
  - Set_Up and Tear_Down procedures are now called for testsuites derived from
    Ahven.Framework.Test_Suite.


author: Adam Williamson <awilliam@redhat.com> - 1.2.15.3-4
changelog:
  - Backport fix for CVE-2026-25068 (buffer overflow) (#2435423)
  - Backports to support new Lenovo laptop models (#2480230)


author: Michal Schorm <mschorm@redhat.com> - 3.3.2-3
changelog:
  - Rebuilt for  https://fedoraproject.org/wiki/Changes/switch_distribution_default_MariaDB_from_10.11_to_11.8


author: Nick Clifton <nickc@redhat.com> - 13.08-1
changelog:
  - Rebase sources and rebuild against the latest version of gcc.  (#2445165)
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)


author: Nick Clifton <nickc@redhat.com> - 13.13-1
changelog:
  - Annocheck: Do not complain about Rust binaries that do not support branch protection.
  - Annocheck: Skip the dynamic-tags test if a GNU Property note is present.
  - Annocheck: Look for compromising characters in pathnames.
  - Require C++17 for building.


author: Maxwell G <maxwell@gtmx.me> - 2.20.1-1
changelog:
  - Update to 2.20.1. Fixes rhbz#2382388.
  - Update bundled() Provides
  - Remove upstreamed patches
  - Remove old Provides and Obsoletes for ansible-base and Ansible <= 2.9


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Richard W.M. Jones <rjones@redhat.com> - 18.12.1-1.10
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - Move to fork of Augeas which contains a small number of PRs:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.5
changelog:
  - Rebase our branch on top of Augeas
  - Use patches to make it clearer what we are adding on top of upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Soft fork Augeas, see
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/J7SM6NLIMPU7J4LIRBDPTPWVXOKZWWEH/
  - Add more patches from pull requests that affect Fedora and RHEL


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.10
changelog:
  - Fix parsing /etc/crypttab with link-volume-key (RHBZ#2452937)
    https://github.com/hercules-team/augeas/pull/880
  - Fix miscellaneous GCC 16 errors
    https://github.com/hercules-team/augeas/pull/881


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Björn Persson <Bjorn@Rombobjörn.se> - 2:24.0.0-3
changelog:
  - Fixed to use /dev/urandom instead of a non-cryptographic PRNG.
    Resolves: CVE-2024-41708 (RHBZ#2314766)


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:26.0.0-1
changelog:
  - Updated to v26.0.0.
  - This version adds a time limit to mitigate CVE-2025-52494.
    Resolves: RHBZ#2402593


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260306-1.eb3ee43
changelog:
  - Update to latest firmware
  - Split out RPi5 bits to a new sub-package
  - Update sub package license details
  - Initial No RTC service for no RTC systems


author: Dalibor Pospisil <dapospis@redhat.com> - 1.31.4-1
changelog:
  - fixed getting base arch on Fedora and c10s
  - rlReport support SKIP result, by chuhu
  - fixed rlIsRHELLike on systems without /etc/os-release, e.g. RHEL-6
  - some minor updates


author: Dalibor Pospisil <dapospis@redhat.com> - 1.32
changelog:
  - introduction of the new way to foist the os-relase and thus present
    different system to the tests, including the version, by KwisatzHaderach


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Simone Caronni <negativo17@gmail.com> - 0.1-1
changelog:
  - Update to 0.1 for https://fedoraproject.org/wiki/Releases/42/ChangeSet#Unify_/usr/bin_and_/usr/sbin


author: Paul Howarth <paul@city-fan.org> - 2.2.18-1
changelog:
  - Update to 2.2.18 (rhbz#2407559)
    - Much better CSS language support
    - The color editor now also supports hsl() and rgb() style colors
    - Show colors by just hovering the mouse over a color code
    - Reinstate feature to dynamically change a shortcut key by hovering the
      mouse over a menu item and pressing a new shortcut key again; this feature
      was present in all gtk2 applications and has not been working for bluefish
      gtk3 builds until now
    - Remove the infobrowser from the build since it no longer compiles with new
      libxml versions; this plugin was already deprecated and disabled by default
      for years


author: Paul Howarth <paul@city-fan.org> - 2.2.19-1
changelog:
  - Update to 2.2.19 (rhbz#2416526)
    - Fix a regression in 2.2.18 that could cause a crash when right clicking in
      a document of type Text
    - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
      main menu is now also working in the snippets menu


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0 (rhbz#2435810)
    - Bluefish 2.4.0 has some new features and many small improvements; it is no
      longer  a 2.2 release because backwards compatibility with the 2.0 series
      of Bluefish has been removed
    - If you upgrade from 2.0 straight to 2.4, your config files and project
      files are no longer 100% correctly loaded
    - Starting from 2.4, Bluefish will place config files no longer in ~/.bluefish
      - On Linux it will be ~/.config and ~/.local/
      - On Windows it will be LocalAppData and RoamingAppData
      - On OSX it will be ~/Library/Application Support
    - The biggest new feature, still experimental, is that you can edit two
      documents side-by-side
    - You can change opening and ending tags in XML or HTML simultaneously if you
      hit [ctrl][t]
    - You can more easily save the current contents to a template
    - For new users, and also active in new projects, is a UI selection dialog,
      where you can choose between a UI optimised for web development,
      programming or just have everything enabled or disabled; this will help
      new Bluefish users to customize Bluefish in an easier way
    - There are a few fixes as well:
      - Selecting lines by dragging in the margin works more reliably
      - Paste special works more reliably
      - Line comments in Python are better detected, which is visible in the
        syntax highlighting
      - The toggle comment function is improved
      - The Windows build has better error messages when starting external
        commands fails


author: Paul Howarth <paul@city-fan.org> - 2.4.1-1
changelog:
  - Update to 2.4.1
    - Bluefish 2.4.1 is a minor maintenance release with a few notable changes
    - The experimental "side by side" feature that was introduced in 2.4.0 is no
      longer experimental and is fully stable now
    - A new feature is that Bluefish will automatically adjust the text colours
      for people that use a dark desktop theme
    - Translations for Ελληνικά (Greek) and தமிழ் (Tamiḻ) have been completely
      renewed
    - A critical bug and a regression in the split view function has been fixed
    - The windows build has some minor improvements
    - Several translations are updated


author: Bryn M. Reeves <bmr@redhat.com> - 1.6.6-1
changelog:
  - tests: drop remaining Python2 compat handling
  - boom.config: drop Python2 compat handling for ConfigParser
  - dist: update example boom.conf
  - boom: use correct option names in BoomConfig.__str__()
  - boom: use write_boom_config() in boom.command.create_config()
  - config: add missing [cache] section to boom.config.__make_config()
  - config: add missing [cache] section handling to boom.config._sync_config()
  - config: treat {boom,boot}_root and {boom,boot}_path as synonyms
  - dist: enable check in boom-boot.spec
  - dist: replace license classifier with SPDX expressions
  - boom: replace __make_map_key() function with dictionary comprehension
  - dist: clean up copyright statements and convert to SPDX license headers
  - dist: update GPLv2 text in COPYING
  - boom: use lazy printf formatting when logging
  - boom: fix report argument formatting
  - tests: drop separate coverage runs and split out reporting step
  - tests: switch Fedora tests to fedora:latest
  - tests: bracket test cases with log messages
  - tests: fix duplicate log handlers in test suite
  - report: strip trailing whitespace from report output
  - legacy: use 'is' instead of explicit type comparison
  - boom: clean up new OsProfile if setting uname_pattern fails
  - boom: add CentOS Stream to uname heuristics table
  - boom: fix license headers across tree
  - dist: update spec file changelog and release
  - dist: drop unused systemd-rpm-macros BuildRequires
  - dist: fix Source URL and autosetup invocation


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 3.9.0-6
changelog:
  - Fix security vulnerabilities
    CVE-2026-32877,CVE-2026-32883,CVE-2026-32884,CVE-2026-34580,CVE-2026-
    34582


author: Jose Fernandez <me@jrfernandez.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
  - Update to upstream version 0.7.1
  - Drop patches for dependency version relaxation (no longer needed with new
    upstream)
  - Fixes CVE-2025-58160: fixes RHBZ#2391984, fixes RHBZ#2392018


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-6
changelog:
  - Change: Dropping of cert.pem file (Resolves: rhbz#2360110)
    https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Remove the following symlinks:
  -    # /etc/pki/tls/cert.pem
  -    # /etc/pki/tls/certs/ca-certificates.crt
  -    # /etc/pki/tls/certs/ca-bundle.trust.crt
  -    # /etc/pki/tls/certs/ca-bundle.crt
  -    # /etc/ssl/cert.pem
  -    # /etc/ssl/certs/ca-certificates.crt
  -    # /etc/ssl/certs/ca-bundle.trust.crt
  -    # /etc/ssl/certs/ca-bundle.crt
  - Directory /etc/pki/ca-trust/extracted/openssl is being deprecated,
    it is removed upon updating unless there are files present inside it.


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-8
changelog:
  - update-ca-trust: Added a temporary, compatibility option `--rhbz2387674` to
    the `extract` command. This flag restores legacy certificate
    symlinks (e.g., `/etc/ssl/cert.pem`) to address issues with older software
    that has not yet adapted to their removal. This essentially provides a
    temporary way to revert the "Dropping of cert.pem file".


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.304-2
changelog:
  - Update to CKBI 2.80_v9.0.304 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2025.2.80_v9.0.304-7
changelog:
  - Restore /etc/ssl/certs legacy structure and OpenSSL trusted bundles.
    This brings back certificate bundles in /etc/ssl/certs as they were before
    the "Dropping of cert.pem file" change, ensuring compatibility with software
    expecting the Debian-style file structure.


author: Jerry James <loganjerry@gmail.com> - 1:2.2.1-4
changelog:
  - Add patch from the cryptominisat project
  - Build with cmake instead of autotools
  - Both changes needed to update cryptominisat to latest version


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.71-1
changelog:
  - Update to 146.0.7680.71
  - * CVE-2026-3913: Heap buffer overflow in WebML
  - * CVE-2026-3914: Integer overflow in WebML
  - * CVE-2026-3915: Heap buffer overflow in WebML
  - * CVE-2026-3916: Out of bounds read in Web Speech
  - * CVE-2026-3917: Use after free in Agents
  - * CVE-2026-3918: Use after free in WebMCP
  - * CVE-2026-3919: Use after free in Extensions
  - * CVE-2026-3920: Out of bounds memory access in WebML
  - * CVE-2026-3921: Use after free in TextEncoding
  - * CVE-2026-3922: Use after free in MediaStream
  - * CVE-2026-3923: Use after free in WebMIDI
  - * CVE-2026-3924: Use after free in WindowDialog
  - * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  - * CVE-2026-3926: Out of bounds read in V8
  - * CVE-2026-3927: Incorrect security UI in PictureInPicture
  - * CVE-2026-3928: Insufficient policy enforcement in Extensions
  - * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  - * CVE-2026-3930: Unsafe navigation in Navigation
  - * CVE-2026-3931: Heap buffer overflow in Skia
  - * CVE-2026-3932: Insufficient policy enforcement in PDF
  - * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  - * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  - * CVE-2026-3936: Use after free in WebView
  - * CVE-2026-3937: Incorrect security UI in Downloads
  - * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  - * CVE-2026-3939: Insufficient policy enforcement in PDF
  - * CVE-2026-3940: Insufficient policy enforcement in DevTools
  - * CVE-2026-3941: Insufficient policy enforcement in DevTools
  - * CVE-2026-3942: Incorrect security UI in PictureInPicture
  - Fix build errors
  - Refresh patches for new upstream changes
  - Remove patches merged by upstream
  - Hoshino Lina: Update to cef-146.0.6+g68649e2 (rhbz#2450085)


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.75-1
changelog:
  - Update to 146.0.7680.75
  - * CVE-2026-3909: Out of bounds write in Skia
  - * CVE-2026-3910: Inappropriate implementation in V8


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
  - * CVE-2026-4439: Out of bounds memory access in WebGL
  - * CVE-2026-4440: Out of bounds read and write in WebGL
  - * CVE-2026-4441: Use after free in Base
  - * CVE-2026-4442: Heap buffer overflow in CSS
  - * CVE-2026-4443: Heap buffer overflow in WebAudio
  - * CVE-2026-4444: Stack buffer overflow in WebRTC
  - * CVE-2026-4445: Use after free in WebRTC
  - * CVE-2026-4446: Use after free in WebRTC
  - * CVE-2026-4447: Inappropriate implementation in V8
  - * CVE-2026-4448: Heap buffer overflow in ANGLE
  - * CVE-2026-4449: Use after free in Blink
  - * CVE-2026-4450: Out of bounds write in V8
  - * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  - * CVE-2026-4452: Integer overflow in ANGLE
  - * CVE-2026-4453: Integer overflow in Dawn
  - * CVE-2026-4454: Use after free in Network
  - * CVE-2026-4455: Heap buffer overflow in PDFium
  - * CVE-2026-4456: Use after free in Digital Credentials API
  - * CVE-2026-4457: Type Confusion in V8
  - * CVE-2026-4458: Use after free in Extensions
  - * CVE-2026-4459: Out of bounds read and write in WebAudio
  - * CVE-2026-4460: Out of bounds read in Skia
  - * CVE-2026-4461: Inappropriate implementation in V8
  - * CVE-2026-4462: Out of bounds read in Blink
  - * CVE-2026-4463: Heap buffer overflow in WebRTC
  - * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
  - * High CVE-2026-4673: Heap buffer overflow in WebAudio
  - * High CVE-2026-4674: Out of bounds read in CSS
  - * High CVE-2026-4675: Heap buffer overflow in WebGL
  - * High CVE-2026-4676: Use after free in Dawn
  - * High CVE-2026-4677: Out of bounds read in WebAudio
  - * High CVE-2026-4678: Use after free in WebGPU
  - * High CVE-2026-4679: Integer overflow in Fonts
  - * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 146.0.9^chromium146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
  - * High CVE-2026-5273: Use after free in CSS
  - * High CVE-2026-5272: Heap buffer overflow in GPU
  - * High CVE-2026-5274: Integer overflow in Codecs
  - * High CVE-2026-5275: Heap buffer overflow in ANGLE
  - * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
  - * High CVE-2026-5277: Integer overflow in ANGLE
  - * High CVE-2026-5278: Use after free in Web MIDI
  - * High CVE-2026-5279: Object corruption in V8
  - * High CVE-2026-5280: Use after free in WebCodecs
  - * High CVE-2026-5281: Use after free in Dawn
  - * High CVE-2026-5282: Out of bounds read in WebCodecs
  - * High CVE-2026-5283: Inappropriate implementation in ANGLE
  - * High CVE-2026-5284: Use after free in Dawn
  - * High CVE-2026-5285: Use after free in WebGL
  - * High CVE-2026-5286: Use after free in Dawn
  - * High CVE-2026-5287: Use after free in PDF
  - * High CVE-2026-5288: Use after free in WebView
  - * High CVE-2026-5289: Use after free in Navigation
  - * High CVE-2026-5290: Use after free in Compositing
  - * Medium CVE-2026-5291: Inappropriate implementation in WebGL
  - * Medium CVE-2026-5292: Out of bounds read in WebCodecs
  - removed ppc64le-build-error patch that is merged in upstream


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.7.0-20
changelog:
  - Drop serverca in the koji config for https://fedoraproject.org/wiki/Changes/droppingOfCertPemFile
    Fixes: RHBZ#2358273, RHBZ#2483718
  - Add rpmautospec dependency
    Fixes: RHBZ#2414574


author: Troy Dawson <tdawson@redhat.com> - 0.10.1-1
changelog:
  - Determining if package is synced solely on distrobaker config (sgajdosi)
  - Use the authenticated session for PP API (sgallagh)


author: Troy Dawson <tdawson@redhat.com> - 0.10.2-1
changelog:
  - Add support for cXs-aie-partner branches : CS-3294 (michal)
  - Determine_rhel_state: Add check for locked tags: CS-2997 (sgallagh)
  - Fix use-before-assignment (sgallagh)


author: Than Ngo <than@redhat.com> - 146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
    * High CVE-2026-5273: Use after free in CSS
    * High CVE-2026-5272: Heap buffer overflow in GPU
    * High CVE-2026-5274: Integer overflow in Codecs
    * High CVE-2026-5275: Heap buffer overflow in ANGLE
    * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
    * High CVE-2026-5277: Integer overflow in ANGLE
    * High CVE-2026-5278: Use after free in Web MIDI
    * High CVE-2026-5279: Object corruption in V8
    * High CVE-2026-5280: Use after free in WebCodecs
    * High CVE-2026-5281: Use after free in Dawn
    * High CVE-2026-5282: Out of bounds read in WebCodecs
    * High CVE-2026-5283: Inappropriate implementation in ANGLE
    * High CVE-2026-5284: Use after free in Dawn
    * High CVE-2026-5285: Use after free in WebGL
    * High CVE-2026-5286: Use after free in Dawn
    * High CVE-2026-5287: Use after free in PDF
    * High CVE-2026-5288: Use after free in WebView
    * High CVE-2026-5289: Use after free in Navigation
    * High CVE-2026-5290: Use after free in Compositing
    * Medium CVE-2026-5291: Inappropriate implementation in WebGL
    * Medium CVE-2026-5292: Out of bounds read in WebCodecs


author: Than Ngo <than@redhat.com> - 147.0.7727.55-1
changelog:
  - Update to 147.0.7727.55
    * Critical CVE-2026-5858: Heap buffer overflow in WebML
    * Critical CVE-2026-5859: Integer overflow in WebML
    * High CVE-2026-5860: Use after free in WebRTC
    * High CVE-2026-5861: Use after free in V8
    * High CVE-2026-5862: Inappropriate implementation in V8
    * High CVE-2026-5863: Inappropriate implementation in V8
    * High CVE-2026-5864: Heap buffer overflow in WebAudio
    * High CVE-2026-5865: Type Confusion in V8
    * High CVE-2026-5866: Use after free in Media
    * High CVE-2026-5867: Heap buffer overflow in WebML
    * High CVE-2026-5868: Heap buffer overflow in ANGLE
    * High CVE-2026-5869: Heap buffer overflow in WebML
    * High CVE-2026-5870: Integer overflow in Skia
    * High CVE-2026-5871: Type Confusion in V8
    * High CVE-2026-5872: Use after free in Blink
    * High CVE-2026-5873: Out of bounds read and write in V8
    * Medium CVE-2026-5874: Use after free in PrivateAI
    * Medium CVE-2026-5875: Policy bypass in Blink
    * Medium CVE-2026-5876: Side-channel information leakage in Navigation
    * Medium CVE-2026-5877: Use after free in Navigation
    * Medium CVE-2026-5878: Incorrect security UI in Blink
    * Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
    * Medium CVE-2026-5880: Incorrect security UI in browser UI
    * Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
    * Medium CVE-2026-5882: Incorrect security UI in Fullscreen
    * Medium CVE-2026-5883: Use after free in Media
    * Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
    * Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
    * Medium CVE-2026-5886: Out of bounds read in WebAudio
    * Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
    * Medium CVE-2026-5888: Uninitialized Use in WebCodecs
    * Medium CVE-2026-5889: Cryptographic Flaw in PDFium
    * Medium CVE-2026-5890: Race in WebCodecs
    * Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
    * Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
    * Medium CVE-2026-5893: Race in V8
    * Low CVE-2026-5894: Inappropriate implementation in PDF
    * Low CVE-2026-5895: Incorrect security UI in Omnibox
    * Low CVE-2026-5896: Policy bypass in Audio
    * Low CVE-2026-5897: Incorrect security UI in Downloads
    * Low CVE-2026-5898: Incorrect security UI in Omnibox
    * Low CVE-2026-5899: Incorrect security UI in History Navigation
    * Low CVE-2026-5900: Policy bypass in Downloads
    * Low CVE-2026-5901: Policy bypass in DevTools
    * Low CVE-2026-5902: Race in Media
    * Low CVE-2026-5903: Policy bypass in IFrameSandbox
    * Low CVE-2026-5904: Use after free in V8
    * Low CVE-2026-5905: Incorrect security UI in Permissions
    * Low CVE-2026-5906: Incorrect security UI in Omnibox
    * Low CVE-2026-5907: Insufficient data validation in Media
    * Low CVE-2026-5908: Integer overflow in Media
    * Low CVE-2026-5909: Integer overflow in Media
    * Low CVE-2026-5910: Integer overflow in Media
    * Low CVE-2026-5911: Policy bypass in ServiceWorkers
    * Low CVE-2026-5912: Integer overflow in WebRTC
    * Low CVE-2026-5913: Out of bounds read in Blink
    * Low CVE-2026-5914: Type Confusion in CSS
    * Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
    * Low CVE-2026-5918: Inappropriate implementation in Navigation
    * Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets


author: Than Ngo <than@redhat.com> - 147.0.7727.101-1
changelog:
  - Update to 147.0.7727.101
    * Critical CVE-2026-6296: Heap buffer overflow in ANGLE
    * Critical CVE-2026-6297: Use after free in Proxy
    * Critical CVE-2026-6298: Heap buffer overflow in Skia
    * Critical CVE-2026-6299: Use after free in Prerender
    * Critical CVE-2026-6358: Use after free in XR
    * High CVE-2026-6359: Use after free in Video
    * High CVE-2026-6300: Use after free in CSS
    * High CVE-2026-6301: Type Confusion in Turbofan
    * High CVE-2026-6302: Use after free in Video
    * High CVE-2026-6303: Use after free in Codecs
    * High CVE-2026-6304: Use after free in Graphite
    * High CVE-2026-6305: Heap buffer overflow in PDFium
    * High CVE-2026-6306: Heap buffer overflow in PDFium
    * High CVE-2026-6307: Type Confusion in Turbofan
    * High CVE-2026-6308: Out of bounds read in Media
    * High CVE-2026-6309: Use after free in Viz
    * High CVE-2026-6360: Use after free in FileSystem
    * High CVE-2026-6310: Use after free in Dawn
    * High CVE-2026-6311: Uninitialized Use in Accessibility
    * High CVE-2026-6312: Insufficient policy enforcement in Passwords
    * High CVE-2026-6313: Insufficient policy enforcement in CORS
    * High CVE-2026-6314: Out of bounds write in GPU
    * High CVE-2026-6315: Use after free in Permissions
    * High CVE-2026-6316: Use after free in Forms
    * High CVE-2026-6361: Heap buffer overflow in PDFium
    * High CVE-2026-6362: Use after free in Codecs
    * High CVE-2026-6317: Use after free in Cast
    * Medium CVE-2026-6363: Type Confusion in V8
    * Medium CVE-2026-6318: Use after free in Codecs
    * Medium CVE-2026-6319: Use after free in Payments
    * Medium CVE-2026-6364: Out of bounds read in Skia


author: Than Ngo <than@redhat.com> - 147.0.7727.116-1
changelog:
  - Update to 147.0.7727.116
    * High CVE-2026-6919: Use after free in DevTools
    * High CVE-2026-6920: Out of bounds read in GPU
    * Medium CVE-2026-6921: Race in GPU
  - Fix rhbz#2458171, unexpanded macros in manpage


author: Than Ngo <than@redhat.com> - 147.0.7727.116-2
changelog:
  - Fix FTBFS with rust 1.95
  - Backport the upstream fix GL native pixmap import support reset in GpuInit


author: Than Ngo <than@redhat.com> - 147.0.7727.137-1
changelog:
  - Update to 147.0.7727.137
     * Critical CVE-2026-7363: Use after free in Canvas
     * Critical CVE-2026-7361: Use after free in iOS
     * Critical CVE-2026-7344: Use after free in Accessibility
     * Critical CVE-2026-7343: Use after free in Views
     * High CVE-2026-7333: Use after free in GPU
     * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
     * High CVE-2026-7359: Use after free in ANGLE
     * High CVE-2026-7358: Use after free in Animation
     * High CVE-2026-7334: Use after free in Views
     * High CVE-2026-7357: Use after free in GPU
     * High CVE-2026-7356: Use after free in Navigation
     * High CVE-2026-7354: Out of bounds read and write in Angle
     * High CVE-2026-7353: Heap buffer overflow in Skia
     * High CVE-2026-7352: Use after free in Media
     * High CVE-2026-7351: Race in MHTML
     * High CVE-2026-7350: Use after free in WebMIDI
     * High CVE-2026-7349: Use after free in Cast
     * High CVE-2026-7348: Use after free in Codecs
     * High CVE-2026-7335: Use after free in media
     * High CVE-2026-7336: Use after free in WebRTC
     * High CVE-2026-7337: Type Confusion in V8
     * High CVE-2026-7347: Use after free in Chromoting
     * High CVE-2026-7346: Inappropriate implementation in Tint
     * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
     * High CVE-2026-7338: Use after free in Cast
     * High CVE-2026-7342: Use after free in WebView
     * High CVE-2026-7341: Use after free in WebRTC
     * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
     * Medium CVE-2026-7340: Integer overflow in ANGLE
     * Medium CVE-2026-7355: Use after free in Media


author: Than Ngo <than@redhat.com> - 148.0.7778.96-1
changelog:
  - Update to 148.0.7778.96
     * CVE-2026-7896: Integer overflow in Blink
     * CVE-2026-7897: Use after free in Mobile
     * CVE-2026-7898: Use after free in Chromoting
     * CVE-2026-7899: Out of bounds read and write in V8
     * CVE-2026-7900: Heap buffer overflow in ANGLE
     * CVE-2026-7901: Use after free in ANGLE
     * CVE-2026-7902: Out of bounds memory access in V8
     * CVE-2026-7903: Integer overflow in ANGLE
     * CVE-2026-7904: Out of bounds read in Fonts
     * CVE-2026-7905: Insufficient validation of untrusted input in Media
     * CVE-2026-7906: Use after free in SVG
     * CVE-2026-7907: Use after free in DOM
     * CVE-2026-7908: Use after free in Fullscreen
     * CVE-2026-7909: Inappropriate implementation in ServiceWorker
     * CVE-2026-7910: Use after free in Views
     * CVE-2026-7911: Use after free in Aura
     * CVE-2026-7912: Integer overflow in GPU
     * CVE-2026-7913: Insufficient policy enforcement in DevTools
     * CVE-2026-7914: Type Confusion in Accessibility
     * CVE-2026-7915: Insufficient data validation in DevTools
     * CVE-2026-7916: Insufficient data validation in InterestGroups
     * CVE-2026-7917: Use after free in Fullscreen
     * CVE-2026-7918: Use after free in GPU
     * CVE-2026-7919: Use after free in Aura
     * CVE-2026-7920: Use after free in Skia
     * CVE-2026-7921: Use after free in Passwords
     * CVE-2026-7922: Use after free in ServiceWorker
     * CVE-2026-7923: Out of bounds write in Skia
     * CVE-2026-7924: Uninitialized Use in Dawn
     * CVE-2026-7925: Use after free in Chromoting
     * CVE-2026-7926: Use after free in PresentationAPI
     * CVE-2026-7927: Type Confusion in Runtime
     * CVE-2026-7928: Use after free in WebRTC
     * CVE-2026-7929: Use after free in MediaRecording
     * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
     * CVE-2026-7931: Insufficient validation of untrusted input in iOS
     * CVE-2026-7932: Insufficient policy enforcement in Downloads
     * CVE-2026-7933: Out of bounds read in WebCodecs
     * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
     * CVE-2026-7935: Inappropriate implementation in Speech
     * CVE-2026-7936: Object lifecycle issue in V8
     * CVE-2026-7937: Insufficient policy enforcement in DevTools
     * CVE-2026-7938: Use after free in CSS
     * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
     * CVE-2026-7940: Use after free in V8
     * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
     * CVE-2026-7942: Integer overflow in ANGLE
     * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
     * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
     * CVE-2026-7945: Insufficient validation of untrusted input in COOP
     * CVE-2026-7946: Insufficient policy enforcement in WebUI
     * CVE-2026-7947: Insufficient validation of untrusted input in Network
     * CVE-2026-7948: Race in Chromoting
     * CVE-2026-7949: Out of bounds read in Skia
     * CVE-2026-7950: Out of bounds read and write in GFX
     * CVE-2026-7951: Out of bounds write in WebRTC
     * CVE-2026-7952: Insufficient policy enforcement in Extensions
     * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
     * CVE-2026-7954: Race in Shared Storage
     * CVE-2026-7955: Uninitialized Use in GPU
     * CVE-2026-7956: Use after free in Navigation
     * CVE-2026-7957: Out of bounds write in Media
     * CVE-2026-7958: Inappropriate implementation in ServiceWorker
     * CVE-2026-7959: Inappropriate implementation in Navigation
     * CVE-2026-7960: Race in Speech
     * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
     * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
     * CVE-2026-7963: Inappropriate implementation in ServiceWorker
     * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
     * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
     * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
     * CVE-2026-7968: Insufficient validation of untrusted input in CORS
     * CVE-2026-7969: Integer overflow in Network
     * CVE-2026-7970: Use after free in TopChrome
     * CVE-2026-7971: Inappropriate implementation in ORB
     * CVE-2026-7972: Uninitialized Use in GPU
     * CVE-2026-7973: Integer overflow in Dawn
     * CVE-2026-7974: Use after free in Blink
     * CVE-2026-7975: Use after free in DevTools
     * CVE-2026-7976: Use after free in Views
     * CVE-2026-7977: Inappropriate implementation in Canvas
     * CVE-2026-7978: Inappropriate implementation in Companion
     * CVE-2026-7979: Inappropriate implementation in Media
     * CVE-2026-7980: Use after free in WebAudio
     * CVE-2026-7981: Out of bounds read in Codecs
     * CVE-2026-7982: Uninitialized Use in WebCodecs
     * CVE-2026-7983: Out of bounds read in Dawn
     * CVE-2026-7984: Use after free in ReadingMode
     * CVE-2026-7985: Use after free in GPU
     * CVE-2026-7986: Insufficient policy enforcement in Autofill
     * CVE-2026-7987: Use after free in WebRTC
     * CVE-2026-7988: Type Confusion in WebRTC
     * CVE-2026-7989: Insufficient data validation in DataTransfer
     * CVE-2026-7990: Insufficient validation of untrusted input in Updater
     * CVE-2026-7991: Use after free in UI
     * CVE-2026-7992: Insufficient validation of untrusted input in UI
     * CVE-2026-7993: Insufficient validation of untrusted input in Payments
     * CVE-2026-7994: Inappropriate implementation in Chromoting
     * CVE-2026-7995: Out of bounds read in AdFilter
     * CVE-2026-7996: Insufficient validation of untrusted input in SSL
     * CVE-2026-7997: Insufficient validation of untrusted input in Updater
     * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
     * CVE-2026-7999: Inappropriate implementation in V8
     * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
     * CVE-2026-8001: Use after free in Printing
     * CVE-2026-8002: Use after free in Audio
     * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
     * CVE-2026-8004: Insufficient policy enforcement in DevTools
     * CVE-2026-8005: Insufficient validation of untrusted input in Cast
     * CVE-2026-8006: Insufficient policy enforcement in DevTools
     * CVE-2026-8007: Insufficient validation of untrusted input in Cast
     * CVE-2026-8008: Inappropriate implementation in DevTools
     * CVE-2026-8009: Inappropriate implementation in Cast
     * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8011: Insufficient policy enforcement in Search
     * CVE-2026-8012: Inappropriate implementation in MHTML
     * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
     * CVE-2026-8014: Inappropriate implementation in Preload
     * CVE-2026-8015: Inappropriate implementation in Media
     * CVE-2026-8016: Use after free in WebRTC
     * CVE-2026-8017: Side-channel information leakage in Media
     * CVE-2026-8018: Insufficient policy enforcement in DevTools
     * CVE-2026-8019: Insufficient policy enforcement in WebApp
     * CVE-2026-8020: Uninitialized Use in GPU
     * CVE-2026-8021: Script injection in UI
     * CVE-2026-8022: Inappropriate implementation in MHTML
  - Remove old remoting-no-tests patch
  - Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
  - Fix build error causing by sanitizer defines in GN
  - Refresh rust-enable-unstable_feature patch
  - Fix build error with system rust compiler
  - Fix build error causing by new clang++ options which are not supported yet
  - Fix build error causing by harfbuzz library rename


author: Than Ngo <than@redhat.com> - 148.0.7778.167-1
changelog:
  - Update to 148.0.7778.167
     * CVE-2026-8509: Heap buffer overflow in WebML
     * CVE-2026-8510: Integer overflow in Skia
     * CVE-2026-8511: Use after free in UI
     * CVE-2026-8512: Use after free in FileSystem
     * CVE-2026-8513: Use after free in Input
     * CVE-2026-8514: Use after free in Aura
     * CVE-2026-8515: Use after free in HID
     * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
     * CVE-2026-8517: Object lifecycle issue in WebShare
     * CVE-2026-8518: Use after free in Blink
     * CVE-2026-8519: Integer overflow in ANGLE
     * CVE-2026-8520: Race in Payments
     * CVE-2026-8521: Use after free in Tab Groups
     * CVE-2026-8522: Use after free in Downloads
     * CVE-2026-8523: Use after free in Mojo
     * CVE-2026-8558: Out of bounds write in Fonts
     * CVE-2026-8524: Out of bounds write in WebAudio
     * CVE-2026-8525: Heap buffer overflow in ANGLE
     * CVE-2026-8526: Out of bounds write in WebRTC
     * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
     * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8529: Heap buffer overflow in Codecs
     * CVE-2026-8530: Use after free in Network
     * CVE-2026-8531: Heap buffer overflow in WebML
     * CVE-2026-8532: Integer overflow in XML
     * CVE-2026-8533: Use after free in Accessibility
     * CVE-2026-8534: Integer overflow in GPU
     * CVE-2026-8535: Out of bounds read in Media
     * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
     * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
     * CVE-2026-8538: Insufficient validation of untrusted input in GPU
     * CVE-2026-8539: Script injection in SanitizerAPI
     * CVE-2026-8540: Type Confusion in V8
     * CVE-2026-8541: Out of bounds read in UI
     * CVE-2026-8542: Use after free in Core
     * CVE-2026-8543: Out of bounds read in FileSystem
     * CVE-2026-8544: Use after free in Media
     * CVE-2026-8545: Object corruption in Compositing
     * CVE-2026-8546: Out of bounds read in GPU
     * CVE-2026-8547: Insufficient policy enforcement in Passwords
     * CVE-2026-8548: Out of bounds write in Media
     * CVE-2026-8549: Use after free in Media
     * CVE-2026-8550: Use after free in Google Lens
     * CVE-2026-8551: Use after free in Downloads
     * CVE-2026-8552: Heap buffer overflow in GPU
     * CVE-2026-8553: Use after free in GPU
     * CVE-2026-8554: Type Confusion in ANGLE
     * CVE-2026-8555: Use after free in GTK
     * CVE-2026-8556: Inappropriate implementation in ANGLE
     * CVE-2026-8557: Use after free in Accessibility
     * CVE-2026-8559: Integer overflow in Internationalization
     * CVE-2026-8560: Heap buffer overflow in SwiftShader
     * CVE-2026-8561: Incorrect security UI in Fullscreen
     * CVE-2026-8562: Side-channel information leakage in Navigation
     * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
     * CVE-2026-8564: Incorrect security UI in Downloads
     * CVE-2026-8565: Inappropriate implementation in Downloads
     * CVE-2026-8566: Insufficient policy enforcement in Payments
     * CVE-2026-8567: Integer overflow in ANGLE
     * CVE-2026-8568: Insufficient policy enforcement in AI
     * CVE-2026-8569: Out of bounds write in Codecs
     * CVE-2026-8570: Type Confusion in V8
     * CVE-2026-8571: Insufficient policy enforcement in GPU
     * CVE-2026-8572: Insufficient policy enforcement in Network
     * CVE-2026-8573: Integer overflow in Codecs
     * CVE-2026-8574: Use after free in Core
     * CVE-2026-8575: Use after free in UI
     * CVE-2026-8576: Inappropriate implementation in CORS
     * CVE-2026-8577: Integer overflow in Fonts
     * CVE-2026-8578: Out of bounds read in GPU
     * CVE-2026-8579: Insufficient validation of untrusted input in Skia
     * CVE-2026-8580: Use after free in Mojo
     * CVE-2026-8581: Use after free in GPU
     * CVE-2026-8582: Object lifecycle issue in Dawn
     * CVE-2026-8583: Insufficient policy enforcement in WebXR
     * CVE-2026-8584: Inappropriate implementation in Views
     * CVE-2026-8585: Inappropriate implementation in Media
     * CVE-2026-8586: Inappropriate implementation in Chromoting
     * CVE-2026-8587: Use after free in Extensions


author: Than Ngo <than@redhat.com> - 148.0.7778.178-1
changelog:
  - Update to 148.0.7778.178
    * CVE-2026-9111: Use after free in WebRTC
    * CVE-2026-9110: Inappropriate implementation in UI
    * CVE-2026-9112: Use after free in GPU
    * CVE-2026-9113: Out of bounds read in GPU
    * CVE-2026-9114: Use after free in QUIC
    * CVE-2026-9115: Insufficient policy enforcement in Service Worker
    * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-9117: Type Confusion in GFX
    * CVE-2026-9118: Use after free in XR
    * CVE-2026-9119: Heap buffer overflow in WebRTC
    * CVE-2026-9120: Use after free in WebRTC
    * CVE-2026-9126: Use after free in DOM
    * CVE-2026-9121: Out of bounds read in GPU
    * CVE-2026-9122: Out of bounds read in GPU
    * CVE-2026-9123: Heap buffer overflow in Chromecast
    * CVE-2026-9124: Insufficient validation of untrusted input in Input
  - Backport upstream patches to improve auto dark image inversion logic
  - Update default chromium browser config


author: Than Ngo <than@redhat.com> - 148.0.7778.215-1
changelog:
  - Update to 148.0.7778.215
    * CVE-2026-9872: Out of bounds write in GPU
    * CVE-2026-9873: Use after free in Network
    * CVE-2026-9874: Use after free in Dawn
    * CVE-2026-9875: Out of bounds read in WebGL
    * CVE-2026-9876: Use after free in WebGL
    * CVE-2026-9877: Use after free in ANGLE
    * CVE-2026-9878: Use after free in ANGLE
    * CVE-2026-9879: Out of bounds write in ANGLE
    * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
    * CVE-2026-9881: Use after free in Bluetooth
    * CVE-2026-9882: Integer overflow in ANGLE
    * CVE-2026-9883: Use after free in Base
    * CVE-2026-9884: Use after free in Browser
    * CVE-2026-9885: Insufficient validation of untrusted input in UI
    * CVE-2026-9886: Use after free in Base
    * CVE-2026-9887: Use after free in Proxy
    * CVE-2026-9888: Use after free in WebView
    * CVE-2026-9889: Out of bounds read and write in Dawn
    * CVE-2026-9890: Use after free in XR
    * CVE-2026-9891: Use after free in Extensions
    * CVE-2026-9892: Inappropriate implementation in Skia
    * CVE-2026-9893: Use after free in Skia
    * CVE-2026-9894: Use after free in GPU
    * CVE-2026-9895: Out of bounds read in GPU
    * CVE-2026-9896: Out of bounds write in V8
    * CVE-2026-9897: Use after free in DOM
    * CVE-2026-9898: Insufficient validation of untrusted input in GPU
    * CVE-2026-9899: Use after free in ANGLE
    * CVE-2026-9900: Out of bounds write in ANGLE
    * CVE-2026-9901: Use after free in ANGLE
    * CVE-2026-9902: Use after free in Accessibility
    * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
    * CVE-2026-9904: Use after free in ANGLE
    * CVE-2026-9905: Use after free in Accessibility
    * CVE-2026-9906: Out of bounds write in GPU
    * CVE-2026-9907: Out of bounds read in Dawn
    * CVE-2026-9908: Out of bounds read in ANGLE
    * CVE-2026-9909: Integer overflow in Skia
    * CVE-2026-9910: Out of bounds memory access in ANGLE
    * CVE-2026-9911: Integer overflow in ANGLE
    * CVE-2026-9912: Inappropriate implementation in GPU
    * CVE-2026-9913: Inappropriate implementation in ANGLE
    * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9915: Heap buffer overflow in ANGLE
    * CVE-2026-9916: Out of bounds write in ANGLE
    * CVE-2026-9917: Uninitialized Use in WebGL
    * CVE-2026-9918: Inappropriate implementation in Tint
    * CVE-2026-9919: Out of bounds read in WebGL
    * CVE-2026-9920: Uninitialized Use in GPU
    * CVE-2026-9921: Uninitialized Use in WebGL
    * CVE-2026-9922: Use after free in GPU
    * CVE-2026-9923: Use after free in Skia
    * CVE-2026-9924: Heap buffer overflow in ANGLE
    * CVE-2026-9925: Use after free in ANGLE
    * CVE-2026-9926: Heap buffer overflow in ANGLE
    * CVE-2026-9927: Use after free in ANGLE
    * CVE-2026-9928: Out of bounds read in ANGLE
    * CVE-2026-9929: Inappropriate implementation in WebGL
    * CVE-2026-9930: Out of bounds write in Dawn
    * CVE-2026-9931: Use after free in GPU
    * CVE-2026-9932: Use after free in ANGLE
    * CVE-2026-9933: Use after free in Input
    * CVE-2026-9934: Use after free in Aura
    * CVE-2026-9935: Uninitialized Use in ANGLE
    * CVE-2026-9936: Use after free in GFX
    * CVE-2026-9937: Use after free in UI
    * CVE-2026-9938: Inappropriate implementation in V8
    * CVE-2026-9939: Heap buffer overflow in WebCodecs
    * CVE-2026-9940: Heap buffer overflow in ANGLE
    * CVE-2026-9941: Use after free in ANGLE
    * CVE-2026-9942: Uninitialized Use in ANGLE
    * CVE-2026-9943: Out of bounds read in WebGL
    * CVE-2026-9944: Uninitialized Use in ANGLE
    * CVE-2026-9945: Use after free in Media
    * CVE-2026-9946: Use after free in ANGLE
    * CVE-2026-9947: Use after free in XML
    * CVE-2026-9948: Use after free in Views
    * CVE-2026-9949: Use after free in Core
    * CVE-2026-9950: Insufficient validation of untrusted input in iOS
    * CVE-2026-9951: Use after free in UI
    * CVE-2026-9952: Use after free in WebAudio
    * CVE-2026-9953: Out of bounds read in ANGLE
    * CVE-2026-9954: Use after free in TabStrip
    * CVE-2026-9955: Inappropriate implementation in iOS
    * CVE-2026-9956: Use after free in iOS
    * CVE-2026-9957: Use after free in PDF
    * CVE-2026-9958: Use after free in PDFium
    * CVE-2026-9959: Race in WebRTC
    * CVE-2026-9960: Integer overflow in PDFium
    * CVE-2026-9961: Use after free in SurfaceCapture
    * CVE-2026-9962: Use after free in WebRTC
    * CVE-2026-9963: Uninitialized Use in iOS
    * CVE-2026-9964: Use after free in Bluetooth
    * CVE-2026-9965: Out of bounds write in ANGLE
    * CVE-2026-9966: Integer overflow in XML
    * CVE-2026-9967: Out of bounds write in GPU
    * CVE-2026-9968: Integer overflow in V8
    * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9970: Use after free in WebGL
    * CVE-2026-9971: Inappropriate implementation in iOS
    * CVE-2026-9972: Uninitialized Use in Gamepad
    * CVE-2026-9973: Out of bounds write in V8
    * CVE-2026-9974: Out of bounds write in GPU
    * CVE-2026-9975: Out of bounds read and write in ANGLE
    * CVE-2026-9976: Inappropriate implementation in USB
    * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
    * CVE-2026-9978: Use after free in Glic
    * CVE-2026-9979: Insufficient validation of untrusted input in Input
    * CVE-2026-9980: Insufficient validation of untrusted input in Printing
    * CVE-2026-9981: Inappropriate implementation in Skia
    * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9983: Type Confusion in Skia
    * CVE-2026-9984: Use after free in UI
    * CVE-2026-9985: Insufficient validation of untrusted input in Media
    * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
    * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-9988: Use after free in WebRTC
    * CVE-2026-9989: Inappropriate implementation in Media
    * CVE-2026-9990: Use after free in WebAppInstalls
    * CVE-2026-9991: Inappropriate implementation in Media
    * CVE-2026-9992: Use after free in Network
    * CVE-2026-9993: Use after free in Views
    * CVE-2026-9994: Use after free in Core
    * CVE-2026-9995: Use after free in WebXR
    * CVE-2026-9996: Out of bounds read in WebRTC
    * CVE-2026-9997: Use after free in Input
    * CVE-2026-9998: Integer overflow in Skia
    * CVE-2026-9999: Inappropriate implementation in ANGLE
    * CVE-2026-10000: Use after free in Passwords
    * CVE-2026-10001: Use after free in PerformanceManager
    * CVE-2026-10002: Use after free in PDFium
    * CVE-2026-10003: Use after free in Views
    * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
    * CVE-2026-10005: Use after free in WebAppInstalls
    * CVE-2026-10006: Race in WebAudio
    * CVE-2026-10007: Use after free in SVG
    * CVE-2026-10008: Uninitialized Use in GPU
    * CVE-2026-10009: Integer overflow in Skia
    * CVE-2026-10010: Inappropriate implementation in Input
    * CVE-2026-10011: Inappropriate implementation in Skia
    * CVE-2026-10012: Use after free in Skia
    * CVE-2026-10013: Use after free in WebCodecs
    * CVE-2026-10014: Use after free in WebMIDI
    * CVE-2026-10015: Integer overflow in WTF
    * CVE-2026-10016: Use after free in DOM
    * CVE-2026-10017: Out of bounds read in Headless
    * CVE-2026-10018: Integer overflow in ANGLE
    * CVE-2026-10019: Integer overflow in ANGLE
    * CVE-2026-10020: Insufficient validation of untrusted input in Skia
    * CVE-2026-10021: Insufficient validation of untrusted input in USB
    * CVE-2026-10022: Type Confusion in V8


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.3.1-2
changelog:
  - Run autopoint before autoreconf, since apparently autoreconf doesn't
    do it automatically, but that breaks badly with gettext 0.25.


author: Jerry James <loganjerry@gmail.com> - 2.49.95-3
changelog:
  - Add patch to fix undefined behavior (rhbz#2339979)
  - Add two patches to fix memory leaks
  - Do not force -O1


author: Jerry James <loganjerry@gmail.com> - 2.49.95-3
changelog:
  - Add patches to fix more undefined behavior
  - Fix misaligned memory accesses on ppc64le
  - Fix mismatched readline function declarations


author: Jerry James <loganjerry@gmail.com> - 2.49.95-8
changelog:
  - Update to latest git snapshot to fix gnulib issue
  - Update the French translation
  - Add patch to update POSIX structure sizes for 64-bit systems
  - Fix a broken file-stat test


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Packit <hello@packit.dev> - 82-1
changelog:
  Changes with 82
  ----------------
    - Playwright: Add non-repeatable build integration test (HMS-9497) (#3724)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova, Michal Gold
    - Update latest API (HMS-9637) (#3784)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - Update latest API (HMS-9685) (#3808)
      - Author: Michal Gold, Reviewers: Gianluca Zuccarelli, Klara Simickova
    - Wizard: Compliance revamp (HMS-9396) (#3732)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - build(deps-dev): bump @vitejs/plugin-react from 5.0.3 to 5.1.0 (#3782)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - chore(deps): lock file maintenance (#3728)
      - Author: red-hat-konflux[bot], Reviewers: Gianluca Zuccarelli, Klara Simickova
    - chore(deps): lock file maintenance (#3812)
      - Author: red-hat-konflux[bot], Reviewers: Michal Gold
    - chore(deps): update build-tools digest to 098cc75 (#3793)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - chore(deps): update build-tools digest to f15b565 (#3814)
      - Author: red-hat-konflux[bot], Reviewers: Michal Gold
    - chore(deps): update konflux references (#3789)
      - Author: red-hat-konflux[bot], Reviewers: Michal Gold
    - chore(deps): update react monorepo (#3797)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - chore(deps): update typescript-eslint monorepo to v8.46.3 (#3815)
      - Author: red-hat-konflux[bot], Reviewers: Tomáš Koscielniak
    - cockpit-image-builder: export blueprints (RHEL-123840) (#3779)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    - dependabot: Switch from daily to weekly updates (HMS-9650) (#3787)
      - Author: Klara Simickova, Reviewers: Michal Gold
    - devDeps: Bump eslint-plugin-playwright from 2.2.2 to 2.3.0 (HMS-9654) (#3795)
      - Author: Klara Simickova, Reviewers: Tomáš Koscielniak
    - fix(deps): update dependency @redhat-cloud-services/frontend-components to v7.0.13 (#3816)
      - Author: red-hat-konflux[bot], Reviewers: Tomáš Koscielniak
    - packit.yaml: Release into fedora-all (HMS-9619) (#3778)
      - Author: Klara Simickova, Reviewers: Sanne Raymaekers

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 83-1
changelog:
  Changes with 83
  ----------------
    - Wizard: Disk customization (HMS-8945) (#3692)
      - Author: Klara Simickova, Reviewers: Nobody
    - Wizard: fix repeatable build behavior in pkg and repo steps (#3731)
      - Author: Dominik Vágner, Reviewers: Klara Simickova
    - Wizard: remove add and clear buttons from the LabelInput (HMS-9576) (#3818)
      - Author: Katarína Sieklová, Reviewers: Gianluca Zuccarelli, Klara Simickova
    - api: stop updating provisioning (HMS-5862) (#3829)
      - Author: Sanne Raymaekers, Reviewers: Klara Simickova
    - onPrem: Hide blueprint version warning (HMS-9782) (#3842)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Add "node" to tsconfig types (HMS-9772) (#3834)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Add Satellite boot tests (HMS-6024) (#3810)
      - Author: Klara Simickova, Reviewers: Nobody
    - store/cockpit: correct users customization (#3847)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    - store/cockpit: simplify customization conversion (HMS-9786) (#3846)
      - Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers

  — Somewhere on the Internet, 2025-11-21


author: Packit <hello@packit.dev> - 85-1
changelog:
  Changes with 85
  ----------------
    - Remove build_deploy.sh script (HMS-9806) (#3860)
      - Author: Klara Simickova, Reviewers: Anna Vítová
    - Wizard: add AAP documentation (HMS-9757) (#3848)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - Wizard: edit Security review step according to mocks (HMS-9597) (#3850)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - Wizard: refactor ManageButton since it became widely used (#3859)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - actions/BootTests: Add a second Slack notification to frontend (#3867)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova, Simon Steinbeiß
    - blueprints: default to host distro when importing in cockpit (RHEL-123840) (#3831)
      - Author: Sanne Raymaekers, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group across 1 directory with 17 updates (#3869)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - src: Bump smol-toml to 1.5.2 and update export mocks (HMS-9807) (#3865)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - src: Fix rendering validation for `ValidatedInput` (HMS-9797) (#3855)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová

  — Somewhere on the Internet, 2025-11-28


author: Packit <hello@packit.dev> - 86-1
changelog:
  Changes with 86
  ----------------
    - ActivationKeysList: add a proxy on stage (#3907)
      - Author: Ondřej Budai, Reviewers: Michal Gold, Sanne Raymaekers
    - Update API (HMS-9824) (#3881)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Update build-tools digest to ded5385 (#3894)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - Update dependency @types/react to v18.3.27 (#3897)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - Wizard/GCP: Accept domains as well as email addresses (HMS-4988) (#3868)
      - Author: Simon Steinbeiß, Reviewers: Klara Simickova
    - Wizard: Add safeguards to disk customization and fix min_size (HMS-9664) (#3835)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update date format in default blueprint name (HMS-9854) (#3888)
      - Author: Klara Simickova, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    - Wizard: add information about firstboot and registration ordering (HMS-8555) (#3906)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - build(deps-dev): bump express from 4.21.2 to 4.22.1 (#3879)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump vitest-canvas-mock from 0.3.3 to 1.1.3 (#3901)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - docstrings: Drop references to RPM-DNF (#3873)
      - Author: Simon Steinbeiß, Reviewers: Klara Simickova
    - playwright: Fix tests after OpenSCAP configs regeneration (HMS-9862) (#3899)
      - Author: Klara Simickova, Reviewers: Michal Gold
    - playwright: re-enable the compliance test (#3905)
      - Author: Ondřej Budai, Reviewers: Gianluca Zuccarelli, Klara Simickova

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 90-1
changelog:
  Changes with 90
  ----------------
    - Image mode compose request (HMS-10010) (#4009)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - ImagesTable/Status: fix on-prem error messages (HMS-10099) (#4030)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova, Simon Steinbeiß
    - Move image-mode image type filtering to cockpitApi (HMS-10098) (#4028)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Wizard: Add password validation to inline alert in Users step (HMS-10078) (#4007)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - Wizard: Combine alert and empty state in Additional Packages step (HMS-10126) (#4052)
      - Author: Michal Gold, Reviewers: Gianluca Zuccarelli
    - Wizard: Fix aria issues (HMS-10108) (#4039)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Fix crash when searching for group with repeatable build (HMS-10111) (#4042)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Fix padding of popover button for package groups (HMS-10112) (#4043)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Remove validation for non-required empty input (HMS-10081) (#4011)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update hostname step description (HMS-10138) (#4062)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - build(deps): bump lodash from 4.17.21 to 4.17.23 (#4016)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group with 16 updates (#4040)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group with 7 updates (#4063)
      - Author: {}, Reviewers: Michal Gold
    - build(deps-dev): bump @types/node from 24.10.2 to 25.0.10 (#4041)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update build-tools digest to 7e1d036 (#4058)
      - Author: {}, Reviewers: Michal Gold
    - chore(deps): update konflux references (#4031)
      - Author: {}, Reviewers: Klara Simickova
    - cockpit: Add mountpoint policies for the image mode (HMS-10101) (#4037)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - cockpit: Filter image mode targets and customizations (HMS-10021) (#4008)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - cockpit: Fix crash in edit mode (HMS-10092) (#4023)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - cockpit: Fix useFlag import (HMS-10091) (#4022)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - cockpit: Gate blueprint mode label for on-prem only (HMS-10125) (#4051)
      - Author: Klara Simickova, Reviewers: Michal Gold
    - cockpit: Update validation for required Users step (HMS-9996) (#4034)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Remove redundant next in target select (#4026)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova
    - src: Rename "suffix" to "subpath" (HMS-10109) (#4038)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - vitest.config: remove sourcemap errors (HMS-10120) (#4048)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 94-1
changelog:
  Changes with 94
  ----------------
    - Wizard/Review: fix section visibility for net-installer type (HMS-9568) (#4123)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - cockpit: Re-organize Security step (HMS-10217) (#4125)
      - Author: Klara Simickova, Reviewers: Lucas Garfield

  — Somewhere on the Internet, 2026-02-18


author: Packit <hello@packit.dev> - 98-1
changelog:
  Changes with 98
  ----------------
    - Add widgetRegistry config to decouple widget layout from chrome (#4259)
      - Author: Tahmid Efaz, Reviewers: Klara Simickova
    - Migrate Repositories tests to playwright (#4265)
      - Author: Gianluca Zuccarelli, Reviewers: Anna Vítová, Klara Simickova
    - Update API and tests (#4287)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli, Tomáš Koscielniak
    - Update default bugs epic (#4308)
      - Author: Klara Simickova, Reviewers: Anna Vítová, Michal Gold
    - Wizard: Add allowed characters for kernel arguments (HMS-9508) (#4266)
      - Author: Klara Simickova, Reviewers: Anna Vítová
    - Wizard: Move AAP step to Registration step (HMS-9521) (#4293)
      - Author: Tomáš Koscielniak, Reviewers: Anna Vítová, Gianluca Zuccarelli
    - Wizard: Packages revamp (HMS-9397) (#4261)
      - Author: Klara Simickova, Reviewers: Anna Vítová, Gianluca Zuccarelli
    - Wizard: Packages revamp follow up (HMS-9397) (#4300)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Remove sources integration and revamp AWS step (HMS-9674) (#4289)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova
    - Wizard: Revamp Locale step (HMS-9517) (#4255)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - Wizard: Update Image details (HMS-10494) (#4269)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update footer buttons (HMS-10535) (#4310)
      - Author: Klara Simickova, Reviewers: Tomáš Koscielniak
    - Wizard: Visually gate repositories and packages (HMS-10420) (#4263)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: add image mode on hosted service (HMS-10361) (#4249)
      - Author: Katarína Sieklová, Reviewers: Gianluca Zuccarelli
    - Wizard: make description of target envs clickable (#4264)
      - Author: Anna Vítová, Reviewers: Gianluca Zuccarelli
    - build(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#4309)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump lodash from 4.17.23 to 4.18.1 (#4270)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump lodash-es from 4.17.23 to 4.18.1 (#4268)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group across 1 directory with 6 updates (#4292)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group with 17 updates (#4301)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump vite from 8.0.3 to 8.0.5 (#4281)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update actions/cache action to v5 (#4276)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update actions/setup-node action to v6 (#4279)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update build-tools digest to f982cf6 (#4275)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update dependency node to v24 (#4280)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update konflux references (#4273)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update konflux references (#4298)
      - Author: {}, Reviewers: Klara Simickova
    - devDeps: Bump typescript-eslint (HMS-10495) (#4291)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - devDeps: Manually bump msw from 2.12.14 to 2.13.0 (HMS-10483) (#4285)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - feat: move ImageBuilderWidget source code from landing-page-frontend (#4271)
      - Author: Tahmid Efaz, Reviewers: Klara Simickova
    - playwright: Update boot tests to reflect packages revamp changes (HMS-10536) (#4305)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Use a pre-created template for repeatable build test (HMS-10455) (#4262)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2026-04-15


author: Packit <hello@packit.dev> - 100-1
changelog:
  Changes with 100
  ----------------
    - ImagesTable: show distro for image mode in hosted (#4419)
      - Author: Ondřej Budai, Reviewers: Gianluca Zuccarelli
    - Update build-tools digest to 9a160fc (#4396)
      - Author: {}, Reviewers: Klara Simickova
    - Wizard/ Oscap: Lock FIPS toggle when enabled by compliance profile (HMS-10579) (#4385)
      - Author: Michal Gold, Reviewers: Gianluca Zuccarelli
    - Wizard/FSC: Move volume group to expandable and fix step spacing (HMS-9395) (#4341)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard/FSC: Safeguard disk min size and update width (HMS-9395) (#4400)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard/FSC: Update the filesystem configuration step as per mocks (HMS-9395) (#4340)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard/Hostname: Update description as per revamp SPUR (HMS-10579) (#4397)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard/ImageOutput: filter supported bootc environments by distro (HMS-10618) (#4383)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    - Wizard/Packages: Fix package recommendations tracking (#4403)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard/Repositories: Update as per newest mocks (HMS-10579) (#4348)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Rename "Image details" to "Details" (HMS-10579) (#4398)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Repos and pkgs SPUR (HMS-10579) (#4377)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update guest image description as per revamp SPUR (HMS-10579) (#4401)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update spacing on the base settings step (HMS-10579) (#4370)
      - Author: Klara Simickova, Reviewers: Anna Vítová, Gianluca Zuccarelli
    - Wizard: exclude EUS repos from repo search (#4380)
      - Author: Bryttanie, Reviewers: Klara Simickova
    - Wizard: hide all customizations for bootable-container-iso (#4427)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Klara Simickova
    - Wizard: make users optional in Image mode on hosted (HMS-10639) (#4410)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - Wizard: prevent removal of required packages via search (#4394)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Wizard: visually split required and optional packages (#4387)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - api: regenerate api code generation (#4381)
      - Author: SchutzBot, Reviewers: Gianluca Zuccarelli, Michal Gold
    - api: regenerate api code generation (#4390)
      - Author: SchutzBot, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group across 1 directory with 9 updates (#4404)
      - Author: {}, Reviewers: Klara Simickova
    - playwright: Migrate tests to Wizard v3 (HMS-10492) (#4327)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova
    - playwright: Update repo filter locator (#4439)
      - Author: Klara Simickova, Reviewers: Simon Steinbeiß
    - playwright: use static repository for RepeatableBuild test (#4411)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova

  — Somewhere on the Internet, 2026-05-13


author: Jerry James <loganjerry@gmail.com> - 1.14.0-3
changelog:
  - Build with the boost version of pdqsort
  - Run all of the tests
  - BR catch 2.x instead of 3.x
  - Drop unnecessary Requires from the devel subpackage
  - Use the cmake declarative buildsystem


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - backend: add script to migrate pulp.json to Pulp labels
  - backend: add function to get pulp object based on its href
  - backend: pass build ID to upload_build_results
  - backend: more log "checkpoints" for build worker


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Set pulp_labels at RPM upload time.
  - Wait on add_and_remove task to finish
  - Switches PulpStorage to using the synchronous RPM upload API
  - Specify charset in lighttpd mimetypes
  - Fix waiting for Pulp copr_base repository
  - Create one repository version and publication per chroot
  - Optimize copr_log_hitcounter for memory


author: Jakub Kadlcik <frostyx@email.cz> 2.7-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Improve robustness and cooperation with rpmbuild
  - Don't run createrepo_c for migrated projects
  - Implement Pulp forking
  - Fix Pulp builds for CoprDirs
  - Adds batching to add_content() and delete_content() in Pulp client.
  - Explicitly set home directory and shell for the user
  - Make sure every PULP api call is logged
  - Set retain_package_versions and retain_repo_versions on repositories
  - Fix race condition in BatchedCreaterepo
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove el7 condition
  - Drop the 'Z' suffix from timestamp
  - Switch RPM upload to the synchronous API from pulp_rpm
  - Fix false-positive failures for build deletion
  - Fix ftbfs for deepcopy not able to handle itertools.count


author: Jakub Kadlcik <frostyx@email.cz> 2.8-1
changelog:
  - Don't traceback when trying to run branch action for second time
  - Implement branch-fedora support for Pulp projects
  - Add a helper script to query Pulp results
  - Handle unsuccessful Pulp requests
  - Don't upload results to Pulp in parallel


author: Jakub Kadlcik <frostyx@email.cz> 2.9-1
changelog:
  - Log the error message that we got from Pulp
  - Fix duplicate NEVRA error when migrating projects to Pulp
  - Fix sub-project handling in the copr-change-storage script


author: Jakub Kadlcik <frostyx@email.cz> 2.10-1
changelog:
  - Don't run builds or actions in projects that are migrated to Pulp
  - Log conflicting NEVRAs when uploading
  - Drop support for building modules


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.11-1
changelog:
  - timeout= for requests was missing, use SafeRequest
  - copr_prune_results: bigger file limit
  - Move pulp-redirect.txt to persistent storage
  - Wait until both copr_base and copr_coprdir exist
  - Set user agent for Pulp requests to crc-pulp-client
  - Set longer timeout for Pulp file uploads
  - Fix deleting project from pulp
  - Drop requirement on pytz
  - Add Pagination for PulpClient.get_content
  - Implement chunked uploads to Pulp
  - Add option to migrate all projects for an owner


author: Jakub Kadlcik <frostyx@email.cz> 2.12-1
changelog:
  - Modify pulp label filter for content queries
  - Cleanup backend-side metadata for PULP chroots
  - Don't convert projects with manual createrepo to PULP
  - Add change-storage support for persistent projects
  - Add prns to a repository, not pulp_hrefs
  - Query Pulp content for only 7 builds at a time
  - Better cancel-build logging
  - Initial Sentry integration
  - Don't run createrepo when forking Pulp projects
  - Extract Exclu*Arch/BuildArch for all targets
  - Fix download-build from PULP with --rpms
  - Implement persistent projects in Pulp
  - Dump copr-rpmbuild version in logs
  - Skip projects with comps enabled when migrating to pulp
  - Temporarily retain all repository packages
  - Info about the task that is being processed


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.4-1
changelog:
  - Fix copr-cli download for Pulp projects
  - Add API endpoint for generating a new token
  - Add wildcard support for 'Packit allowed forge projects'


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - Fix download-build for manual createrepo Pulp projects
  - Make sure new-api-token updates expiration token
  - Don't traceback new-api-token for default config
  - Fix download-build from PULP with --rpms
  - Fix script-repos not being saved at all for custom pkgs
  - Use a URL that would be available before the Pulp migration
  - Use build_proxy.get_built_packages to figure out package NEVRAs
  - Bypass anubis challenge by setting copr user agent
  - Use Tito to generate component.__version__
  - Colorize build statuses


author: Pavel Raiskup <praiskup@redhat.com> 1.1-1
changelog:
  - add sysusers.d config file to allow rpm to create users/groups automatically
  - remove redundant byte compile lines, these dirs are empty already
  - migrate os.listdir() to os.scandir() to increase performance
  - depend on python3-rpkg >= 1.67-4


author: Jakub Kadlcik <frostyx@email.cz> 1.206-1
changelog:
  - Center the outage warning banner text
  - Fix unexpected output schema for deleting builds
  - Fix parsing build IDs to be deleted
  - add per package timeout option
  - Alembic: fix a migration syntax warning
  - EOL-emails deterministic
  - List temporary project after normal projects
  - Don't index unlisted and temporary projects
  - Speedup the update-indexes command
  - Make EOL chroot emails shorter
  - Add tests for branching custom directory
  - Run rawhide-to-release for all CoprDirs
  - Delete compatibility code between flask and flask-restx
  - Migrate builds to flask-restx
  - Fix bug in reporting failed SRPMs to log-detective
  - Commit after every 10 deleted projects instead of 100
  - Don't pass raw SQL as string but rather SQLAlchemy text


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.0-1
changelog:
  - Show Webhook History table under Settings -> Integrations
  - Fix the 500 for racy creation attempts
  - Implement project, build, chroot deletion and creation in Pulp
  - Provide statistics on how many users submitted at least one build in past month
  - Use the same repofile for all CentOS Stream versions


author: Pavel Raiskup <praiskup@redhat.com> 2.2-1
changelog:
  - fix FTBFS when using python below 3.12
  - Add sysusers.d config file to allow rpm to create users/groups automatically
  - fix code formatting test causing FTBFS on F43+
  - Revert "convert eror message to binary text before emitting"
  - fix a few pylint and sqlalchemy warnings
  - we use the standard results URL also for Pulp projects
  - feat: provide log-detective explain integration for failed builds
  - bugfix: use after/with-build-id fields when "rebuilding all"
  - make coprdirs have their repo available in the buildroot
  - isolate PR builds from different packages within one project
  - remove redundant byte compile lines, these dirs are empty already
  - change order of login menu, sign up should be the latest
  - create HTTP redirects for projects migrated to PULP
  - stop using deprecated Query.get method
  - unify error message for rebuild and rebuild all
  - add sponsors of copr project to page footer
  - add API documentation to the copr project useful links
  - migrate os.listdir() to os.scandir() to increase performance
  - assume user has been notified by clicking "Expire now" button
  - fix /build/source-chroot/ endpoint
  - document how to report security issues
  - change default logging level to INFO for check_for_anitya_version_updates
  - add script to migrate existing build results to Pulp
  - pagure events: use text() wrapper around raw queries
  - regenerate devel repository when multiple builds are deleted
  - support build-time dependencies from other storages
  - move repo functions to a separate file
  - builds_initiated_via_hook always passed as a list & doc string update
  - custom webhook handler now adds webhook history record
  - doc: link dnf.conf(5)


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Show coprdirs in the builds table
  - Implement Pulp forking
  - Redirect to the current URL after OIDC login
  - Drop support for OID auth
  - Add symlink to alma family logo from almalinux
  - Fix AI button visibility
  - After edit, redirect to the package
  - Disable network when crearing a new fedora review project
  - Hide excessive CoprDirs under a details tag
  - Fix local builds in Pulp projects
  - Add AlmaLinux logo
  - Update centos logo
  - Fix one pagure-events' traceback
  - Use the new BeautifulSoup find_all() method
  - Drop the duplicit session.commit() call
  - Fix SAWarnings about autoflush
  - pagure-events fail for "dots" in copr.name
  - Treat malformed task_id in backend_general
  - Log the user who removes a project


author: Jakub Kadlcik <frostyx@email.cz> 2.4-1
changelog:
  - Use beginning of the build as reference for timestamp
  - Support both POST and DELETE for deleting a build
  - Print architecture statistics on status page
  - Implement branch-fedora support for Pulp projects
  - Update e-mail on login
  - Drop libravatar url from data dump (GDPR)
  - Delete data signs-out and redirects to homepage (GDPR)
  - Delete also e-mail entry (GDPR)


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - Don't run builds or actions in projects that are migrated to Pulp
  - Drop support for building modules


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.6-1
changelog:
  - Migrate from pytz to zoneinfo
  - Add API endpoint for generating a new token
  - Fix swapped canceled and ended builds
  - Add option to migrate all projects for an owner
  - Add wildcard support for 'Packit allowed forge projects'


author: Jakub Kadlcik <frostyx@email.cz> 2.7-1
changelog:
  - Don't require admin permissions to show the rebuild button
  - Make sure new-api-token updates expiration token
  - Use SafeRequest for pagure-events
  - Make projects clickable in /status/pending/all
  - Initial Sentry integration
  - Extract Exclu*Arch/BuildArch for all targets
  - Improve chroots graph display
  - Implement persistent projects in Pulp
  - Implement global package search for build chroot results
  - Add distgit source and namespace to source_json
  - Preload build.copr to fix the builds page for large projects
  - Add cancel all marked button
  - Fix script-repos not being saved at all for custom pkgs
  - Exclude persistent projects from EOL chroot deletion
  - Disable AI Log Detective and dist-git redirect for non-logged users
  - Add a test for container tags containing dashes
  - Allow dots and dashes in the container regex
  - Allow resubmit for builds that failed during imports
  - Use build.copr instead of copr context for batches builds
  - Preload build.copr_dir to fix the builds page for large projects
  - Improve timestamp printing in the frontend
  - Fix packit_forge_projects_allowed to return list in API
  - Don't use future=True for sqlalchemy create_engine


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Pavel Raiskup <praiskup@redhat.com> 1.3-1
changelog:
  - ignore unicode errors some commands' output
  - custom method - do not rely on working `/bin/su` in chroot
  - migrate os.listdir() to os.scandir() to increase performance
  - do not build package for i686 architecture
  - skip build only there are no unexpanded macros in ExclusiveArch/ExcludeArch


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Improve robustness and cooperation with backend
  - Pipe errors/warning out to builder-live.log
  - Make sure we use the latest dist-git-client


author: Jakub Kadlcik <frostyx@email.cz> 1.7-1
changelog:
  - Do not require DNF4 packages and instead require DNF5 packages
  - Extract Exclu*Arch/BuildArch for all targets
  - Add dependency on the which command
  - Use Tito to generate component.__version__


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-5
changelog:
  - totemsrp: Return error if sanity check fails
    (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity
    (fixes CVE-2026-35092)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-5
changelog:
  - Add --skip-dynamic-tags for annocheck
  - annocheck test fails on aarch64 for pinns due to changes in binutils not
    handled by annocheck.
  - See https://sourceware.org/bugzilla/show_bug.cgi?id=33963 for more
    informaton
  - Tempory skip. Remove when annocheck 13.07 or newer is deployed in Fedora
    packit CI


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.1-2
changelog:
  - Refresh spec file using go2rpm
  - Update spec file template using go2rpm
  - Use kubernetes-cni instead of containernetworking-plugins
  - Adds addition cni conflist
  - Use gocheck2 for tests


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.3-1
changelog:
  - Update to release v1.35.3
  - Resolves: rhbz#2466629
  - Fix CVE-2026-35469
  - Upstream fixes and new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-2
changelog:
  - Add CGO flags to build
  - Add CGO_CFLAGS and CFO_LDFLAGS to resolve annocheck stack-prot test
    failure
  - Exclude s390x and ppc64le from flags
  - Refresh spec


author: Ralf Senderek <innovation@senderek.ie> 3.4.8-12
changelog:
  - add a %generate_buildrequires section (PR#8)
  - remove duplications from -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer


author: Ralf Senderek <innovation@senderek.ie> 3.4.8-15
changelog:
  - Update cryptlib-3.4.8 with source code https://github.com/cryptlib/cryptlib
  - Update all files in the cryptlib tools package to version 1.1


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.17-1
changelog:
  - 2.4.17 (fedora#2456363, fedora#2456362, fedora#2454994, fedora#2454993,
    fedora#2454992, fedora#2454990)


author: Jan Macku <jamacku@redhat.com> - 8.18.0-6
changelog:
  - Fix bad reuse of HTTP Negotiate connection (CVE-2026-1965)
  - Fix token leak with redirect and netrc (CVE-2026-3783)
  - Fix wrong proxy connection reuse with credentials (CVE-2026-3784)
  - Fix use after free in SMB connection reuse (CVE-2026-3805)


author: Martin Osvald <mosvald@redhat.com> - 3.12.1-5
changelog:
  - cyrus-imapd.spec: various small fixes
  - Add comment about source of public key
  - Use gpgverify in accordance with devel guide
  - Download imaptest sources from lookaside cache
  - Disable cld2 dependent tests properly
  - Fix rpminspect failures


author: Martin Osvald <mosvald@redhat.com> - 3.12.1-7
changelog:
  - cyrus-imapd.spec: various small fixes
  - rename patches to conform with devel guide
  - do variable substitution in braced form


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.0.3-3
changelog:
  - Change license tag (GPL-2.0-or-later -> GPL-2.0-only or GPL-3.0-only)
  - Move license texts to -data subpackage so they're always installed
  - Add links to upstream commits for patches


author: Mihai Patrascoiu <mihai.patrascoiu@cern.ch> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Align specfile with upstream (including whitespace from tabs to spaces)


author: Simone Caronni <negativo17@gmail.com> - 2.43-2
changelog:
  - Allow mirroring Debian repositories that do not follow the Debian/Ubuntu
    structure (JFrog, Hashicorp, NVIDIA, Spotify, etc.).


author: Mark Wielaard <mjw@fedoraproject.org> - 5.2-3
changelog:
  - Add 0001-Add-debugedit-classify-ar-and-use-it-before-running-.patch
  - Install debugedit-classify-ar and man page


author: Mark Wielaard <mjw@fedoraproject.org> - 5.3-1
changelog:
  - New upstream 5.3 release
  - Drop all local patches
  - Add new release gpg key
  - Add gcc-c++ as BuildRequires


author: Robert Scheck <robert@fedoraproject.org> - 0.7.1-6
changelog:
  - Added missing dehydrated run-time requirements
  - Resolved: rhbz#2279854 dehydrated dependency issue on EL8


author: Petr Šplíchal <psplicha@redhat.com> - 0.22-1
changelog:
  - Implement `transition` stats for the `jira` plugin (#352)
  - Fix issue with wrong `until` in GitHub search (#376)
  - List resolved jira by tester and contributor field
  - Fix `zammad` token bug, some minor adjustments
  - Better handling auth max retry in jira plugin
  - Handle JSON decode errors in pagure plugin
  - Reuse bodhi connection instead of opening new ones
  - Properly handle timeout in pagure plugin
  - Complete report even on plugin error
  - Better handling on server errors for pagure plugin
  - Better handling of wrong url in confluence plugin
  - Handle timeout fetching batches in jira plugin
  - Fixed Jira updated issues and support timeout
  - Collect stats in parallel
  - Add stats for updated jira tickets
  - Handle rate limiting in Jira plugin
  - Allow to filter out orgs in GitHub plugin
  - Properly collect comments in GitHub
  - Improve items plugin
  - Enable pagure closed PRs stats collection
  - Add hyperkitty support
  - Handle better the GitLab expired token case
  - Increased test coverage
  - Use pytest-xdist for parallelizing test execution
  - Add collection of comments for Pagure
  - Cover markdown format while testing Koji
  - Use tenacity handling retry connection to GitHub
  - Added stats for modified pages in Confluence
  - Allow to skip SSL verification in bugzilla plugin
  - Added markdown support to google plugin
  - Add token authentication to confluence plugin
  - Add markdown support to koji plugin
  - Fetch all created issues correctly in `pagure` (#379)
  - Use custom `user-agent` in the `public_inbox` plugin (#392)
  - Fix dockerfile executable path, add git to container (#354)
  - Support `user`, `org`, `repo` in the `github` plugin (#373)
  - Handle the GitHub rate limit in a better way (#374)
  - Create a Public Inbox Plugin
  - Implement `did last [monday..sunday]`
  - Correctly handle merge commits in verbose mode
  - Prevent duplicates in github issue stats
  - Retry connecting to GitLab API on error
  - Add a `Toolbelt Catalog` entry for `did`
  - Allow skipping events that are not reportable
  - Add a team report example using login aliases
  - Migrate to the `SPDX` identifier


author: Petr Šplíchal <psplicha@redhat.com> - 0.23-1
changelog:
  - Enable `epel-10` building and testing (#454)
  - Implement initial support for `forgejo` stats (#452)
  - Support `merged` pull requests for `github` and `gitlab` (#311)
  - Improve the Jira Cloud implementation (#453)
  - Support Jira Cloud instance (#448)
  - Fix issues reported by CodeQL security scan
  - Add --full-message flag to show complete commit/PR/MR bodies (#446)
  - Avoid fetching thousands of pages from GitLab API (#377)
  - Upgrade to CodeQL Action v4 (#445)
  - Fix parsing of --config argument with whitespace (#437)
  - Fix `GitHub.commented_in_range` (#444)
  - Add type hints to items plugin (#443)
  - Add type hints to Confluence plugin (#442)
  - Add type hints to Jira plugin (#441)
  - Jira issues with worklogs (#429)
  - Enable Python 3.14 support (#440)
  - Add type hints and error handling to Bugzilla plugin (#433)
  - Add type hints and error handling to Bodhi plugin (#432)
  - Fix error handling in config parsing and CLI (#431)
  - Add typing hints to conftest.py (#430)
  - Add type hints to CLI module (#424)
  - Add type annotations on base.py (#423)
  - Fix typing issues reported by mypy (#422)
  - Fix GitLab plugin 60s default timeout (#421)
  - Add unit tests for utils module (#417)
  - Add unit tests for stats module (#414)
  - Fix missing Optional typing (#411)
  - Fix return type for `get_token` in `base.py` (#412)
  - Avoid using variable names used in exceptions (#413)
  - Handle error responses querying GitHub (#408)
  - Fix Zammad plugin by filtering tickets after search (#328)
  - Add `pyproject.toml` (#409)
  - Support retry while fetching `public-inbox` stats
  - Retry bugzilla search query on connection errors
  - Deal with conflicting period options
  - Fix PageModified stat in Confluence plugin
  - Fix Jira transition to state with multiple projects


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 312-1
changelog:
  - Version 312
  - This and the previuos version contain updates for compatibility with
    newer versions of dependencies.


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Miroslav Suchý <msuchy@redhat.com> 1.115-1
changelog:
  - update copr keys
  - Update for openSUSE 16 keys
  - Update changelog
  - Microsoft: add 2025 & open tech keys
  - alpine-linux: Add loongarch64 key
  - fedora: Update rawhide symlink


author: Pavel Raiskup <pavel@raiskup.cz> 1.116-1
changelog:
  - Add CentOS PQC signing keys
  - Add RHEL PQC signing keys
  - suse: Update RPM-GPG-KEY-SuSE-SLE-12
  - Refresh CentOS SIG Extras key
  - Update CentOS SIG keys downlod script
  - Add missing CentOS SIG keys
  - Add new Slack key used by versions 4.47 and above
  - Add openSUSE Leap SLE imports
  - Add Slack key


author: Miroslav Suchý <msuchy@redhat.com> 1.119-1
changelog:
  - update copr keys
  - add: ultramarine repository keys
  - add: terra repository keys
  - update Google key block


author: Xavier Bachelot <xavier@bachelot.org> - 3.5.28-12
changelog:
  - Do not BuildRequires: inkscape on EL10
  - Sort BuildRequires:
  - Use %make_build, %make_install and %license macros
  - Improve %files section


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-2
changelog:
  - Fix a crash in dnf5daemon-server when receiving an unknown locale from
    a D-Bus client (CVE-2026-3836) (bug #2445771)


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-3
changelog:
  - Fix a crash when formatting an RPM scriptlet output containing a non-ASCII
    character in C locale (bug #2443774)


author: Sander Hoentjen <shoentjen@antagonist.nl> - 2.0.3-1
changelog:
  - Update to new upstream
  - Fixes #2453419 (CVE-2026-27854)
  - Fixes #2453421 (CVE-2026-27853)
  - Fixes #2453426 (CVE-2026-24030)
  - Fixes #2453427 (CVE-2026-0397)
  - Fixes #2453429 (CVE-2026-24029)
  - Fixes #2453430 (CVE-2026-0396)
  - Fixes #2453431 (CVE-2026-24028)


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.1.3-1
changelog:
  - Update to release v5.1.3
  - Resolves rhbz#2458697
  - Resolves CVE-2026-33747: rhbz#2452188, rhbz#2452199
  - Resolves CVE-2026-33748: rhbz#2453089
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.0-1
changelog:
  - Update to release v3.1.0
  - Resolves: rhbz#2455529, rhbz#2455654
  - Resolves CVE-2026-35172
  - Resolves CVE-2026-33540
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.1-1
changelog:
  - Update to release v3.1.1
  - Resolves: rhbz#2455529
  - Fixes CVE-2026-41888
  - Upstream fixes and updates
  - Temporary annocheck skip test for broken branch protection test on
    aarch64


author: Than Ngo <than@redhat.com> - 7.5.3-1
changelog:
  - Update to 7.5.3
    * Fix: Exit with non-zero code if the conversion is aborted due to a binary file
    * Fix: Exit with zero code when an unicode conversion error occurs in quiet mode
    * Updated translations


author: Christian Krause <chkr@fedoraproject.org> - 1.1.17-6
changelog:
  - Update location of ca bundle according to
    https://fedoraproject.org/wiki/Changes/droppingOfCertPemFile


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-ATOMIC_VAR_INIT.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-more-dwarf5-lang.patch
    elfutils-0.192-fix-zsh-profile.patch
    elfutils-0.192-stacktrace-lto.patch
    elfutils-0.192-imasig-fail-free.patch
    elfutils-0.192-strip-ignore-non-ET_REL.patch


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-aarch64-Recognize-SHT_AARCH64_ATTRIBUTES.patch
    elfutils-0.194-alloc-jobs.patch
    elfutils-0.194-fix-const.patch
    elfutils-0.194-sh_addr-non-zero.patch


author: Jerry James <loganjerry@gmail.com> - 14.1.2-1
changelog:
  - Version 14.1.2
  - Merge the doc subpackage into the main package
  - Recommend texlive-mylatex (needed for preview)
  - Add a %check script


author: Ruslan Bekenev <furyinbox@gmail.com> - 1.27.0-1
changelog:
  - Update to 1.27.0
  - Use SPDX License Expression for License
  - Requires: emacs-filesystem for directory ownership


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: psklenar@redhat.com <psklenar@redhat.com> - 2.7.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Pawel Zmarzly <pzmarzly0@gmail.com> - 0^20260107gitdbb4529-4
changelog:
  - Import README from previous repo
  - Renaming package from gitlab-github-facebook-time to facebook-time


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Dr Anirban Mitra <mitra_anirban@yahoo.co.in> - 3.4.2-1
changelog:
  - Added Missing .notdef glyf
  - Added stylistic alternate of i-matra and ii-matra
  - reinstated vertical fraction lookup mistakenly deleted from previous version


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.6-6
changelog:
  - Switch to pkg-config style dependency
  - Use SPDX identifier in License: tag and add licensing break-down
  - update build_ldflags instead of messing with LDFLAGS


author: Miroslav Suchý <msuchy@redhat.com> 1.66-1
changelog:
  - Mark LicenseRef-CRC32 as deprecated
  - allow packages that includes or bundle ccan as an exception
  - add LicenseRef-Julius-dictation-kit as not allowed
  - add Seiko-Epson license to firmware
  - add public domain findings for sc
  - add ultra permissive dedication of perl-Math-FFT
  - add aastr ultra permissive dedication
  - add GPL-2.0-or-later WITH mif-exception
  - add public domain dedication for libtelnet
  - Add PHP-3.0
  - LicenseRef-Fedora-Public-Domain: Add zpaqfranz


author: Miroslav Suchý <msuchy@redhat.com> 1.67-1
changelog:
  - add autossh man page ultra permissive dedication
  - add LGPL-2.1-only WITH Digia-Qt-LGPL-exception-1.1
  - add jove license
  - add man2html license
  - add DocBook-DTD license
  - add BSD-2-Clause-pkgconf-disclaimer
  - correct expression of PHP-3.0
  - Add SpacemiT esos.elf license as allowed-firmware
  - Add 7zip public domain headers
  - add Game-Programming-Gems license
  - add LGPL-2.1-or-later WITH polyparse-exception
  - add GPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - enhance BSD-3-Clause-Clear usage text
  - document known exception for kernel for BSD-3-Clause-Clear
  - add LicenseRef-Hauppauge-firmware-eula as not allowed
  - add LicenseRef-Hauppauge as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.68-1
changelog:
  - add CC-SA-1.0 as allowed-content
  - allow golang-x-perf to use CC-BY-4.0 for code as an exception
  - add GPL-3.0-or-later WITH Libtool-exception
  - UltraPermissive: Add a text found in libisds
  - add LicenseRef-Geotrans as not-allowed
  - Add public-domain dedication for jemalloc/rust-tikv-jemalloc-sys
  - add Aspell-RU
  - add ngrep
  - add Unlicense-libwhirlpool
  - add Unlicense-libtelnet
  - add CDLA-Permissive-2.0
  - add BSD-3-Clause WITH AdditionRef-Dart
  - add UltraPermissive dedication of autossh


author: Miroslav Suchý <msuchy@redhat.com> 1.70-1
changelog:
  - add GPL-2.0-only WITH Universal-FOSS-exception-1.0
  - add libpng licenses
  - add UltraPermissive dedication of tolua++
  - add note and link that APSL-1.x can be used as APSL-2.0
  - add LicenseRef-Remix-icon as not-allowed
  - describe how to use LicenseRef-IUPAC-InChI-Trust
  - Add public-domain dedication for dcm2niix
  - add LicenseRef-Aalok-Everfree as not-allowed
  - add public domain dedication of libtommath
  - add public domain dedication of heimdal


author: Miroslav Suchý <msuchy@redhat.com> 1.71-1
changelog:
  - add GPL-2.0-or-later WITH LicenseRef-Fedora-Temporary-kvirc-openssl-exception
  - add GPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-cryptsetup-OpenSSL-
    exception
  - add LGPL-2.1-or-later WITH LicenseRef-Fedora-Temporary-Simple-Library-
    exception
  - add AGPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817
  - add LGPL-2.0-only WITH LicenseRef-Fedora-Temporary-Classpath-exception-
    variation
  - add LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib
  - add LicenseRef-Fedora-Temporary-OSSP
  - add LicenseRef-Fedora-Temporary-AZL
  - add LicenseRef-Fedora-Temporary-Python-trace
  - add Advanced-Cryptics-Dictionary license
  - add BSD-Mark-Modifications license
  - Remove deprecated parts from JSON
  - grammar: sort ID alphabetically
  - grammar: do not allow bad license with OR operator
  - add WTFNMFPL license
  - add LicenseRef-HPND-TAES as not-allowed
  - add LGPL-2.0-only WITH Universal-FOSS-exception-1.0
  - OPUBL-1.0: Move packages_with_exceptions into [license]
  - Add public-domain dedication for tinyxml2
  - add WordNet license
  - Extend ISO-8879 exception to dotnet10.0


author: Miroslav Suchý <msuchy@redhat.com> 1.73-1
changelog:
  - add dedications from linux-firmware from qcom/NOTICE.txt
  - add LGPL-2.0-only WITH Classpath-exception-2.0-short
  - add OSSP license
  - add GPL-3.0-or-later WITH GCC-exception-2.0
  - add hyphen-bulgarian license
  - add GPL-2.0-or-later WITH kvirc-openssl-exception
  - add LICENCE.siano from linux-firmware to firmware.txt
  - add HPND-SMC
  - removed LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Wadalab
  - rename LicenseRef-Fedora-Temporary-* to AdditionRef-Fedora-Temporary-*


author: Miroslav Suchý <msuchy@redhat.com> 1.74-1
changelog:
  - remove LicenseRef-Romio as it equals to SPDX ID mpich2
  - add public domain dedication from gstreamer1-plugins-bad-free
  - add public domain dedication from openmpi
  - add LICENSE.QualcommAtheros_ar3k from linux-firmware to firmware.txt
  - add text to LicenseRef-* licenses
  - add public domain dedication from rb_libtorrent
  - add LicenseRef-BSD-TPM as not-allowed
  - add LicenseRef-Hippocratic-3.0 as not-allowed
  - add LICENSE.i915 from linux-firmware to firmware.txt
  - add LICENCE.IntcSST2 from linux-firmware to firmware.txt
  - add LicenseRef-ECMA-spec license
  - add NPL-1.1 license
  - rename LGPL-2.1-or-later_WITH_AdditionRef-Fedora-Temporary-Simple-Library-
    exception to final LGPL-2.1-or-later_WITH_Simple-Library-Usage-exception
  - rename LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib to ALGLIB-
    Documentation
  - rename AGPL-3.0-or-later_WITH_AdditionRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817 to AGPL-3.0-or-later_WITH_PS-or-PDF-font-
    exception-20170817
  - add firmware license from linux-firmware - LICENSE.amdnpu
  - add firmware license from linux-firmware - LICENCE.Marvell
  - add firmware license from linux-firmware - LICENCE.OLPC
  - add firmware license from linux-firmware - LICENCE.ti-connectivity
  - add firmware license from linux-firmware - LICENCE.xc4000
  - add firmware license from linux-firmware - LICENCE.adsp_sst
  - add LICENCE.mediatek from linux-firmware to firmware.txt


author: Miroslav Suchý <msuchy@redhat.com> 1.75-1
changelog:
  - add MIT WITH fmt-exception
  - add LicenseRef-Remix-icon-license-1.0 as not-allowed
  - add LPD-document as allowed-content
  - add public domain dedication from tcputils
  - add GPL-2.0-only WITH eCos-exception-2.0 as allowed
  - rename temporary AdditionRef-WebM-patent-license to Google-Patent-WebM
  - Add public-domain dedication for python-rnc2rng
  - add public domain dedication from enchant
  - Add rocq-doc as known exception to OPUBL-1.0
  - add GPL-3.0-or-later WITH CGAL-linking-exception
  - replace temporary ID with sqlitestudio-OpenSSL-exception
  - add gstreamer1-doc as known exception to OPUBL-1.0
  - add public domain dedication from fcitx5-mozc
  - add public domain dedication from bsd-games


author: Jens Petersen <petersen@redhat.com> - 0.8-1
changelog:
  - https://hackage.haskell.org/package/fedora-repoquery-0.8/changelog
  - parsing and completion of all dnf options
  - add generated fish and zsh completion files for fedora-repoquery (frpq
    pending)


author: Miroslav Suchý <msuchy@redhat.com> 41.2-1
changelog:
  - remove-retired-packages: detect removed subpackages
  - no need to check if F41 is prerelease
  - add new line to repoquery to make remove-retired-packages work with dnf5


author: Miroslav Suchý <msuchy@redhat.com> 41.3-1
changelog:
  - correctly detect tmux
  - requires sudo
  - add reverence to `dnf history` in man page
  - add old gpg keys
  - group minimal install does not exist anymore
  - move rawhide version


author: Miroslav Suchý <msuchy@redhat.com> 42.3-1
changelog:
  - add upgrade to Fedora 43
  - remove upgrade to F40 that is EOL
  - typo
  - dnf5 uses /var/cache/libdnf5


author: Miroslav Suchý <msuchy@redhat.com> 42.4-1
changelog:
  - migrate from python3-dnf to python-libdnf5
  - use spdx id as license name
  - update link to documentation
  - add upgrade to F44
  - do not check if F43 is prerelease
  - simplify spec - remove f40- code


author: Packit <hello@packit.dev> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: rhbz#2336848


author: Packit <hello@packit.dev> - 0.5.4-1
changelog:
  * packit: drop centos propose downstream and jobs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/743
   * fix: packit: bring back pkg_tool centpkg by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/744
   * Makefile tarball targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/745
   * chore: describe how to release a new version by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/746
   * chore: allow libcryptsetup-rs >= 0.11.2 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/739
   * chore: bump diesel from 2.2.3 to 2.2.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/728
   * Update to latest version of aws-nitro-enclaves-cose by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/724
   * chore: bump reqwest from 0.12.7 to 0.12.9 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/751
   * chore: bump ring from 0.17.8 to 0.17.13 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/754
   * chore: bump futures from 0.3.30 to 0.3.31 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/753
   * chore: prepare 0.5.4 release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/757


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.3...v0.5.4


author: Packit <hello@packit.dev> - 0.5.5-1
changelog:
  * chore: bump openssl from 0.10.70 to 0.10.72 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/758
   * fix: replace default.target with initrd.target by @lbrabec in https://github.com/fdo-rs/fido-device-onboard-rs/pull/762
   * ci(mergify): upgrade configuration to current format by @mergify in https://github.com/fdo-rs/fido-device-onboard-rs/pull/766
   * chore: bump tokio from 1.36.0 to 1.45.1 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/769
   * chore: bump actions/upload-artifact from 3 to 4 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/593
   * chore: bump actions/checkout from 3 to 4 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/551
   * chore: bump regex from 1.10.3 to 1.11.1 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/752
   * chore: bump tss-esapi crate to 7.6 by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/772
   * chore: fix the container deps by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/775
   * chore: bump for 0.5.5 release by @pcdubs in https://github.com/fdo-rs/fido-device-onboard-rs/pull/771

   * @lbrabec made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/762
   * @mergify made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/766

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.4...v0.5.5
  - Resolves: rhbz#2369025


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-3
changelog:
  - Rebuild against MIT Kerberos 1.22.2
  - Fix build against NodeJS in F44/45
  - Allow SELinux policy for ipa-otpd in non-IPA environment (standalone SSSD)
  - Fix freeipa-client package scriptlet to not fail when config is missing
  - Resolves: rhbz#2439482


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-8
changelog:
  - Fix SELinux policy for SSSD MFA helpers
  - Fix cases when passkey child was crashing when called from ipa-otpd


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-9
changelog:
  - Ensure proper error code return in case MS-PAC generator not yet enabled
  - Resolves: rhbz#2448253
  - Rebuild against Samba 4.24.0 final release
  - Related: rhbz#2448612


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.0-1
changelog:
  - Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
    CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885,
    CVE-2026-31897)
    Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415
    Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428
    Resolves: rhbz#2447431


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.2-1
changelog:
  - Update to 3.24.2 (CVE-2026-33952, CVE-2026-33977, CVE-2026-33982,
    CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-33986,
    CVE-2026-33987, CVE-2026-33995)
    Resolves: rhbz#2448592


author: Jerry James <loganjerry@gmail.com> - 0.9.6-1
changelog:
  - Version 0.9.6
  - Drop unneeded makefile patch
  - Build with cmake
  - Add patch to build shared library instead of static library
  - Use the %license macro


author: Jerry James <loganjerry@gmail.com> - 2.1.9-1
changelog:
  - Version 2.1.9
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude
  - License file now supplied by upstream


author: Jerry James <loganjerry@gmail.com> - 2.8.2-1
changelog:
  - Version 2.8.2
  - Predownloaded ATLAS data is no longer needed for the tests
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.4
changelog:
  - update from trunk
    - PRs ada/68179, ada/123589, algol68/123007, algol68/123653, algol68/123734,
  	analyzer/123145, analyzer/123540, c/123437, c++/122391, c++/123601,
  	c++/123627, c++/123639, c++/123677, c++/123692, c++/123694,
  	diagnostics/122622, fortran/94377, fortran/109512, fortran/123375,
  	ipa/123412, libgcc/123650, libgomp/88707, libgomp/122314,
  	libgomp/122356, libstdc++/114153, middle-end/123697,
  	middle-end/123744, modula2/123739, pch/110746,
  	rtl-optimization/121787, rtl-optimization/122215,
  	rtl-optimization/123380, rtl-optimization/123585, sarif-replay/123056,
  	target/71340, target/113666, target/117575, target/122781,
  	target/122869, target/123279, target/123460, target/123521,
  	target/123584, target/123603, target/123607, target/123626,
  	target/123631, target/123724, target/123742, testsuite/123175,
  	testsuite/123751, tree-optimization/113524, tree-optimization/123061,
  	tree-optimization/123314, tree-optimization/123513,
  	tree-optimization/123602, tree-optimization/123636,
  	tree-optimization/123645, tree-optimization/123656,
  	tree-optimization/123729, tree-optimization/123731,
  	tree-optimization/123736, tree-optimization/123741,
  	tree-optimization/123745, tree-optimization/123753,
  	tree-optimization/123755, tree-optimization/123756


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.5
changelog:
  - update from trunk
    - PRs algol68/123733, algol68/123785, c++/101140, c++/122494, c++/122609,
  	c++/123354, c++/123404, c++/123578, c++/123597, c++/123620,
  	c++/123663, c++/123667, c++/123676, c++/123684, c++/123737,
  	c++/123814, d/122800, fortran/118955, fortran/123772,
  	libstdc++/123758, middle-end/122348, middle-end/123703,
  	middle-end/123709, middle-end/123775, other/67300,
  	rtl-optimization/80357, rtl-optimization/94014,
  	rtl-optimization/123144, target/123780, target/123791, target/123792,
  	tree-optimization/106883, tree-optimization/120258,
  	tree-optimization/121347, tree-optimization/122474,
  	tree-optimization/122749, tree-optimization/123628,
  	tree-optimization/123657, tree-optimization/123767,
  	tree-optimization/123771, tree-optimization/123776,
  	tree-optimization/123778, tree-optimization/123794,
  	tree-optimization/123799, tree-optimization/123803,
  	tree-optimization/123820


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.6
changelog:
  - update from trunk
    - PRs ada/89159, ada/121316, ada/123580, ada/123832, ada/123857, ada/123861,
  	ada/123867, ada/123902, algol68/123959, analyzer/98447,
  	analyzer/116228, analyzer/116865, analyzer/117491, analyzer/122623,
  	analyzer/123880, c/101312, c/102846, c/123500, c/123583, c/123882,
  	c++/38612, c++/102613, c++/102846, c++/110871, c++/110872, c++/113968,
  	c++/114450, c++/121832, c++/122169, c++/122785, c++/123557,
  	c++/123611, c++/123614, c++/123659, c++/123695, c++/123738,
  	c++/123752, c++/123790, c++/123818, c++/123825, c++/123837,
  	c++/123845, c++/123866, c++/123871, c++/123913, c++/123918,
  	c++/123920, c++/123934, c++/123964, c++/123977, c++/124002,
  	cobol/119332, d/116975, d/120096, d/121477, d/122817, d/123046,
  	d/123263, d/123264, d/123349, d/123407, d/123419, d/123422, d/123798,
  	debug/110885, debug/123376, debug/123886, diagnostics/110522,
  	fortran/117303, fortran/123868, fortran/123941, fortran/123952,
  	gcov-profile/121084, gcov-profile/121123, gcov-profile/121409,
  	gcov-profile/123855, ipa/106260, ipa/111036, ipa/116296, ipa/123226,
  	ipa/123416, ipa/123619, libffi/117635, libgomp/113213, libgomp/121813,
  	libitm/69018, libstdc++/86164, libstdc++/114865, libstdc++/117404,
  	libstdc++/120567, libstdc++/123921, middle-end/49330,
  	middle-end/97898, middle-end/118608, middle-end/121661,
  	middle-end/122689, middle-end/123447, middle-end/123575,
  	middle-end/123826, middle-end/123869, middle-end/123876,
  	middle-end/123887, middle-end/123892, middle-end/123978, other/123841,
  	rtl-optimization/106859, rtl-optimization/119982,
  	rtl-optimization/122170, rtl-optimization/123294,
  	rtl-optimization/123322, rtl-optimization/123833,
  	rtl-optimization/123922, target/36503, target/117048, target/121571,
  	target/122097, target/122343, target/123016, target/123206,
  	target/123245, target/123548, target/123604, target/123766,
  	target/123779, target/123806, target/123807, target/123824,
  	target/123870, target/123910, target/123969, target/123971,
  	testsuite/123559, testsuite/123936, translation/89915,
  	tree-optimization/109410, tree-optimization/110043,
  	tree-optimization/114274, tree-optimization/114969,
  	tree-optimization/116747, tree-optimization/121104,
  	tree-optimization/121726, tree-optimization/122197,
  	tree-optimization/122537, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123672,
  	tree-optimization/123849, tree-optimization/123864,
  	tree-optimization/123897, tree-optimization/123898,
  	tree-optimization/123925, tree-optimization/123940,
  	tree-optimization/123958, tree-optimization/123983,
  	tree-optimization/123986


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.7
changelog:
  - update from trunk
    - PRs ada/121576, ada/124025, c++/123616, c++/123640, c++/123823,
  	c++/123889, c++/123984, d/123995, d/124026, fortran/85547,
  	fortran/122949, fortran/123545, fortran/123673, fortran/123961,
  	rtl-optimization/123796, target/123911, target/123926,
  	testsuite/124036, tree-optimization/117217, tree-optimization/123225,
  	tree-optimization/124034


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/124016, ada/124054, ada/124106, ada/124179, ada/124192,
  	ada/124201, ada/124224, ada/124226, ada/124282, ada/124285,
  	algol68/124028, algol68/124049, algol68/124115, analyzer/108400,
  	analyzer/111099, analyzer/113496, analyzer/117369, analyzer/121928,
  	analyzer/123973, analyzer/123981, analyzer/124055, analyzer/124073,
  	analyzer/124104, analyzer/124116, analyzer/124139, analyzer/124188,
  	analyzer/124195, analyzer/124232, c/87591, c/105555, c/119651,
  	c/123365, c/123472, c/123716, c++/98939, c++/101670, c++/102397,
  	c++/119756, c++/120685, c++/120974, c++/121500, c++/121822,
  	c++/122318, c++/122621, c++/123143, c++/123440, c++/123608,
  	c++/123612, c++/123641, c++/123642, c++/123660, c++/123661,
  	c++/123662, c++/123989, c++/124012, c++/124045, c++/124070,
  	c++/124096, c++/124119, c++/124150, c++/124153, c++/124173,
  	c++/124184, c++/124204, c++/124215, c++/124227, cobol/119455,
  	cobol/121499, cobol/122839, cobol/123238, demangler/106641,
  	diagnostics/122001, diagnostics/124014, fortran/78187, fortran/80012,
  	fortran/88076, fortran/99250, fortran/108663, fortran/120505,
  	fortran/121360, fortran/121429, fortran/122491, fortran/123943,
  	fortran/123947, fortran/123949, fortran/124071, fortran/124080,
  	fortran/124208, fortran/124235, fortran/124286, ipa/122856,
  	ipa/123229, ipa/123629, libfortran/88076, libfortran/123366,
  	libstdc++/105580, libstdc++/113450, libstdc++/119745,
  	libstdc++/121402, libstdc++/121771, libstdc++/123176,
  	libstdc++/123875, libstdc++/123908, libstdc++/123991,
  	libstdc++/124015, libstdc++/124024, libstdc++/124124,
  	middle-end/113436, middle-end/123386, middle-end/124056,
  	middle-end/124250, middle-end/124280, other/88472,
  	rtl-optimization/116053, rtl-optimization/116600,
  	rtl-optimization/120169, rtl-optimization/121191,
  	rtl-optimization/123048, rtl-optimization/123381,
  	rtl-optimization/123994, rtl-optimization/124062,
  	rtl-optimization/124079, target/57261, target/80881, target/112400,
  	target/113453, target/115042, target/119979, target/120233,
  	target/120234, target/120241, target/120888, target/122448,
  	target/123137, target/123195, target/123285, target/123556,
  	target/123624, target/124048, target/124094, target/124098,
  	target/124134, target/124136, target/124138, target/124147,
  	target/124162, target/124167, target/124194, target/124236,
  	target/124294, testsuite/103515, testsuite/115827, testsuite/123191,
  	testsuite/124064, translation/118988, tree-optimization/90036,
  	tree-optimization/95825, tree-optimization/99959,
  	tree-optimization/107690, tree-optimization/110091,
  	tree-optimization/114375, tree-optimization/117935,
  	tree-optimization/121103, tree-optimization/122297,
  	tree-optimization/124038, tree-optimization/124068,
  	tree-optimization/124086, tree-optimization/124099,
  	tree-optimization/124108, tree-optimization/124130,
  	tree-optimization/124132, tree-optimization/124142,
  	tree-optimization/124288


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.9
changelog:
  - update from trunk
    - PRs c/122572, c++/123408, c++/123665, c++/123810, c++/124229, c++/124306,
  	c++/124324, c++/124368, cobol/119456, fortran/124330, ipa/60674,
  	libfortran/124330, libstdc++/117402, libstdc++/119197,
  	libstdc++/122217, libstdc++/124363, middle-end/45273,
  	rtl-optimization/123786, rtl-optimization/124041,
  	rtl-optimization/124351, target/64835, target/124165, target/124315,
  	target/124335, target/124336, target/124341, target/124349,
  	target/124366, target/124367, testsuite/122961, testsuite/124320,
  	testsuite/124359, tree-optimization/119568
    - fix -flto -g handling of aarch64 AEABI attributes
      (#2439677, PR target/124365)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.10
changelog:
  - update from trunk
    - PRs ada/107475, ada/120669, ada/124369, ada/124376, algol68/124322,
  	algol68/124372, analyzer/107646, analyzer/124375, analyzer/124433,
  	analyzer/124451, bootstrap/124406, bootstrap/124547, c/97991,
  	c/122866, c/123461, c/123856, c/124230, c++/39057, c++/109521,
  	c++/115852, c++/118482, c++/120039, c++/120285, c++/122559,
  	c++/122786, c++/123618, c++/123622, c++/124118, c++/124145,
  	c++/124154, c++/124200, c++/124297, c++/124307, c++/124309,
  	c++/124311, c++/124331, c++/124388, c++/124389, c++/124390,
  	c++/124397, c++/124399, c++/124404, c++/124417, c++/124425,
  	c++/124431, c++/124440, c++/124447, c++/124456, c++/124459,
  	c++/124466, c++/124472, c++/124474, c++/124478, c++/124483,
  	c++/124485, c++/124489, c++/124493, c++/124494, c++/124496,
  	c++/124575, d/123202, d/124158, driver/69367, driver/69849,
  	fortran/82721, fortran/84779, fortran/93832, fortran/95338,
  	fortran/97818, fortran/102333, fortran/102459, fortran/102596,
  	fortran/103139, fortran/105168, fortran/106946, fortran/110877,
  	fortran/115316, fortran/120286, fortran/120723, fortran/121043,
  	fortran/121743, fortran/122696, fortran/122902, fortran/124161,
  	fortran/124450, fortran/124482, gcov-profile/123923,
  	gcov-profile/124075, ipa/124291, ipa/124462, libfortran/124371,
  	libstdc++/116110, libstdc++/118030, libstdc++/118341,
  	libstdc++/119794, libstdc++/120527, libstdc++/121790,
  	libstdc++/122300, libstdc++/122567, libstdc++/124268,
  	libstdc++/124290, libstdc++/124443, libstdc++/124444,
  	libstdc++/124463, libstdc++/124513, libstdc++/124568,
  	middle-end/120030, middle-end/121159, middle-end/124435,
  	middle-end/124491, middle-end/124552, objc/124260, other/124508,
  	preprocessor/105412, rtl-optimization/121649, rtl-optimization/123094,
  	rtl-optimization/123822, rtl-optimization/124078,
  	rtl-optimization/124439, rtl-optimization/124452,
  	rtl-optimization/124454, rtl-optimization/124476, target/117182,
  	target/122000, target/122925, target/122953, target/123271,
  	target/123749, target/124044, target/124126, target/124333,
  	target/124403, target/124407, target/124409, target/124436,
  	target/124461, target/124565, target/124566, testsuite/112520,
  	testsuite/119930, testsuite/124066, testsuite/124484,
  	translation/124422, tree-optimization/80006, tree-optimization/98064,
  	tree-optimization/120987, tree-optimization/122380,
  	tree-optimization/124037, tree-optimization/124135,
  	tree-optimization/124358, tree-optimization/124528,
  	tree-optimization/124555, tree-optimization/124578


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.11
changelog:
  - update from trunk
    - PRs ada/77535, ada/87170, ada/95452, ada/105212, ada/124596, ada/124606,
  	ada/124607, ada/124836, c/61896, c/123234, c/123424, c/124635,
  	c++/98930, c++/103901, c++/117133, c++/118630, c++/120338, c++/121643,
  	c++/121961, c++/122632, c++/122884, c++/123087, c++/123237,
  	c++/123346, c++/123529, c++/123566, c++/123613, c++/123700,
  	c++/123726, c++/123783, c++/123975, c++/123998, c++/124120,
  	c++/124177, c++/124198, c++/124246, c++/124457, c++/124477,
  	c++/124487, c++/124488, c++/124531, c++/124544, c++/124573,
  	c++/124614, c++/124617, c++/124645, c++/124646, c++/124648,
  	c++/124689, c++/124735, c++/124755, c++/124768, c++/124771,
  	c++/124773, c++/124781, c++/124785, c++/124790, c++/124792,
  	c++/124824, c++/124831, c++/124835, c++/124842, c++/124844,
  	c++/124850, c++/124862, d/88150, debug/94491, debug/124644,
  	fortran/66973, fortran/79330, fortran/79524, fortran/84245,
  	fortran/85352, fortran/93554, fortran/93715, fortran/93814,
  	fortran/94978, fortran/95163, fortran/95879, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/101281,
  	fortran/101760, fortran/102314, fortran/102430, fortran/102619,
  	fortran/103367, fortran/104827, fortran/107425, fortran/109788,
  	fortran/114021, fortran/115315, fortran/119273, fortran/120140,
  	fortran/121185, fortran/124259, fortran/124512, fortran/124567,
  	fortran/124598, fortran/124631, fortran/124652, fortran/124656,
  	fortran/124661, fortran/124666, fortran/124739, fortran/124751,
  	fortran/124780, fortran/124807, gcov-profile/121074, ipa/124700,
  	ipa/124777, libfortran/124543, libgomp/123177, libgomp/124123,
  	libstdc++/124722, lto/124828, middle-end/123635, middle-end/124634,
  	middle-end/124671, middle-end/124697, middle-end/124827,
  	middle-end/124877, modula2/105408, modula2/124081, modula2/124840,
  	other/94182, other/124784, preprocessor/70917,
  	rtl-optimization/124572, rtl-optimization/124649,
  	rtl-optimization/124696, sanitizer/124170, target/69639,
  	target/102309, target/105192, target/107337, target/109116,
  	target/120839, target/122483, target/123102, target/123210,
  	target/123238, target/123852, target/124597, target/124613,
  	target/124670, target/124674, target/124684, target/124704,
  	target/124705, target/124710, target/124712, target/124759,
  	target/124789, target/124818, target/124876, target/124892,
  	target/124897, testsuite/93080, testsuite/113276, testsuite/123135,
  	testsuite/124326, testsuite/124548, testsuite/124849,
  	tree-optimization/88576, tree-optimization/122976,
  	tree-optimization/124597, tree-optimization/124599,
  	tree-optimization/124627, tree-optimization/124677,
  	tree-optimization/124692, tree-optimization/124742,
  	tree-optimization/124743, tree-optimization/124746,
  	tree-optimization/124754, tree-optimization/124802,
  	tree-optimization/124809, tree-optimization/124810,
  	tree-optimization/124826, tree-optimization/124868,
  	tree-optimization/124875, tree-optimization/124891


author: Jakub Jelinek <jakub@redhat.com> 16.1.1-1
changelog:
  - update from trunk and releases/gcc-16 branch
    - GCC 16.1.0 release
    - PRs ada/107391, ada/107392, ada/124918, ada/125044, c/84717, c++/120502,
  	c++/123879, c++/124582, c++/124632, c++/124706, c++/124756,
  	c++/124855, c++/124910, c++/124926, c++/124927, c++/124944,
  	c++/124950, c++/124953, c++/124973, c++/124981, c++/124989,
  	c++/125035, c++/125096, cobol/119818, d/123411, d/124157, d/124922,
  	fortran/63858, fortran/93329, fortran/93463, fortran/108382,
  	fortran/117077, fortran/120431, ipa/120098, libfortran/120431,
  	libstdc++/112490, libstdc++/119714, libstdc++/124410,
  	libstdc++/124540, libstdc++/124890, libstdc++/125024,
  	libstdc++/125112, middle-end/95551, middle-end/122021,
  	middle-end/124900, middle-end/124971, modula2/120189,
  	preprocessor/124930, rtl-optimization/124643, sanitizer/124248,
  	sanitizer/124969, target/103383, target/124133, target/124933,
  	target/124959, target/124984, target/125117, testsuite/124682,
  	testsuite/124939, tree-optimization/116463, tree-optimization/124909,
  	tree-optimization/124941, tree-optimization/124988,
  	tree-optimization/125019, tree-optimization/125039,
  	tree-optimization/125079


author: Jakub Jelinek <jakub@redhat.com> 16.1.1-2
changelog:
  - update from releases/gcc-16 branch
    - PRs ada/125168, ada/125240, c++/100903, c++/115181, c++/124628,
  	c++/124770, c++/124957, c++/124979, c++/124991, c++/125043,
  	c++/125111, c++/125115, c++/125179, c++/125184, c++/125206,
  	c++/125208, c++/125280, c++/125315, d/125089, fortran/111952,
  	fortran/125059, fortran/125192, fortran/125198, libfortran/125095,
  	libstdc++/109965, libstdc++/121919, middle-end/125146,
  	middle-end/125259, rtl-optimization/123967, target/53929,
  	target/120587, target/124316, target/125049, target/125057,
  	target/125155, target/125180, target/125194, target/125308,
  	tree-optimization/120003, tree-optimization/125025,
  	tree-optimization/125153, tree-optimization/125185
  - create and include ga68.m68 files in gcc-algol68 package (#2463921)


author: Jerry James <loganjerry@gmail.com> - 4.0.0-1
changelog:
  - Version 4.0.0
  - License change from LGPL-3.0-or-later to Apache-2.0
  - Drop upstreamed cmake patch
  - Depend on coin-or-HiGHS and jansson


author: Marek Kasik <mkasik@redhat.com> - 3.12.1-4
changelog:
  - Rebuild (poppler)
  - Statically link stdc++ due to undefined references
  -   Assisted-by: Claude Code


author: Kevin Buettner <kevinb@redhat.com> - 17.1-1
changelog:
  - Rebase to FSF GDB 17.1.
    Deleted: gdb-fix-bg-execution-repeat.patch
    Backport 919ba8ce158e, "bfd: fix build with C23", from Guinevere Larsen,
    fixing RH BZ 2424325.
    Backport "Fix some more C23 const-correctness issues", from Keith Seitz,
    fixing same class of problem described by RH BZ 2424325.
    Backport 777079c67c81, "[gdb/build, c++20] Fix deprecated implicit
    capture in cooked_index::set_contents", from Tom de Vries, fixing more
    FTBS problems.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Remove gcc-gdb-plugin BuildRequires and build with --disable-gdb-compile
    due to this feature's brokenness. Tests using this feature skip cleanly
    without timeouts.  Reduces binary size and attack surface.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit 70b66cf338b14336 to fix RH BZ 2402580.
    This backport will not be needed once we rebase to GDB 18.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Backport upstream commit c1da013915e from Kevin Buettner to fix
    gcore failures caused by glibc 2.42 guard page changes (RHBZ 2413405).
  - Backport upstream commit d2cc16cd7fc from Jan Vrany to fix
    FAILs in gdb.base/fileio.exp caused by macro expansion of
    path components in OUTDIR.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commits 8bd08ee92c4 and cd289df068e to address
    rhbz2366461.  These backports will not be needed once we rebase to
    GDB 18.


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport upstream commit ef7727ae from Tom de Vries to
    fix the test suite for newer Tcl releases.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport the following upstream commits in order to address RHBZ
    2467251: d980317c7f1, 958d06262a7, 7d1d7386561, 8915de0883c,
    8f65ab7b71f.  These commits will all drop out when we rebase to GDB
    18.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Applied proposed patch "[gdb/testsuite, Tcl 9] Fix EILSEQ problems for
    UTF8 related tests".  This is required in order to complete a build
    with testing.


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
  - Backport fixes from upstream to use BeaconDB
  - Use BeaconDB for the default location services source


author: Manish Tiwari <matiwari@redhat.com> - 0.25.1-1
changelog:
  - update to 0.25.1 release
  - Bug fixes:
  - autopoint no longer fails if configure.ac contains no AM_GNU_GETTEXT_VERSION or AM_GNU_GETTEXT_REQUIRE_VERSION invocation.
  - nls.m4 is installed again under $PREFIX/share/aclocal/.


author: Manish Tiwari <matiwari@redhat.com> - 0.26-2
changelog:
  - Add upstream provided patch to fix build failure with glibc 2.42 C23 const-preserving macros
  - https://lists.gnu.org/archive/html/bug-gnulib/2025-11/msg00220.html


author: Manish Tiwari <matiwari@redhat.com> - 0.26-3
changelog:
  - https://lists.gnu.org/archive/html/bug-gnulib/2025-09/msg00095.html
  - Upstream patch to fix implicit declaration error with GCC-16


author: Manish Tiwari <matiwari@redhat.com> - 0.26-5
changelog:
  - Disabled lto flags to avoid lto-wrapper failure when building xgettext
  - https://lists.gnu.org/archive/html/bug-gettext/2026-05/msg00011.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20250919-9
changelog:
  - update to 9.12.3 RC1
  - https://downloads.haskell.org/ghc/9.12.3-rc1/docs/users_guide/9.12.3-notes.html
  - boot with ghc9.10


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251110-10
changelog:
  - update to 9.12.3 RC2
  - https://downloads.haskell.org/ghc/9.12.3-rc2/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251209-11
changelog:
  - update to 9.12.3 RC3
  - https://downloads.haskell.org/ghc/9.12.3-rc3/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.3-15
changelog:
  - rebuild with ghc-rpm-macros-2.11
  - add ppc64le arch patches for ghc-platform and rts.cabal (#26870)
  - ppc64le NCG: add an upstream patch for the clrrxi instruction


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.10-1
changelog:
  - Version 0.1.10 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-10-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.11-1
changelog:
  - Version 0.1.11 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-11-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.12-1
changelog:
  - Version 0.1.12 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-12-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.13-1
changelog:
  - Version 0.1.13 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-13-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.14-1
changelog:
  - Version 0.1.14 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-14-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.15-1
changelog:
  - Version 0.1.15 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-15-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.16-1
changelog:
  - Version 0.1.16 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-16-released/


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 7b543dcdf97d07fd4346feb17916e08fe83ad0ae:
  - elf: Ignore LD_PROFILE if LD_PROFILE_OUTPUT is not set (bug 33797) (Florian Weimer)
  - hurd: make __thread_set_pcsptp align stack (Samuel Thibault)
  - Update advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0861 (Siddhesh Poyarekar)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915) (Carlos O'Donell)
  - memalign: reinstate alignment overflow check (CVE-2026-0861) (Siddhesh Poyarekar)
  - malloc: Add tst-mallocfork to tests-exclude-threaded exception list (Arjun Shankar)
  - aarch64: Fix LD_AUDIT with GCS in permissive mode (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for GCS handling (Adhemerval Zanella)
  - aarch64: Add LD_AUDIT tests for BTI handling (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for BTI handling (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_fpclassify for _Float64x/long double" (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_isinf_sign for _Float64x/long double" (Adhemerval Zanella)
  - aarch64: update NEWS for 2.43 release (Yury Khrustalev)
  - aarch64: Add LD_DEBUG=security to log BTI and GCS warnings (Yury Khrustalev)
  - tst-if_nameindex.c: Fix minimum buffer size (Samuel Thibault)
  - ldbl-128ibm-compat: Add local aliases for printf family symbols (Sachin Monga)
  - math: Fix powerpc64le -Os build after 6b7067460f (Adhemerval Zanella)
  - x86: Fix x86_64 build failure with -Os (BZ 33367) (Adhemerval Zanella)
  - math: Sync acosh from CORE-MATH (Adhemerval Zanella)
  - math: Sync atanh from CORE-MATH (Adhemerval Zanella)
  - math: Sync asinh from CORE-MATH (Adhemerval Zanella)
  - aarch64: Fix error messages for GCS and BTI incompatible modules (Yury Khrustalev)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-1
changelog:
  - Auto-sync with upstream branch master,
    commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc:
  - po: Incorporate translatins (nl updated, ar new) (Andreas K. Hüttel)
  - Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling (Aurelien Jarno)
  - NEWS: add new section 2.43.1 (Andreas K. Hüttel)
  - Replace advisories directory with file ADVISORIES (Andreas K. Hüttel)
  - Create ChangeLog.old/ChangeLog.32 (Andreas K. Hüttel)
  - version.h, include/features.h: Increase version number (Andreas K. Hüttel)
  - contrib.texi: Add missing accent (Andreas K. Hüttel)
  - tst-cond23: add <support/test-driver.h> include (Aurelien Jarno)
  - install.texi, INSTALL: update versions (Andreas K. Hüttel)
  - contrib.texi: Updates (Andreas K. Hüttel)
  - NEWS: Insert list of fixed security advisories (Andreas K. Hüttel)
  - NEWS: Mention build issues due to const-preserving macros (Andreas K. Hüttel)
  - NEWS: Insert list of fixed bugs (Andreas K. Hüttel)
  - NEWS: Editorial changes (Andreas K. Hüttel)
  - NEWS: Additional items and minor consolidation (Andreas K. Hüttel)
  - NEWS: Group ISO C23 related changes (Andreas K. Hüttel)
  - po: Incorporate translations (Andreas K. Hüttel)
  - Update advisory text for GLIBC-SA-2026-0003 (Adhemerval Zanella)
  - Add advisory text for CVE-2025-15281 (Carlos O'Donell)
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814) (Adhemerval Zanella)
  - libc.pot: regenerate (Andreas K. Hüttel)
  - Linux: fix tst-copy_file_range-large failure in 32-bit glibc build on 64-bit kernel [BZ 33790] (Xi Ruoyao)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-2
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 48f5a05a7a1eeb9e0567ab429f654648f831307f:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Don't include <bits/openat2.h> directly (bug 33848) (Andreas Schwab)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-3
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit ce1013a197eb4a3b8ff2b07e0672f4d0b976ce7c:
  - tests: fix tst-rseq with Linux 7.0 (Michael Jeanson)
  - riscv: Resolve calls to memcpy using memcpy-generic in early startup (Adhemerval Zanella Netto)
  - elf: Use dl-symbol-redir-ifunc.h instead _dl_strlen (Adhemerval Zanella)
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso (Xi Ruoyao)
  - resolv: Check hostname for validity (CVE-2026-4438) (Carlos O'Donell)
  - resolv: Count records correctly (CVE-2026-4437) (Carlos O'Donell)
  - posix: Run tst-wordexp-reuse-mem test (Florian Weimer)
  - aarch64: Tests for locking GCS (Yury Khrustalev)
  - aarch64: Lock GCS status at startup (Yury Khrustalev)
  - tests: aarch64: fix makefile dependencies for dlopen tests for BTI (Yury Khrustalev)
  - malloc: Avoid accessing /sys/kernel/mm files (Wilco Dijkstra)
  - Add BZ 33904 entry to NEWS (Adhemerval Zanella)
  - debug: Fix build with --enable-fortify-source=1 (BZ 33904) (Adhemerval Zanella)


author: Florian Weimer <fweimer@redhat.com> - 2.43-4
changelog:
  - Add downstream patches with fixes for vulnerabilities.
  - Fix buffer overflow in scanf %mc (CVE-2026-5450)
  - Fix ns_sprintrrf buffer overreads (CVE-2026-6238)
  - Fix ns_sprintrrf buffer overflow in TSIG record processing (CVE-2026-5435)
  - Fix memory corruption in ungetwc (CVE-2026-5928)
  - Auto-sync with upstream branch release/2.43/master,
    commit 8362e8ce10b24068bacc19552c128dd10e082fd9:
  - iconv: Use pending character state in IBM1390, IBM1399 character sets
    (CVE-2026-4046)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-5
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 4070d808bea1c077eb7e7d52b52b91cae98205d5:
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (Rocket Ma)
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (Rocket Ma)
  - abilist.awk: Handle weak unversioned defined symbols (H.J. Lu)
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921) (Florian Weimer)
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h (DJ Delorie)
  - Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046) (Florian Weimer)
  - Remove applied or redundant patches:
    - glibc-RHEL-172420.patch
    - glibc-RHEL-172421.patch


author: Frédéric Bérat <fberat@redhat.com> - 2.43-6
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 18b97b03b7442d8ba0860e43145f8724c9e77b17:
  - Rename __unused fields to __glibc_reserved. (Jakub Jelinek)
  - math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183) (Adhemerval Zanella)


author: Carl George <carlwgeorge@fedoraproject.org> - 2.1.2-1
changelog:
  - Update to version 2.1.2 rhbz#2457076
  - Update vendored goldmark to 1.7.17 to resolve CVE-2026-5160


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:25.0.0-1
changelog:
  - Updated to v25.0.0.
  - The high-level API for manipulating GNAT project files has been split off from
    the set of core components. It is now part of a new subpackage,
    gnatcoll-projects.
  - Project file gnatcoll.gpr is superseded by two new project files:
    gnatcoll_core.gpr and gnatcoll_projects.gpr. The old project file,
    gnatcoll.gpr, is still available from gnatcoll-projects-devel.


author: Luya Tshimbalanga <luya@fedoraproject.org> - 24-3
changelog:
  - Switch to [gnome-shell-rpm-generators](https://fedoraproject.org/wiki/Cha
    nges/GnomeShellExtensionDependencyGenerator) for build requirement


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-33.20240904git9491649
changelog:
  - Updated to last upstream commits
  - Drop unused compat.js
  - Use Cogl.Color instead of Clutter.Color
  - Add 47 to supported shell versions
  - Drop debug log


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-35.20250207gitd7f330d
changelog:
  - Updated to last upstream commits
  - Add log level to sm_log
  - schema: Indent
  - util: Move sm_log to util
  - Improve non-existent sensors handling
  - Schema rename - migrating gnome settings as well
  - metadata.json: Update description
  - Make "System Monitor" action customizable
  - Makefile: Add zip-install target
  - Makefile: Clean up the extension reloading stuff
  - Rename schema definition files to match schema IDs
  - metadata.json: Update extension URL
  - Fixed Bug when detecting NVIDIA GPUs
  - Add fallback logic for locale
  - Drop "no migration" message
  - metadata.json: Note about prereqs
  - metadata.json: Tone down the rhetoric regarding update errors
  - Rename archive from git new repository name: gnome-shell-system-monitor-next-applet


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-36.20250319git184bc34
changelog:
  - Updated to last upstream commits
  - Add left-display feature and dynamic settings toggle
  - extension: Add support for max CPU freq
  - extension: More accurate disk usage calculation
  - metadata.json: Add gnome-shell 48 support


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-38.20250916git278b27e
changelog:
  - Updated to last upstream commits
  - extension: Add setting for graph scale reset cooldown period
  - metadata.json: Add gnome-shell 49 support - RHBZ#2395840
  - Makefile: Don't use git rev for version
  - Makefile: Allow user override of VERSION
  - Makefile: Drop gschemas.{clean,uninstall}
  - Makefile: Simplify and clean up
  - Makefile: Don't remove when installing
  - Makefile: Drop all use of sudo
  - Makefile: Add gschemas-install target
  - Makefile: Make build explicitly depend on gschemas
  - Makefile: Add some messages about where build output is going
  - Makefile: Rename the extension rule
  - extension: Drop the old schema file and migration code - RHBZ#2268400
  - Adapt SPEC file to new Makefile


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-40.20251120gitc4969d9
changelog:
  - Updated to last upstream commits
  - Makefile, README: Add gschemas compile target for local installs
  - extension: Add polling logic for battery proxy initialization
  - extension: Add short name for battery label


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-42.20260411gita14b404
changelog:
  - Updated to last upstream commits
  - Add gnome-shell 50 support
  - fix: handle missing system monitor app gracefully


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2.4.8-4
changelog:
  - add a root certificate bundle due to changes in ca-certificates (#2380121)
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile


author: Clemens Lang <cllang@redhat.com> - 2.4.9-1
changelog:
  - New upstream release 2.4.9
  - Fixes CVE-2025-68973 (https://gpg.fail/memcpy)
  - Fixes https://gpg.fail/sha1
  - Fixes https://gpg.fail/detached


author: Paul Wouters <paul.wouters@aiven.io> - 1.4.2-1
changelog:
  - Update to 1.4.2, support for DNS-persist challenge
  - Resolves: rhbz#2434366 FTBFS in Fedora rawhide/f4
  - Resolves: rhbz#2438330 1.4.2 is available


author: Christian Krause <chkr@fedoraproject.org> - 4.3-1
changelog:
  - Fix FTBFS (#2261207)
  - Update to latest upstream release 4.3
  - Update patch for linking lua dynamically
  - Add patch to avoid using deprecated Python modules


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.5-5
changelog:
  - Handle test issues related to libfpm / perf counters
  - Skip perf counter tests on s390x
  - Serialize the multi-threaded perf counter test


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Leo Sandoval <lsandova@redhat.com> - 2.12-51
changelog:
  - Revert 'Increase EFI max allocation to max usable address'
  - Related: #2427945
  - Related: #2263643
  - Fix ppc64le build (Hans de Goede)
  - Fix 20-install.sh installing the hmac under the wrong filename (Hans de Goede)


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 2.12-53
changelog:
  - Revert "Add support for Linux EFI stub loading on arm architectures"
    this fixes aarch64 kernels with stubble-/systemd-stub not booting


author: Josue Hernandez <josherna@redhat.com> - 2.12-54
changelog:
  - verifiers: Allocate EFI pages instead of grub_malloc for verified buffer
  - Resolves: #2427945
  - Resolves: #2263643


author: Leo Sandoval <lsandova@redhat.com> - 2.12-56
changelog:
  - Revert 'verifiers: Allocate EFI pages instead of grub_malloc for verified buffer'
  - Resolves: #2453022
  - Resolves: #2451630
  - Resolves: #2450672
  - Related: #2427945
  - Related: #2263643


author: Milan Crha <mcrha@redhat.com> - 4.22.1-2
changelog:
  - Add a patch "gtkapplication-wayland: Add a missing NULL check when
    forgetting a window"
  - Resolves: rhbz#2450986


author: Paul Howarth <paul@city-fan.org> - 3.3.121-6
changelog:
  - Add dependency on gdk-pixbuf2-modules-extra, needed for XPM support on
    F-41, EL-10 onwards
    (https://github.com/gtkwave/gtkwave/issues/417#issuecomment-2682344768)


author: Paul Howarth <paul@city-fan.org> - 3.3.122-1
changelog:
  - Update to 3.3.122
    - Buffer warning fix in fstVcdIDForFwrite
    - Warning fixes in vzt_read.c and fstapi.c
    - Prototype fixes for port to gcc15
    - Fixes for tcl9 compatibility
    - Added fixes for --saveonexit command line option
    - Fix for convert_real for TR_REAL traces
    - Fix for popen_san() in vcd2fst using fsdb binaries
    - Added fstWriterGetFlushContextPending() to fstapi.c/.h
    - Reenable wayland code for primary and baseline markers in wavewindow.c
    - Unnamed scope fix for fstReader
    - Opaque pointer warning fix for fstapi.c
    - Remove broken pseudo-2D array support in fst.c
    - Fix in fst.c for signals whose MSB/LSB/len mismatch
    - libfst #15: fstReaderOpen should not fail on empty FST file
    - Fix crash introduced in 3.3.120 with legacy VCD loader caused by
      "Fix case of missing newline at EOF for VCD loaders"
    - Fix fstminer not handling string transitions correctly (GH#423)
    - Fix in fst.c for duplicate string values
    - Remove duplicate string values from adjacent value changes
    - libghw: Add from upstream for ghdl_rtik_type_i64
    - Fix inconsistent handling of invalid vector bounds in VCD and FST loaders
      (GH#428)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 3.3.123-1
changelog:
  - Update to 3.3.123
    - Fix broken autocoalesce of bitblasted vectors that fix for GH#428 in
      3.3.122 introduced
    - Fix improper autocoalesce of adjacent duplicate symbols
    - Preserve dimension on integer array element when expanded


author: Paul Howarth <paul@city-fan.org> - 3.3.124-1
changelog:
  - Update to 3.3.124
    - Ensure type name in $var for VCD saver is >0 length
    - Preserve bitblasted vector ordering with VCD saver.
    - Use full type names in VCD saver instead of abbreviations
    - Dump all bits for a bitblasted vector in VCD saver in order to ensure
      stray bit extractions do not cause a failure to reconstruct vectors in
      proper order in the extracted file


author: Paul Howarth <paul@city-fan.org> - 3.3.125-1
changelog:
  - Update to 3.3.125
    - Added json2stems to distribution to support newer versions of Verilator
    - VCD parser fix for colon in VCD variable name
    - Parameter size 0 fix for Vivado: backs out very old fix (for MTI) that
      converts 0 size signals to reals
    - Update vcd2fst so that it handles MTI 0 size conversion


author: Paul Howarth <paul@city-fan.org> - 3.3.126-1
changelog:
  - Update to 3.3.126
    - Added -H --noheader command line option for GTK3
    - Added headerbar rc variable to disable GTK3 headerbars
    - Fix for rendering multiline string constants in dumps
    - Add warning message for missing XPM loader
    - Updated libghw to current version
    - Changed behaviour of X search in pattern search so it is matched by a
      single X bit


author: Paul Howarth <paul@city-fan.org> - 3.3.127-1
changelog:
  - Update to 3.3.127
    - Fix for fixed point shift that does not disable it on the specify value
      change menu option
    - Changed ps2pdf to pstopdf on Mac as ps removed by Sonoma
    - Warnings fix in vcd2fst for missing string.h include
    - Added FST_ST_SV_ARRAY (FST) and "sv_array" (VCD) for arrays
      (gtkwave/libfst#17)
    - Wrote replacement for gdk_pixbuf_new_from_xpm_data
    - Update FSDB to handle FST_ST_SV_ARRAY (VCS emits this),
      FSDB_ST_SV_INTERFACEPORT_REF, and FSDB_VT_STRING
    - Added "SV_ST_ARRAY" to exclude file parsing on init
    - Fix use after free of GLOBALS->entrybox_text in regexp_highlight_generic()
  - Drop dependency on gdk-pixbuf2-modules-extra, XPM support now done locally


author: Parag Nemade <pnemade AT redhat DOT com> - 13.0.0-2
changelog:
  - Upstream added new binary hb-vector
  - Upstream added new pkgconfig files harfbuzz-raster.pc and harfbuzz-vector.pc
  - Added new subpackages harfbuzz-raster and harfbuzz-vector


author: Andrea Musuruane <musuruan@gmail.com> - 2.6.1-3
changelog:
  - Rebuilt for SDL3 >= 3.4.2 (fixes BZ #2434639)
  - Added missing dependency for gobject-introspection


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Daniel Milnes <daniel@daniel-milnes.uk> - 1.0.0-1
changelog:
  - Update to 1.0.0 (rhbz#2457679)
  - Migrate to pyproject-srpm-macros (rhbz#2377284)
  - Fix Fedora 44 FTBFS (rhbz#2429404)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.6-1
changelog:
  - hp-scan command failed to run and gives an error (fedora#2395809)
  - use new GPG key from HP - new key was used as fix for CVE-2025-43023


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~rc1-1
changelog:
  - Bump to 1.5.34-rc1
  - Update translations
  - Fix "no memory" error with focus changes in Sway
  - Resolves #2444009 Latch key in Latvian(tilde) keymap
  - Fix only GTK3 builds
  - Close leaked keymap fd on early return in ibus-wayland


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34-2
changelog:
  - Backport upstream patches
  - Make an IBusText own an updated IBusAttrList reference
  - Resolves: #2444787 SEGV with wrong anchor in surrounding-text in Wayland
  - Updates: #2480408 IBus callbacks in Wayland to clarify SEGVs


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-1
changelog:
  - Bump to 1.5.18
  - Fix Backspace in prediction
  - Update translations
  - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI
  - Delete gnome-themes-extra from Fedora CI


author: Mike FABIAN <mfabian@redhat.com> - 1.4.34-1
changelog:
  - Update to 1.4.34
  - Add the “S-” prefix to msymbols for non-ASCII characters only if the
    character “is not graph”. “is not graph” is the same as “is space or is
    not printable”. (Resolves: https://github.com/ibus/ibus-m17n/issues/90)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.35-1
changelog:
  - Update to 1.4.35
  - Generate translations into metainfo.xml files with autotools Related:
    https://github.com/mike-fabian/ibus-m17n/issues/2
  - Rename m17n.appdata.xml to org.freedesktop.ibus.engine.m17n.metainfo.xml
    (Resolves: https://github.com/mike-fabian/ibus-m17n/issues/2)
  - Fix match pattern for layout for inscript
  - Fix match pattern for rank for inscript2


author: Mike FABIAN <mfabian@redhat.com> - 1.4.37-1
changelog:
  - Update to 1.4.37
  - Port UI to GTK4 (Resolves: github-issue#99). Configure option for Gtk4
    added: “--with-gtk=2.0|3.0|4.0|no” (default: 4.0)
  - Translation update from Weblate (cs 100%, de 100%, el 100%, es 100%,
    new: fi 100%, fr 100%, ja 100%, ka 100%, kab 100%, lt 100%, pt_BR
    100%, ro 96%, ru 100%, sv 100%, tr 100%, uk 100%, zh_CN 100%,
    zh_TW 28%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.38-1
changelog:
  - Update to 1.4.38
  - Convert png icons from 16-bit to 8-bit color (Resolves:
    https://github.com/ibus/ibus-m17n/issues/107)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.14-1
changelog:
  - Release 1.17.14
  - Make it possible to configure which menu entries are shown in the desktop
    panel menu and in the floating panel (Resolves: https://github.com/mike-
    fabian/ibus-table/pull/189)
  - Translation update from Weblate (ca 99.3%, de 100%, es 99.3%, fr
    100%, ka 60.7%, kab 35.5%, pt_BR 99.3%, pt_PT 74.5%, ru 98.6%, tr
    99.3%, ua 100%, zh_CN 90.1%, zh_TW 99.3%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.15-1
changelog:
  - Release 1.17.15
  - Log all unhandled exceptions, makes debugging a lot easier When Python
    code runs in an environment like IBus, unhandled exceptions inside
    callbacks are usually caught and swallowed by the framework, often with
    no logging. That’s why one sees “silent” failures: the event handler
    stops executing at the exception, but IBus continues running, and you get
    no clue unless you manually log something.
  - Stop calling IBus.init(), Python code no longer needs to call that
  - Don't take index of the string returned by get_goucima() if it is too
    short (Resolves: https://github.com/mike-fabian/ibus-table/pull/201)
  - Translation update from Weblate (el 22.2%, es 100%, ka 61.4%, pt_BR
    100%


author: Mike FABIAN <mfabian@redhat.com> - 1.17.17-1
changelog:
  - Release 1.17.17
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py for
    Unicode 17.0.0 release
  - Translation update from Weblate (ca 100%, cz 97.3%, el 28.7%, fa
    15.0%, hu 22.8%, ja 49.6%, ka 69.3%, kab 37.2%, pt_PT 75.8%, ro
    100%, si 11.1%, zh_HK 20.9%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.18-1
changelog:
  - Release 1.17.18
  - Enhance TabEngine key handling cancelling logic when suggestion mode is
    active. (Resolves: https://github.com/mike-fabian/ibus-table/pull/215)
  - Translation update from Weblate (cz 100%, el 39.8%, ka 100%, pt_PT
    100%, zh_TW 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.29.0-1
changelog:
  - Update to 2.29.0
  - Fix minus sign on buttons in adding autosettings and keybindings
  - Fixes for the Gtk3/Gtk4 port needed for RHEL9 and Ubuntu ≤ 22.04: Fall
    back to Gtk3 on these old systems
  - setup/dictionary_download.py: Fix dictionary download for Ubuntu 24.04.3
    LTS
  - Port setup tool, emoji_picker and everything else except test_0_gtk.py to
    Gtk4. Gtk4 is used by default if available on the system, if not Gtk3 is
    used as a fallback. (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/848)
  - Translation update from Weblate (cz 100%, hu 40.4%, it 99.5%, ka
    100%, ko 100%, sv 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.0-1
changelog:
  - Update to 2.30.0
  - Make autosetting `ibuseventsleepseconds` possible (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/878)
  - Use a better estimate of how many `Left` keys are needed to step back
    over the committed string to the caret position (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/874)
  - Finalize commit string also when the preedit cursor is not at the right
    end of the preedit (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/871)
  - Change the look of the selected Gtk.Notebook tab (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/872)
  - Commit key should commit the final form always (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/870)
  - Make the “Options” and “Appearance” tabs in the setup tool scrollable to
    save vertical space (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/865)
  - Add an option to show in the preedit what would be committed on pressing
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/854)
  - Add commands to commit the raw input, with and without forwarding the key
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/855)
  - Add an option to show the raw input in the auxiliary text (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/853)
  - When a candidate is autoselected, the `cancel` command should deselect
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/851)
  - Use self._ollama_aux_wrapper when showing the prompt in the auxiliary
    text (Without that, long prompts may be shown as a very long single line
    auxiliary text partly off-screen.)
  - Translation update from Weblate (ca 100%, de 100%, fi 98%, it 98%, ja
    100%, ka 100%, ko 100%, sv 100%, tr 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.2-1
changelog:
  - Update to 2.30.2
  - Add `Control+Left` to the default for `commit_and_forward_key` for the
    `tb:*` engines (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/879)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.3-1
changelog:
  - Update to 2.30.3
  - Add `Mod1+Left` to the default for `commit_and_forward_key` for the
    `tb:*` engines (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/879#issuecomment-3844807216)
  - Translation update from Weblate (kab 71.4%, ro 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.4-1
changelog:
  - Update to 2.30.4
  - emoji-picker: key handling improvments: Show selected emoji clearly, Fix
    Control+f and Escape issue, Navigation with arrow keys in the flowboxes
    (See: See: https://github.com/mike-fabian/ibus-typing-
    booster/issues/883#issuecomment-3901653686)
  - emoji-picker: Don’t show popover when autoselecting first search result
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/883)
  - Translation update from Weblate (kab 73.8%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.6-1
changelog:
  - Update to 2.30.6
  - Split itb_util.py into itb_util_core.py and itb_util_gui.py and use only
    itb_util_core for `ibus-typing-booster --xml` (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/888)
  - Don’t check for gnome and gnome version in a loop over all input methods!
    Check only once! (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/889)
  - Translation update from Weblate (cs 100%, es 100%, ru 100%, zh_CN
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.9-1
changelog:
  - Update to 2.30.9
  - More fine grained control of whether digits can be used in the preedit
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/905)
  - Translation update from Weblate (new: ca 100%, el 29.6%, es 100%)


author: Timothée Ravier <tim@siosm.fr> - 2.26.0-4
changelog:
  - F44+: Ship OpenSSH config file specifying AuthorizedKeysFile
  - Have ignition-edge require the matching main ignition package


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.2-1
changelog:
  - Update to 2.2
  - Close: rhbz#2352408
  - Refresh license field (analysed with scancode-toolkit and manually reviewed)


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.3-4
changelog:
  - Panthor lacks big-endian support and has no Meson toggle, strip it from
    build files for BE archs


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.4-1
changelog:
  - update igt-gpu-tools to 2.4 - removed json-c old dependency - added
    jansson and pciutils-devel new dependencies - disabled tests/amdgpu for
    unsupported arches s390x ppc64 ppc64le aarch64 - updated upstream bug
    with current details at [1] [1] https://gitlab.freedesktop.org/drm/igt-
    gpu-tools/-/work_items/171


author: Packit <hello@packit.dev> - 50-1
changelog:
  Changes with 50
  ----------------
    - SPEC: define default permissions for /var/cache/image-builder (#454)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/cache from 4 to 5 (#434)
      - Author: {}, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - deps: bump Go to 1.24.12 and use new Go functions (#452)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to v0.240.0 (#456)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 51-1
changelog:
  Changes with 51
  ----------------
    - go.mod: update osbuild/images to v0.243.0 (#457)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-19


author: Packit <hello@packit.dev> - 53-1
changelog:
  Changes with 53
  ----------------
    - chore: bump dependencies via gobump (#475)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: allow specifying AWS credentials profile (#443)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: bump images to 0.248.0 (#479)
      - Author: Simon de Vlieger, Reviewers: Nobody
    - docs: update COPR command for RHEL (#477)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: bump ISO timeout (#469)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-03-13


author: Packit <hello@packit.dev> - 55-1
changelog:
  Changes with 55
  ----------------
    - chore: bump dependencies via gobump (#460)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal
    - deps: bump images (#483)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-03-24


author: Packit <hello@packit.dev> - 57-1
changelog:
  Changes with 57
  ----------------
    - deps: update `images` to 0.254.0 (#489)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-06


author: Packit <hello@packit.dev> - 58-1
changelog:
  Changes with 58
  ----------------
    - deps: bump images to 0.256.0 (#491)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-07


author: Packit <hello@packit.dev> - 63-1
changelog:
  Changes with 63
  ----------------
    - deps: bump images to 0.259.0 (#501)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - docs: update satellite info (#503)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: `--version` -> `version` subcommand (#505)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - many: Generate rpmlist as an output of manifestgen (#502)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-29


author: Packit <hello@packit.dev> - 64-1
changelog:
  Changes with 64
  ----------------
    - cmd: drop "bootc is experimental" (#510)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump osbuild/images dependency (#507)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: update dependencies (w/o osbuild/images) (#508)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: fix broken link (#509)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal
    - doc: introduce advanced bootc (#462)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - docs: generate manpages (#504)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: hide `--use-librepo` (#513)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: hide `--with-rpmlist` (#512)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-13


author: Packit <hello@packit.dev> - 65-1
changelog:
  Changes with 65
  ----------------
    - deps: bump images to 0.266.0 (#520)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#515)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: default to XDG cache directory for non-root users (#511)
      - Author: Guillermo N. Leiro Arroyo, Reviewers: Brian C. Lane, Lukáš Zapletal

  osbuild/images changes (v0.262.0 -> v0.266.0):

    - Add bootc-foundry boot test infrastructure (HMS-10336) (#2335)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Update RHEL 9 and 10 OCI image definitions [HMS-10328, HMS-10472] (#2333)
      - Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß, Simon de Vlieger
    - Update osbuild dependency commit ID (#2321)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild dependency commit ID (#2328)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260504 (#2323)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - boot-azure: switch machine type (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß
    - ci: include flatpaks (#2349)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - ci: use f43 for cross-arch (#2322)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - defs/bootc: set XBOOTLDR GUID (#2325)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - disk: partition table policies (#2330)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/rhel-9: fix OCI partitioning (#2351)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger, Tomáš Hozza
    - experimental: use yamlplus (#2319)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - fedora: remove vc4 module blacklist from ostree kernel options (#2331)
      - Author: Paul Whalen, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - flatpak: use container resolver to resolve flatpak refs (#2334)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - import ELN (HMS-10620, HMS-10621, HMS-10623) (#2318)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - many: bootc sealed images (composefs, and bootloader) (HMS-10628) (#2326)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - pkg/bootc/resolver: handle missing 'bootc container inspect' (#2342)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - rhel: enable sshd service for WSL images (#2332)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - schutzbot: update terraform commit ID (#2341)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - test: close filesystem/disk customization coverage gaps with osbuild-composer (#2329)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-21


author: Packit <hello@packit.dev> - 66-1
changelog:
  Changes with 66
  ----------------
    - cmd: introduce profiling options (#516)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: bump osbuild/images dependency (#524)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - packit: enable ELN (HMS-10701) (#521)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  osbuild/images changes (v0.266.0 -> v0.267.0):

    - Add osbuild stages for mounting erofs and squashfs compressed filesystems (#2348)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - arch: map OCI platform architecture to GOARCH (#2315)
      - Author: Zephyr Lykos, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - bootloaders: Move the iso bootloader setup into its own struct (#2347)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - container: resolve containers using skopeo [RHEL-56367] (#2346)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Tomáš Hozza
    - fedora: Update IoT arm images with newer RPi dtbs (#2358)
      - Author: Peter Robinson, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Koscielniak
    - many: upgrade deps with deprecated APIs (HMS-10702) (#2356)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-25


author: Mikhail Medvedev 1.5.3-1
changelog:
  - Last version of QHexEdit used
  - Hex-functions optimised
  - Added support GIANTEC, DOSILICON NOR FLASH chips
  - Fix: incorrect uninstall script
  - Fix: i2C 128K size is repeated twice
  - Fix: error calculating file size


author: Mikhail Medvedev 1.6.1-1
changelog:
  - Add new feature: compare files
  - Add new feature: fill test array
  - Fix: when the page size is changed, the buffer is cleared
  - Fix: the code is executed twice and the code slows down the display of the interface


author: Mikhail Medvedev 1.6.2-1
changelog:
  - Fix: program crashed if security registers was less than 256 bytes
  - Fix: Information in the status bar disappears when hovering over a menu
  - Added comparison of INTEL HEX and ASUS CAP with other files
  - Added close and minimise buttons for subordinate forms
  - New chips added to database
  - Chip information form code optimized


author: Mikhail Medvedev 1.7.1-1
changelog:
  - Fix: pressing the Stop key did not stop auto operations
  - Added support for SPI NAND flash
  - Added traditional chinese translation
  - New chips added to database


author: Mikhail Medvedev 1.7.2-1
changelog:
  - Fix: NAND Flash information form freeze
  - Added new images for CH341A v1.7    
  - Added programmer type menu
  - Added support for the AT24CM02 chip


author: Mikhail Medvedev 1.7.3-1
changelog:
  - Fix: Incorrect HexEdit size when starting the program
  - Added: saving program settings to an ini file


author: Mikhail Medvedev 1.8.1-1
changelog:
  - Fix: increased interface speed
  - Fix: increased SPI NOR Flash operations speed
  - Fix: incorrect chip page sizes values removed
  - Fix: unused files removed
  - Added: support for the CH347T programmer


author: Mikhail Medvedev 1.8.2-1
changelog:
  - Fix: error reading/writing data from I2C chips on the CH347T version 5.44
  - Fix: bit error during NOR/NAND operations in the CH347V1.1 programmer
  - Added: showing the programmer revision function
  - Added: erase check function
  - Added: filling code function


author: Mikhail Medvedev 1.8.3-1
changelog:
  - Fixed: If no chip is selected, the programmer was not detected
  - Fixed: MACOS library compatibility
  - Fixed: MACOS invalid pathes
  - Fixed: libusb detection
  - Fixed: udev rules install
  - Added: 2.5v VCC item
  - SPI NOR FLASH writing speed increased
  - Changed chip database update bash script to Qt app
  - The Zenity package is no longer used


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-1
changelog:
  - New upstream snapshot.
  - Fixes CVEs 2025-11494, 2025-11495, 2026-2341, 2026-3441, 2026-3442.
    https://bugzilla.redhat.com/show_bug.cgi?id=2402843
    https://bugzilla.redhat.com/show_bug.cgi?id=2402846
    https://bugzilla.redhat.com/show_bug.cgi?id=2438918
    https://bugzilla.redhat.com/show_bug.cgi?id=2443834
  - Fixes CVEs 2025-69644, 2025-69645, 2025-69646.
    https://bugzilla.redhat.com/show_bug.cgi?id=2445281
    https://bugzilla.redhat.com/show_bug.cgi?id=2445284
    https://bugzilla.redhat.com/show_bug.cgi?id=2446276
  - Fixes FTBFS.
    https://bugzilla.redhat.com/show_bug.cgi?id=2434680
  - Relax BR of itcl/itk/iwidgets.
  - Patch "libtool_tag" to force C++ language tagging in libtool.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-3
changelog:
  - Fix CVE-2026-6846.
    https://sourceware.org/bugzilla/show_bug.cgi?id=34049
    https://bugzilla.redhat.com/show_bug.cgi?id=2460525


author: Aaron Chan <aaron.chun.yew.chan@intel.com> - 1.32.0-1
changelog:
  - Update intel-npu-driver to v1.32.0 (rhbz #2463156)
  - update sources level-zero-npu-extensions, npu_compiler_elf
  - update checksum source file
  - remove 3rd party oneapi-level-zero
  - rename thirdparty to third_party
  - Fix debugsource ELF files
  - Remove unnecessary fw excludes and description macro
  - Change build to release


author: Vladislav Dronov <vdronov@redhat.com> - 1.9.0-2
changelog:
  - Enable Intel CET support and install tests
  - Enable Intel CET support in assembler sources
    (https://github.com/intel/qpl/pull/56)
  - Make tests installable as intel-qpl-tests package
    (https://github.com/intel/qpl/pull/57)
  - Fix accel_conf.sh warning
  - Adjust the package description
  - Adjust a test set run in a check stage
  - Adjust the package files layout


author: Martin Osvald <mosvald@redhat.com> - 3.0.2-5
changelog:
  - Do not set environmental variables to prevent clashes with compilation
    time settings (rhbz#2428214)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.7-0]
changelog:
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert old fragnesia fixes in favor of more complete solution (Justin M. Forbes)
  - Revert old fragnesia fixes in favor of more complete solution (Justin M. Forbes)
  - Change version in Bugsfixed due to build (Justin M. Forbes)
  - Linux v7.0.7


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.8-0]
changelog:
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert v3 of the fragnesia fixes as v4 covers an additional case (Justin M. Forbes)
  - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Pauli Virtanen)
  - Linux v7.0.8


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-0]
changelog:
  - Turn on XFS_ONLINE_REPAIR for Fedora (Justin M. Forbes)
  - Enable SND_DESIGNWARE for Fedora x86 (Justin M. Forbes)
  - Enable HID_SENSOR_PROX for Fedora x86 (Justin M. Forbes)
  - drm/i915/dp_tunnel: Don't update tunnel state during system resume (Imre Deak)
  - Linux v7.0.9


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-0]
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert fragnesia for so I can replace it with the newer one (Justin M. Forbes)
  - net/sched: act_pedit: extend the writable skb range per key (Zhang Cen)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-4]
changelog:
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-5]
changelog:
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling)
  - xfrm: esp: restore combined single-frag length gate (Jingguo Tan)
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)
  - Revert "v3 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer" (Justin M. Forbes)
  - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
  - ASoC: rt722-sdca: add FU06 Playback Switch for speaker mute control (Aaron Ma)
  - ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic (Syed Saba Kareem)
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Mark Pearson)
  - ASoC: amd: acp-sdw-legacy: rename the dmic component name (Vijendar Mukunda)
  - ASoC: amd: acp: update dmic_num logic for acp pdm dmic (Vijendar Mukunda)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.10-1]
changelog:
  - ata: libata-scsi: do not needlessly defer commands when using PMP with FBS (Niklas Cassel)
  - ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS (Niklas Cassel)
  - ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT (Niklas Cassel)
  - ata: libata-scsi: improve readability of ata_scsi_qc_issue() (Niklas Cassel)
  - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)
  - ksmbd: close durable scavenger races against m_fp_list lookups (DaeMyung Kang)
  - iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (Eder Zulian)
  - iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs (Guanghui Feng)
  - drm/i915/cx0: Rename intel_clear_response_ready flag (Suraj Kandpal)
  - drm/i915/cx0: Clear response ready & error bit (Suraj Kandpal)
  - drm/i915/pps: Enable panel power earlier (Mika Kahola)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.11-1]
changelog:
  - Revert "crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks" (Justin M. Forbes)
  - Revert "rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg" (Justin M. Forbes)
  - Revert "rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer" (Justin M. Forbes)
  - Linux v7.0.11


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.14.2-1
changelog:
  - Updating for Keylime release v7.14.2
  - This includes the fix for CVE-2026-6420.
  - Update keylime-selinux policy to the latest version 44.1.0


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Julien Rische <jrische@redhat.com> - 1.22.2-4
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  - resolves: rhbz#2463398
  - resolves: rhbz#2463395
  - Add upstream patches to build against openssl 4.0
  - Make configure.ac work with autoconf 2.73


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-2
changelog:
  - Skip unicode test in annocheck
  - unicode test fails in packit ci rpminspect on kubectl and kubeadm
  - failing symbol is 'go:(*struct { io.Reader; io.WriterTo }).Read' but
    looks correct


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.3-4
changelog:
  - Drop deprecated --fail-swap-on=false flag
  - Drop flag from kubeadm systemd drop-in file
  - Remove deprecated flags and comment out EnvironmentFiles


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.5-1
changelog:
  - Update to release v1.34.5
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.2-1
changelog:
  - Update to release v1.35.2
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-1
changelog:
  - Deploy initial v1.36.0 release
  - ACTION REQUIRED: kube-controller-manager: Renamed metric
    volume_operation_total_errors to volume_operation_errors_total. If you
    are using custom monitoring dashboards or alerting rules based on the
    volume_operation_total_errors metric, update them to use the new
    volume_operation_errors_total metric.
  - ACTION REQUIRED: Plugins can opt-in to parallel execution by returning
    AllowParallel: true from the PreBindPreFlight method.
  - Review Kubernetes change log for important information:
  - https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-
    1.36.md#changelog-since-v1350


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.1-2
changelog:
  - Add aarch64/ppcle64 test exemptions
  - Added test exemptions. Fedpkg scratch-builds for these arches pass but
    are failing when building for a PR. Seems to be flaky?


author: Richard Berger <richard.berger@outlook.com> - 20250612-1
changelog:
  - Version bump to 20250612
  - disable kim-api (orphaned package)
  - add patch to avoid segfault in Fortran interface


author: Richard Berger <richard.berger@outlook.com> - 20260330-1
changelog:
  - Version bump to 20260330
  - Add patches to avoid unit test failures
  - Bump Kokkos requirement to 5.0


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 0.10.11-1
changelog:
  - update to 0.10.11 (resolves rhbz#2348998)
  - fix FTBFS due to missing tox.ini (resolves rhbz#2354084)


author: Michal Hlavinka <mhlavink@redhat.com> - 692-4
changelog:
  - update lesspipe to 2.23
  - dont use html to process xml files, the result isnt usable (rhbz#2451451)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.13-15
changelog:
  - use proper SPDX identifier for LGPLv2+ (verified against sources)
  - use modern spec macros where applicable
  - make -devel subpackage dependency on main package archful


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Add xxhash-devel as BuildRequires
  - Update library to libabigail.so.5.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Do not build with by default XXH_INLINE_ALL anymore
  - Drop xxhash-static dependency
  - Add xz-devel >= 5.2.0 dependency to support reading xz-compressed binaries
  - Support new libabigail.so.6.0.0 SONAME


author: Dodji Seketeli <dodji@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Support new libabigail.so.8.0.0 SONAME
  - Run 'make check check-self-compare' instead of two separate make invocations.


author: Viktor Malik <vmalik@redhat.com> - 2:1.6.2-2
changelog:
  - Add libbpf-usdt-devel subpackage containing the usdt.h single-header library
    for creating USDTs (User Statically-Defined Tracepoints).


author: Hans de Goede <hdegoede@redhat.com> - 0.5.2-4
changelog:
  - Add upstream patch to enable IPU7 (Lunar Lake) support (rhbz#2333383)
  - Add upstream patches to fix AGC oscillation (rhbz#2368538)
  - Add upstream patches to fix various swstats problems including
    a reproducable divide by zero crash in the AGC code


author: Milan Zamazal <mzamazal@redhat.com> - 1.10.1-1
changelog:
  - Update to 1.10.1
  - -Werror no longer disabled.
  - RPi features disabled to get it compiled, as libcamera package doesn't enable
    RPi pipelines.


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Dominik Mierzejewski <dominik@greysector.net> - 0.7.5-2
changelog:
  - fixed duplicate files warning
  - made file lists more explicit
  - corrected License tag
  - added missing Provides: for bundled parson
  - added executable bit to fwfetcher.py script and fixed shebang
  - avoid timestamps in generated docs for reproducibility


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Mattia Verga <mattia.verga@proton.me> - 2.1.7-1
changelog:
  - Update to 2.1.7 (Fedora#2419094)
  - Switch to use system's hidapi libs
  - QT client now built on QT6


author: Susi Lehtola <jussilehtola@fedoraproject.org> 2.9.0-1
changelog:
  - Disable build on i386 architecture where the build runs out of memory.
  - Update license tag to LGPL-3.0-only (generated library).
  - Update to 2.9.0.


author: Susi Lehtola <jussilehtola@fedoraproject.org> 2.9.0-2
changelog:
  - Devel package now pulls in boost, eigen3, gmp, and mpfr development
    packages that are needed to build against libint2.


author: David Tardon <dtardon@redhat.com> - 1:26.2.3.2-4
changelog:
  - Drop unneeded option in def. of en-GB langpack
  - L is necessary only if LibreOffice uses a different language code for the
    language than we do.


author: Jerry James <loganjerry@gmail.com> - 3.5.2-1
changelog:
  - Version 3.5.2
  - Drop all patches
  - Add MIT to license due to rx-ranges and magic_enum
  - Drop the doc subpackage due to unavailable dependencies
  - Use HPCombi on aarch64


author: Remi Collet <remi@remirepo.net> - 1.0.21-1
changelog:
  - update to 1.0.21
  - open https://github.com/jedisct1/libsodium/discussions/1503 build failure on aarch64
  - workaround build failure using -flax-vector-conversions on aarch64


author: Petr Písař <ppisar@redhat.com> - 0.7.36-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (upstream GH#616)


author: Milan Crha <mcrha@redhat.com> - 3.6.6-6
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Paul Howarth <paul@city-fan.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (rhbz#2319104)
    - This is an enhancement and bugfix release - see RELEASE_NOTES for details
    - Note also that various algorithms are now deprecated and not built by
      default, which affects this package


author: Paul Howarth <paul@city-fan.org> - 1.11.1-6
changelog:
  - Fix CVE-2026-7598: integer overflow via large username or password arguments
    (https://github.com/libssh2/libssh2/pull/1858)


author: Simone Caronni <negativo17@gmail.com> - 1.01^20250317git3e6edf1-1
changelog:
  - Update to latest snapshot.
  - Update to latest snapshot for libsurvive-extras-data that now is properly
    licensed.
  - cnmatrix and cnkalman are now part of the source.
  - Unconditionally enable tests.
  - Drop soon to be removed python bindings from cnkalman.
  - Move all licensing information in one place.
  - Sort libraries being bundled.
  - Enable sciplot for build.


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251011-1
changelog:
  - Update to 20251011
  - qcom: add CDSP firmware for kaanapali platform
  - qcom: add version for A650 GMU firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
  - qcom: Add firmwares for Kaanapali GPU
  - qcom: Update A623 GMU fw
  - qcom: Fix QCS615 chipset's GPU secure fw
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - WHENCE: remove link for Kaanapali video firmware
  - intel_vpu: Update NPU firmware
  - Add Dell ISH firmware for Intel Lunar Lake systems
  - Update VCN for Navi1x, Green Sardine and Renoir
  - qcom: vpu: update video firmware binary for SM8550
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
  - qcom: vpu: add video firmware for Kaanapali
  - qcom: Update DSP firmware for qcs8300 platform.
  - qcom: Add Audio topology for HAMOA-EVK
  - intel/ish:Add ISH firmware file for Intel Lunar Lake platform
  - mediatek: update firmware version info for MT7986/81/16
  - ql2500_fw: update ISP25xx Firmware
  - qcom: Update aic100 firmware files
  - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
  - mediatek: mtk_wed: drop links for mt7988
  - qcom: Update DSP firmware for qcs8300 platform.
  - powervr: update firmware for Imagination Technologies BXS-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform.
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - qcom: move LEMANS EVK firmware to correct location


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251021-1
changelog:
  - Update to 20251021
  - Revert "update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: DMC Xe2LPD v2.29 / Xe3LPD v2.32 / Xe3LPD_3002 v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - Add ISH firmware file for Intel Pather Lake platform
  - Update firmware file for Intel Magnetar/BlazarU/BlazarI core


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251111-1
changelog:
  - Update to 20251111
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - Update firmware file for Intel BlazarI/BlazarU core
  - Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - Update AMD cpu microcode
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - update firmware for MT7920/MT7922/MT7925 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251125-1
changelog:
  - Update to 20251125
  - Revert "amdgpu: update GC 11.0.1 firmware"
  - QCA: Add Bluetooth firmware for WCN685x uart interface
  - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
  - qcom: venus-5.4: update firmware binary for v5.4
  - qcom: venus-5.4: remove unused firmware file
  - iwlwifi: add Sc/Wh FW for core98-181 release
  - amdgpu: DMCUB updates for various ASICs
  - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
  - ASoC: tas2781: Add more symbol links on SPI devices
  - amdgpu: update numerous firmware
  - amdgpu: add vce1 firmware
  - mediatek MT7922: update bluetooth firmware to 20251118163447
  - update firmware for MT7922 WiFi device
  - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
  - qcom: add ADSP, CDSP firmware for sm8750 platform
  - rtl_nic: add firmware rtl9151a-1
  - qcom: Update aic100 firmware files
  - mt76: add firmware for MT7990
  - mt76: update firmware for MT7992/MT7996
  - cirrus: cs35l57: Add firmware for a few Dell products
  - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
  - qcom: Add sdx35 Foxconn vendor firmware image file
  - Update AMD cpu microcode


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260110-1
changelog:
  - Update to 20260110
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20260106153314
  - mediatek MT7920: update bluetooth firmware to 20260105151350
  - mediatek MT7922: update bluetooth firmware to 20260106153735
  - update firmware for MT7922 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
  - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
  - qcom: Update DSP firmware for sa8775 platform
  - QCA: Add Bluetooth firmware for QCC2072 uart interface
  - i915: Xe3p_LPD DMC v2.33
  - qcom: Update DSP firmware for qcs8300 platform
  - update firmware for MT7920 WiFi device
  - qcom: Update aic100 firmware files
  - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
  - firmware: Revert kernel_boot.elf due to license compliance issue
  - add firmware for an8811hb 2.5G ethernet phy
  - i915: Xe3LPD_3002 DMC v2.28
  - i915: Xe3LPD DMC v2.33
  - intel_vpu: Add firmware for 50xx NPUs and update older ones
  - Update AMD SEV firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: venus-5.4: fix ELF segment alignment to 4 bytes
  - mediatek MT7925: update bluetooth firmware to 20251210093205
  - update firmware for MT7925 WiFi device
  - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
  - qcom: Update CDSP firmware for qcm6490 platform
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
  - iwlwifi: Add firmware file for Intel Scorpius core
  - rtw89: 8852b: update fw to v0.29.29.15
  - cirrus: cs35l41: Update firmware and tuning for various HP laptops
  - cirrus: cs35l41: Add support for new HP Clipper laptop
  - qcom: drop compatibility a640_zap.mdt symlink
  - qcom: add version for a530v3_gpmu.fw2
  - xe: Update GUC to v70.55.3 for BMG, PTL
  - iwlwifi: add Bz/Sc FW for core101-82 release
  - iwlwifi: Add Sc/Gf firmware for core101-82 release
  - iwlwifi: update ty/So/Ma firmwares for core101-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Add firmwares for sm8150/sm8450/sm8550/sm8650/sm8750 GPUs
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - cirrus: cs35l41: Add support for new HP laptops
  - Revert "amdgpu: update GC 11.5.0 firmware"
  - Update amd-ucode copyright information
  - Update AMD cpu microcode
  - Update firmware file for Intel Scorpius core
  - Update firmware file for Intel BlazarIGfP core
  - Update firmware file for Intel BlazarI core
  - Update firmware file for Intel BlazarU-HrPGfP core
  - Update firmware file for Intel BlazarU core
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: update ADSP firmware for x1e80100 platform, change the license
  - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
  - Reapply "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update GC 10.3.6 firmware"
  - Revert "amdgpu: update GC 11.5.1 firmware"
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251124093155
  - intel_vpu: Update NPU firmware
  - qcom: vpu: update video firmware binary for SM8250
  - xe: Update GUC to v70.54.0 for BMG, PTL


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260221-1
changelog:
  - Update to 20260221
  - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Update DSP firmware for qcs8300 platform
  - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
  - qcom: Update DSP firmware for sa8775p platform
  - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
  - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
  - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
  - rtw89: 8852b: update txpwr element to R43
  - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
  - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
  - xe: Update GUC to v70.58.0 for LNL, BMG, PTL
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - qcom: Add gpu firmwares for Glymur chipset
  - qcom: vpu: add video firmware for Glymur
  - qcom: add QUPv3 firmware for x1e80100 platform
  - Bluetooth: Add symbolic links for Intel Solar JfP2/1, Solar, Pulsar, AX201 firmware variants
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - qcom: add ADSP, CDSP firmware for glymur platform
  - ASoC: tas2783: Add Firmware files for tas2783A
  - Update firmware file for Intel Solar core
  - mediatek MT7921: update bluetooth firmware to 20251223091725
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - Add firmware for airoha-npu-7581 driver used for MT7990 offloading
  - Add Dell ISH firmware for Intel panther lake systems
  - update Aeonsemi AS21x1x firmware to 1.9.1
  - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
  - ice: update DDP LAG package to 1.3.2.0
  - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
  - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
  - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
  - Update firmware for NPU PHX, STX and STX HALO
  - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
  - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
  - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
  - Intel IPU7: Update firmware binary for Panther Lake
  - update firmware for MT7921 WiFi device
  - Add firmware file for Intel ScorpiusGfp2 core
  - Update firmware file for Intel Scorpius/BlazarIGfP/BlazarI/BlazarU-HrPGfP/BlazarU core
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
  - Add firmware for airoha-npu-7583 driver
  - iwlwifi: add Bz/Sc, Hr/Gf FW for core102-56 release
  - iwlwifi: update ty/So/Ma firmwares for core102-56 release
  - xe: Add GSC 105.0.2.1301 for PTL
  - mediatek: rename MT8188 SCP firmware
  - qcom: Update DSP firmware for QCM6490 platform
  - qcom: sync audioreach firmwares from v1.0.1 build


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260309-1
changelog:
  - Update to 20260309
  - mediatek MT7922: update bluetooth firmware to 20260224103448
  - update firmware for MT7922 WiFi device
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
  - Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
  - amdgpu: updates for various GPUs/ASICs
  - Add firmware file for Intel BlazarIGfp2 core
  - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
  - qcom: Update CDSP firmware for QCM6490 platform
  - add firmware for Lontium LT8713SX DP hub
  - qcom: sync audioreach firmwares from v1.0.2 build
  - qcom: update ADSP, CDSP firmware for sm8750  platform
  - qcom: update ADSP dtb.mbn for glymur platform
  - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
  - Renaming the file back for HP EliteBook X Flip G1i
  - amdnpu: Restore old NPU firmware for compatibility
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
  - update firmware for MT7902 BT device
  - update firmware for MT7902 WiFi device


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260410-1
changelog:
  - Update to 20260410
  - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
  - qcom: sync audioreach firmwares from v1.0.3 build
  - intel_vpu: Update NPU firmware
  - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
  - nvidia: add acr/bl symlink for booting GSP-RM on GA100
  - qcom: add QUPv3 firmware for shikra
  - xe: Update GUC to v70.60.0 for LNL, BMG, PTL
  - qcom: update ADSP firmware for sm8750 platform
  - qcom: update CDSP firmware for glymur platform
  - cirrus: cs35l41: Add support for new HP laptops
  - cirrus: cs35l41: Add support for new ASUS laptops
  - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
  - qcom: vpu: add video firmware for SM8450
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - iwlwifi: add Bz/Sc/Hr/Gf FW for core103-40 release
  - iwlwifi: update ty/So/Ma firmwares for core103-40 release
  - amdgpu: DMCUB updates for various ASICs
  - xe: Update PTL GSC to v105.0.2.1397
  - add firmware for Moxa mux50u devices
  - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
  - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - update firmware for qat_4xxx/qat_402xx/qat_420xx devices
  - update firmware for an8811hb 2.5G ethernet phy
  - qcom: Add FW blobs for DELL XPS13 9345
  - amdgpu: DMCUB updates for various ASICs
  - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
  - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
  - Add firmware file for Intel BlazarIW/BlazarIGfp2
  - iwlwifi: add Bz/Wh FW for core102-56 release
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
  - mediatek MT7921: update bluetooth firmware to 20260224111243
  - mediatek MT7920: update bluetooth firmware to 20260224111231
  - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
  - Add ISH firmware file for Intel Wildcat Lake platform
  - Update firmware for MT7920/MT7921 WiFi device
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Add firmware file for Intel ScorpiusGfp2 core
  - iwlwifi: Update firmware file for Intel Quasar/Scorpius/BlazarIGfP/BlazarI/BlazarU-HrPGfP/BlazarU core
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS615 platform
  - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260519-1
changelog:
  - Update to 20260519
  - ASoC: tas2783: Add Firmware files for tas2783A projects
  - add firmware for MT7927 WiFi device
  - Add HP ISH firmware for Intel Panther Lake systems
  - ti: Add PCM6240 firmware with multiple audio profiles support
  - qcom: add CDSP firmware for shikra platform
  - amdgpu: updates for various ASICs
  - qcom: update ADSP firmware for x1e80100 platform
  - qcom: Add cdsp1r.jsn for sa8775p platform
  - Add firmware for Lontium LT9611C
  - xe: Update GUC to v70.65.0 for LNL, BMG, PTL
  - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
  - Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
  - qcom: update ADSP firmware for x1e80100 platform
  - linux-firmware:Add firmware for Lontium LT7911EXC bridge
  - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
  - qcom: Update CDSP firmware for Kaanapali platform
  - qcom: vpu: add Gen2 firmware binary for Agatti
  - amdgpu: DMCUB updates for various ASICs
  - Add firmware file for Intel BlazarIGfp2/BlazarIW/ScorpiusGfp2
  - Update firmware file for Intel BlazarI/BlazarU/BlazarU-HrPGfP/Scorpius core
  - qcom: Update ADSP firmware for Glymur platform
  - mediatek MT7925: update bluetooth firmware to 20260414153243
  - update firmware for MT7925 WiFi device
  - Revert "Update firmware file for Intel Quasar core"
  - qcom: Add gpdspr.jsn for qcs8300 platform
  - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
  - ath12k: QCC2072 hw1.0: add board-2.bin
  - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
  - ath12k: IPQ5424 hw1.0: add board-2.bin
  - qcom: Update ADSP firmware for Kaanapali platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
  - amdgpu: DMCUB updates for DCN36
  - Update AMD cpu microcode
  - powervr: update Imagination Rogue firmware images
  - qcom: Update ADSP firmware for Kaanapali platform
  - i915: Xe3LPD DMC v2.34
  - i915: Xe3LPD_3002 DMC v2.29
  - qcom: Update ADSP firmware for QCM6490 platform
  - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
  - mediatek: vpu: drop old sym link


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.01.12-1
changelog:
  - update to 2026.01.12 (resolves rhbz#2428676)
  - switch Source URL to https newly provided by upstream


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.02.26-1
changelog:
  - update to 2026.02.26 (resolves rhbz#2442890)
  - add strict dependency on main package to -tools subpackage


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.6-1
changelog:
  - Update to 1.8.6
  - si-wijesekera.mim: Many updates by Harshula Jayasuriya
    <harshula@hj.id.au>
  - si-wijesekera.mim renamed to MIM/si-wijesekara.mim
  - configure.ac: Add support for zstd-compressed charmaps (by Thomas
    Staudinger <staudi.kaos@gmail.com>)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.7-1
changelog:
  - Updated to 1.8.7
  - mr-gamabhana.mim: Update by Shantanu Oak <shantanu.oak@gmail.com>
  - sa-vedic-itrans.mim: Additions by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>


author: Mike FABIAN <mfabian@redhat.com> - 1.8.8-1
changelog:
  - Update to 1.8.8
  - bn-probhat.mim: Sync with the "in(ben_probhat)" layout in xkeyboard-
    config
  - sa-vedic-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - sa-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - hi-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - hu-rovas-post.mim: Sync with the improvements in hu-old-hungarian-
    rovas.txt in ibus-table-others. Also make it possible to use non-ASCII
    accented characters like ü as input.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.9-1
changelog:
  - Update to 1.8.9
  - mr-gamabhana.mim: Update by Shantanu Oak <shantanu.oak@gmail.com>
  - ar-translit.mim: Use Shift+t (T) in ar-translit.mim to input the Arabic
    tatweel (by Benjamin Westphal <benjamin.westphal@riseup.net>)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - ml-poorna-remington.mim: New input method by Mujeeb Rahman K
    <mujeebcpy@gmail.com>


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - ta-tamil99.mim:  Various fixes by thesupertechie
    <thesupertechie1@gmail.com>
  - kn-kgp.mim: Update by the original author Sridhar M A
    <alaymari@gmail.com>


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - New input method bn-khipro.mim by Nafee Bishan <abdunnafialif@gmail.com>
    from https://github.com/rank-coder/khipro-m17n/blob/main/bn-khipro.mim


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.287-3
changelog:
  - Add explicit folder definitions for cases where XDG Base Directory spec
    variables are not defined


author: Charalampos Stratakis <cstratak@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Security fixes for CVE-2023-52353 and CVE-2024-23744 in mbedtls
  - Fix FTBFS with GCC 15
  Resolves: rhbz#2359781, rhbz#2259505, rhbz#2259499, rhbz#2340849


author: Lumír Balhar <lbalhar@redhat.com> - 1.28.0-1
changelog:
  - Update to 1.28.0
  - Security fix for CVE-2026-1998
  - Update mbedtls submodule to 3.6.6
  - mbedtls security fixes for CVE-2026-25834, CVE-2026-34871, CVE-2026-25833
  - CVE-2025-52496, CVE-2025-52497, CVE-2025-49087, CVE-2025-54764, CVE-2025-59438
   Resolves: rhbz#2455368, rhbz#2376688, rhbz#2376701, rhbz#2382261, rhbz#2405245,
   rhbz#2405374, rhbz#2437327, rhbz#2454032, rhbz#2454086, rhbz#2454213


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Stefan Becker <chemobejk@gmail.com> - 2.10-1
changelog:
  - Rebase to upstream version 2.10 (rhbz#2208236)
  - Add patch to fix baudrate setting on F43+ (rhbz#2407160)


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.3.1-1
changelog:
  - Update to release v29.3.1
  - Resolves: rhbz#2451425
  - Upstream notes that this release resolves: CVE-2026-34040,
    CVE-2026-33997, CVE-2026-33748, CVE-2026-33747
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.0-1
changelog:
  - Update to release v29.4.0
  - Resolves: rhbz#2455894
  - Resolves  CVE-2026-34986: rhbz#2455665
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.1-1
changelog:
  - Update to release v29.4.1
  - Resolves: 2459826
  - Upstream fixes
  - Built with golang 1.26 (rawhide and f44 only at this time)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.2-1
changelog:
  - Update to release v29.4.2
  - Resolves: rhbz#2459826
  - Upstream fixes
  - This release includes hardening for CVE-2026-31431
  - Temporary skip for branch protection test


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.0-1
changelog:
  - Update to release v29.5.0
  - Resolves: rhbz#2467552
  - Resolves CVE-2026-32288
  - Resolves CVE-2026-31431
  - Upstream new features, fixes, and enhancements


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.1-1
changelog:
  - Update to release v29.5.1
  - Resolves: rhbz#2467552
  - Resolves: CVE-2026-41567, CVE-2026-41568, CVE-2026-42306
  - Upstream fix


author: Remi Collet <remi@remirepo.net> - 1.30.6-2
changelog:
  - temporarily drop man pages on Fedora 44 as FTBFS
    reported as https://jira.mongodb.org/browse/CDRIVER-6210


author: Tobias Girstmair <t-fedora@girst.at> - 4.0.0~a4-1
changelog:
  - Update to 4.0.0a4 for Python 3.14 compatibility (RHBZ#2367738) and fix gstreamer 1.26 compatibility


author: Tom Callaway <spot@fedoraproject.org> - 2.1.2-2
changelog:
  - add explicit Requires on cjson-devel to mosquitto-devel (header assumes the cjson headers are also present)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.1-1
changelog:
  - 0cabc75 fix: Translate job-group properly (David Pascual)
  - 70e07c1 fix: Return empty list when there is no content in res_ks_list (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - cee2f5b fix : Not try to login beaker hub unless needed (David Pascual)
  - 75eb8ea chore: Release version 1.23.3 (github-actions)
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.4-1
changelog:
  - 75d8c3b chore: Enable epel-10 builds in Packit (David Pascual)
  - 4a98123 fix: Support pass fetch_url to task (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.5-1
changelog:
  - b46c7c4 chore: Bump python-semantic-release to fix release issue (David Pascual)
  - 033e1f7 chore(packit): Update epel spec for fedora propose upstream (David Pascual)
  - aeb12fe fix: Enforce beaker-client 29.2 to fix fetch_url error (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.24.0-1
changelog:
  - 39e9d79 feat: Add support to pass watchdog panic="ignore" in Beaker recipe (David Pascual)
  - 801ef4b fix: Fix nested and/or issue (David Pascual)
  - fad14c2 test: Add _translate_constraint test (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.25.0-1
changelog:
  - 8ed12e7 feat: Add support for Beaker group key (David Pascual)
  - 8e6ab07 fix: Revert commit 0cabc75 (David Pascual)


author: - 1.26.0-1
changelog:
  - a702da2 fix: Pin setuptools<82 to restore pkg_resources for beaker-client (Rizwan Shaikh)
  - cf48126 feat: add EC2 UserData support for AWS provider (Rizwan Shaikh)


author: Jerry James <loganjerry@gmail.com> - 0.9.0-4
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - rebase to 1.27.1 (rhbz#2412002)
  - changes to mutool run to bring it into sync with WASM library
  - improvements for text extraction
  - improved HTML+CSS support
  - mutool grep: new tool to search for text in documents
  - various bugfixes


author: Jerry James <loganjerry@gmail.com> - 4.7.2-1
changelog:
  - Version 4.7.2
  - Use the cmake declarative buildsystem
  - Drop upstreamed patches: ffmpeg8, qt6.10, tinyxml2-11
  - Give the subpackages individual release numbers


author: David Abdurachmanov <davidlt@rivosinc.com> - 8.4.7-5
changelog:
  - Disable numactrl and libquadmath on risc-v
  - Disable ld.gold on risc-v
  - Add list of skipped tests for risc-v


author: josef radinger <cheese@nosuchhost.net> - 2.6.0-1
changelog:
  - bump version
  - add basic_passwords.txt and vulnerabilities.csv
  - cleanup spec-file
  - remove patch1


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.7-1
changelog:
  - require only git-core which is already sufficient for %autosetup -S git_am
  - rebase to latest upstream release (rhbz#2414527)


author: Mark McKinstry <mmckinst@fedoraproject.org> - 20240728-1
changelog:
  - upgrade to 20240728
  - include work from Xose Perez https://src.fedoraproject.org/rpms/nawk/pull-request/7


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Richard Russon <rich@flatcap.org> - 20260406-1
changelog:
  - Features
    - #4799 Add IMAP connection monitoring, timeouts, and reconnection backoff
  - Bug Fixes
    - #4755 Fix off-by-one in ARRAY_RESERVE()
    - #4819 Fix IMAP crash when changing folders
    - Fix freeze in IMAP with OpenSSL
    - Fix blocking IMAP pipeline drain with many mailboxes
    - Fix crash on threaded index update
    - Fix crash on NULL thread in display subject
    - Fix menu half-down when data fits in one page
    - Fix alias search prompt
    - Fix index tag colours
    - Protect hooks against unhook during execution
    - Fix leak in pattern alias search
    - Consistently convert headers to LF EOL convention
  - Changed Config
    - Changed: `compose_show_preview = yes`
    Display a preview of the message body in the Compose window
  - Docs
    - `$message_id_format`: mention Base64Url encoding
    - Fix descriptions of deprecated config options
  - Build
    - #4826 Use optreset on Solaris too
    - #4827 Avoid function name clash on Solaris
    - #4828 Allow Solaris to use qsort_s
    - Check docs requirements in configure
  - Code
    - Fix graphviz debug output


author: Richard Russon <rich@flatcap.org> - 20260504-1
changelog:
  - Security
    - Fix GSSAPI buffer underflow on short unwrapped tokens
    - Reject percent-encoded NUL bytes in URL decoding
    - Skip CN fallback when SAN dNSName entries exist (RFC6125)
    - Cap POP3 UIDL responses to prevent OOM from a malicious server
    - Harden POP host URL copy
  - Bug Fixes
    - #4836 imap: fix memory leak in `msg_parse_flags`
    - #4849 Fix memmove in `mutt_str_expand_tabs`
    - #4850 IMAP: enhance stability with re-entrancy protection and reconnection fixes
    - #4852 Say which mailcap field we are looking for
    - #4853 Don't overwrite content_type
    - pager: fix crash on `uncolor *`
    - pager: fix wrong line index in signature syntax realloc
    - pager: fix OOB read on short log lines in `display_line()`
    - pager: fix off-by-one in newline restoration
    - imap: fix sort for missing emails
    - imap: fix crash when syncing mailbox on exit
    - Fix crash in `cmd_parse_fetch()` when edata is NULL
    - log: fix missing errors on startup
    - Force cursor to be visible on exit


author: Andreas Schneider <asn@redhat.com> - 0.11.4-1
changelog:
  - Update to version 0.11.4
  - https://github.com/neovim/neovim/releases/tag/v0.11.4
  - resolves: rhbz#2392274


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Steve Dickson <steved@redhat.com> 2.8.7-4
changelog:
  - libnfsidmap: avoid malloc(0) for empty Local-Realms
  - Removed warnings in nfs_sockaddr2universal()


author: Jan Macku <jamacku@redhat.com> - 1.68.0-4
changelog:
  - add missing build dependency on systemd-devel (#2460065)
  - install missing sample configuration file for nghttpx service (#2460064)


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-4
changelog:
  - Fix RHEL 8 & 9 compatibility
  - Fix SSL passphrase dialog patch when used with OpenSSL < 3 (EL8 w/o EPEL)
  - Build now works with and without EPEL enabled


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-9
changelog:
  - Spec file and macro cleanups
  - move some files into the packages that have the dependencies they rely on
    (e.g. systemd, logrotate are not present in nginx-core, so don't install
    files pertaining to them there)
  - remove unused LDFLAGS and DESTDIR overrides, for perl we patch the
    Makefile.PL already
  - use zlib-ng-devel dependency also in nginx-mod-devel
  - improve macro consistency
  - sync configure command in macros.nginxmods.in with main package


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.0-1
changelog:
  - update to 1.30.0
  - drop upstreamed manpage patch - https://github.com/nginx/nginx/pull/1089
  - refresh other patches


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.1-1
changelog:
  - update to 1.30.1
  - fixes CVE-2026-42926, CVE-2026-42945, CVE-2026-42946, CVE-2026-42934,
    CVE-2026-40460 and CVE-2026-40701


author: Jens Petersen <petersen@redhat.com> - 2.34.7-1
changelog:
  - update to 2.34.7 (rhbz#2457630) fixes GHSA-vh5x-56v6-4368
  - https://discourse.nixos.org/t/security-advisory-local-privilege-
    escalation-in-lix-and-nix/77407
  - https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.4-4
changelog:
  - based on PR#18 by Orion Poplawski
  - Build NUT-Monitor and ship in separate nut-monitor package (rhbz#2359149)
  - Move UPS drivers into /usr/libexec/nut


author: Martin Gansser <martinkg@fedoraproject.org> - 0.2.0^20241204git8ac191c-1
changelog:
  - Update to last git commit
  - Add 0001-fix-qt6-arg-format.patch
  - Add 0002-fix-qt6-arg-sampleformat.patch


author: Simone Caronni <negativo17@gmail.com> - 9.12-8
changelog:
  - Clean up SPEC file, drop EOL distro conditionals and macros.
  - Fix Source URL, the old one is no longer valid.
  - Use macros everywhere.
  - Sort BuildRequires, files, configure parameters, etc.
  - Be consistent with macros and variables.
  - Trim changelog.


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Update to 3.25.0
  - Drop patches which are included in upstream
  - Adapt p11sak patch
  - Fix RPM build warnings
  - Add jq and openssl in Build Requirement, required for testcases


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Require openssl >= 3.5.1
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
  - Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Fix the image mode issue again as bootc expects to use /run/lock


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.0-1
changelog:
  - New upstream release (#2311896)
  - Separate OpenSC into libraries and binaries
  - Change expected test failures in FIPS mode
  - Do not build with OpenPACE on RHEL


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - New upstream release (#2442363) fixing various security issues:
    - CVE-2025-66038 Memory corruption via improper compact-TLV length validation
    - CVE-2025-66215 Stack-buffer-overflow with physical access via crafted smart card or USB device
    - CVE-2025-49010 Stack-buffer-overflow via crafted smart card or USB device responses
    - CVE-2025-66037 Out-of-bounds read via crafted input
    - CVE-2025-13763 Several uses of potentially uninitialized memory detected by fuzzers


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-6
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-8
changelog:
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: rhbz#2454941
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: rhbz#2454951
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: rhbz#2454944
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: rhbz#2454943
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: rhbz#2454961


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5, resolving CVE-2025-15467, CVE-2025-15468,
    CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420,
    CVE-2025-69421, CVE-2025-69419, CVE-2026-22795, CVE-2026-22796, CVE-2025-11187


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.5-2
changelog:
  - Backport security patches from OpenSSL 3.5.6
    Resolves: CVE-2026-2673
    Resolves: CVE-2026-28387
    Resolves: CVE-2026-28388
    Resolves: CVE-2026-28389
    Resolves: CVE-2026-28390
    Resolves: CVE-2026-31789
    Resolves: CVE-2026-31790


author: Packit <hello@packit.dev> - 171-1
changelog:
  Changes with 171
  ----------------
    - Improve robustness of --in-vm support (#2292)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support running bootc-image-builder with --in-vm (#2328)
      - Author: Alexander Larsson, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc.install.config: add ostree.bls-append-except-default option (#2319)
      - Author: Joel Capitao, Reviewers: Brian C. Lane, Simon de Vlieger
    - grub2.iso: configurable entries (HMS-10018, HMS-10015) (#2317)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Ondřej Budai
    - mockbuild: fix PQC builds on RHEL 10 (#2327)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - monitor: Report if the runner is running in a vm (#2320)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-27


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - SPEC: initrd sub-package fixups and exclude i686 arch on el (#2334)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2333)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260201 (#2330)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild-mpp: Refactor to use osbuild.solver module (#2331)
      - Author: Mark Kemel, Reviewers: Nobody
    - test_objectstore: add time.sleep(0.1) to solve flaky tests (#2318)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-06


author: Packit <hello@packit.dev> - 173-1
changelog:
  Changes with 173
  ----------------
    - Revert "test_objectstore: add time.sleep(0.1) to solve flaky tests" (#2340)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: disable tests that tend to fail during rpmbuild in Koji (HMS-9796) (#2338)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2341)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260208 (#2335)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/module-config: postfix with `.module` (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 174-1
changelog:
  * Fix packaging conflict in initrd directory causing downgrade failures by @thozza in https://github.com/osbuild/osbuild/pull/2347
   * stages/bootc.install-to-fs: add bootupd-skip-boot-uuid option by @jbtrystram in https://github.com/osbuild/osbuild/pull/2345
   * qemu: Don't always pass -cpu host by @alexlarsson in https://github.com/osbuild/osbuild/pull/2356
   * spec: drop typer-slim dependency and use only python3-typer by @achilleas-k in https://github.com/osbuild/osbuild/pull/2358
   * qemu: Handle container storage.conf not listing graphroot by @alexlarsson in https://github.com/osbuild/osbuild/pull/2357
   * stages/erofs: quiet stdout by @supakeen in https://github.com/osbuild/osbuild/pull/2359
   * qemu: Default to 3GB vm instead of 4GB by @alexlarsson in https://github.com/osbuild/osbuild/pull/2361


   **Full Changelog**: https://github.com/osbuild/osbuild/compare/v173...v174


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - CI: run tests on 9.7+10.1 GA and 9.8+10.2 nightly (HMS-9794) (#2351)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Revert "schutzbot: update libsemanage before installing osbuild" (#2378)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Solver: fix `repo_ids` to restrict all dependency resolution, not just top-level packages (HMS-10314) (#2379)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Solver: implement per-transaction package excludes in the DNF5 solver (HMS-10318) (#2381)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2383)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - Update osbuild-ci container images (#2367)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - Update snapshots to 20260308 (#2382)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: shift manifest guide headings one level down (#2385)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - solver: add cost field to Repository model (#2380)
      - Author: Mark Kemel, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/rpm: add nodeps option for `rpm install --nodeps` (#2387)
      - Author: Dusty Mabe, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages: add coreos.bfb for NVIDIA BlueField DPUs (#2349)
      - Author: Sagi Zigmon, Reviewers: Nobody

  — Somewhere on the Internet, 2026-03-11


author: Packit <hello@packit.dev> - 177-1
changelog:
  Changes with 177
  ----------------
    - Add stages used for building s390x isos (HMS-9967) (#2390)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: default to using DNF5 depsolver on Fedora 45+ (current Rawhide) (HMS-10343) (#2389)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to support building ppc64le isos (HMS-9968) (#2377)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2394)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2392)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260315 (#2393)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260322 (#2397)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - buildroot: Use bwrap's --drop-cap ALL (#2395)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Alexander Larsson
    - chore: clean up team ssh keys (#2391)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Anna Vítová, Tomáš Hozza
    - cli: Print checkpoint cache status (#2388)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - stages/aleph: make path parametrizable (#2384)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - tools/osbuild-store: do stuff with sources and store (HMS-10238) (#2364)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-26


author: Packit <hello@packit.dev> - 178-1
changelog:
  Changes with 178
  ----------------
    - Packit: disable s390x builds in COPR (#2406)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Simon de Vlieger
    - Support uri encoded urls (#2405)
      - Author: Justin Sherrill, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild-ci container images (#2408)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260329 (#2403)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stage: flatpak.build-import-bundle.oci (HMS-10170) (#2400)
      - Author: Simon de Vlieger, Reviewers: Dusty Mabe, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-02


author: Packit <hello@packit.dev> - 181-1
changelog:
  Changes with 181
  ----------------
    - stages/bootc.install-to-fs: remount /dev (#2440)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-11


author: Packit <hello@packit.dev> - 183-1
changelog:
  Changes with 183
  ----------------
    - .gitlab-ci.yml: add 9.8-ga and 10.2-ga (#2457)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    - Optimize osbuild-depsolve-dnf memory and runtime performance (HMS-10526) (#2456)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal
    - Update images dependency ref to latest (#2461)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - mounts/ddi: mounting of DDIs (#2459)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - runners: `eln11` (HMS-10652, HMS-10652) (#2453)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - test: update container IDs for manifest-list-test (#2455)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-27


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Packit <hello@packit.dev> - 168-1
changelog:
  Changes with 168
  ----------------
    - Add DequeueAnyChannel to enable multi-tenant BootcPreManifest processing (HMS-10445) (#5084)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Ondřej Budai
    - Fail bootc composes on composer build version mismatch (HMS-10378) (#5082)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Ondřej Budai
    - Make bootc container source type configurable (HMS-10262) (#5087)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Replace monolithic bootc-manifest worker job with multi-stage server-orchestrated job graph (HMS-10378) (#5069)
      - Author: Tomáš Hozza, Reviewers: Nobody
    - Update snapshots to 20260405 (#5080)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5070)
      - Author: {}, Reviewers: Anna Vítová, Lukáš Zapletal
    - chore(deps): update konflux references (#5089)
      - Author: {}, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - chore: add .gitattributes file (#5078)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Simon de Vlieger, Tomáš Hozza
    - cloudapi: Add fedora names for network-installer (#5079)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - cmd/osbuild-worker: cleanup jobimpl-osbuild.go (#5083)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Tomáš Hozza
    - templates/packer: add container registries init script (#5086)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - worker: use slices.EqualFunc to compare dependency modules (#5085)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-15


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - Schutzfile: drop minor versions from bootc-foundry (#5134)
      - Author: Lukáš Zapletal, Reviewers: Simon Steinbeiß, Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add default target for bootc iso (#5125)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - go.mod: update osbuild/images to v0.261.0 (#5115)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Lukáš Zapletal, Sanne Raymaekers
    - test/repositories: switch RHEL 9.7 and 10.1 test repos to GA (#5122)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: drop ubi-wsl.sh test (#5130)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-13


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-1
changelog:
  - Updated the OVN sources to the upstream release v25.09.2 with the
    commit e3e0587865d8f02d0a8f72de53b82e464c5029d8.


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-82
changelog:
  - Updated the OVN sources to pick up the commits from v25.09.2 till the
    tip of branch-25.09 (c7066edbc3985f06c6bfa45e3724088baa97c4bd).
  - Updated the OVS sources to the branch-25.09 OVS submodule
    commit da6b84d691593e57951bcc5f2f916336c6e0d5cc.


author: Dumitru Ceara <dceara@redhat.com> - 26.03.3-10
changelog:
  - Updated the OVN sources to upstream release v26.03.1 with the
    commit 0cc1ea5bb71d29b91244f5368ecbbda8837bc542 and picked up
    the commits from v26.03.1 till the tip of branch-26.03
    a1482006410f09dfe471c6aec76de3902327f1ad (2 commits) in
    ovn.patch.
  - Updated the OVS sources to the branch-26.03 ovs submodule
    commit bdb95cc1920d4ab66fe062a9470eeb33a51d33e2


author: Dumitru Ceara <dceara@redhat.com> - 26.03.1-50
changelog:
  - Updated the OVN sources to pick up the commits from v26.03.1 till
    the tip of branch-26.03 (9f04b8c5086a74db299daeea4908518bbb27d139).


author: Frédéric Bérat <fberat@redhat.com> - 0.5-16
changelog:
  - Use a `%{!r: ... }` guard around package notes LDFLAGS to prevent double
    inclusion when performing a relocatable link (`-r`). Relates to
    RHBZ#2362272.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 0.17-1
changelog:
  - Version 0.17
  - This is a major version upgrade that allows automatic generation of
    Requires/Recommends/Suggests from package dlopen notes. See the new macro
    file for details of use.
  - The new fileattr plugin is in the package-notes subpackage, so that needs
    to be installed to activate the feature.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 0.18-1
changelog:
  - Version 0.18
  - This significantly reworks how rpm attributes are generated based on
    dlopen notes. For example use of how this is done, see
    https://src.fedoraproject.org/rpms/systemd/pull-request/246.
  - No changes to package note handling.


author: Packit <hello@packit.dev> - 1.12.0-1
changelog:
  - Packit now automatically invokes an rpm build in mock when no rpm test is passed using `--rpm_paths` before running local tests with `packit test`. (#2636)
  - Fixed an issue where the upstream spec file was synchronized without applying packit's patches. (#2637)
    This happened when syncing a folder that contains the specfile, e.g.:
  ```yaml
  files_to_sync:
    - src: distro/
      dest: ./
  specfile_path: distro/my_pkg.spec
  ```
  - `packit init` now automatically adds a packit-specific pre-commit hook to user's pre-commit configuration file if present. Two new flags were added, which modify this behavior. (#2641)
  - Resolves: rhbz#2396659


author: Packit <hello@packit.dev> - 1.13.0-1
changelog:
  - `packit init` now automatically retrieves the latest version of the pre-commit hook to be added to the user's pre-commit configuration file. (#2651)
  - Resolves: rhbz#2420553


author: Packit <hello@packit.dev> - 1.14.0-1
changelog:
  - We have added the `--preserve-spec` flag to the `prepare-sources` and `srpm` commands. When used, Packit will not change the spec file in any way (e.g., release is not bumped, Source0 is not changed). When enabled, it implies `--no-update-release`. (#2653)
  - Resolves: rhbz#2427944


author: Packit <hello@packit.dev> - 1.15.0-1
changelog:
  - The `version_suffix` configuration option is now supported in Packit. This option is meant for appending information to the Version field in RPM spec files. This is useful for post-release snapshots following RPM versioning conventions. The `version_suffix` behaves similarly to the already existing `release_suffix` and also supports expansion of environment variables. (#2664)
  - Packit now supports `bodhi_extra_params` configuration option to customize creating Bodhi updates. (#2682)
  - Resolves: rhbz#2439424


author: Packit <hello@packit.dev> - 1.15.1-1
changelog:
  - We have fixed a bug that prevented running `sync_release()` on a `PackitAPI` instance initialized with `non_git_upstream=True` repeatedly due to an improper clean-up. (#2691)
  - Resolves: rhbz#2445195


author: Packit <hello@packit.dev> - 1.15.2-1
changelog:
  - Packit now uses the specfile library's sanitization when parsing spec files.
  - Resolves: rhbz#2450841


author: Packit <hello@packit.dev> - 1.15.3-1
changelog:
  - We've fixed the formatting of the strings Packit appends to the changelog. Now there will be at most one blank line before or after the Packit comment. (#2707)
  - Resolves: rhbz#2453842


author: Packit <hello@packit.dev> - 1.16.0-1
changelog:
  - Packit CLI has a new option `--[no-]update-release` that, by default, follows the value of the option set in the config, and also allows you to override manually, if necessary. (#2713)
  - In addition to `version_update_mask`, users can now use a new `version_update_specifiers` configuration option to control the upstream versions allowed to be release-synced. The option accepts [PEP440 version specifier sets](https://packaging.pypa.io/en/stable/specifiers.html), for example `version_update_specifiers: >=1.0,~=1.0`. (#2710)
  - Resolves: rhbz#2461103


author: Jerry James <loganjerry@gmail.com> - 3.0.0-5
changelog:
  - Use the boost version of pdqsort
  - Drop Zlib from the License field
  - Build with the cmake buildsystem
  - Support soplex and scip in a non-bootstrap build


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260507.g1afd4ed-1
changelog:
  - Install pesto, its SELinux policy, and the man page from the spec file
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_01_20.386b5f5..2026_05_07.1afd4ed


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Paul Wouters <paul.wouters@aiven.io> - 2.10.0-1
changelog:
  - Initial vendor version of pebble
  - Resolves: rhbz#2453110 Review Request: pebble - A miniature version of
    Boulder, a small RFC 8555 ACME test


author: Paul Howarth <paul@city-fan.org> - 1.3.15-1
changelog:
  - Update to 1.3.15
    - Improve Redis driver performance
    - Implement searchOn/deleteIfLowerThan into Redis
    - Prefer Redis::Fast


author: Paul Howarth <paul@city-fan.org> - 1.3.19-1
changelog:
  - Update to 1.3.19 (rhbz#2477392)
    - Apache::Session::Generate::SHA256 used a low-entropy seed (time, PID, rand,
      stringified hash ref) to derive session identifiers; use Crypt::URandom to
      generate session ids from a cryptographically secure source, falling back
      to the previous hashing method only if Crypt::URandom is unavailable
      (CVE-2026-8503, similar in scope to CVE-2025-40931 and CVE-2025-40932)
    - Fix Redis indexes: never cleaned before
    - Improve resilience and reliability of Patroni driver


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.10024-1
changelog:
  - Update to 0.10024
  - Overhaul dependecies
  - Drop -test subpackage
  - Use %{make_build} and %{make_install} where appropriate
  - Drop use of %{__perl}
  - Use %license tag


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 4.41-1
changelog:
  - Update to 4.41
    - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
    - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
    - Fix incr_parse single-quote string delimiter (GH#245)
    - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
      truncated input (GH#244)


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - New maintainer
    - This release resolves CVE-2011-3599
    - Added a statement to recommend against using DSA
    - Fixed a few long standing bugs
    - The build process is moved to Dist::Zilla
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
    - This module is now marked as deprecated: Crypt-DSA-GMP is a possible
      replacement
    - Improve the call to IPC::Open3::open3
    - Replace two arg open (CVE-2026-8704)
    - Replace rand() (CVE-2026-8700)
    - Add a security policy
    - Add use warnings
    - Typo fix (CPAN RT#86424)


author: Paul Howarth <paul@city-fan.org> - 1.4.3-1
changelog:
  - Update to 1.43
    - Replace use of the cryptographically weak rand() function with the much
      stronger Crypt::URandom::urandom() (GH#3, CVE-2026-6659, rhbz#2479575)
    - Add Encode, Exporter, ExtUtils::MakeMaker to Makefile.PL
    - Add files AI_POLICY.md and SECURITY.md


author: Charles R. Anderson <cra@alum.wpi.edu> 0.020-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(Config)
  - Remove duplicate explicit Requires:
    perl(Exporter)
    perl(ExtUtils::Builder::Planner)
    perl(ExtUtils::Helpers)
    perl(Getopt::Long)
    perl(List::Util)
  - Add missing Requires:
    perl(CPAN::Meta::Merge)
    perl(Perl::OSType)
    perl(Pod::Man)
    perl(TAP::Harness::Env)
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.017-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(blib) instead of perl-blib
  - Remove duplicate explicit Requires:
    perl(Exporter)
    perl(ExtUtils::MakeMaker)
    perl(List::Util)
  - Add missing Requires:
    perl(Data::Dumper)
    perl(Perl::OSType)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.020-1
changelog:
  - Update to 0.020
  - add scan-perl-buildrequires.sh which uses scan-perl-prereqs
    from Perl::PrereqScanner
  - Update BR


author: Charles R. Anderson <cra@alum.wpi.edu> 0.031-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(Config)
  - Remove duplicate explicit Requires:
    perl(ExtUtils::Config)
    perl(ExtUtils::Helpers)
  - Add missing Requires: perl(DynaLoader)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Paul Howarth <paul@city-fan.org> - 1.6300-1
changelog:
  - Update to 1.63
    - Fixed TesouroDireto.pm - using different source URL (GH#424)
    - Added FinanceAPI.pm - requires API key from https://financeapi.net/
      - US and other exchange data available
    - Fixed BVB.pm (GH#409)
    - Fixed BSEIndia.pm (GH#410); removed Unzip as quotes file is now a CSV file
    - Fixed NSEIndia.pm (GH#410)
    - Fixed NZX.pm (GH#401)


author: Paul Howarth <paul@city-fan.org> - 1.6400-1
changelog:
  - Update to 1.64
    - Update AlphaVantage.pm (GH#447)
    - Fix to Stooq.pm (GH#445)
    - Updated ASX.pm (GH#404)
    - Added more fields to CSE.pm and exposed all labels
    - Changed parsing in Comdirect.pm (GH#413)
    - Complete rewrite of OnVista.pm (GH#414)
    - Minor fix to FinanceAPI decoding JSON (GH#434)
    - Modified YahooJSON to deal with "nan" as dividend yield in JSON
    - New CurrencyRates module, CurrencyRates/FinanceAPI (GH#427)
    - Fixed Bourso.pm (GH#417)
    - Allowed Currency Rates modules Fixer.pm and OpenExchange.pm to read their
      API keys from environment variables (GH#426)
    - Removed references to IEXCloud (IEX ended support for all products at the
      end of August 2024)
  - Switch source URL from cpan.metacpan.org to www.cpan.org
  - Add build conditional for author tests, disabled by default


author: Paul Howarth <paul@city-fan.org> - 1.6500-1
changelog:
  - Update to 1.65
    - Added EXCHANGE feature to Sinvestor.pm and some fixes (GH#481)
    - Added EXCHANGE feature to OnVista.pm (GH#480)
    - Added EXCHANGE feature to Consorsbank.pm and some fixes (GH#479)
    - Enabled usage count in Quote.pm
    - Removed DWS.pm
    - Improved check that dividend yield is a number in YahooJSON.pm by adding
      regex anchors
    - Added ssl_opts to user agent in Union.pm to account for bad certificate
      chain (GH#482)
    - Added ETFs search, more labels and EXCHANGE feature to Comdirect.pm (GH#478)
    - GoogleWeb: Add support for Hong Kong Exchange (GH#476)
    - YahooJSON: Adjust other currency fields when data is returned in GBp, ZAc,
      or ILA
    - Added labels wkn, ìsin, close, ask, bid, p_change, time to OnVista.pm
    - Modified OnVista.pm to enable search by ISIN and WKN and search for ETFs
    - Added methodinfo hash to Tradegate.pm (GH#465)
    - Added labels isin, open, ask, bid, time to Tradegate.pm (GH#465)
    - Fixed Tradegate.pm - Search for ETFs (GH#465)
    - Removed MorningstarAU (GH#405)
    - Fixed malformed character in YahooWeb.pm (GH#468)
    - Changed useragent in YahooJSON.pm (GH#467)
    - Added methodinfo hash to AEX.pm (GH#466)
    - Added labels exchange, close, time to AEX.pm (GH#466)
    - Fixed XETRA.pm (GH#460)
    - Added methodinfo hash to Fool.pm
    - Fixed MorningstarJP.pm (GH#443, GH#451)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.6600-1
changelog:
  - Update to 1.66
    - Modified CurrencyRates/CurrencyFreaks.pm to return from and to values
      instead of calculated rate
    - Removed Bloomberg.pm, Tiaacref.pm, Troweprice.pm
    - AlphaVantage: Return 'symbol not found' when no price data is returned
    - ASX: Changed error message when symbol isn't found (GH#497)
    - Added a new module to fetch the fund NAV from CMBChina (GH#494)
    - Added Cookie Jar to Comdirect user agent (GH#491)
    - Removed HU.pm, Oslobors.pm, and SEB.pm (GH#490)


author: Paul Howarth <paul@city-fan.org> - 1.6700-1
changelog:
  - Update to 1.67
    - Fixed ASEGR.pm; web site redesigned, URL used for data was no longer
      working (GH#509)
    - Fixed TesouroDireto.pm using Tesouro Transparente as data source (GH#527)
    - Added a new module to fetch data from SwissFundData (GH#515)
    - Handle no trade date in BorsaItaliana.pm (GH#528)
    - Added methodinfo() to MarketWatch.pm and BorsaItaliana.pm
    - Fixed MorningstarCH.pm
    - Fixed MorningstarUK.pm
  - Package new CONTRIBUTING.md file


author: Paul Howarth <paul@city-fan.org> - 1.6800-1
changelog:
  - Update to 1.68
    - Changes to AlphaVantage.pm and CurrencyRates/AlphaVantage.pm to throttle
      queries (GH#546)
    - YahooJSON.pm: Add additional fields/labels (GH#544)
    - New module USBonds.pm
    - MarketWatch.pm: Added headers to fix 401 code (GH#542)
    - Modified AEX.pm to return no data available if currency indicator is '%'
      (bonds return percentage of par/facevalue) (GH#539)
    - Fixed YahooWeb.pm (GH#533, GH#538)
    - Removed CMBChina.pm - no longer working (GH#534)
    - Rewrote Union.pm for URL that returns JSON (GH#516)
    - Modified parsing in BVB.pm (GH#513)


author: Paul Howarth <paul@city-fan.org> - 1.6900-1
changelog:
  - Update to 1.69
    - Sinvestor.pm: Trim whitespace before parsing date and price
    - XETRA.pm: Trim whitespace from date-time before extracting the actual date
      value (GH#557)
    - Modified Stooq.pm to send cookies
      - Stooq requires European visitors to their website to accept cookies
      - Cookies are set using JavaScript
      - Current version of module hard codes these cookies gleaned from a browser
        session
      - Added CurrencyRates/TwelveData.pm


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Security: Fix IPv4 mapped IPv6 packed length (CVE-2026-40199)
    - Security: Reject invalid uncompressed IPv6 (CVE-2026-40198)


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Reject Unicode digits and trailing newlines in parser inputs
      (CVE-2026-45190)
    - Reject zero-padded CIDR masks (CVE-2026-45191)


author: Paul Howarth <paul@city-fan.org> - 5.005-1
changelog:
  - Update to 5.005 (rhbz#2480052)
    - Update bundled Zstd to 1.5.7, and other changes
    - Update spec to document changes from version 5
    - Security fixes - make sure that COPY tags cannot be used to read past end
      of buffer


author: Paul Howarth <paul@city-fan.org> - 1.57-1
changelog:
  - Update to 1.57 (rhbz#2325504)
    - Add on_error callback to csv()
    - Retain runtime error from csv()


author: Paul Howarth <paul@city-fan.org> - 1.58-1
changelog:
  - Update to 1.58 (rhbz#2334923)
    - Add strict_eol (warnings default in csv())
    - Add XS line number in errors
    - Add streaming support (not set in stone)


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60 (rhbz#2343165)
    - Add SECURITY.md
    - CR/NL/CRNL inside quoted fields not affected by strict_eol
    - Fix incorrect error 2014 (GH#62)


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61 (rhbz#2383739)
    - Add love letter to CSV from xan project with reference
    - Bugtracker to Github (long overdue) (GH#63)
    - Update to Devel::PPPort-3.73


author: Paul Howarth <paul@city-fan.org> - 1.62-1
changelog:
  - Update to 1.62 (rhbz#2463743)
    - It is 2026
    - Fix possible stack corruption (GH#65, CVE-2026-7111)


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-10
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 7.1.4-3
changelog:
  - update bundled bartlett/php-compatinfo-db to 6.12.0
  - update bundled dependencies
  - optional support build with composer-generators


author: Remi Collet <remi@remirepo.net> - 7.2.3-1
changelog:
  - update to 7.2.3
  - re-license spec file to CECILL-2.1
  - always build with composer-generators
  - update bundled bartlett/php-compatinfo-db to 6.16.0


author: Remi Collet <remi@remirepo.net> - 1.10.17-2
changelog:
  - remove report_memleaks usage with PHP 8.5 using patch from
    https://github.com/pear/pear-core/pull/164


author: Remi Collet <remi@remirepo.net> - 1.8.0-1
changelog:
  - update to 1.8.0
  - raise dependency on PHP 8.2
  - switch to phpunit11
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-pecl-ds2
  - run standard php test suite from extension sources
    instead of separate tests using phpunit
  - drop ZTS build


author: Remi Collet <remi@remirepo.net> - 1.1.0-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.2.1-1
changelog:
  - update to 1.2.1
  - PHP License updated from version 3 to version 4 (BSD-3-Clause)
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@remirepo.net> - 12.5.0-1
changelog:
  - update to 12.5.0
  - raise dependency on nikic/php-parser 5.6.1
  - raise dependency on theseer/tokenizer 1.3.1


author: Remi Collet <remi@remirepo.net> - 12.5.1-1
changelog:
  - update to 12.5.1
  - raise dependency on nikic/php-parser 5.7.0
  - raise dependency on theseer/tokenizer 2.0.1
  - add upstream patch for theseer/tokenizer 2.x


author: Remi Collet <remi@remirepo.net> - 13.0.1-1
changelog:
  - update to 13.0.1
  - raise depdendency on PHP 8.4
  - raise dependency on phpunit/php-file-iterator 7.0
  - raise dependency on phpunit/php-text-template 6.0
  - raise dependency on sebastian/complexity 6.0
  - raise dependency on sebastian/environment 9.0
  - raise dependency on sebastian/lines-of-code 5.0
  - raise dependency on sebastian/version 7.0
  - rename to php-phpunit-php-code-coverage13
  - move to /usr/share/php/SebastianBergmann/CodeCoverage13


author: Remi Collet <remi@remirepo.net> - 14.0.0-1
changelog:
  - update to 14.0.0
  - raise dependency on sebastian/environment 9.1
  - add dependency on sebastian/git-state 1.0
  - rename to php-phpunit-php-code-coverage14
  - move to /usr/share/php/SebastianBergmann/CodeCoverage14


author: Remi Collet <remi@remirepo.net> - 4.0.0-1
changelog:
  - update to 4.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-cli-parser4
  - move to /usr/share/php/SebastianBergmann/CliParser4


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.4
  - raise dependency on sebastian/diff 8
  - raise dependency on sebastian/exporter 8
  - rename to php-sebastian-comparator8
  - move to /usr/share/php/SebastianBergmann/Comparator8


author: Remi Collet <remi@remirepo.net> - 8.1.0-1
changelog:
  - update to 8.1.0
  - open https://github.com/sebastianbergmann/comparator/pull/139
    raise dependency on sebastian/diff 8.1


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-diff7
  - move to /usr/share/php/SebastianBergmann/Diff7


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.4
  - rename to php-sebastian-diff8
  - move to /usr/share/php/SebastianBergmann/Diff8


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-environment8
  - move to /usr/share/php/SebastianBergmann/Environment8


author: Remi Collet <remi@remirepo.net> - 9.0.0-1
changelog:
  - update to 9.0.0
  - raise dependency on PHP 8.4
  - rename to php-sebastian-environment9
  - move to /usr/share/php/SebastianBergmann/Environment9


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - raise dependency on sebastian/recursion-context 7
  - rename to php-sebastian-exporter7
  - move to /usr/share/php/SebastianBergmann/Exporter7


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.4
  - raise dependency on sebastian/recursion-context 8
  - rename to php-sebastian-exporter8
  - move to /usr/share/php/SebastianBergmann/Exporter8


author: Remi Collet <remi@remirepo.net> - 4.0.0-1
changelog:
  - update to 4.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-lines-of-code4
  - move to /usr/share/php/SebastianBergmann/LinesOfCode4


author: Remi Collet <remi@remirepo.net> - 5.0.0-1
changelog:
  - update to 5.0.0
  - raise dependency on PHP 8.4
  - rename to php-sebastian-lines-of-code5
  - move to /usr/share/php/SebastianBergmann/LinesOfCode5


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-type6
  - move to /usr/share/php/SebastianBergmann/Type6


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.4
  - rename to php-sebastian-type7
  - move to /usr/share/php/SebastianBergmann/Type7


author: Remi Collet <remi@remirepo.net> - 11.0.0-1
changelog:
  - update to 11.0.0
  - raise dependency on phpunit/phpunit 12.0
  - raise dependency on phpunit/php-code-coverage 12
  - raise dependency on phpunit/php-file-iterator 6
  - raise dependency on sebastian/cli-parser 4
  - raise dependency on sebastian/diff 7
  - raise dependency on sebastian/version 6


author: Remi Collet <remi@remirepo.net> - 11.0.1-1
changelog:
  - update to 11.0.1 (no change)
  - raise dependency on phpunit/phpunit 12.1.6
  - raise dependency on phpunit/php-code-coverage 12.3


author: Remi Collet <remi@remirepo.net> - 11.0.2-1
changelog:
  - update to 11.0.2 (no change)
  - raise dependency on phpunit/phpunit 12.3.7
  - raise dependency on phpunit/php-code-coverage 12.3.6


author: Remi Collet <remi@remirepo.net> - 11.0.3-1
changelog:
  - update to 11.0.3 (no change)
  - raise dependency on phpunit/phpunit 12.4.4
  - raise dependency on phpunit/php-code-coverage 12.5.0
  - raise dependency on sebastian/cli-parser 4.2


author: Remi Collet <remi@remirepo.net> - 12.0.0-1
changelog:
  - update to 12.0.0
  - raise dependency on PHP 8.4
  - raise dependency on phpunit/phpunit 13
  - raise dependency on phpunit/php-code-coverage 13
  - raise dependency on phpunit/php-file-iterator 7
  - raise dependency on sebastian/cli-parser 5
  - raise dependency on sebastian/diff 8
  - raise dependency on sebastian/version 7


author: Remi Collet <remi@remirepo.net> - 13.0.0-1
changelog:
  - update to 13.0.0
  - raise dependency on phpunit/php-code-coverage 14
  - drop runtime dependency on phpunit13


author: Remi Collet <remi@remirepo.net> - 13.0.1-1
changelog:
  - update to 13.0.1
  - raise dependency on phpunit/php-code-coverage 14.1.3
  - raise dependency on sebastian/diff 8.1.0


author: Remi Collet <remi@remirepo.net> - 12.5.19-1
changelog:
  - update to 12.5.19
  - raise dependency on phpunit/php-code-coverage 12.5.5
  - raise dependency on sebastian/comparator 7.1.5


author: Remi Collet <remi@remirepo.net> - 12.5.21-1
changelog:
  - update to 12.5.21
  - raise dependency on phpunit/php-code-coverage 12.5.6
  - raise dependency on sebastian/environment 8.1.0


author: Remi Collet <remi@remirepo.net> - 12.5.26-1
changelog:
  - update to 12.5.26
  - raise dependency on sebastian/cli-parser 4.2.1
  - raise dependency on sebastian/comparator 7.1.8
  - raise dependency on sebastian/environment 8.1.1
  - raise dependency on sebastian/exporter 7.0.3
  - raise dependency on sebastian/type 6.0.4


author: Remi Collet <remi@remirepo.net> - 13.1.1-1
changelog:
  - update to 13.1.1
  - raise dependency on sebastian/comparator 8.1
  - raise dependency on sebastian/diff 8.1
  - raise dependency on sebastian/environment 9.2
  - raise dependency on phpunit/php-code-coverage 14.0.0
  - add dependency on sebastian/git-state 1.0


author: Remi Collet <remi@remirepo.net> - 13.1.3-1
changelog:
  - update to 13.1.3
  - raise dependency on phpunit/php-code-coverage 14.1.1
  - raise dependency on sebastian/comparator 8.1.1
  - raise dependency on sebastian/exporter 8.0.1


author: Remi Collet <remi@remirepo.net> - 13.1.5-1
changelog:
  - update to 13.1.5
  - raise dependency on phpunit/php-code-coverage 14.1.2
  - raise dependency on sebastian/environment 9.3.0
  - raise dependency on sebastian/exporter 8.0.2


author: Remi Collet <remi@remirepo.net> - 13.1.10-1
changelog:
  - update to 13.1.10
  - raise dependency on sebastian/comparator 8.1.3
  - raise dependency on sebastian/diff 8.3


author: Remi Collet <remi@remirepo.net> - 13.1.11-1
changelog:
  - update to 13.1.11
  - raise dependency on phpunit/php-code-coverage 14.1.9
  - raise dependency on sebastian/comparator 8.2.1
  - raise dependency on sebastian/environment 9.3.1
  - raise dependency on sebastian/exporter 8.1.0
  - raise dependency on sebastian/type 7.0.1


author: Adam Williamson <awilliam@redhat.com> - 6.6.4-3
changelog:
  - Backport MR #99 to fix launcher icon when selecting dark mode
  - Backport MR #100 to maybe fix strange behavior in wifi page


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-7
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)
  - sepolicy: Fix detection of writeable locations


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.3-1
changelog:
  - New version
    Resolves: rhbz#2379297
  - Updated cyrus-imapd comment in config to point to the correct location
    Related: RHEL-63089


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.5-1
changelog:
  - New version
    Resolves: rhbz#2406450
  - Changed protocol for downloading sources from FTP to HTTP (HTTPS isn't supported)


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.10.7-3
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-128018


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-9
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Fixes for C23 compatibility
  - Update mod_vroot to 0.9.12
    - Implement a realpath(3) callback for the FSIO API, for better
      interoperability of other modules when mod_vroot is in effect


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-3
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866
  - Add explicit BR: libxcrypt-devel


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-1
changelog:
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)


author: Paul Howarth <paul@city-fan.org> - 1.3.9-1
changelog:
  - Update to 1.3.9 (see RELEASE_NOTES for details)
  - Update mod_proxy to 0.9.5
    - Implemented new IgnoreForeignAddress ProxyOption
    - Fixed passive data transfers to backend IPv4 address when IPv6 support is
      enabled


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-1
changelog:
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Tom Callaway <spot@fedoraproject.org> - 13.0.4-2
changelog:
  - rebuild for lua 5.5
  - apply upstream fix for configure
  - make a new patch to actually support lua 5.5


author: Tom spot Callaway <spotaws@amazon.com> - 2.9.4-2
changelog:
  - only run the tests on architectures where this app is likely to be
    actually used, due to itenerant failures on the other architectures


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-5
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/fixes_boost.patch.


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-6
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/boost-1.89.patch.


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.3-1
changelog:
  - Recognize wsl2 images produced by koji (lsedlar)
  - Specify data_files with relative paths (lsedlar)
  - Crossreference `koji_cache` from the Koji cache page (ahills)
  - Add documentation for `koji_cache` configuration (ahills)
  - Record exceptions for top level OTel span (lsedlar)
  - Update spec to match current python packaging guidelines


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.0-1
changelog:
  - Add more tracing to kojiwrapper (lsedlar)
  - phases: implement image-builder (supakeen)
  - Add a tracing span around call to skopeo inspect (lsedlar)
  - Add retries to skopeo inspect calls (lsedlar)
  - otel: Explicitly initialize telemetry provider and tracer (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.1-1
changelog:
  - osbuild: Handle wsl2 images (lsedlar)
  - repoclosure: Clean up cache for dnf5 (lsedlar)
  - Ignore errors for rmtree after archive extraction (dhodovsk)
  - imagebuilder: accept `manifest_type` (supakeen)
  - Add a telemetry span over image building threads (lsedlar)
  - Add specific exception for skopeo copy (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.13.0-1
changelog:
  - phase/kiwi, phase/image-builder: xorrisofs (cmdr)
  - phase/kiwi, phase/image-builder: iso fields (cmdr)
  - imagebuilder,kiwibuild: fix failable wildcard arch expansion (lsedlar)
  - Improve Koji task ID discovery and logging (awilliam)
  - phases/buildinstall: remove unused non-lorax paths (awilliam)
  - Correct ostree_installer phase name in log messages (awilliam)
  - phase/imagebuilder: failable arches fix (cmdr)
  - Move image sanity checks from test phase to image-generating phases (lsedlar)
  - Update phase diagram (lsedlar)
  - Remove OSBS and ImageContainer phases (awilliam)
  - Drop size check for ISOs (lsedlar)
  - Support list of URLs for rpm_repo_mapping (hlin)
  - docs: modernize Sphinx conf.py (hlin)
  - kiwi: also include subvariant in failure logging (awilliam)
  - kiwi: include image profile in global logs and watch-task filenames
    (awilliam)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> - 8.10.0-1
changelog:
  - Update to 8.10.0 (fixes rhbz#2291351)
  - Ruby 3.3 regexp incompability bugfix (fixes rhbz#2280109)
  - Ruby 3.4 closedir bugfix (fixes rhbz#2349352)


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.1.0-1
changelog:
  - Update to v25.1.0
  - Attempting using any methods that mutate an OpenSSL.SSL.Context after it
    has been used to create an OpenSSL.SSL.Connection will emit a warning. In
    a future release, this will raise an exception.


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.3.0-1
changelog:
  - Update to 25.3.0
  - pyOpenSSL now sets SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER on connections by
    default, matching CPython’s behavior.
  - Added OpenSSL.SSL.Context.clear_mode.
  - Added OpenSSL.SSL.Context.set_tls13_ciphersuites to set the allowed TLS
    1.3 ciphers.
  - Added OpenSSL.SSL.Connection.set_info_callback


author: Jeremy Cline <jeremycline@microsoft.com> - 26.0.0-1
changelog:
  - Update to v26.0.0
  - Added support for using aws-lc instead of OpenSSL.
  - Properly raise an error if a DTLS cookie callback returned a cookie
    longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a
    buffer-overflow. Credit to dark_haxor for reporting the issue.
    CVE-2026-27459
  - Added OpenSSL.SSL.Connection.get_group_name to determine which group name
    was negotiated.
  - Context.set_tlsext_servername_callback now handles exceptions raised in
    the callback by calling sys.excepthook and returning a fatal TLS alert.
    Previously, exceptions were silently swallowed and the handshake would
    proceed as if the callback had succeeded. Credit to Leury Castillo for
    reporting this issue. CVE-2026-27448


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Miro Hrončok <mhroncok@redhat.com> - 1.19.0-1
changelog:
  - Add -d option for %pyproject_buildrequires and %pyproject_wheel to specify a working directory
  - Fixes: rhbz#2371389


author: Charalampos Stratakis <cstratak@redhat.com> - 1.20.0-1
changelog:
  - Add %pyproject_patch_dependency macro for overriding dependency constraints
  - Overrides apply to both BuildRequires and runtime Requires (via METADATA patching)
  - Resolves: rhbz#2386906


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.20.1-1
changelog:
  - Move %pyproject_patch_dependency implementation to pyproject-srpm-macros
  - Make pyproject-rpm-macros depend on pyproject-srpm-macros
  - Resolves: rhbz#2463187


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.21.0-1
changelog:
  - Implement extras validation
  - %pyproject_buildrequires: validates if extras exist in upstream metadata, otherwise ValueError is raised on Fedora >=45 and RHEL >=11. It will emit a warning instead on older releases.
  - Both user-specified extras and metadata extras are normalized following PEP 685 conventions.


author: Miro Hrončok <mhroncok@redhat.com> - 1.22.0-1
changelog:
  - Add long option support for all public parametric macros
  - E.g. %pyproject_buildrequires --no-runtime is equivalent to %pyproject_buildrequires -R
  - %pyproject_save_files: Allow to use --auto instead of +auto
  - %pyproject_patch_dependency: Validate arguments early, in %prep


author: Miro Hrončok <mhroncok@redhat.com> - 1.22.2-1
changelog:
  - %pyproject_buildrequires: Fix "Requirement satisfied/not satisfied" messages to show overridden constraints from %pyproject_patch_dependency
  - %pyproject_buildrequires: Stop using deprecated argparse.FileType


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-7
changelog:
  - Security fix for CVE-2026-25645 in the bundled requests in the bundled
    pip wheel
  - Fixes: rhbz#2452324


author: Tao Jin <tao-j@outlook.com> - 0.6-15
changelog:
  - Migrate to pyproject macros and fix tests for Python 3.14
  - Modernize spec file to use PEP 517 build process with %pyproject_*
    macros.
  - Use %generate_buildrequires for dynamic dependency resolution.
  - Patch test_asyncio.py to resolve RuntimeError with
    asyncio.get_event_loop() on Python 3.14.
  - Switch to %autorelease and %autochangelog.


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.4-1
changelog:
  - Update to new upstream release 1.26.4 (rhbz#2390816)
  - adjust to mupdf 1.26.7 (and 8)
  - various bugfixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.5-1
changelog:
  - Update to new upstream release 1.26.5 (rhbz#2403129)
  - adjust to mupdf 1.26.9 (and 10)
  - improve the Python type annotations
  - various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - Update to new upstream release 1.27.1 (rhbz#2412929)
  - compatibility with mupdf 1.27.1
  - new method `Document.repair()`
  - various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.2.2-1
changelog:
  - Update to new upstream release 1.27.2.2 (rhbz#2446026)
  - Works with mupdf 1.27.2
  - Improved get_textpage_ocr()
  - Various fixes


author: Parag Nemade <pnemade AT redhat DOT com> - 25.8.2-2
changelog:
  - Disable tests as with this release it gives "ImportError while loading
    conftest" as tests need ansible-core version >= 2.20.0


author: Chris Caron <lead2gold@gmail.com> - 1.9.4-3
changelog:
  - Spec file modernization BZ2377453
  - Translation files patch added to allow v1.9.4 to build corectly


author: Cleber Rosa <crosa@redhat.com> - 92.3-1
changelog:
  - Updated to 92.3
  - Support building and running under Python 3.13 for F42
  - Removed patch from 92.1 as its present in 92.3


author: Cleber Rosa <crosa@redhat.com> - 112.0-1
changelog:
  - Sync with upstream release 112.0
  - Removed python3-elementpath build requirement
  - Made the remote spawner a proper sub package
  - Packaged JSON schema files
  - Introduced new sub package for mail plugin
  - Removed the pinning of markupsafe on Fedora 42 and later
  - Packaged avocado-runner-pip
  - Packaged avocado-runner-vmimage
  - Provide requirements for running the functional test
    nrunner.py:TaskRunStatusService.test_task_status_service_lost
  - Require gcc, gdb and gdb-gdbserver for tests


author: Adam Williamson <awilliam@redhat.com> - 112.0-3
changelog:
  - Backport PR #6295 to fix resultsdb_api dependency (#2452821)
  - Backport PR #6252 to fix build (tests) with recent setuptools (#2434951)


author: Carl George <carlwgeorge@fedoraproject.org> - 0.5.17-1
changelog:
  - Update to version 0.5.17 rhbz#2333482
  - Add missing click dependency
  - Avoid duplicate LICENSE.txt file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.10-1
changelog:
  - Update to 0.1.10 (close RHBZ#2435502)
  - Starting in Fedora 44, drop the PDF manual and the -doc subpackage


author: Michel Lind <salimma@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 upstream release
  - Resolves: rhbz#2229363
  - Resolves: CVE-2026-31899
  - Enable Packit
  - Drop unneeded test shenanigans
  - Enforce that license is preinstalled, stop installing by hand


author: Jakub Kadlcik <frostyx@email.cz> 1.132-1
changelog:
  - Discourage from deleting objects while paginating over them
  - Suggest pagination only when a GET request timeouts


author: Jakub Kadlcik <frostyx@email.cz> 2.2-1
changelog:
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove rhel7 conditions and remove python2 support


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Use correct used HTTP methods for delete and update requests
  - Introduce v3.requests.DELETE method


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Don't traceback new-api-token for default config
  - Bypass anubis challenge by setting copr user agent
  - Use Tito to generate component.__version__


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Specify reason for running createrepo
  - Improve robustness and cooperation between backend and rpmbuild
  - Remove license classifier
  - Modernize specfile using pyproject macro


author: Jakub Kadlcik <frostyx@email.cz> 1.6-1
changelog:
  - Do not traceback in SafeRequest if log= is not set
  - Use SafeRequest.timeout only as a timeout per request
  - use Tito to generate component.__version__


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 46.0.3-1
changelog:
  - Update to v46.0.3
  - Removed the deprecated get_attribute_for_oid method on
    CertificateSigningRequest. Users should use get_attribute_for_oid()
    instead.
  - Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the
    cipher module. These are still available in Decrepit cryptography.
  - In X.509, when performing a PSS signature with a SHA-3 hash, it is now
    encoded with the official NIST SHA3 OID.
  - Added support for free-threaded Python 3.14.


author: Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1
changelog:
  - Update to 46.0.7
  - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be
    passed to APIs that accept Python buffers, which could lead to buffer
    overflow. CVE-2026-39892


author: Michel Lind <salimma@fedoraproject.org> - 1.10.0-1
changelog:
  - Update to 1.10.0 upstream release
  - Compatible with Django 6.x; Resolves: rhbz#2464710
  - Drop patch removing changelog, no longer needed
  - Enforce that license is automatically installed
  - Enable Packit


author: Michel Lind <salimma@fedoraproject.org> - 5.2.4-1
changelog:
  - Update to version 5.2.4
  - Skip test_strip_tags and test_parsing_errors on Python 3.14; Fixes:
    RHBZ#2374042


author: Michel Lind <salimma@fedoraproject.org> - 5.2.9-1
changelog:
  - Update to version 5.2.9
  - Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column
    aliases on PostgreSQL
  - Fixes CVE-2025-64460: Potential denial-of-service vulnerability in XML
    Deserializer
  - Fixes CVE-2025-64459: Potential SQL injection via _connector keyword
    argument (5.2.8)
  - Fixes CVE-2025-59681: Potential SQL injection in QuerySet.annotate(),
    alias(), aggregate(), and extra() on MySQL and MariaDB (5.2.7)
  - Fixes CVE-2025-59682: Potential partial directory-traversal via
    archive.extract() (5.2.7)
  - Fixes CVE-2025-57833: Potential SQL injection in FilteredRelation column
    aliases (5.2.6)


author: Michel Lind <salimma@fedoraproject.org> - 5.2.11-1
changelog:
  - Update to version 5.2.11; Resolves: RHBZ#2427483
  - `python-django5` is now the alternate `python3-django5` on Fedora 44+,
    `python3-django` is now Django 6.x
  - Fixes CVE-2025-13473: Username enumeration through timing difference in
    mod_wsgi authentication handler
  - Fixes CVE-2025-14550: Potential denial-of-service vulnerability via
    repeated headers when using ASGI
  - Fixes CVE-2026-1207: Potential SQL injection via raster lookups on
    PostGIS
  - Fixes CVE-2026-1285: Potential denial-of-service vulnerability in
    django.utils.text.Truncator HTML methods
  - Fixes CVE-2026-1287: Potential SQL injection in column aliases via
    control characters
  - Fixes CVE-2026-1312: Potential SQL injection via QuerySet.order_by and
    FilteredRelation
  - Fixed a bug in Django 5.2 where data exceeding max_length was silently
    truncated by QuerySet.bulk_create() on PostgreSQL
  - Fixed a bug where management command colorized help (introduced in Python
    3.14) ignored the --no-color option and the DJANGO_COLORS setting


author: Michel Lind <salimma@fedoraproject.org> - 5.2.14-1
changelog:
  - Update to version 5.2.14; Resolves RHBZ#2444117
  - Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
    requests via file upload limit bypass
  - Fixes CVE-2026-35192: Session fixation via public cached pages and
    SESSION_SAVE_EVERY_REQUEST
  - Fixes CVE-2026-6907: Potential exposure of private data due to incorrect
    handling of Vary: * in UpdateCacheMiddleware
  - Fixes CVE-2026-3902: ASGI header spoofing via underscore/hyphen
    conflation
  - Fixes CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
  - Fixes CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
  - Fixes CVE-2026-33033: Potential denial-of-service vulnerability in
    MultiPartParser via base64-encoded file upload
  - Fixes CVE-2026-33034: Potential denial-of-service vulnerability in ASGI
    requests via memory upload limit bypass
  - Fixes CVE-2026-25674: Potential incorrect permissions on newly created
    file system objects


author: Michel Lind <salimma@fedoraproject.org> - 6.0.5-1
changelog:
  - Update to version 6.0.5; Resolves RHBZ#2444118
  - Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
    requests via file upload limit bypass
  - Fixes CVE-2026-35192: Session fixation via public cached pages and
    SESSION_SAVE_EVERY_REQUEST
  - Fixes CVE-2026-6907: Potential exposure of private data due to incorrect
    handling of Vary: * in UpdateCacheMiddleware
  - Fixes CVE-2026-3902: ASGI header spoofing via underscore/hyphen
    conflation
  - Fixes CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
  - Fixes CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
  - Fixes CVE-2026-33033: Potential denial-of-service vulnerability in
    MultiPartParser via base64-encoded file upload
  - Fixes CVE-2026-33034: Potential denial-of-service vulnerability in ASGI
    requests via memory upload limit bypass
  - Fixes CVE-2026-25674: Potential incorrect permissions on newly created
    file system objects


author: Terje Rosten <terje.rosten@ntnu.no> - 4.8.0-1
changelog:
  - 4.8.0
  - Fix doc build
  - Switch to toml based build (based on upstream patch)
  - Remove legacy Python 2 refs


author: Jerry James <loganjerry@gmail.com> - 1.19.1-4
changelog:
  - Update various npm components used in the build
  - Fix CVE-2025-69873: update ajv to 6.15.0/8.20.0
  - Fix CVE-2026-0540 and CVE-2026-41240: update DOMPurify to 3.4.2
  - Fix CVE-2026-3449: update @tootallnate/once to 3.0.1
  - Fix CVE-2026-4800: update lodash to 4.18.1
  - Fix CVE-2026-6321: update fast-uri to 3.1.2


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-21
changelog:
  - Drop unused test dependency on deprecated python3-nose
  - Use pytest instead when built with tests
  - The tests still fail (numpy incompatibility, using the imp module, ...)


author: Michel Lind <salimma@fedoraproject.org> - 0.3.2-2
changelog:
  - Disable update_readme_test, brings in additional dependency
  - Ship license text; update doc filenames


author: Michel Lind <salimma@fedoraproject.org> - 0.4.2-2
changelog:
  - Disable more unneeded test dependencies
  - Switch to using pytest directly so we can control verbosity easily


author: Michel Lind <salimma@fedoraproject.org> - 0.5.0-2
changelog:
  - Adjust patches for updated pyproject.toml
  - Adjust for upstream dropping tox.ini
  - Drop conditionals for old setuptools


author: Jerry James <loganjerry@gmail.com> - 0.25.1-1
changelog:
  - Version 0.25.1
  - Use the pyproject declarative buildsystem
  - Drop all patches
  - Drop pkg_resources workaround


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0.8-10
changelog:
  - Compile as C++14 instead of C++11, for compatibility with eigen3 5.0
  - Use the original upstream for fcl, rather than the ambi-robotics fork


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.22-2
changelog:
  - No longer install “import multipart” compat shim
  - Drop Conflicts with and pre-F41 upgrade path for python3-multipart
  - All dependent packages now use “import python_multipart” rather than
    “import multipart”


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.30.0-9
changelog:
  - Unretirement request: pagure.io/releng/issue/12892 Revert "Retired: Fails
    to install: https://pagure.io/releng/issue/12871"


author: Miro Hrončok <miro@hroncok.cz> - 2.32.4-2
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337320


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.7.0-15
changelog:
  - Modernize packaging
  - Update License to reflect the presence of public-domain code
  - Add a man page


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.0.24-4
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13278 Revert
    "Orphaned for 6+ weeks"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.23.0-1
changelog:
  - Update to 0.23.0 (close RHBZ#2438834)
  - Drop and Obsolete python3-typer-slim/python3-typer-cli subpackages


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.6.8-3
changelog:
  - Better generate test dependencies, skipping fewer tests
  - Add a conditional for the disabled pathops extra


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.6.1-1
changelog:
  - Update to 2.6.1 (close RHBZ#2419408)
  - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37
  - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251114git6c77b6b-1
changelog:
  - Update to 0^20251114git6c77b6b
  - `PyConfig_Get()` is also available on Python 3.8
  - Add `PyUnstable_Unicode_GET_CACHED_HASH()` function
  - Add `PyTuple_FromArray()` function


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251015.e510a7b-1
changelog:
  - Update to 0^20251015.e510a7b
  - Add an Epoch since the previous update had the wrong date
  - Switch snapshot info from <date><scm><revision> to <date>.<revision>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251108.11cb80f-1
changelog:
  - Update to 0^20251108.11cb80f
  - Don’t include structmember.h in pythoncapi_compat.h; avoids conflicts due
    to names without "Py" prefixes.


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0
  - Add autoconf-archive as a dependency
  - Remove fix-systemd-path.patch as fix is present on the upstream project
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code


author: Germano Massullo <germano.massullo@gmail.com> - 4.7.0-1
changelog:
  - 4.7.0 release
  - Moved from tar.gz to tar.xz upstream file and updated Source0
  - Removed EL7 and EL8 leftovers
  - Moved from Qt5 to Qt6
  - Added cmake.patch


author: Jan Grulich <jgrulich@redhat.com> - 6.11.1-2
changelog:
  - Upstream backport:
    - QQmlTableInstanceModel: refactor QModelIndex calculation out
      of QQuickTableView


author: Danny Colin <contact@dannycolin.com> - 0.36.0-1
changelog:
  - New release 0.36.0
  - Update license information. We only need to keep MIT since the GPLed
    widgets have been removed from the repository.
  - Update pyproject_buildrequires declaration.


author: Peter Lemenkov <lemenkov@gmail.com> - 4.2.3-2
changelog:
  - Remove simplejson (use standard json module in Python 3)
  - Remove 7zip dependency (use zip instead)


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-11
changelog:
  - Convert License tag to SPDX format
  - Convert to autosetup
  - Use relative symlinks from /usr/bin/* to ../libexec/rancid/*
  - Remove doc files that were duplicated in /usr/share/rancid


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-12
changelog:
  - Enable git as default VCS for new installs
  - Remove extraneous BuildRequires
  - Requires /usr/sbin/sendmail and cronie for crontabs
  - Requires openssh-clients and git
  - Suggests telnet


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-5
changelog:
  - Add dbus-common dependency as xml is installed in dbus-1 directory
  - Cleanup patches into 3 logical changes and update upstream status
  - Add upstream status of RPM lint incorrect-fsf-address error


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-6
changelog:
  - Exclude some architectures that does not have grub2-tools-minimal package
  - Add upstream xml file license issue link


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-7
changelog:
  - Change dbus-common dependency from BuildRequires to Requires
  - Update upstream license issue and update license information
  - Generate docbook for yelp or khelpcenter


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-11
changelog:
  - Don't mark man page as doc
  - Update patches against upstream version
  - Yelp SVG image workaround: Convert SVG to PNG using thorvg
  - thorvg workaround due to command rename in F42/F43


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-12
changelog:
  - Update patch 4 with CC0-1.0.txt and include it in rauc license
  - Add COPYING to rauc-doc license
  - Fix license as LGPL-2.1-or-later not LGPL-2.1-only


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.3.2-1
changelog:
  - Update to 1.3.2 - Closes rhbz#2331229
  - Drop pod file as man page is now included
  - Drop build section as native extension was removed #1428
  - Add packit configuration
  - Enable tests by skipping three failing tests


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-9
changelog:
  - Update to the upstream v6.17 @ e8da3cdc
  - Handle new radiacode entropy source
  - Handle changes in jitterentropy library
  - Drop older i686 force-PIC fix


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Aaron Merey <amerey@redhat.com> - 5.9.0-8
changelog:
  - Backport upstream fix for MADV_GUARD_INSTALL/REMOVE (kernel >= 6.13)
    to unbreak recording of multi-threaded programs (upstream commit 34ff3a70).


author: Aaron Merey <amerey@redhat.com> - 5.9.0-9
changelog:
  - Fix FTBFS on rawhide (gcc 16, glibc 2.43+) by including <limits.h>
    in src/test/util.h, which several test files rely on for INT_MAX
    and other limit macros.


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-7
changelog:
  - Fix for CVE-2026-41035
  - Fixing bad time in rsync logs
  - Fixing regression from CVE-2024-12086 fix
  - Fixing improper clearing of DISPLAY env variable


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
  - Harden rsyslog service unit
  - Disable openssl engines support
    Resolves: rhbz#2320050


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-1
changelog:
  - Rebase to 8.2510.0
    Resolves: rhbz#2404131
  - imjournal open error handling fix
    Resolves: rhbz#2375742
  - Add mmleefparse module to base package


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-3
changelog:
  - Workaround for new gdk-pixbuf with glycin backend dependency (ref: bug
    2387002)
  - F-43: ignore test failure for now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-5
changelog:
  - Upstream fix for tests with glycin based gdk-pixbuf2 2.43.x
  - Exclude tests on glycin ppc64le for now (bug 2275913)
  - Exclude animation test on i686 on Fedora 43


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.10.0-35
changelog:
  - Adjust to mesa 24.2.2 change that swrast with dril does not expose
    accum buffers anymore
  - Adjust test result message with recent mesa


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.9.40-2
changelog:
  - Backport 0.9.41 / 0.9.44 fixes for possible path traversal issues
  - https://github.com/lsegal/yard/security/advisories/GHSA-3jfp-46x4-xgfj
  - https://github.com/lsegal/yard/security/advisories/GHSA-pxcc-8665-phx8


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.0-1
changelog:
  - Version 0.7.0
  - linkdupes subpackage is added. It is required by build-reproducibility-
    srpm-macros, so it'll be pulled into buildroots.
  - redhat-rpm-config needs to be updated to call
    %__os_install_post_hardlink in %__os_install_post for the helper to
    actually be used in builds.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.1-1
changelog:
  - Version 0.7.1
  - This implements https://fedoraproject.org/wiki/Changes/Hardlink_identical
    _files_in_packages_by_default.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.3.2-1
changelog:
  - update to 3.3.2 (resolves rhbz#2390293)
  - use tomcli instead of patching Cargo.toml
  - fix build with bitvec_helpers 4.0.0 (resolves rhbz#2387776)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.19.3-2
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13268 Revert
    "Orphaned for 6+ weeks"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Jeremy Cline <jeremycline@microsoft.com> - 0.10.0-1
changelog:
  - Update to v0.10.0
  - All requests to sigul are retried, rather than just those that fail due
    to I/O or timeouts


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.0-2
changelog:
  - Expand dependency bounds downward rather than requiring old versions
  - Improve documentation for the metadata patch


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:2.37.0-2
changelog:
  - Properly generate Rust BuildRequires on Fedora
  - Update License (for s390utils/s390utils-base) to reflect Rust deps.


author: Dan Horák <dan[at]danny.cz> - 2:2.41.0-2
changelog:
  - rebuilt for rust-openssl CVEs
  - Resolves: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662


author: Günther Deschner <gd@samba.org> - 2:4.24.3-1
changelog:
  - Update to Samba 4.24.3
  - resolves: rhbz#2481468
  - resolves: rhbz#2481447 - Security fix for CVE-2026-4480
  - resolves: rhbz#2481875 - Security fix for CVE-2026-2340
  - resolves: rhbz#2481857 - Security fix for CVE-2026-3012
  - resolves: rhbz#2481876 - Security fix for CVE-2026-1933
  - Security fix for CVE-2026-4408
  - Security fix for CVE-2026-3238


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Add dtoa to License
  - Add patch to fix crashes in SCIPcreateConsBasicSOCNonlinear
  - Add patch to fix floating point output on s390x
  - Workaround float128/long double clash on ppc64le
  - Build with OpenMP support


author: Zdenek Pytela <zpytela@redhat.com> - 43.1-1
changelog:
  - Allow redis_t to create netlink_rdma_socket
  - Allow systemd create symlinks in /run/varlink/registry
  - Support hooks in /run/systemd/resolve.hook
  - Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  - Allow mdadm use modprobe (bsc#1257793)
  - Allow systemd-mountfsd the perfmon capability
  - Allow lttng tracing in default configuration
  - Allow rtkit-daemon write systemd inhibit pipes
  - Apply the systemd system generator template to the kdump-dep generator
  - Apply the systemd system generator template to the anaconda generator


author: Zdenek Pytela <zpytela@redhat.com> - 43.2-1
changelog:
  - Allow fedoratp_exec_t be an entrypoint of unconfined_t
  - Allow rasdaemon_t to list pstore (bsc#1259742)
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  - Allow virtqemud_t get priority of a svirt_t process
  - Allow sysadm user connect to lvm over a unix stream socket
  - Allow staff user delete thump_tmp_t files
  - Allow staff user connect to systemd-logind over a unix stream socket
  - Allow staff user mount /proc
  - Allow virtqemud map vhost net device
  - Dontaudit ps to read proc (bsc#1257527)
  - Allow dovecot_deliver_t map its private tmp files
  - Allow rpcbind get attributes of the pidfs filesystem
  - Fix names in mysql.if
  - Allow create kerberos files in mysql db home
  - Allow systemd-resolved connect to systemd-networkd over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 43.4-1
changelog:
  - update support for polkit agent helper (bsc#1251931)
  - Add auth_nnp_domtrans_chkpwd()
  - Allow staff_sudo_t read PID1's process state
  - Allow staff_sudo_t read logind sessions files
  - Allow nfs-server system generator the dac_read_search capability
  - Allow snmpd create and use netlink tcpdiag socket
  - Allow systemd-coredump signull containers
  - Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  - Dontaudit logrotate perfmon and sys_admin capabilities
  - Allow samba-bgqd sendto over a unix dgram socket


author: Zdenek Pytela <zpytela@redhat.com> - 43.5-1
changelog:
  - Allow virtnetworkd get attributes of filesystems with extended attributes
  - Allow Polkit to get attributes of user terminals
  - Allow nfsidmap connect to xdm over a unix stream socket
  - Label /usr/share/accountsservice with accountsd_share_t
  - Allow systemd-resolved write to systemd-networkd socket
  - Dontaudit setroubleshootd read root's home files like .rpmmacros
  - Support sandboxing features for sysadm_t
  - Allow unconfined_t mounton on itself (bsc#1261035)


author: Zdenek Pytela <zpytela@redhat.com> - 43.6-1
changelog:
  - Allow accountsd dbus chat with systemd-homed
  - Allow accountsd read accountsd_share_t files
  - Fix file context specification for /usr/share/accountsservice
  - Allow xdm_exec_t be an entrypoint of login_userdomain
  - Allow sshd-session send a generic signal to sshd-auth
  - Allow virtnetworkd get attributes of filesystems with extended attributes
  - Allow Polkit to get attributes of user terminals
  - Allow nfsidmap connect to xdm over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 44.1-1
changelog:
  - Allow init nnp domain transition do dirsrv_t and dirsrv_snmp_t
  - Allow accounts-daemon read accountsd_share_t symlinks
  - Allow thump_t setattr on thumb_tmp_t lnk_files
  - Allow gpsd the setcap process capability
  - Allow accountsd list accountsd_share_t dirs
  - Allow sshd-auth/sshd-session get attributes of their sshd parent


author: Zdenek Pytela <zpytela@redhat.com> - 44.2-1
changelog:
  - Update dbus_role_template() with communication over unix dgram socket
  - Allow staff user read nsfs files
  - Allow staff user additional sandboxing permissions
  - Dontaudit sa-update perfmon and sys_admin capabilities
  - packit: Stop notifying martinpitt for Cockpit test failures
  - Bring back execmem permission for svirt_tcg_t
  - Dontaudit tlp_t requesting dac_read_search (bsc#1265386)
  - Leave content of virtqemud_use_execmem empty
  - Allow virtqemud_t to call and transition into udev
  - Dontaudit libvirt-daemons execmem
  - Allow virtstoraged to setattr fixed disk devices
  - Dontaudit ksmtuned dac_read_search and dac_override capabilities
  - Allow samba-bgqd send to nmbd over a unix datagram socket
  - Update fstools swap interfaces with dir search
  - Add missing fc rule for org.gnome.DisplayManager (bsc#1264182)
  - Do not audit iptables attempts to read other process state
  - Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot
  - Allow systemd-tmpfiles to adjust resource limits


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-4
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-122982)
  - rescan-scsi-bus.sh: Replace 'which' with built in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix missing output fields in --export format (RHEL-119246)
  - sg_inq: re-add Unit serial number field (RHEL-119246)


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f44-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Luboš Uhliarik <luhliari@redhat.com> - 7:7.1-1
changelog:
  - new version 7.1
  - removed squidclient
  - removed purge
  - removed cachemgr.cgi
  - removed basic_smb_lm_auth and ntlm_smb_lm_auth helpers


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20260313git904aa67-2
changelog:
  - Fix access/use of uninitialized memory in stb_image
  - This was undefined behavior, and could leak security-relevant information
    from other data structures. See
    https://github.com/nothings/stb/issues/1929.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Jerry James <loganjerry@gmail.com> - 1.4.6-1
changelog:
  - Version 1.4.6
  - Drop upstreamed testtools patch
  - Drop the python3-subunit-test subpackage
  - New gojson2subunit and junitxml2subunit filters


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Jerry James <loganjerry@gmail.com> - 0-0.20.20230627gite6ac3af
changelog:
  - Switch to the cvc5 git branch
  - Drop all patches
  - Package is now header-only and therefore noarch


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 259.4-1
changelog:
  - Version 259.4
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-106
changelog:
  - Add local RPM dependency generator to produce tex(...) Provides
    Full credit to Elliott Sales de Andrade <quantum.analyst@gmail.com>


author: Tom Callaway <spot@fedoraproject.org> - 12:svn72890-6
changelog:
  - Fix knuth & public domain license labels to be correct
  - Fix capitalization on summaries that needed it
  - Flush out unnecessary INSTALL file in enctex


author: Tom Callaway <spot@fedoraproject.org> - 12:svn75480-6
changelog:
  - Update amsrefs apacite authordate biblatex biblatex-chicago biblatex-dw
    biblatex-ext biblatex-juradiss biblatex-publist biblatex-swiss-legal
    biblatex-trad biblatex2bibitem biblist bibtopic bibunits chicago
    citeall collref harvard jmb jurabib multibib nar nmbib notes2bib oscola
    showtags splitbib usebib xcite
  - add cls Provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78803-8
changelog:
  - Update collection from svn75480 to svn78803
  - Add biblatex-abs-annote
  - Add biblatex-ams
  - Update biblatex-gb7714-2015, biblatex-nature, biblatex-oxref


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78246-6
changelog:
  - Update collection from svn77044 to svn78246
  - Add sourcesans
  - Add sourceserif
  - Update 192 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78746-6
changelog:
  - Update collection from svn78456 to svn78746
  - Add cardgame
  - Update crossword, rpgicons
  - Add missing -doc Provides/Obsoletes


author: Tom Callaway <spot@fedoraproject.org> - 12:svn74022-3
changelog:
  - drop drawing-with-metapost (license "OpenPublication" is non-free)
  - fix summaries
  - fix license tags


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78607-6
changelog:
  - Update collection from svn74022 to svn78607
  - Update comprehensive
  - fix missing -doc provides/obsoletes


author: Tom Callaway <spot@fedoraproject.org> - 12:svn73414-5
changelog:
  - Update babel-albanian babel-bosnian babel-croatian babel-danish babel-dutch
    babel-finnish babel-friulan babel-irish babel-norsk babel-romanian
    babel-romansh babel-samin babel-scottish babel-slovenian babel-swedish
    babel-welsh turkmen
  - Add provides for .cls files


author: Tom Callaway <spot@fedoraproject.org> - 12:svn54074-4
changelog:
  - Update babel-polish, hyphen-polish, polski, texlive-pl
  - Fix missing -doc provides/obsoletes
  - use automatic file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn73303-4
changelog:
  - Update babel-portuges, hyphen-portuguese, latex-via-exemplos
  - Fix missing -doc provides/obsoletes
  - Use auto file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn72203-4
changelog:
  - Update babel-spanish, hyphen-catalan, hyphen-galician, hyphen-spanish, texlive-es
  - Fix missing -doc provides/obsoletes
  - use auto file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77034-3
changelog:
  - update latex2e tools to the latest upstream version as of 2026-02-10 (bz2437303)
    this is mostly longtable, array, and varioref
  - update amscls amsmath atbegshi atveryend auxhook babel-english bigintcalc bitset
    bookmark colortbl epstopdf-pkg etoolbox fancyhdr geometry gettitlestring grfext
    hycolor hypcap hyperref intcalc kvdefinekeys kvoptions kvsetkeys letltxmacro
    ltxcmds mfnfss natbib pagesel pdfescape pdftexcmds psnfss refcount
    rerunfilecheck stringenc uniquecounter url


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78733-4
changelog:
  - Update collection from svn77034 to svn78733
  - Add pdfmanagement
  - Add tagpdf
  - Update 41 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77598-3
changelog:
  - Update to svn77598
  - update tagpdf starray numspell moderncv latex-tagging-status latex-lab-dev jsonparse beamer-reveal amsaddr


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78352-4
changelog:
  - Update to svn78352
  - new packages: aliascnt, beamertheme-westlake, elegantbook, elegantnote,
                  elegantpaper, fixtounicode, fox-listings, memoize-ext,
                  metacapture, milestonetimeline, pyjupyter, realscripts,
                  simplex, spotxcolor, tokglobalstack, tokgroupmark, xstix2
  - lots of existing packages updated
  - fix Obsoletes on newcommand-doc (bz2447035)


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78824-5
changelog:
  - Update collection from svn78352 to svn78824
  - Add booktabstabular
  - Add clawxiv
  - Add cleveref-icelandic
  - Add dirtreex
  - Add infufrgs
  - Add ltmermaid
  - Add metaphor
  - Add simplesystemtex
  - Add smartnotes
  - Add styleitems
  - Add user-persona
  - Add zebra
  - Update 53 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78847-6
changelog:
  - Update collection from svn78824 to svn78847
  - Add lucide-admonitions
  - Update 24 components
  - Remove preview


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78568-3
changelog:
  - Update collection from svn77082 to svn78568
  - Update 57 components
  - Remove pdfmanagement-testphase


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77106-1
changelog:
  - Update to svn77106
  - description fixes
  - licensing fixes
  - manual license handling (be careful with minim)
  - updated components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78670-3
changelog:
  - Update collection from svn77516 to svn78670
  - Add countwords
  - Add lua-list-hyphen
  - Add luahyperbolic
  - Add lualineno
  - Update 50 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78771-2
changelog:
  - Update collection from svn77561 to svn78771
  - Add chempid
  - Add dnsrecord
  - Add fits-astro
  - Add glmatrix
  - Add mohelper
  - Add mystyletau
  - Add query-astro
  - Add quickderivs
  - Add register-transfer-level
  - Add statementsp
  - Update 70 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn76267-2
changelog:
  - Update musicography, piano, xpiano
  - fix latex3 issue with leadsheets (bz2455217)
  - drop explicit provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78823-2
changelog:
  - Update collection from svn77389 to svn78823
  - Add corasdiagram
  - Add eurion
  - Add sneaker
  - Add svg-animate
  - Update 45 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77587-2
changelog:
  - remove Requires: tex(uarial.sty), it is optional in the code and not provided by texlive (bz437624)
  - update asmeconf asmejour har2nat llncs lni mitthesis novel oup-authoring-template sysuthesis tugboat
    ualberta univie-ling ut-thesis uwa-letterhead uwa-pcf uwa-pif


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78756-3
changelog:
  - Update collection from svn77587 to svn78756
  - Add bibleref-sbl
  - Add delvierre
  - Add deutschesmuseum
  - Add iacrj
  - Add jouthesis
  - Add jyu-chem-thesis
  - Add nxtlatex
  - Add onlinebrief24
  - Add sblarticle
  - Add sblbook
  - Add sblfonts
  - Add sblidx
  - Add sblreport
  - Add uvlhighlight
  - Update 34 components
  - Remove shtthesis


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78834-4
changelog:
  - Update collection from svn71515 to svn78834
  - upstream moved all the xetex dependent packages here...
  - Add ctex
  - Add ctex-faq
  - Add shtthesis
  - Add xecjk
  - Add xetex-devanagari
  - Add xetexref
  - Update 16 components


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Dominik Mierzejewski <dominik@greysector.net> - 1.8.2-23
changelog:
  - stop using obsolete cmake3 macros
  - specify SONAME in file list explicitly
  - apply upstream patch to fix format truncation


author: Adam Williamson <awilliam@redhat.com> - 1:10.1.46-2
changelog:
  - Drop now-unnecessary version bounds in java requirements
  - Specify java-25-headless, not java-headless (#2398212)


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: John Kacur <jkacur@redhat.com> - 0.20-1
changelog:
  - Update to upstream version 0.20
  - Convert to pyproject-rpm-macros for modern Python packaging
  - Add pyproject.toml for modern Python packaging
  - Remove all patches (now included in upstream 0.20)


author: John Kacur <jkacur@redhat.com> - 0.20-2
changelog:
  - Add python3-pip, python3-setuptools, python3-wheel BuildRequires
  - Delete setup.py in %prep so pyproject.toml build is used
  - Compress man page during %prep similar to rteval
  - Install tuna script and compressed man page explicitly


author: John Kacur <jkacur@redhat.com> - 0.20-4
changelog:
  - Update pyproject.toml license format for modern setuptools
  - Disable the tuna apply functionality
  - Remove tuna apply from the man page
  - Print warning if setting affinity results in EPERM and continue
  - Add testing infrastructure using unittest framework


author: Carl George <carlwgeorge@fedoraproject.org> - 5.5.3-1
changelog:
  - Update to version 5.5.3 rhbz#2218490
  - Change runtime dependency from /usr/bin/node to /usr/bin/node-<major>
  - Avoid broken command symlinks that can happen after a nodejs major
    version bump


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


