# changelog

author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7-2
changelog:
  - Porting to qt6
  - Add %{name}-3.7-qwtconfig.pri.patch
  - Remove "env QT_QPA_PLATFORM=xcb" from GoldenCheetah.desktop


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7.1-1
changelog:
  - This is a patch release update for v3.7 to include high priority fixes for
    stability and security and to make new planning and calendar functionality
    available to a wider audience


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.7-1
changelog:
  - update to 3.6.2.7
  - switch build system to cmake
  - unbundle miniz
  - update SPDX expression in License: field after review


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2024.11.21.0-2
changelog:
  - Add an AppStream metainfo file
  - Include full license text in the packages
  - Include documentation in the package


author: Dave Dykstra <dwd@cern.ch> - 1.4.0~rc.1
changelog:
  - Update to upstream 1.4.0-rc.1
  - Add patch for starter to avoid newly reserved C keywords false and true


author: Mattia Verga <mattia.verga@proton.me> - 0.96-2
changelog:
  - Rename binaries names conflicting with cfitsio binaries
  - Remove fitsverify binary which is now provided by own package


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Than Ngo <than@redhat.com> - 142.0.14^chromium142.0.7444.175-1
changelog:
  - Update to 142.0.7444.175
  - * High CVE-2025-13223: Type Confusion in V8
  - * High CVE-2025-13224: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 142.0.14^chromium142.0.7444.175-3
changelog:
  - Enable system libcxx
  - Fix link error when building with system libcxx
  - Apply memory-allocator-dcheck-assert-fix for aarch64


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-1
changelog:
  - Update to release v1.33.5
  - Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663,
    rhbz#2399065, rhbz#2399339
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
changelog:
  - Update to release 1.33.6
  - Resolves: rhbz#2407594, rhbz#2407865, rhbz#2408141, rhbz#2408575
  - Resolves: rhbz#2408639, rhbz#2408702, rhbz#2409049, rhbz#2409332
  - Resolves: rhbz#2409611, rhbz#2409997, rhbz#2410284, rhbz#2410562
  - Resolves: rhbz#2410929, rhbz#2411197, rhbz#2411460, rhbz#2412525
  - Resolves: rhbz#2412677, rhbz#2412757


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.1-6
changelog:
  - CUPS restart has to happen after universal filter is gone for good (in posttrans) (fedora#2370978)


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.25.0-1
changelog:
  - Update to version 1.25.0
    + Resolves: 2416455
    + New BuildRequires: cmake(Qt6LinguistTools)
    + Add translations
    + Add svg icons


author: psklenar@redhat.com <psklenar@redhat.com> - 2.7.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.5-2
changelog:
  - Modify queue to use ring buffer
  - Fix memory leaks in the AVL tests
  - Do not exit in do_database_reload when stop in progress
  - Add /var/lib/fapolicyd to tmpfiles
  - Fix owner:group of /etc/fapolicyd on boot
  - Change /usr/share/fapolicyd to root:root


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Ondřej Nosek <onosek@redhat.com> - 1.45-9
changelog:
  - `releases-info` should always show the same order
  - Python 3.13 environment and renew testing image
  - Fix unittests when building for ELN target


author: Ondřej Nosek <onosek@redhat.com> - 1.45-10
changelog:
  - Dynamically exclude Rawhide branch from fedpkg branching
  - Do not auto-request EPEL x.y modules
  - Don't allow to request repositories in modules/ namespace


author: Ondřej Nosek <onosek@redhat.com> - 1.46-1
changelog:
  - `request-repo`: add `--onboard-packit` argument (nforro)
  - Fork a package using anonymous auth - #574 (onosek)
  - Check that auth tokens aren’t written to world-readable files (git)
  - Don't allow to request repositories in modules/ namespace (miro)
  - Do not auto-request EPEL x.y modules (carlwgeorge)
  - Dynamically exclude Rawhide branch from fedpkg branching - #566 (samyak.jn11)
  - Fix unittests when building for ELN target - #589 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - `releases-info` should always show the same order - #569 (onosek)
  - Update expired token exception instructions (astra)
  - Clone epel10 branches with clone -B (carlwgeorge)
  - Update expired token exception instructions (ferdnyc)
  - Add setuptools to dependencies for Python 3.12+ (ferdnyc)
  - Fix tests on EPEL 9/10. (romain.geissler)
  - Fixing unittests for py36 (onosek)
  - gitignore the name-version-build/ directory created by fedpkg prep/local (miro)
  - Handle rhel runtimes when minor version exists in disttag (dherrera)
  - Add tests cases for runtime_disttag removal when working with epel10 (dherrera)
  - Improvements on string parsing (dherrera)
  - Get macros from epel-candidate build target. (dherrera)
  - Fix EPEL10 branch expression to cover 2 or more digits. (dherrera)
  - Use minor value from koji when no minor in branch name (dherrera)
  - Fix minor requirements for EPEL10+ in test (dherrera)
  - Do not auto-request ELN modules (yselkowi)
  - Fixes missing key in distro.os_release_info() (onosek)
  - Update check_bodhi_version to check for >= 6.0.0 (awilliam)
  - Modernize and clean unittest imports (awilliam)
  - Replace and update use of deprecated 'linux_distribution' (awilliam)
  - Drop all usage of six (awilliam)
  - Drop support for bodhi-client <= 5 (awilliam)
  - Add py313 environment as that's current (awilliam)
  - Fix URL of Bodhi in staging (nils)
  - Extend load_rpmdefines to work with EPEL10+ (dherrera)
  - Add EPEL10+ url pattern on assert_valid_epel_package (dherrera)
  - Test url usage in assert_valid_epel_package (dherrera)
  - Add EPEL10 branch name cases as valid (dherrera)
  - Test for valid EPEL branch names (dherrera)
  - Don't print the branch name after dash when there is no dash - 554 (miro)
  - Don't use hatchling on python 3.6 (dherrera)
  - Remove mbs.fedoraproject.org scopes from git cred helper (kj)
  - Fix unittests after creating the project in hatch (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.47-1
changelog:
  - Use ruff code checker instead of bandit (onosek)
  - Clone the API key info into all help messages (mpospisi)
  - README: Documentation link change, and new Jenkins link – `#606`_ (gleiro)
  - `update`: Add unspecified update type (priv.luk@gmail.com)
  - `request-unretirement`: Added a new command (amedvede)
  - `request-repo`: creating project and package in Anitya (amedvede)
  - Switch to %pyproject_* macros (onosek)
  - `retire`: extend the command's console help - `rhbz#2189969`_ (onosek)
  - Jenkinsfile: use local declaration instead of global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji – `#600`_ (onosek)


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Ondrej Holy <oholy@redhat.com> - 2:3.12.0-1
changelog:
  - Update to 3.12.0 (#2344203, #2344301)
  - Fix use of WINPR_DEPRECATED (#2344338)
  - Disable runtime checks


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.16.0-1
changelog:
  - Update to 3.16.0
  - Drop upstreamed patches
  - Switch to SDL3 for sdl-freerdp
  - Backport fix for s390x


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - fix CVE-2025-30204
  - fix CVE-2024-47875
  - move grafana home directory from /usr/share/grafana to /var/lib/grafana


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Added selinux rules for ldap and other observed selinux denials
  - Reworked the spec file selinux sections
  - Fixed the priority of the selinux policy


author: Packit <hello@packit.dev> - 33-1
changelog:
  Changes with 33
  ----------------
    - deps: images 0.182.0 (#288)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Michael Vogt

  — Somewhere on the Internet, 2025-08-28


author: Packit <hello@packit.dev> - 34-1
changelog:
  Changes with 34
  ----------------
    - Install openssl in cli container (#292)
      - Author: Justin Sherrill, Reviewers: Brian C. Lane, Michael Vogt
    - build(deps): bump actions/setup-python from 5 to 6 (#296)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update to images 0.191.0 (#302)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - github: add CODEOWNERS (#291)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update osbuild/images to 0.190.0 (dnfjson -> depsolvednf rename) (HMS-9366) (#301)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: update to images v0.186.0 (#294)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Tomáš Hozza
    - image-builder: use `manifesttest` from `images` (#293)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Ondřej Budai
    - main: add support disk based bootc images via --bootc-ref  (HMS-8845) (#245)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Ondřej Budai, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-16


author: Packit <hello@packit.dev> - 35-1
changelog:
  Changes with 35
  ----------------
    - cmd/upload: add fedora ami to aws upload (HMS-9388) (#307)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Michael Vogt
    - deps: update to images 0.193.0 (#308)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: update to latest images API changes in imgfilter (#295)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2025-09-19


author: Packit <hello@packit.dev> - 36-1
changelog:
  Changes with 36
  ----------------
    - deps: update to images 0.195.0 (#318)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: upgrade images to v0.194 (#314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gitignore: add common image formats (#312)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: split progress.go into command.go (#313)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-24


author: Packit <hello@packit.dev> - 37-1
changelog:
  Changes with 37
  ----------------
    - Support uploading to libvirt (#300)
      - Author: Jakub Kadlčík, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - blueprintload: improve error message in Load (#333)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger, Tomáš Hozza
    - doc: mention CentOS (#336)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update to v0.197.0 (#326)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - main: add `--bootc-build-ref` option to set build container (#325)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: add missing test container cleanups (#330)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: check that we get the expected image types (HMS-9426) (#320)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 38-1
changelog:
  Changes with 38
  ----------------
    - deps: bump images to 0.202.0 (#339)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt

  — Somewhere on the Internet, 2025-10-06


author: Packit <hello@packit.dev> - 39-1
changelog:
  Changes with 39
  ----------------
    - ci: consistent triggers for spec check (#346)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - ci: split apart test cases (#331)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - cmd/image-builder: adjust code to unified rpmmd.Package struct (HMS-9457) (#334)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: update images and blueprint (#345)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Tomáš Hozza
    - main: add osbuild version to version command (#332)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 42-1
changelog:
  Changes with 42
  ----------------
    - Fix release action (#368)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt
    - build(deps): bump actions/checkout from 5 to 6 (#381)
      - Author: dependabot[bot], Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#382)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: split gobump into two PRs (#371)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    - cmd: modify success message to include image path (#377)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    - doc/installation: mention RHEL 9.7 and 10.1 (#378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - doc: additional information on `ostree` (HMS-9741) (#373)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - doc: document `bootc` specifics (HMS-9740) (#375)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Tomáš Hozza
    - github: disable gomod updates with dependabot (#372)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: move to images v0.218 (#370)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - go.mod: move to images v0.223 (#383)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - main: add `--bootc-defaultfs` option (#324)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - many: metrics option for stage durations (#317)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-26


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.17.1-1]
changelog:
  - Add Bug to BugsFixed (Justin M. Forbes)
  - gpio: usbio: Add ACPI device-id for MTL-CVF devices (Hans de Goede)
  - i2c: usbio: Add ACPI device-id for MTL-CVF devices (Hans de Goede)
  - wifi: ath11k: Add missing platform IDs for quirk table (Mark Pearson)
  - blk-mq: fix blk_mq_tags double free while nr_requests grown (Yu Kuai)
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Mark Pearson)
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: add Bluetooth support (Jens Glathe)
  - redhat: config: Enable USBIO modules (Hans de Goede)
  - i2c: Add Intel USBIO I2C driver (Israel Cepeda)
  - gpio: Add Intel USBIO GPIO driver (Israel Cepeda)
  - usb: misc: Add Intel USBIO bridge driver (Israel Cepeda)
  - media: ov08x40: Fix the horizontal flip control (Hao Yao)
  - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] (Hans de Goede)
  - platform/x86: int3472: Increase ov08x40 handshake GPIO delay to 45 ms (Hans de Goede)
  - platform/x86: int3472: Rework regulator enable-time handling (Hans de Goede)
  - platform/x86: int3472: Convert int3472_gpio_map to use C99 initializers (Hans de Goede)
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek)
  - redhat/configs: enable CONFIG_KVM_INTEL_TDX for Fedora x86 (Daniel P. Berrangé)
  - KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Kai Huang)
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Kai Huang)
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Kai Huang)
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Kai Huang)
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Kai Huang)
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Kai Huang)
  - x86/kexec: Consolidate relocate_kernel() function parameters (Kai Huang)
  - Linux v6.17.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.17.2-1]
changelog:
  - fedora: aarch64: Enable arm MHUv2 driver (Peter Robinson)
  - fedora: arm: Enable the NVMEM_IMX_OCOTP_ELE module (Peter Robinson)
  - Linux v6.17.2


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.17.4-0]
changelog:
  - Add Fedora 42 and 41 to release_targets (Justin M. Forbes)
  - RHEL_RELEASE should be 0, not 1 (Justin M. Forbes)
  - PCI: vmd: override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Inochi Amaoto)
  - fedora: arm64: Updates for AMD Xilinx devices (Peter Robinson)
  - Fix up config issue due to stable backport (Justin M. Forbes)
  - Linux v6.17.4


author: Augusto Caringi <acaringi@redhat.com> [6.17.8-0]
changelog:
  - rust: kbuild: workaround `rustdoc` doctests modifier bug (Miguel Ojeda)
  - rust: kbuild: treat `build_error` and `rustdoc` as kernel objects (Miguel Ojeda)
  - Linux v6.17.8


author: Augusto Caringi <acaringi@redhat.com> [6.17.10-0]
changelog:
  - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup" (Justin M. Forbes)
  - Linux v6.17.10


author: Dominik Mierzejewski <dominik@greysector.net> - 0.7.5-2
changelog:
  - fixed duplicate files warning
  - made file lists more explicit
  - corrected License tag
  - added missing Provides: for bundled parson
  - added executable bit to fwfetcher.py script and fixed shebang
  - avoid timestamps in generated docs for reproducibility


author: Carlos O'Donell <carlos@redhat.com> - 6.9.1-5
changelog:
  - Break up man-pages-additional-20140218.tar.xz
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Debarshi Ray <rishi@fedoraproject.org> - 48.6-2
changelog:
  - Move the Bash completion from /etc to /usr/share because the former is
    reserved for system administrators and the latter for the operating
    system.


author: Michel Lind <salimma@fedoraproject.org> - 2.102-1
changelog:
  - Update to 2.102 upstream release; Resolves: rhbz#2334057
  - Fix build with GCC 15; Resolves: rhbz#2340933


author: Jens Petersen <petersen@redhat.com> - 2.31.2-33
changelog:
  - ghost /nix/var/nix/* and sockets
  - add builds/ ghost back to daemon (since it creates it)
  - db/ and gcroots/auto/ remain after uninstalling


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.8-1
changelog:
  - update to 1.3.8 (resolves rhbz#2314222)
  - switch to GitHub source URL
  - correct License tag after license review
  - switch to autosetup macro


author: Remi Collet <remi@remirepo.net> - 5.6.1-1
changelog:
  - update to 5.6.1
  - re-license spec file to CECILL-2.1
  - raise dependency on PHP 7.4
  - raise dependency on phpdocumentor/type-resolver 1.7
  - add dependency on phpstan/phpdoc-parser
  - add dependency on doctrine/deprecations


author: Remi Collet <remi@remirepo.net> - 12.3.5-1
changelog:
  - update to 12.3.5
  - raise dependency on nikic/php-parser 5.6.1
  - raise dependency on sebastian/environment 8.0


author: Remi Collet <remi@remirepo.net> - 12.5.0-1
changelog:
  - update to 12.5.0
  - raise dependency on nikic/php-parser 5.6.1
  - raise dependency on theseer/tokenizer 1.3.1


author: Remi Collet <remi@remirepo.net> - 12.3.14-1
changelog:
  - update to 12.3.14 (no change)
  - raise dependency on sebastian/exporter 7.0.2
  - raise dependency on phpunit/php-code-coverage 12.3.8
  - raise dependency on sebastian/cli-parser 4.2.0


author: Remi Collet <remi@remirepo.net> - 0.9.0-2
changelog:
  - update to 0.9.0
  - add notice about dnf in self-update output
  - open https://github.com/php/pie/issues/217 broken bash completion


author: Filip Janus <fjanus@redhat.com> - 16.9-2
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
  - Add tmpfiles.d configuration file definition


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: rhbz#2414551
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: rhbz#2414553


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Ondřej Nosek <onosek@redhat.com> - 1.69-1
changelog:
  - Only update the progress bar when meaningfully changed (code)
  - Don’t set up upload progress when stdout isn’t a tty (code)
  - Fix unittests for Python 3.14 (onosek)
  - `sources`: set "Accept-Encoding: identity" header on HTTP requests
    (decathorpe)
  - Accept auto-generated sources in pre-push checks (fweimer)
  - Add mock configuration option to build and srpm commands for use along with
    the srpm mock option, same as in mockbuild command. (abobrov)
  - `srpm`: man page generation fixed (onosek)
  - `install`: add rpmbuild arguments `--with` and `--without` - 541 (gleiro)
  - type: fix typo in requirements README. (gleiro)
  - `patch`: Execute subprocess in text mode (ferdnyc)
  - Fix mockbuild --srpm-mock specfile_path (wngtk)
  - `pre-push-check`: bogus error - file wasn't listed - #747 (onosek)
  - Switch to %pyproject_* macros (onosek)
  - Use the spec name to assemble src.rpm name (sergio)
  - Jenkinsfile: use local declaration instead the global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji - 600 (onosek)
  - `mockbuild`: -r argument as shortcut of --root (sergio)
  - `rhpkg mockbuild` won't show a hint with '--target' (onosek)


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.73


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74
  - Remove /usr/bin/python3 from BuildRequires


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.75


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Zdenek Pytela <zpytela@redhat.com> - 42.9-1
changelog:
  - Fix systemd_manage_unit_symlinks() interface definition
  - Support coreos installation methods
  - Add a new type for systemd-ssh-issue PID files
  - Allow gnome-remote-desktop connect to unreserved ports
  - Allow mdadm the CAP_SYS_PTRACE capability
  - Allow iptables manage its private fifo_files in /tmp
  - Allow auditd manage its private run dirs
  - Revert "Allow virt_domain write to virt_image_t files"
  - Exclude tabrmd.if from interfaces list


author: Zdenek Pytela <zpytela@redhat.com> - 42.11-1
changelog:
  - Allow nfs generator create and use netlink sockets
  - Conditionally allow virt guests to read certificates in user home directories
  - xenstored_t needs CAP_SYS_ADMIN for XENSTORETYPE=domain (bsc#1247875)
  - Allow nfs-generator create and use udp sockets
  - Allow kdump search kdumpctl_tmp_t directories
  - Allow init open and read user tmp files
  - Fix the systemd_logind_stream_connect() interface
  - Allow staff and sysadm execute iotop using sudo
  - Allow sudodomains connect to systemd-logind over a unix socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.12-1
changelog:
  - Adjust guest and xguest users policy for sshd-session
  - Allow valkey-server create and use netlink_rdma_socket
  - Allow blueman get attributes of filesystems with extended attributes
  - Update files_search_base_file_types()
  - Allow geoclue get attributes of the /dev/shm filesystem
  - Allow apcupsd get attributes of the /dev/shm filesystem
  - Allow sshd-session read cockpit pid files


author: Zdenek Pytela <zpytela@redhat.com> - 42.13-1
changelog:
  - Allow sshd-auth read generic proc files
  - Allow sshd-auth read and write user domain ptys
  - Allow logwatch read and write sendmail unix stream sockets
  - Allow logwatch domain transition on rpm execution
  - Allow thumb_t mounton its private tmpfs files
  - Allow thumb_t create permission in the user namespace
  - Allow corenet_unconfined_type name_bind to icmp_socket
  - Allow systemd-networkd to manage systemd_networkd_var_lib_t files
  - Allow sshd-session get attributes of sshd vsock socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.14-1
changelog:
  - Define file equivalency for /var/opt
  - Allow virtnodedev_t the perfmon capability
  - Allow nut_upsdrvctl_t the sys_ptrace capability
  - Label /usr/lib/systemd/user/graphical-session-pre.target with xdm_unit_file_t
  - systemd-sysctl: allow rw on binfm_misc_fs_t to set binfmt_misc status
  - Allow cupsd to manage cupsd_rw_etc_t lnk_files
  - Set temporary no-stub resolv.conf file from NetworkManager as net_conf_t
  - Allow spamc read aliases file
  - Mark configfs_t as mountpoint (bsc#1246080)
  - Allow systemd-machined watch cgroup files


author: Zdenek Pytela <zpytela@redhat.com> - 42.15-1
changelog:
  - Allow insights-client manage /etc symlinks
  - Allow insights-client get attributes of the rpm executable
  - Allow nfsidmapd search virt lib directories
  - Allow iotop stream connect to systemd-userdbd
  - Allow gnome-remote-desktop read sssd public files
  - Allow thumb_t stream connect to systemd-userdbd
  - Allow bluez dbus API passing unix domain sockets
  - Allow bluez dbus api pass sockets over dbus
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  - Allow init watch/watch_reads systemd-machined user ptys
  - Fix syntax error in userdomain.if
  - Allow ras-mc-ctl get attributes of the kmod executable


author: Zdenek Pytela <zpytela@redhat.com> - 42.16-1
changelog:
  - Allow systemd-ssh-issue read kernel sysctls
  - fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  - Allow create kerberos files in postgresql db home
  - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  - Allow shell comamnds in locate systemd service (bsc#1246559)
  - Introduce initrc_nnp_daemon_domain interface
  - Label /var/lib/cosmic-greeter with xdm_var_lib_t
  - Allow setroubleshoot-fixit get attributes of xattr fs


author: Zdenek Pytela <zpytela@redhat.com> - 42.17-1
changelog:
  - Allow sshd-net read and write to sshd vsock socket
  - Update ktls policy
  - Add comprehensive SELinux policy module for bwrap thumbnail generation
  - Revert "Allow thumb_t create permission in the user namespace"
  - Allow systemd-machined read svirt process state
  - Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  - Allow sysadm access to TPM
  - Allow tlp get the attributes of the pidfs filesystem
  - Allow kmscon to read netlink_kobject_uevent_socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.18-1
changelog:
  - Allow KDE Plasma Login Manager to function as a display manager
  - Allow mdadm search filesystem_type directories
  - Update policy for dhcpc_hook_t
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  - Allow staff role read/write cockpit-session unix stream sockets
  - Allow stap server read virtual memory sysctls
  - Allow system_mail_t read apache system content conditionally
  - Allow login_userdomain read lastlog


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to version 1.11.1 rhbz#2220885
  - Switch to SPDX license identifier and mark license file appropriately
  - Use upstream default config file with minimal changes
  - Log to journal instead of files
  - Run daemon in foreground to remove the need for pidfile tracking


author: Orion Poplawski <orion@nwra.com> - 10.0.4-4
changelog:
  - Build with system yaml-cpp
  - Add Provides/Requires filtering to exclude internal libraries
  - Add missing bundled provides


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


