# changelog

author: Miro Hrončok <miro@hroncok.cz> - 3.0.11-5
changelog:
  - Avoid accidentally including bogus *.txt files as documentation
  - Include README.rst and CHANGES.rst instead


author: Björn Persson <Bjorn@Rombobjörn.se> - 2.9-1
changelog:
  - Upgraded to 2.9.
  - Set_Up and Tear_Down procedures are now called for testsuites derived from
    Ahven.Framework.Test_Suite.


author: Jerry James <loganjerry@gmail.com> - 2.3.3-23
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Correct License fields from Apache-2.0 to CECILL-C
  - Do configuration steps in %conf


author: Packit <hello@packit.dev> - 43.33-1
changelog:
  - Revert "Default to GTK UI when available, fallback to Web UI otherwise"
    (k.koukiou)
  - Rename DNF strings to Flatpak in installation.py (jkonecny)
  - Remove unused Flatpak manager code (jkonecny)


author: Packit <hello@packit.dev> - 43.36-1
changelog:
  - packit: drive jobs from supported_releases per branch; dedupe and group
    targets (k.koukiou)
  - Fix pylint warnings caused by dynamic kickstart command imports (k.koukiou)
  - core: kickstart: implement OS-release based version detection (k.koukiou)
  - build: decouple BASE_CONTAINER from branch configuration (k.koukiou)
  - workflows: remove hardcoded CONTAINER_TAG="lorax" usage (k.koukiou)
  - dracut module requires generic initramfs (jstodola)


author: Packit <hello@packit.dev> - 43.37-1
changelog:
  - Log correct boot option for iSCSI boot without iBFT (jstodola)
  - Get full nevra string from dnf instead of composing it (pkratoch)
  - Add release notes for RDP kickstart support (adamkankovsky)
  - test: Enable kickstart RDP command in Anaconda (adamkankovsky)
  - Enable kickstart RDP command in Anaconda (adamkankovsky)
  - storage: devicetree: read VERSION or VERSION_CODENAME for identifying OS from
    os-release (k.koukiou)


author: Packit <hello@packit.dev> - 43.39-1
changelog:
  - Fix setting of kernel console logging level for anaconda (rvykydal)
  - Use new more suitable API for Gtk UI required space check (rvykydal)
  - Add GetFreeSpaceForSystem API (rvykydal)
  - docs: update CONTRIBUTING.rst with new branching approach (k.koukiou)


author: Packit <hello@packit.dev> - 43.41-1
changelog:
  - data: profiles: enable geolocation on Fedora Workstation live image
    (matiwari)
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
  - pyanaconda: dnf: clarify is_ready boolean return (k.koukiou)
  - tui: make SoftwareSpoke ready once installation source succeeds or fails
    (k.koukiou)
  - spec: enable live in ELN (yselkowi)
  - Mark unused variables with a leading underscore (a.badger)


author: Packit <hello@packit.dev> - 43.44-1
changelog:
  - flatpak: enable installation with CDROM source type (bciconel)
  - storage: Improve NotEnoughFreeSpaceError message with specific request
    details (k.koukiou)
  - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)


author: Jerry James <loganjerry@gmail.com> - 4.13.2-3
changelog:
  - Add java-headless dependency to the antlr4 package
  - Simplify swift conditionals
  - Do configuration actions in %conf


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Mattia Verga <mattia.verga@protonmail.com> - 0.94-10
changelog:
  - Disable build on i686 (fix Fedora#2300567)
  - Switch Tycho index files to upstream provided
  - Switch 42xx index files to 52xx


author: Mattia Verga <mattia.verga@proton.me> - 0.96-2
changelog:
  - Rename binaries names conflicting with cfitsio binaries
  - Remove fitsverify binary which is now provided by own package


author: Sébastien Le Roux <sebastien.leroux@ipcms.unistra.fr> - 1.1.14-2
changelog:
  - Bug corrections and improvements (see: https://github.com/Slookeur/atomes-GNU/releases/tag/v1.1.14)


author: Sébastien Le Roux <sebastien.leroux@ipcms.unistra.fr> - 1.1.15-1
changelog:
  - Bug corrections and improvements (see: https://github.com/Slookeur/atomes-GNU/releases/tag/v1.1.15)


author: Sébastien Le Roux <sebastien.leroux@ipcms.unistra.fr> - 1.1.17-1
changelog:
  - Bug corrections and improvements (see: https://github.com/Slookeur/atomes-GNU/releases/tag/v1.1.17)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.5-2
changelog:
  - obsolete -freeworld package, since it's been a meta-package only
    and currently doesn't pull it any extra packages anymore
  - cleanup: drop old Obs/Conf for -freeworld-mms package


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.43.1-1
changelog:
  - Update to binutils 2.43.1-1
  - Add: binutils-fix-ar-test.patch
  - Update: binutils-riscv-testsuite-fixes.patch
  - Update: binutils-testsuite-fixes.patch
  - Retire: binutils-special-sections-in-groups.patch
  - Retire: binutils-gold-powerpc.patch
  - Retire: binutils-handle-corrupt-version-info.patch
  - Retire: binutils-execstack-error.patch
  - Retire: binutils-BPF-reloc-4.patch
  - Retire: binutils-x86-64-v3.patch
  - Retire: binutils-big-merge.patch
  - Retire: binutils-aarch64-urcbig-bti-programs.patch
  - Retire: i686-AVX10.1-part-1.patch
  - Retire: i686-AVX10.1-part-2.patch
  - Retire: i686-AVX10.1-part-3.patch
  - Retire: i686-AVX10.1-part-4.patch
  - Retire: i686-AVX10.1-part-5.patch
  - Retire: i686-AVX10.1-part-6.patch
  - Retire: binutils-riscv-SUB_ULEB128.patch
  - Retire: binutils-ppc-dt_relr-relocs.patch
  - Retire: binutils-demangler-updates.patch
  - Retire: binutils-Intel-APX-part-1.patch
  - Retire: binutils-power-11.patch
  - Retire: binutils-Intel-APX-part-1-fixes.patch
  - Retire: binutils-multilib.am.patch
  - Retire: binutils-Intel-APX-CODE_6_GOTTPOFF.patch
  - Retire: binutils-archive-DT_SYMTAB.patch


author: Paul Howarth <paul@city-fan.org> - 2.2.16-1
changelog:
  - Update to 2.2.16 (rhbz#2314037)
    - Bluefish 2.2.16 is mostly a maintenance release
    - New feature: Bookmarks can now be generated from external commands such as
      ctags
    - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
    - The old built-in javascript beautifier has been removed; Bluefish now uses
      the jsbeautify from your system (if available)
    - The word-wrap function has been fixed
  - Add fix for type issue causing FTBFS with gcc 14
    (https://sourceforge.net/p/bluefish/tickets/95/)
  - Drop support for EL-7 and Fedora releases of a similar vintage


author: Paul Howarth <paul@city-fan.org> - 2.2.17-1
changelog:
  - Update to 2.2.17 (rhbz#2356356)
    - Bluefish 2.2.17 is a maintenance release that has only code clean-up fixes
      to comply better with modern compiler standards
    - It furthermore has fixes for a 64-bit Windows build of Bluefish with Msys2
  - Use %{make_build} and %{make_install}
  - Assume %{_pkgdocdir} macro always available


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.9-2
changelog:
  - Fix setuptools-gettext 0.1.14 compatibility
  - Only work around wrong locale installation path if it happens


author: Kate Hsuan <hpa@redhat.com> - 1.4.0-2
changelog:
  - tuned is the default power profile management daemon in Fedora
  - https://pagure.io/fesco/issue/3222


author: Jerry James <loganjerry@gmail.com> - 10.9.2-9
changelog:
  - Stop building for 32-bit x86
  - Convert the License field to SPDX
  - Add additional licenses found on review of the code


author: Than Ngo <than@redhat.com> - 146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
    * CVE-2026-4439: Out of bounds memory access in WebGL
    * CVE-2026-4440: Out of bounds read and write in WebGL
    * CVE-2026-4441: Use after free in Base
    * CVE-2026-4442: Heap buffer overflow in CSS
    * CVE-2026-4443: Heap buffer overflow in WebAudio
    * CVE-2026-4444: Stack buffer overflow in WebRTC
    * CVE-2026-4445: Use after free in WebRTC
    * CVE-2026-4446: Use after free in WebRTC
    * CVE-2026-4447: Inappropriate implementation in V8
    * CVE-2026-4448: Heap buffer overflow in ANGLE
    * CVE-2026-4449: Use after free in Blink
    * CVE-2026-4450: Out of bounds write in V8
    * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
    * CVE-2026-4452: Integer overflow in ANGLE
    * CVE-2026-4453: Integer overflow in Dawn
    * CVE-2026-4454: Use after free in Network
    * CVE-2026-4455: Heap buffer overflow in PDFium
    * CVE-2026-4456: Use after free in Digital Credentials API
    * CVE-2026-4457: Type Confusion in V8
    * CVE-2026-4458: Use after free in Extensions
    * CVE-2026-4459: Out of bounds read and write in WebAudio
    * CVE-2026-4460: Out of bounds read in Skia
    * CVE-2026-4461: Inappropriate implementation in V8
    * CVE-2026-4462: Out of bounds read in Blink
    * CVE-2026-4463: Heap buffer overflow in WebRTC
    * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
    * High CVE-2026-4673: Heap buffer overflow in WebAudio
    * High CVE-2026-4674: Out of bounds read in CSS
    * High CVE-2026-4675: Heap buffer overflow in WebGL
    * High CVE-2026-4676: Use after free in Dawn
    * High CVE-2026-4677: Out of bounds read in WebAudio
    * High CVE-2026-4678: Use after free in WebGPU
    * High CVE-2026-4679: Integer overflow in Fonts
    * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
    * High CVE-2026-5273: Use after free in CSS
    * High CVE-2026-5272: Heap buffer overflow in GPU
    * High CVE-2026-5274: Integer overflow in Codecs
    * High CVE-2026-5275: Heap buffer overflow in ANGLE
    * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
    * High CVE-2026-5277: Integer overflow in ANGLE
    * High CVE-2026-5278: Use after free in Web MIDI
    * High CVE-2026-5279: Object corruption in V8
    * High CVE-2026-5280: Use after free in WebCodecs
    * High CVE-2026-5281: Use after free in Dawn
    * High CVE-2026-5282: Out of bounds read in WebCodecs
    * High CVE-2026-5283: Inappropriate implementation in ANGLE
    * High CVE-2026-5284: Use after free in Dawn
    * High CVE-2026-5285: Use after free in WebGL
    * High CVE-2026-5286: Use after free in Dawn
    * High CVE-2026-5287: Use after free in PDF
    * High CVE-2026-5288: Use after free in WebView
    * High CVE-2026-5289: Use after free in Navigation
    * High CVE-2026-5290: Use after free in Compositing
    * Medium CVE-2026-5291: Inappropriate implementation in WebGL
    * Medium CVE-2026-5292: Out of bounds read in WebCodecs


author: Than Ngo <than@redhat.com> - 147.0.7727.55-1
changelog:
  - Update to 147.0.7727.55
    * Critical CVE-2026-5858: Heap buffer overflow in WebML
    * Critical CVE-2026-5859: Integer overflow in WebML
    * High CVE-2026-5860: Use after free in WebRTC
    * High CVE-2026-5861: Use after free in V8
    * High CVE-2026-5862: Inappropriate implementation in V8
    * High CVE-2026-5863: Inappropriate implementation in V8
    * High CVE-2026-5864: Heap buffer overflow in WebAudio
    * High CVE-2026-5865: Type Confusion in V8
    * High CVE-2026-5866: Use after free in Media
    * High CVE-2026-5867: Heap buffer overflow in WebML
    * High CVE-2026-5868: Heap buffer overflow in ANGLE
    * High CVE-2026-5869: Heap buffer overflow in WebML
    * High CVE-2026-5870: Integer overflow in Skia
    * High CVE-2026-5871: Type Confusion in V8
    * High CVE-2026-5872: Use after free in Blink
    * High CVE-2026-5873: Out of bounds read and write in V8
    * Medium CVE-2026-5874: Use after free in PrivateAI
    * Medium CVE-2026-5875: Policy bypass in Blink
    * Medium CVE-2026-5876: Side-channel information leakage in Navigation
    * Medium CVE-2026-5877: Use after free in Navigation
    * Medium CVE-2026-5878: Incorrect security UI in Blink
    * Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
    * Medium CVE-2026-5880: Incorrect security UI in browser UI
    * Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
    * Medium CVE-2026-5882: Incorrect security UI in Fullscreen
    * Medium CVE-2026-5883: Use after free in Media
    * Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
    * Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
    * Medium CVE-2026-5886: Out of bounds read in WebAudio
    * Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
    * Medium CVE-2026-5888: Uninitialized Use in WebCodecs
    * Medium CVE-2026-5889: Cryptographic Flaw in PDFium
    * Medium CVE-2026-5890: Race in WebCodecs
    * Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
    * Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
    * Medium CVE-2026-5893: Race in V8
    * Low CVE-2026-5894: Inappropriate implementation in PDF
    * Low CVE-2026-5895: Incorrect security UI in Omnibox
    * Low CVE-2026-5896: Policy bypass in Audio
    * Low CVE-2026-5897: Incorrect security UI in Downloads
    * Low CVE-2026-5898: Incorrect security UI in Omnibox
    * Low CVE-2026-5899: Incorrect security UI in History Navigation
    * Low CVE-2026-5900: Policy bypass in Downloads
    * Low CVE-2026-5901: Policy bypass in DevTools
    * Low CVE-2026-5902: Race in Media
    * Low CVE-2026-5903: Policy bypass in IFrameSandbox
    * Low CVE-2026-5904: Use after free in V8
    * Low CVE-2026-5905: Incorrect security UI in Permissions
    * Low CVE-2026-5906: Incorrect security UI in Omnibox
    * Low CVE-2026-5907: Insufficient data validation in Media
    * Low CVE-2026-5908: Integer overflow in Media
    * Low CVE-2026-5909: Integer overflow in Media
    * Low CVE-2026-5910: Integer overflow in Media
    * Low CVE-2026-5911: Policy bypass in ServiceWorkers
    * Low CVE-2026-5912: Integer overflow in WebRTC
    * Low CVE-2026-5913: Out of bounds read in Blink
    * Low CVE-2026-5914: Type Confusion in CSS
    * Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
    * Low CVE-2026-5918: Inappropriate implementation in Navigation
    * Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets


author: Than Ngo <than@redhat.com> - 147.0.7727.101-1
changelog:
  - Update to 147.0.7727.101
    * Critical CVE-2026-6296: Heap buffer overflow in ANGLE
    * Critical CVE-2026-6297: Use after free in Proxy
    * Critical CVE-2026-6298: Heap buffer overflow in Skia
    * Critical CVE-2026-6299: Use after free in Prerender
    * Critical CVE-2026-6358: Use after free in XR
    * High CVE-2026-6359: Use after free in Video
    * High CVE-2026-6300: Use after free in CSS
    * High CVE-2026-6301: Type Confusion in Turbofan
    * High CVE-2026-6302: Use after free in Video
    * High CVE-2026-6303: Use after free in Codecs
    * High CVE-2026-6304: Use after free in Graphite
    * High CVE-2026-6305: Heap buffer overflow in PDFium
    * High CVE-2026-6306: Heap buffer overflow in PDFium
    * High CVE-2026-6307: Type Confusion in Turbofan
    * High CVE-2026-6308: Out of bounds read in Media
    * High CVE-2026-6309: Use after free in Viz
    * High CVE-2026-6360: Use after free in FileSystem
    * High CVE-2026-6310: Use after free in Dawn
    * High CVE-2026-6311: Uninitialized Use in Accessibility
    * High CVE-2026-6312: Insufficient policy enforcement in Passwords
    * High CVE-2026-6313: Insufficient policy enforcement in CORS
    * High CVE-2026-6314: Out of bounds write in GPU
    * High CVE-2026-6315: Use after free in Permissions
    * High CVE-2026-6316: Use after free in Forms
    * High CVE-2026-6361: Heap buffer overflow in PDFium
    * High CVE-2026-6362: Use after free in Codecs
    * High CVE-2026-6317: Use after free in Cast
    * Medium CVE-2026-6363: Type Confusion in V8
    * Medium CVE-2026-6318: Use after free in Codecs
    * Medium CVE-2026-6319: Use after free in Payments
    * Medium CVE-2026-6364: Out of bounds read in Skia


author: Than Ngo <than@redhat.com> - 147.0.7727.116-1
changelog:
  - Update to 147.0.7727.116
    * High CVE-2026-6919: Use after free in DevTools
    * High CVE-2026-6920: Out of bounds read in GPU
    * Medium CVE-2026-6921: Race in GPU
  - Fix rhbz#2458171, unexpanded macros in manpage


author: Than Ngo <than@redhat.com> - 147.0.7727.116-2
changelog:
  - Fix FTBFS with rust 1.95
  - Backport the upstream fix GL native pixmap import support reset in GpuInit


author: Than Ngo <than@redhat.com> - 147.0.7727.137-1
changelog:
  - Update to 147.0.7727.137
     * Critical CVE-2026-7363: Use after free in Canvas
     * Critical CVE-2026-7361: Use after free in iOS
     * Critical CVE-2026-7344: Use after free in Accessibility
     * Critical CVE-2026-7343: Use after free in Views
     * High CVE-2026-7333: Use after free in GPU
     * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
     * High CVE-2026-7359: Use after free in ANGLE
     * High CVE-2026-7358: Use after free in Animation
     * High CVE-2026-7334: Use after free in Views
     * High CVE-2026-7357: Use after free in GPU
     * High CVE-2026-7356: Use after free in Navigation
     * High CVE-2026-7354: Out of bounds read and write in Angle
     * High CVE-2026-7353: Heap buffer overflow in Skia
     * High CVE-2026-7352: Use after free in Media
     * High CVE-2026-7351: Race in MHTML
     * High CVE-2026-7350: Use after free in WebMIDI
     * High CVE-2026-7349: Use after free in Cast
     * High CVE-2026-7348: Use after free in Codecs
     * High CVE-2026-7335: Use after free in media
     * High CVE-2026-7336: Use after free in WebRTC
     * High CVE-2026-7337: Type Confusion in V8
     * High CVE-2026-7347: Use after free in Chromoting
     * High CVE-2026-7346: Inappropriate implementation in Tint
     * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
     * High CVE-2026-7338: Use after free in Cast
     * High CVE-2026-7342: Use after free in WebView
     * High CVE-2026-7341: Use after free in WebRTC
     * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
     * Medium CVE-2026-7340: Integer overflow in ANGLE
     * Medium CVE-2026-7355: Use after free in Media


author: Than Ngo <than@redhat.com> - 148.0.7778.96-1
changelog:
  - Update to 148.0.7778.96
     * CVE-2026-7896: Integer overflow in Blink
     * CVE-2026-7897: Use after free in Mobile
     * CVE-2026-7898: Use after free in Chromoting
     * CVE-2026-7899: Out of bounds read and write in V8
     * CVE-2026-7900: Heap buffer overflow in ANGLE
     * CVE-2026-7901: Use after free in ANGLE
     * CVE-2026-7902: Out of bounds memory access in V8
     * CVE-2026-7903: Integer overflow in ANGLE
     * CVE-2026-7904: Out of bounds read in Fonts
     * CVE-2026-7905: Insufficient validation of untrusted input in Media
     * CVE-2026-7906: Use after free in SVG
     * CVE-2026-7907: Use after free in DOM
     * CVE-2026-7908: Use after free in Fullscreen
     * CVE-2026-7909: Inappropriate implementation in ServiceWorker
     * CVE-2026-7910: Use after free in Views
     * CVE-2026-7911: Use after free in Aura
     * CVE-2026-7912: Integer overflow in GPU
     * CVE-2026-7913: Insufficient policy enforcement in DevTools
     * CVE-2026-7914: Type Confusion in Accessibility
     * CVE-2026-7915: Insufficient data validation in DevTools
     * CVE-2026-7916: Insufficient data validation in InterestGroups
     * CVE-2026-7917: Use after free in Fullscreen
     * CVE-2026-7918: Use after free in GPU
     * CVE-2026-7919: Use after free in Aura
     * CVE-2026-7920: Use after free in Skia
     * CVE-2026-7921: Use after free in Passwords
     * CVE-2026-7922: Use after free in ServiceWorker
     * CVE-2026-7923: Out of bounds write in Skia
     * CVE-2026-7924: Uninitialized Use in Dawn
     * CVE-2026-7925: Use after free in Chromoting
     * CVE-2026-7926: Use after free in PresentationAPI
     * CVE-2026-7927: Type Confusion in Runtime
     * CVE-2026-7928: Use after free in WebRTC
     * CVE-2026-7929: Use after free in MediaRecording
     * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
     * CVE-2026-7931: Insufficient validation of untrusted input in iOS
     * CVE-2026-7932: Insufficient policy enforcement in Downloads
     * CVE-2026-7933: Out of bounds read in WebCodecs
     * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
     * CVE-2026-7935: Inappropriate implementation in Speech
     * CVE-2026-7936: Object lifecycle issue in V8
     * CVE-2026-7937: Insufficient policy enforcement in DevTools
     * CVE-2026-7938: Use after free in CSS
     * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
     * CVE-2026-7940: Use after free in V8
     * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
     * CVE-2026-7942: Integer overflow in ANGLE
     * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
     * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
     * CVE-2026-7945: Insufficient validation of untrusted input in COOP
     * CVE-2026-7946: Insufficient policy enforcement in WebUI
     * CVE-2026-7947: Insufficient validation of untrusted input in Network
     * CVE-2026-7948: Race in Chromoting
     * CVE-2026-7949: Out of bounds read in Skia
     * CVE-2026-7950: Out of bounds read and write in GFX
     * CVE-2026-7951: Out of bounds write in WebRTC
     * CVE-2026-7952: Insufficient policy enforcement in Extensions
     * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
     * CVE-2026-7954: Race in Shared Storage
     * CVE-2026-7955: Uninitialized Use in GPU
     * CVE-2026-7956: Use after free in Navigation
     * CVE-2026-7957: Out of bounds write in Media
     * CVE-2026-7958: Inappropriate implementation in ServiceWorker
     * CVE-2026-7959: Inappropriate implementation in Navigation
     * CVE-2026-7960: Race in Speech
     * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
     * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
     * CVE-2026-7963: Inappropriate implementation in ServiceWorker
     * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
     * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
     * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
     * CVE-2026-7968: Insufficient validation of untrusted input in CORS
     * CVE-2026-7969: Integer overflow in Network
     * CVE-2026-7970: Use after free in TopChrome
     * CVE-2026-7971: Inappropriate implementation in ORB
     * CVE-2026-7972: Uninitialized Use in GPU
     * CVE-2026-7973: Integer overflow in Dawn
     * CVE-2026-7974: Use after free in Blink
     * CVE-2026-7975: Use after free in DevTools
     * CVE-2026-7976: Use after free in Views
     * CVE-2026-7977: Inappropriate implementation in Canvas
     * CVE-2026-7978: Inappropriate implementation in Companion
     * CVE-2026-7979: Inappropriate implementation in Media
     * CVE-2026-7980: Use after free in WebAudio
     * CVE-2026-7981: Out of bounds read in Codecs
     * CVE-2026-7982: Uninitialized Use in WebCodecs
     * CVE-2026-7983: Out of bounds read in Dawn
     * CVE-2026-7984: Use after free in ReadingMode
     * CVE-2026-7985: Use after free in GPU
     * CVE-2026-7986: Insufficient policy enforcement in Autofill
     * CVE-2026-7987: Use after free in WebRTC
     * CVE-2026-7988: Type Confusion in WebRTC
     * CVE-2026-7989: Insufficient data validation in DataTransfer
     * CVE-2026-7990: Insufficient validation of untrusted input in Updater
     * CVE-2026-7991: Use after free in UI
     * CVE-2026-7992: Insufficient validation of untrusted input in UI
     * CVE-2026-7993: Insufficient validation of untrusted input in Payments
     * CVE-2026-7994: Inappropriate implementation in Chromoting
     * CVE-2026-7995: Out of bounds read in AdFilter
     * CVE-2026-7996: Insufficient validation of untrusted input in SSL
     * CVE-2026-7997: Insufficient validation of untrusted input in Updater
     * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
     * CVE-2026-7999: Inappropriate implementation in V8
     * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
     * CVE-2026-8001: Use after free in Printing
     * CVE-2026-8002: Use after free in Audio
     * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
     * CVE-2026-8004: Insufficient policy enforcement in DevTools
     * CVE-2026-8005: Insufficient validation of untrusted input in Cast
     * CVE-2026-8006: Insufficient policy enforcement in DevTools
     * CVE-2026-8007: Insufficient validation of untrusted input in Cast
     * CVE-2026-8008: Inappropriate implementation in DevTools
     * CVE-2026-8009: Inappropriate implementation in Cast
     * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8011: Insufficient policy enforcement in Search
     * CVE-2026-8012: Inappropriate implementation in MHTML
     * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
     * CVE-2026-8014: Inappropriate implementation in Preload
     * CVE-2026-8015: Inappropriate implementation in Media
     * CVE-2026-8016: Use after free in WebRTC
     * CVE-2026-8017: Side-channel information leakage in Media
     * CVE-2026-8018: Insufficient policy enforcement in DevTools
     * CVE-2026-8019: Insufficient policy enforcement in WebApp
     * CVE-2026-8020: Uninitialized Use in GPU
     * CVE-2026-8021: Script injection in UI
     * CVE-2026-8022: Inappropriate implementation in MHTML
  - Remove old remoting-no-tests patch
  - Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
  - Fix build error causing by sanitizer defines in GN
  - Refresh rust-enable-unstable_feature patch
  - Fix build error with system rust compiler
  - Fix build error causing by new clang++ options which are not supported yet
  - Fix build error causing by harfbuzz library rename


author: Than Ngo <than@redhat.com> - 148.0.7778.167-1
changelog:
  - Update to 148.0.7778.167
     * CVE-2026-8509: Heap buffer overflow in WebML
     * CVE-2026-8510: Integer overflow in Skia
     * CVE-2026-8511: Use after free in UI
     * CVE-2026-8512: Use after free in FileSystem
     * CVE-2026-8513: Use after free in Input
     * CVE-2026-8514: Use after free in Aura
     * CVE-2026-8515: Use after free in HID
     * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
     * CVE-2026-8517: Object lifecycle issue in WebShare
     * CVE-2026-8518: Use after free in Blink
     * CVE-2026-8519: Integer overflow in ANGLE
     * CVE-2026-8520: Race in Payments
     * CVE-2026-8521: Use after free in Tab Groups
     * CVE-2026-8522: Use after free in Downloads
     * CVE-2026-8523: Use after free in Mojo
     * CVE-2026-8558: Out of bounds write in Fonts
     * CVE-2026-8524: Out of bounds write in WebAudio
     * CVE-2026-8525: Heap buffer overflow in ANGLE
     * CVE-2026-8526: Out of bounds write in WebRTC
     * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
     * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8529: Heap buffer overflow in Codecs
     * CVE-2026-8530: Use after free in Network
     * CVE-2026-8531: Heap buffer overflow in WebML
     * CVE-2026-8532: Integer overflow in XML
     * CVE-2026-8533: Use after free in Accessibility
     * CVE-2026-8534: Integer overflow in GPU
     * CVE-2026-8535: Out of bounds read in Media
     * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
     * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
     * CVE-2026-8538: Insufficient validation of untrusted input in GPU
     * CVE-2026-8539: Script injection in SanitizerAPI
     * CVE-2026-8540: Type Confusion in V8
     * CVE-2026-8541: Out of bounds read in UI
     * CVE-2026-8542: Use after free in Core
     * CVE-2026-8543: Out of bounds read in FileSystem
     * CVE-2026-8544: Use after free in Media
     * CVE-2026-8545: Object corruption in Compositing
     * CVE-2026-8546: Out of bounds read in GPU
     * CVE-2026-8547: Insufficient policy enforcement in Passwords
     * CVE-2026-8548: Out of bounds write in Media
     * CVE-2026-8549: Use after free in Media
     * CVE-2026-8550: Use after free in Google Lens
     * CVE-2026-8551: Use after free in Downloads
     * CVE-2026-8552: Heap buffer overflow in GPU
     * CVE-2026-8553: Use after free in GPU
     * CVE-2026-8554: Type Confusion in ANGLE
     * CVE-2026-8555: Use after free in GTK
     * CVE-2026-8556: Inappropriate implementation in ANGLE
     * CVE-2026-8557: Use after free in Accessibility
     * CVE-2026-8559: Integer overflow in Internationalization
     * CVE-2026-8560: Heap buffer overflow in SwiftShader
     * CVE-2026-8561: Incorrect security UI in Fullscreen
     * CVE-2026-8562: Side-channel information leakage in Navigation
     * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
     * CVE-2026-8564: Incorrect security UI in Downloads
     * CVE-2026-8565: Inappropriate implementation in Downloads
     * CVE-2026-8566: Insufficient policy enforcement in Payments
     * CVE-2026-8567: Integer overflow in ANGLE
     * CVE-2026-8568: Insufficient policy enforcement in AI
     * CVE-2026-8569: Out of bounds write in Codecs
     * CVE-2026-8570: Type Confusion in V8
     * CVE-2026-8571: Insufficient policy enforcement in GPU
     * CVE-2026-8572: Insufficient policy enforcement in Network
     * CVE-2026-8573: Integer overflow in Codecs
     * CVE-2026-8574: Use after free in Core
     * CVE-2026-8575: Use after free in UI
     * CVE-2026-8576: Inappropriate implementation in CORS
     * CVE-2026-8577: Integer overflow in Fonts
     * CVE-2026-8578: Out of bounds read in GPU
     * CVE-2026-8579: Insufficient validation of untrusted input in Skia
     * CVE-2026-8580: Use after free in Mojo
     * CVE-2026-8581: Use after free in GPU
     * CVE-2026-8582: Object lifecycle issue in Dawn
     * CVE-2026-8583: Insufficient policy enforcement in WebXR
     * CVE-2026-8584: Inappropriate implementation in Views
     * CVE-2026-8585: Inappropriate implementation in Media
     * CVE-2026-8586: Inappropriate implementation in Chromoting
     * CVE-2026-8587: Use after free in Extensions


author: Miroslav Lichvar <mlichvar@redhat.com> 4.7-2
changelog:
  - let systemd create /var/lib/chrony and /var/log/chrony (#2372944)
  - drop workaround for broken build on aarch64
  - drop old conflict with NetworkManager


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.12
changelog:
  - update from trunk
    - PRs ada/119571, analyzer/113253, bootstrap/119680, c/78008, c/81831,
  	c/101440, c/114957, c/117689, c/118118, c/119173, c/119582, c/119612,
  	c++/60972, c++/64500, c++/90468, c++/99546, c++/106976, c++/109961,
  	c++/113925, c++/116285, c++/116960, c++/117336, c++/117530,
  	c++/117849, c++/118249, c++/118626, c++/118629, c++/118698,
  	c++/118982, c++/119303, c++/119383, c++/119387, c++/119401,
  	c++/119462, c++/119518, c++/119551, c++/119563, c++/119564,
  	c++/119574, c++/119608, c++/119652, cobol/119283, cobol/119295,
  	cobol/119364, cobol/119414, cobol/119521, cobol/119682, d/117002,
  	d/117832, d/118309, driver/58973, fortran/101602, fortran/119460,
  	fortran/119656, gcov-profile/119535, gcov-profile/119553,
  	gcov-profile/119618, ipa/119599, libfortran/119460, libstdc++/109162,
  	libstdc++/110498, libstdc++/114758, libstdc++/114945,
  	libstdc++/115046, libstdc++/119517, libstdc++/119545,
  	libstdc++/119550, libstdc++/119593, libstdc++/119620,
  	libstdc++/119642, libstdc++/119671, middle-end/78874,
  	middle-end/101018, middle-end/112589, middle-end/116595,
  	middle-end/118965, middle-end/119442, middle-end/119482,
  	middle-end/119537, middle-end/119541, middle-end/119559,
  	middle-end/119613, middle-end/119662, preprocessor/118674,
  	preprocessor/119391, rtl-optimization/119291, rtl-optimization/119594,
  	rtl-optimization/119672, rtl-optimization/119689, target/117759,
  	target/119308, target/119369, target/119473, target/119539,
  	target/119549, target/119556, target/119572, target/119573,
  	target/119645, target/119664, target/119678, testsuite/116398,
  	testsuite/118597, tree-optimization/80331, tree-optimization/87502,
  	tree-optimization/103827, tree-optimization/113281,
  	tree-optimization/118924, tree-optimization/119491,
  	tree-optimization/119493, tree-optimization/119532,
  	tree-optimization/119534, tree-optimization/119586,
  	tree-optimization/119614, tree-optimization/119616,
  	tree-optimization/119640, web/119227
    - fix up LTO opts handling (##2356219, PR lto/119625)


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.13
changelog:
  - update from trunk and releases/gcc-14 branch
    - PRs ada/119643, c/88382, c/119717, c++/99214, c++/101180, c++/106618,
  	c++/111075, c++/112288, c++/113360, c++/113835, c++/114772,
  	c++/114970, c++/115639, c++/116416, c++/116954, c++/119175,
  	c++/119345, c++/119687, c++/119692, c++/119755, c++/119807,
  	cobol/119217, cobol/119302, cobol/119694, cobol/119759, cobol/119776,
  	cobol/119777, d/109023, d/119758, d/119761, d/119799, d/119817,
  	d/119826, driver/90465, driver/119727, fortran/106948, fortran/119669,
  	ipa/113203, ipa/119318, ipa/119803, libfortran/119502, libgcc/101075,
  	libgcc/119796, libgomp/119849, libstdc++/21334, libstdc++/119725,
  	libstdc++/119748, libstdc++/119840, lto/119792, middle-end/14708,
  	middle-end/105548, middle-end/119706, middle-end/119808,
  	modula2/119735, modula2/119779, rtl-optimization/118502,
  	rtl-optimization/119785, rust/119341, rust/119342, sanitizer/119801,
  	target/42683, target/97106, target/97585, target/106445,
  	target/108134, target/113633, target/116827, target/118794,
  	target/119298, target/119386, target/119533, target/119547,
  	target/119673, target/119784, target/119834, testsuite/117706,
  	translation/119684, tree-optimization/71094, tree-optimization/87909,
  	tree-optimization/112822, tree-optimization/116093,
  	tree-optimization/118476, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119718,
  	tree-optimization/119722, tree-optimization/119757,
  	tree-optimization/119778


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
  	c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
  	c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
  	fortran/102900, fortran/119928, fortran/119986, fortran/120049,
  	fortran/120107, fortran/120139, fortran/120163, fortran/120179,
  	fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
  	libfortran/120152, libfortran/120153, libfortran/120158,
  	libfortran/120196, libstdc++/118260, libstdc++/119427,
  	libstdc++/119714, libstdc++/120029, libstdc++/120114,
  	libstdc++/120159, libstdc++/120187, libstdc++/120190,
  	libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
  	modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
  	preprocessor/120061, target/119610, testsuite/119909,
  	tree-optimization/111873, tree-optimization/119712,
  	tree-optimization/120043, tree-optimization/120048,
  	tree-optimization/120074, tree-optimization/120089,
  	tree-optimization/120143, tree-optimization/120211


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/120665, ada/120705, ada/120854, c/120180, c++/116064, c++/120123,
  	c++/120363, c++/120413, c++/120414, c++/120471, c++/120502,
  	c++/120555, c++/120575, c++/120684, c++/120940, fortran/51961,
  	fortran/85750, fortran/99838, fortran/101735, fortran/102599,
  	fortran/114022, fortran/119856, fortran/119948, fortran/120193,
  	fortran/120355, fortran/120483, fortran/120711, fortran/120784,
  	ipa/120295, libfortran/119856, libstdc++/99832, libstdc++/120367,
  	libstdc++/120432, libstdc++/120465, libstdc++/120548,
  	libstdc++/120625, libstdc++/120648, libstdc++/120650,
  	libstdc++/120931, libstdc++/120934, middle-end/118694,
  	middle-end/120369, middle-end/120547, middle-end/120608,
  	middle-end/120631, rtl-optimization/116389, rtl-optimization/120050,
  	rtl-optimization/120182, rtl-optimization/120347,
  	rtl-optimization/120423, rtl-optimization/120550,
  	rtl-optimization/120795, target/86772, target/119971, target/120042,
  	target/120441, target/120442, target/120480, target/120624,
  	testsuite/52641, testsuite/120082, testsuite/120919,
  	tree-optimization/116352, tree-optimization/119960,
  	tree-optimization/120003, tree-optimization/120341,
  	tree-optimization/120357, tree-optimization/120638,
  	tree-optimization/120654, tree-optimization/120677,
  	tree-optimization/120729, tree-optimization/120927
  - fix up FE lowering of pointer arith (PR c/120837)
  - perform %check with -foffload=disable flag


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121056, c++/87097, c++/120569, c++/120628, c++/120954,
  	fortran/104428, fortran/120637, fortran/120843, fortran/120847,
  	fortran/121060, ipa/121023, libstdc++/118681, libstdc++/119754,
  	libstdc++/120997, middle-end/120709, modula2/117203, modula2/119650,
  	modula2/120253, modula2/120389, modula2/120474, modula2/120497,
  	modula2/120542, modula2/120606, modula2/120673, modula2/120731,
  	modula2/120912, rtl-optimization/120242, rtl-optimization/120627,
  	rtl-optimization/120736, rtl-optimization/120813, target/118241,
  	target/120356, target/120807, target/120908, target/120995,
  	target/120999, tree-optimization/118669, tree-optimization/120358,
  	tree-optimization/120780, tree-optimization/120817,
  	tree-optimization/120924, tree-optimization/120944,
  	tree-optimization/121035, tree-optimization/121049,
  	tree-optimization/121059, tree-optimization/121131


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs cobol/119818, middle-end/120935, modula2/121164, testsuite/119508


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.2 release
    - PRs ada/120440, ada/121184, c/119950, c/120055, c/120353, c/120354,
  	c++/95615, c++/108080, c++/109283, c++/115605, c++/115908, c++/116775,
  	c++/118074, c++/118903, c++/119916, c++/120224, c++/120243,
  	c++/120273, c++/120412, c++/120453, c++/120495, c++/120577,
  	c++/120756, c++/120800, c++/120845, c++/121055, c++/121133,
  	c++/121219, c++/121238, cobol/119231, cobol/119323, cobol/119335,
  	cobol/119337, cobol/119377, cobol/119524, cobol/119632, cobol/119695,
  	cobol/119770, cobol/119771, cobol/119772, cobol/119790, cobol/119810,
  	cobol/119885, cobol/119975, cobol/120251, cobol/120328, cobol/120402,
  	cobol/120621, cobol/120765, cobol/120772, cobol/120779, cobol/120790,
  	cobol/120791, cobol/120794, fortran/119106, fortran/121145,
  	fortran/121203, ipa/114790, libstdc++/119962, libstdc++/121373,
  	lto/120308, middle-end/119835, middle-end/121095, middle-end/121159,
  	middle-end/121322, middle-end/121389, rtl-optimization/121340,
  	target/118891, target/119692, target/119737, target/119853,
  	target/119854, target/120119, target/120351, target/120427,
  	target/120530, target/120645, target/120714, target/121027,
  	target/121028, target/121064, target/121121, target/121274,
  	target/121277, testsuite/121286, testsuite/121288,
  	tree-optimization/117423, tree-optimization/118891,
  	tree-optimization/119085, tree-optimization/121127,
  	tree-optimization/121130, tree-optimization/121190,
  	tree-optimization/121202, tree-optimization/121256,
  	tree-optimization/121264, tree-optimization/121320,
  	tree-optimization/121323, tree-optimization/121413


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121968, bootstrap/118009, bootstrap/119089, c++/97740, c++/119859,
  	c++/120499, c++/120620, c++/121351, c++/121396, c++/121524,
  	c++/121724, c++/121795, c++/121801, c++/121977, c++/122015,
  	c++/122019, fortran/89092, fortran/121263, libfortran/121234,
  	libgcc/117600, libstdc++/110853, libstdc++/117276, libstdc++/119861,
  	libstdc++/120390, libstdc++/120698, libstdc++/121097,
  	libstdc++/121313, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, middle-end/121453,
  	middle-end/121828, middle-end/121831, rtl-optimization/87600,
  	rtl-optimization/120718, rtl-optimization/120983,
  	rtl-optimization/121253, rtl-optimization/121757, target/49857,
  	target/81540, target/116445, target/118280, target/118885,
  	target/119830, target/120476, target/120691, target/120986,
  	target/121007, target/121118, target/121208, target/121294,
  	target/121414, target/121449, target/121464, target/121510,
  	target/121534, target/121542, target/121548, target/121602,
  	target/121608, target/121634, target/121749, target/121794,
  	target/121906, testsuite/118567, tree-optimization/107997,
  	tree-optimization/121370, tree-optimization/121527,
  	tree-optimization/121659, tree-optimization/121844,
  	tree-optimization/121870, tree-optimization/122016


author: Petr Pisar <ppisar@redhat.com> - 1.2.1-1
changelog:
  - 1.2.1 bump
  - Fix building against rpm-5.99.91 (bug #2382611)
  - Fix lzma link argument in pkg-config file
  - Fix building with CMake 4 (bug #2380521)
  - Fix defining STDOUT_FILENO
  - Fix building with cmake and ninja (bug #2380983)


author: Richard W.M. Jones <rjones@redhat.com> - 6.0.0-7
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.1.0-2
changelog:
  - Support re-generating C++ sources before building them
  - Enable C++ source re-generation by default.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.2.0-1
changelog:
  - Update to 27.2.0 (close RHBZ#2343202)
  - Upstream added a Python implementation, packaged as python3-cucumber-
    messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.16-1
changelog:
  - 2.4.16 (fedora#2417970)
  - rebuild due binutils bug (fedora#2418285)
  - fix division by zero crash in pstops (fedora#2415396)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.17-1
changelog:
  - 2.4.17 (fedora#2456363, fedora#2456362, fedora#2454994, fedora#2454993,
    fedora#2454992, fedora#2454990)


author: Jan Macku <jamacku@redhat.com> - 8.15.0-6
changelog:
  - fix bad reuse of HTTP Negotiate connection (CVE-2026-1965)
  - fix token leak with redirect and netrc (CVE-2026-3783)
  - fix wrong proxy connection reuse with credentials (CVE-2026-3784)
  - fix use after free in SMB connection reuse (CVE-2026-3805)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.0.3-3
changelog:
  - Change license tag (GPL-2.0-or-later -> GPL-2.0-only or GPL-3.0-only)
  - Move license texts to -data subpackage so they're always installed
  - Add links to upstream commits for patches


author: Paul Howarth <paul@city-fan.org> - 1.7.2-1
changelog:
  - Update to 1.7.2 (rhbz#2391098)
    - Add support for libneon 34, 35
    - Increase buf read size to 64 (fixes read issue on linux 6.16)
    - Allow setting a mount password via DAVFS_PASSWORD
    - Introduce sync_on_lookup option (off by default)
    - Don't compress man pages


author: Packit <hello@packit.dev> - 19.2-1
changelog:
  - Update to version 19.2
  - Resolves: rhbz#2363940
  - Remove 0003-let-dbg_assert-format-the-string.patch
  - Disable s390x again due to several errors in check


author: Packit <hello@packit.dev> - 19.2.1-1
changelog:
  - Update to version 19.2.1
  - Resolves: rhbz#2370349
  - Re-enable s390x again after the fix of upstream issue #10218


author: Mark Wielaard <mjw@fedoraproject.org> - 5.2-3
changelog:
  - Add 0001-Add-debugedit-classify-ar-and-use-it-before-running-.patch
  - Install debugedit-classify-ar and man page


author: Xavier Bachelot <xavier@bachelot.org> - 3.5.28-12
changelog:
  - Do not BuildRequires: inkscape on EL10
  - Sort BuildRequires:
  - Use %make_build, %make_install and %license macros
  - Improve %files section


author: Pavel Raiskup <praiskup@redhat.com> - 2.0-1
changelog:
  - new upstream release, with DNF5 support
    https://github.com/praiskup/dnf-plugin-diff/releases/tag/v2.0


author: Petr Pisar <ppisar@redhat.com> - 5.2.18.0-2
changelog:
  - Fix a crash in dnf5daemon-server when receiving an unknown locale from
    a D-Bus client (CVE-2026-3836) (bug #2445771)


author: Petr Pisar <ppisar@redhat.com> - 5.2.18.0-3
changelog:
  - Make a dependency on libcurl-full for dnf5-plugin-automatic optional
    (bug #2322918)
  - Work around a race in rotating system state files (bug #2457408)
  - Respect nocrypto tsflag when setting a transaction per-element verification
    policy (bug #2443503)
  - Require rpm-libs >= 5.99.90 because of rpmteSetVfyLevel()
  - Handle caching unsigned packages in local plugin


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.3.1-1
changelog:
  - Update to release v29.3.1
  - Resolves: rhbz#2451425
  - Upstream notes that this release resolves: CVE-2026-34040,
    CVE-2026-33997, CVE-2026-33748, CVE-2026-33747
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.0-1
changelog:
  - Update to release v29.4.0
  - Resolves: rhbz#2455894
  - Resolves  CVE-2026-34986: rhbz#2455665
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.1-1
changelog:
  - Update to release v29.4.1
  - Resolves: 2459826
  - Upstream fixes
  - Built with golang 1.26 (rawhide and f44 only at this time)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.2-1
changelog:
  - Update to release v29.4.2
  - Resolves: rhbz#2459826
  - Upstream fixes
  - This release includes hardening for CVE-2026-31431
  - Temporary skip for branch protection test


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.0-1
changelog:
  - Update to release v29.5.0
  - Resolves: rhbz#2467552
  - Resolves CVE-2026-32288
  - Resolves CVE-2026-31431
  - Upstream new features, fixes, and enhancements


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.1-1
changelog:
  - Update to release v29.5.1
  - Resolves: rhbz#2467552
  - Resolves: CVE-2026-41567, CVE-2026-41568, CVE-2026-42306
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.1.3-1
changelog:
  - Update to release v5.1.3
  - Resolves rhbz#2458697
  - Resolves CVE-2026-33747: rhbz#2452188, rhbz#2452199
  - Resolves CVE-2026-33748: rhbz#2453089
  - Upstream fixes


author: François Kooman <fkooman@tuxed.net> - 20250606-3
changelog:
  - update `dumpasn1.cfg`
  - use manpage directly from official repository
  - confirmed with author upstream moved to GitHub


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.30.5618.102^gitc0ed34e-1
changelog:
  - Put the snapshot info in the version field instead of release
  - Fix forge macros creating a massive release tag including snapshot info
    for secondary/bundled sources


author: Alexey Kurov <nucleo@fedoraproject.org> - 10.2.1-4
changelog:
  - Removed unrecognized options enable-systemd and disable-exampledir
  - Fixed sysconfdir option warning
  - Added option for support of PCRE2
  - Own local state file dir
  - Minimum libyang version 2.1.128


author: Terje Rosten <terjeros@gmail.com> - 3.7.2-54
changelog:
  - Various fixes to improve Python 3 support
  - Add back regex support on Fedora (patch from Debian, thanks!)


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Jerry James <loganjerry@gmail.com> - 2.8.2-1
changelog:
  - Version 2.8.2
  - Predownloaded ATLAS data is no longer needed for the tests
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude


author: Jerry James <loganjerry@gmail.com> - 1.0.5-1
changelog:
  - Version 1.0.5
  - Drop upstreamed set_unexpected patch
  - Setting LC_ALL is no longer necessary
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 1.3.7-1
changelog:
  - Version 1.3.7
  - Change from C++11 to C++14 has been upstreamed
  - Setting LC_ALL is no longer necessary


author: Benjamin Gilbert <bgilbert@backtick.net> - 2.43.5-1
changelog:
  - Update to 2.43.5
  - Drop BMP, ICO, PNM, and TGA loaders; these are now supported via Glycin
  - Drop thumbnailer config, since gdk-pixbuf dropped the thumbnailer


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
  - Backport fixes from upstream to use BeaconDB
  - Use BeaconDB for the default location services source


author: Jens Petersen <petersen@redhat.com> - 9.10.1-3
changelog:
  - new packages: ghc-experimental, ghc-platform, ghc-toolchain, os-string
  - note prof subpackages currently have incomplete deps
    due to metadata generation issue


author: Jens Petersen <petersen@redhat.com> - 9.10.1-7
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.5.11-1
changelog:
  - Update to 0.5.11
  - Fix compatibility with Mercurial 6.4 (rhbz#2259038)
  - Fix access to ssh remotes with absolute path in no-mercurial mode
  - Fix missing `distutils` error messages with Python 3.12


author: Dominik Mierzejewski <dominik@greysector.net> - 45~20250512gitf7501bc-1
changelog:
  - update to 20250512 git snapshot
  - remove rpaths with a patch
  - make file lists more explicit
  - filter out private plugin Provides:
  - bytecompile Python code and use appropriate macro in file list
  - correct License: tag
  - fix version
  - drop unused dependency


author: Florian Weimer <fweimer@redhat.com> - 2.42-4
changelog:
  - Add marker symbol versions GLIBC_ABI_DT_X86_64_PLT, GLIBC_ABI_GNU2_TLS,
    GLIBC_ABI_GNU_TLS, following upstream.
  - Auto-sync with upstream branch release/2.42/master,
    commit 7a8f3c6ee4b565a02da4ba0dad9aaeaeed4639ce:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
  - Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
  - malloc: Fix checking for small negative values of tcache_key
  - malloc: Make sure tcache_key is odd enough
  - malloc: Fix MAX_TCACHE_SMALL_SIZE
  - malloc: Remove redundant NULL check


author: Frédéric Bérat <fberat@redhat.com> - 2.42-5
changelog:
  - Auto-sync with upstream branch master,
    commit b11411fe2ee7a8f3c3a2c1ee99c1729adb9a0efe:
  - posix: Fix invalid flags test for p{write,read}v2 (Yury Khrustalev)
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091) (Sachin Monga)
  - ppc64le: Restore optimized strncmp for power10 (Sachin Monga)
  - ppc64le: Restore optimized strcmp for power10 (Sachin Monga)
  - AArch64: Fix and improve SVE pow(f) special cases (Pierre Blanchard)
  - AArch64: fix SVE tanpi(f) [BZ #33642] (Pierre Blanchard)
  - AArch64: Fix instability in AdvSIMD sinh (Joe Ramsay)
  - AArch64: Fix instability in AdvSIMD tan (Joe Ramsay)
  - AArch64: Optimise SVE scalar callbacks (Joe Ramsay)
  - aarch64: fix includes in SME tests (Yury Khrustalev)
  - aarch64: fix cfi directives around __libc_arm_za_disable (Yury Khrustalev)
  - x86: fix wmemset ifunc stray '!' (bug 33542) (Jiamei Xie)
  - aarch64: tests for SME (Yury Khrustalev)
  - aarch64: clear ZA state of SME before clone and clone3 syscalls (Yury Khrustalev)
  - aarch64: define macro for calling __libc_arm_za_disable (Yury Khrustalev)
  - x86: Detect Intel Nova Lake Processor (Sunil K Pandey)
  - x86: Detect Intel Wildcat Lake Processor (Sunil K Pandey)
  - nptl: Fix MADV_GUARD_INSTALL logic for thread without guard page (BZ 33356) (Adhemerval Zanella)
  - nss: Group merge does not react to ERANGE during merge (bug 33361) (Florian Weimer)
  - libio: Define AT_RENAME_* with the same tokens as Linux (Florian Weimer)
  - AArch64: Fix SVE powf routine [BZ #33299] (Pierre Blanchard)
  - i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129] (H.J. Lu)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-6
changelog:
  - Auto-sync with upstream branch master,
    commit f122d0b4d145814869bf10c56db1d971bcba55c5:
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704) (Sunil K Pandey)
  - support: Exit on consistency check failure in resolv_response_add_name (Florian Weimer)
  - support: Fix FILE * leak in check_for_unshare_hints in test-container (Florian Weimer)
  - sprof: fix -Wformat warnings on 32-bit hosts (Collin Funk)
  - sprof: check pread size and offset for overflow (DJ Delorie)


author: Florian Weimer <fweimer@redhat.com> - 2.42-8
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit cbf39c26b25801e9bc88499b4fd361ac172d4125:
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
  - memalign: reinstate alignment overflow check (CVE-2026-0861)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-10
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit ebd45473f5421e0fced5ba2cde0f1aaa36e79b61:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Switch currency symbol for the bg_BG locale to euro (Florian Weimer)
  - Remove patches already applied upstream:
    - glibc-rh2429016.patch


author: Frédéric Bérat <fberat@redhat.com> - 2.42-11
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit a56a2943d2ce541102c630142c2eae0fbfc5886b:
  - tests: fix tst-rseq with Linux 7.0 (Michael Jeanson)
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso (Xi Ruoyao)
  - resolv: Check hostname for validity (CVE-2026-4438) (Carlos O'Donell)
  - resolv: Count records correctly (CVE-2026-4437) (Carlos O'Donell)
  - posix: Run tst-wordexp-reuse-mem test (Florian Weimer)
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module (Florian Weimer)


author: Florian Weimer <fweimer@redhat.com> - 2.42-12
changelog:
  - Add downstream patches with fixes for vulnerabilities.
  - Fix buffer overflow in scanf %mc (CVE-2026-5450)
  - Fix ns_sprintrrf buffer overreads (CVE-2026-6238)
  - Fix ns_sprintrrf buffer overflow in TSIG record processing (CVE-2026-5435)
  - Fix memory corruption in ungetwc (CVE-2026-5928)
  - Auto-sync with upstream branch release/2.42/master,
    commit f13c1bb0f97fbc12a6ba1ab5669ce561ea32b80a:
  - iconv: Use pending character state in IBM1390, IBM1399 character sets
    (CVE-2026-4046)


author: Frédéric Bérat <fberat@redhat.com> - 2.42-13
changelog:
  - Auto-sync with upstream branch release/2.42/master,
    commit 4ebd33dd77eabe8d4c45232bed4b42a31d2f9edc:
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (Rocket Ma)
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (Rocket Ma)
  - abilist.awk: Handle weak unversioned defined symbols (H.J. Lu)
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921) (Florian Weimer)
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h (DJ Delorie)
  - Remove applied or redundant patches:
    - glibc-RHEL-172420.patch
    - glibc-RHEL-172421.patch


author: Marcin Dulak <marcindulak@fedoraproject.org> - 25.7.0-1
changelog:
  - New upstream release
  - Move away from deprecated setup.py build/install
  - Remove temporary python3 top level dir


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.48.4-45
changelog:
  - Skip test_service_config, which times out
  - This appears to be due to an unsafe combination of death tests and
    threads


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.26.2-2
changelog:
  - Move aom, curl, openal, openjpeg to main package
  - Move lv2 to separate subpackage (rhbz#1731750)
  - Enable dvdspu, faad, qsv (x86_64 only)
  - Enable dc1394 and zxing in extras subpackage


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Maxwell G <maxwell@gtmx.me> - 0.6.0^git4407164-1
changelog:
  - Update to new upstream https://git.sr.ht/~xenrox/hut
  - Use 0.6.0 post-release snapshot commit 4407164
  - Use vendored dependencies
  - Fixes: rhbz#2368037


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33~rc2-1
changelog:
  - Fix memory leak in Wayland IM protocol
  - Fix reset signal w/ GTK_IM_MODULE=ibus and GTK3, GTK4 in Wayland
  - Update gdm bits based on new gdm changes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.33~rc2-2
changelog:
  - Rebuild for cldr-emoji-annotation-48~beta1-1.fc43 and
    gnome-shell-extension-no-overview-49-1.fc43


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.29.5111.102-7
changelog:
  - Don’t link the top-level absl_flags library; it is not required in
    absl-cpp-20230802, and not present in absl-cpp-20240116
  - Add #include directives for compatibility with absl-cpp-20240116


author: Packit <hello@packit.dev> - 50-1
changelog:
  Changes with 50
  ----------------
    - SPEC: define default permissions for /var/cache/image-builder (#454)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/cache from 4 to 5 (#434)
      - Author: {}, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - deps: bump Go to 1.24.12 and use new Go functions (#452)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to v0.240.0 (#456)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 51-1
changelog:
  Changes with 51
  ----------------
    - go.mod: update osbuild/images to v0.243.0 (#457)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-19


author: Packit <hello@packit.dev> - 53-1
changelog:
  Changes with 53
  ----------------
    - chore: bump dependencies via gobump (#475)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: allow specifying AWS credentials profile (#443)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: bump images to 0.248.0 (#479)
      - Author: Simon de Vlieger, Reviewers: Nobody
    - docs: update COPR command for RHEL (#477)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: bump ISO timeout (#469)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-03-13


author: Packit <hello@packit.dev> - 55-1
changelog:
  Changes with 55
  ----------------
    - chore: bump dependencies via gobump (#460)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal
    - deps: bump images (#483)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-03-24


author: Packit <hello@packit.dev> - 57-1
changelog:
  Changes with 57
  ----------------
    - deps: update `images` to 0.254.0 (#489)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-06


author: Packit <hello@packit.dev> - 58-1
changelog:
  Changes with 58
  ----------------
    - deps: bump images to 0.256.0 (#491)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-07


author: Packit <hello@packit.dev> - 60-1
changelog:
  Changes with 60
  ----------------
    - Support --in-vm in image-builder (#485)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: bump images to 0.258.0 (#495)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-04-14


author: Packit <hello@packit.dev> - 63-1
changelog:
  Changes with 63
  ----------------
    - deps: bump images to 0.259.0 (#501)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - docs: update satellite info (#503)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: `--version` -> `version` subcommand (#505)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - many: Generate rpmlist as an output of manifestgen (#502)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-29


author: Packit <hello@packit.dev> - 64-1
changelog:
  Changes with 64
  ----------------
    - cmd: drop "bootc is experimental" (#510)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump osbuild/images dependency (#507)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: update dependencies (w/o osbuild/images) (#508)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: fix broken link (#509)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal
    - doc: introduce advanced bootc (#462)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - docs: generate manpages (#504)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: hide `--use-librepo` (#513)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: hide `--with-rpmlist` (#512)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-13


author: Packit <hello@packit.dev> - 65-1
changelog:
  Changes with 65
  ----------------
    - deps: bump images to 0.266.0 (#520)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#515)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: default to XDG cache directory for non-root users (#511)
      - Author: Guillermo N. Leiro Arroyo, Reviewers: Brian C. Lane, Lukáš Zapletal

  osbuild/images changes (v0.262.0 -> v0.266.0):

    - Add bootc-foundry boot test infrastructure (HMS-10336) (#2335)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Update RHEL 9 and 10 OCI image definitions [HMS-10328, HMS-10472] (#2333)
      - Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß, Simon de Vlieger
    - Update osbuild dependency commit ID (#2321)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild dependency commit ID (#2328)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260504 (#2323)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - boot-azure: switch machine type (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß
    - ci: include flatpaks (#2349)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - ci: use f43 for cross-arch (#2322)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - defs/bootc: set XBOOTLDR GUID (#2325)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - disk: partition table policies (#2330)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/rhel-9: fix OCI partitioning (#2351)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger, Tomáš Hozza
    - experimental: use yamlplus (#2319)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - fedora: remove vc4 module blacklist from ostree kernel options (#2331)
      - Author: Paul Whalen, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - flatpak: use container resolver to resolve flatpak refs (#2334)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - import ELN (HMS-10620, HMS-10621, HMS-10623) (#2318)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - many: bootc sealed images (composefs, and bootloader) (HMS-10628) (#2326)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - pkg/bootc/resolver: handle missing 'bootc container inspect' (#2342)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - rhel: enable sshd service for WSL images (#2332)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - schutzbot: update terraform commit ID (#2341)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - test: close filesystem/disk customization coverage gaps with osbuild-composer (#2329)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-21


author: Mikhail Medvedev 1.6.1-1
changelog:
  - Add new feature: compare files
  - Add new feature: fill test array
  - Fix: when the page size is changed, the buffer is cleared
  - Fix: the code is executed twice and the code slows down the display of the interface


author: Mikhail Medvedev 1.6.2-1
changelog:
  - Fix: program crashed if security registers was less than 256 bytes
  - Fix: Information in the status bar disappears when hovering over a menu
  - Added comparison of INTEL HEX and ASUS CAP with other files
  - Added close and minimise buttons for subordinate forms
  - New chips added to database
  - Chip information form code optimized


author: Mikhail Medvedev 1.7.1-1
changelog:
  - Fix: pressing the Stop key did not stop auto operations
  - Added support for SPI NAND flash
  - Added traditional chinese translation
  - New chips added to database


author: Mikhail Medvedev 1.7.2-1
changelog:
  - Fix: NAND Flash information form freeze
  - Added new images for CH341A v1.7
  - Added programmer type menu
  - Added support for the AT24CM02 chip


author: Mikhail Medvedev 1.7.3-1
changelog:
  - Fix: Incorrect HexEdit size when starting the program
  - Added: saving program settings to an ini file


author: Mikhail Medvedev 1.8.1-1
changelog:
  - Fix: increased interface speed
  - Fix: increased SPI NOR Flash operations speed
  - Fix: incorrect chip page sizes values removed
  - Fix: unused files removed
  - Added: support for the CH347T programmer


author: Mikhail Medvedev 1.8.2-1
changelog:
  - Fix: error reading/writing data from I2C chips on the CH347T version 5.44
  - Fix: bit error during NOR/NAND operations in the CH347V1.1 programmer
  - Added: showing the programmer revision function
  - Added: erase check function
  - Added: filling code function


author: Mikhail Medvedev 1.8.3-1
changelog:
  - Fixed: If no chip is selected, the programmer was not detected
  - Fixed: MACOS library compatibility
  - Fixed: MACOS invalid pathes
  - Fixed: libusb detection
  - Fixed: udev rules install
  - Added: 2.5v VCC item
  - SPI NOR FLASH writing speed increased
  - Changed chip database update bash script to Qt app
  - The Zenity package is no longer used


author: Mikhail Medvedev 1.8.4-1
changelog:
  - Fixed: segmentation fault in Qt6
  - Fixed: incorrect interface display on macOS
  - Fixed: write error to sector 0 in Windows
  - Fixed: incorrect saving of the database file in the chip editor
  - Fixed: Unable to erase the 93C66, 93C76 and 93C86 chips
  - Fixed: the font is too large in Qt6
  - Added: migration to Qt6
  - Added: specification file for Fedora
  - Added: universal Qt5/Qt6 CmakeLists.txt
  - Added: support for the spare area for NAND flash memory.


author: Peter Bieringer <pb@bieringer.de> - 4.2.2-1
changelog:
  - include databases/registries/lisp/site-db as no longer reachable for download
  - add additional Perl requirements


author: Peter Bieringer <pb@bieringer.de> - 4.3.0-1
changelog:
  - Final release 4.3.0
  - Update recommend IP2Location >= 8.6.0
  - Remove ipv6calc.sgml from doc
  - Use now only releases from GitHub


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Xavier Bachelot <xavier@bachelot.org> - 2.8.2-16
changelog:
  - Drop EL7/python2 support
  - Set min_hash_algo to sha256 for f42+
  - Fix conditional around JAVA_HOME export
  - Add patch to fix build with gcc15


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-17
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (rhbz#2295742)
  - Correctly include generated HTML documentation


author: Adam Williamson <awilliam@redhat.com> - 0.3.4-1
changelog:
  - Update to 0.3.4, drop merged and no-longer-needed patches
  - Fix Python build/install so Python subpackage works
  - Fix build on EPEL 8 and 9
  - Include latest database from upstream


author: Evan Goode <egoode@redhat.com> - 0.74.0-1
changelog:
  - Update to 0.74.0
  - Update ko.po
  - Split $releasever to $releasever_major and $releasever_minor in the C API
  - Merge `bootc` branch to master
  - ConfigParser: make splitReleasever public
  - C API: Detect releasever_major, releasever_minor from provides
  - C API: support shell-style variable substitution
  - module: Warn if module config file is inaccessible
  - Enable automatic PR reviews


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Ales Nezbeda <anezbeda@redhat.com> - 16.3-5
changelog:
  - Disable openssl ENGINE_API
  - Fedora change: https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - BZ: 2300910


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.15-1
changelog:
  - Release version 2.17.15 (Michal Srb)
  - reporter-bugzilla: Make the supplementary bugs easily identifiable (Michal Srb)
  - reporter-bugzilla: Fix formatting in the supplementary bugs (Michal Srb)
  - reporter-bugzilla: Fix code comment (Michal Srb)


author: Milan Crha <mcrha@redhat.com> - 3.6.6-2
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2020.12.R1-18
changelog:
  - Make it build with the latest Python
    Fixes: RHBZ#2259655, RHBZ#2242706, RHBZ#2242709
  - Update summary and description
  - Drop deprecated macros


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Michal Schmidt <mschmidt@redhat.com> - 9.8.60-3
changelog:
  - Remove redundant %setup invocation.
  - Replace custom patch files with "git format-patch" from upstream git.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.5.3^20220831git2d4ba970-10
changelog:
  - F42+: Add old style pre scriptlet for LXDM user creation so as to make it work
    when upgrading from F41


author: Hans de Goede <hans@hansg.org> - 0.7.6-34
changelog:
  - Switch back to https://github.com/thelaui/M.A.R.S. upstream which has
    merged all the patches to remove non-free data files
  - Remove all references to dead marsshooter<dot>org domain which is now
    filled with spam


author: Sérgio Basto <sergio@serjux.com> - 2.5.3-3
changelog:
  - Update provides and obsoletes for openjpeg2 of Fedora 40
  - Also add a more agressive way to remove old openjpeg-libs (1.x)


author: Dominik Mierzejewski <dominik@greysector.net> - 3.0.2-9
changelog:
  - switch to tar.gz source to avoid manual build
  - build using CMake (use upstream SONAME)
  - ship pkg-config and CMake files (resolves rhbz#2378931)
  - fix build with CMake 4.0
  - use dos2unix instead of sed


author: Neal Gompa <ngompa@fedoraproject.org> - 24.09-3
changelog:
  - Add SDDM and initial-setup-gui configuration packages
  - Split desktop session file into its own subpackage


author: RPM Fusion Release Engineering <sergiomb@rpmfusion.org> - 2.2.1-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add GCC-15 patch from upstream


author: Fedora Release Engineering <releng@fedoraproject.org> - 7.28.0-7
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add mini patch for GCC 15
  - Drop BR gtk2-devel
  - Fix conditionals for epel9+


author: Sandro <devel@penguinpee.nl>
changelog:
  - Add python3-ninja sub package providing metadata for Python packages
    depending on ninja to facilitate automatic dependency resolution.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-3
changelog:
  - Update the VOMS attribute certificate signing hash algorithm
  - Re-enable the VOMSUtilTest on Fedora 43 (after above fix)
  - Fix unowned directory /etc/arc.conf.d


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.4-4
changelog:
  - based on PR#18 by Orion Poplawski
  - Build NUT-Monitor and ship in separate nut-monitor package (rhbz#2359149)
  - Move UPS drivers into /usr/libexec/nut


author: Jerry James <loganjerry@gmail.com> - 2.16.0-1
changelog:
  - Version 2.16.0
  - Remove the deprecated ocaml-atdgen-devel package
  - New ocaml-atdcpp package for generating C++


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-13
changelog:
  - Clean up spec file from pre-systemd times
  - Use systemd services to initiate oddjobd configuration reload
  - Resolves: rhbz#2248817


author: Pavol Sloboda <psloboda@redhat.com> - 0.07.18-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively. Also
    it was mentioned in the spec file twice as a BuildRequires.


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - build(deps): bump actions/upload-artifact from 5 to 6 (#4961)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - chore(deps): update konflux references (#5023)
      - Author: {}, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-18


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Packit <hello@packit.dev> - 168-1
changelog:
  Changes with 168
  ----------------
    - Add DequeueAnyChannel to enable multi-tenant BootcPreManifest processing (HMS-10445) (#5084)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Ondřej Budai
    - Fail bootc composes on composer build version mismatch (HMS-10378) (#5082)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Ondřej Budai
    - Make bootc container source type configurable (HMS-10262) (#5087)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Replace monolithic bootc-manifest worker job with multi-stage server-orchestrated job graph (HMS-10378) (#5069)
      - Author: Tomáš Hozza, Reviewers: Nobody
    - Update snapshots to 20260405 (#5080)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5070)
      - Author: {}, Reviewers: Anna Vítová, Lukáš Zapletal
    - chore(deps): update konflux references (#5089)
      - Author: {}, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - chore: add .gitattributes file (#5078)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Simon de Vlieger, Tomáš Hozza
    - cloudapi: Add fedora names for network-installer (#5079)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - cmd/osbuild-worker: cleanup jobimpl-osbuild.go (#5083)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Tomáš Hozza
    - templates/packer: add container registries init script (#5086)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - worker: use slices.EqualFunc to compare dependency modules (#5085)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-15


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add end-to-end functional test for bootc composes in a service deployment (HMS-10008) (#5098)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    - Enable all bootc-supported disk image types for bootc composes, not just qcow2 (HMS-10508) (#5102)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    - SPEC: add explicit Requires on podman for worker subpackage (#5099)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal
    - Update for RHEL 9.9 and 10.3 nightlies (#5095)
      - Author: Justin Sherrill, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260419 (#5105)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - build(deps): bump actions/github-script from 8 to 9 (#5090)
      - Author: {}, Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5104)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: bump go-jose to 4.1.4 (#5107)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump grpc to 1.79.3 (RHEL-160720) (#5106)
      - Author: Anna Vítová, Reviewers: Florian Schüller, Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - go.mod: update github.com/openshift-online/ocm-sdk-go to v0.1.499 (#5103)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-22


author: Packit <hello@packit.dev> - 171-1
changelog:
  Changes with 171
  ----------------
    - Add optional container image cleanup to bootc info resolve job and enable it for the service (HMS-10446) (#5108)
      - Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - Enable bootc installer ISO builds via Cloud API (HMS-10568) (#5112)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Update snapshots to 20260426 (#5114)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore(deps): update konflux references (#5113)
      - Author: {}, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cicd: split gobump into two jobs (#5109)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Tomáš Hozza
    - test/old-worker-new-composer: skip v168 release due to buggy SPEC (#5111)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - weldr: Use the job id instead of creating a new one (#5110)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: use require.Eventually for the flaky test (#5074)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-29


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - Schutzfile: drop minor versions from bootc-foundry (#5134)
      - Author: Lukáš Zapletal, Reviewers: Simon Steinbeiß, Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add default target for bootc iso (#5125)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - go.mod: update osbuild/images to v0.261.0 (#5115)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Lukáš Zapletal, Sanne Raymaekers
    - test/repositories: switch RHEL 9.7 and 10.1 test repos to GA (#5122)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: drop ubi-wsl.sh test (#5130)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-13


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-5
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0
  - Regarding noteworthy changes coming with the bump of the major version see
    https://projects.clusterlabs.org/w/projects/pacemaker/pacemaker_3.0_changes/
  - add patch to when resetting scheduler as well reset error and warning flags
    lacking pcmk_reset_scheduler in 3.0.0 branch pcmk__set_scheduler_defaults
    seems to be the most reasonable alternative for now


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.3.rc1
changelog:
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook
  - Enable fencing regression tests again


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - seems as if pre-tasks need to have tags to be executed
    at least that worked on a pull request via pagure


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-11
changelog:
  - Convert STI tests to TMT (rhbz#2383013)
  - Update for new upstream release tarball: Pacemaker-3.0.1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1
  - now you can add a new revision
    rpmdev-bumpspec -c "test" pacemaker.spec
  - or run tests locally
    tmt run discover provision prepare execute --how tmt --verbose -v -v --debug
  - Removed tier1 test again as it was just for investigation of a CI issue


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260507.g1afd4ed-1
changelog:
  - Install pesto, its SELinux policy, and the man page from the spec file
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_01_20.386b5f5..2026_05_07.1afd4ed


author: Paul Howarth <paul@city-fan.org> - 4.38-1
changelog:
  - Update to 4.38
    - Encode real core booleans as boolean notation (GH#224)
    - Minor test fixes
    - Fix docs typo (GH#225)


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 5.005-1
changelog:
  - Update to 5.005 (rhbz#2480052)
    - Update bundled Zstd to 1.5.7, and other changes
    - Update spec to document changes from version 5
    - Security fixes - make sure that COPY tags cannot be used to read past end
      of buffer


author: Aaron Rainbolt <arraybolt@fedoraproject.org> - 1:1.9.0-33
changelog:
  - Set minimum CMake version to 3.5 (rhbz#2381472)
  - Set non-standard CMake variables back to expected values (rhbz#2381665)
  - Migrate InstallMgr test to tmt framework (rhbz#2383081)


author: Remi Collet <remi@remirepo.net> - 8.3.0-1
changelog:
  - update to 8.3.0
  - re-license spec file to CECILL-2.1
  - fix build with old libip2location using patch from
    https://github.com/chrislim2888/IP2Location-PECL-Extension/pull/25


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Robert Scheck <robert@fedoraproject.org> 4.4-11
changelog:
  - Add patch to remove unused import of deprecated Python
    asyncore.dispatcher (#2238120, thanks to Patrick Scheck)


author: Robert Scheck <robert@fedoraproject.org> 4.4-13
changelog:
  - Add patch to replace pipes.quote() from deprecated Python
    pipes (#2318435, thanks to Sean Carlos and Patrick Scheck)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.3-1
changelog:
  - New version
    Resolves: rhbz#2379297
  - Updated cyrus-imapd comment in config to point to the correct location
    Related: RHEL-63089


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.19.6-13
changelog:
  - Temporarily use GCC 14 to workaround FTBFS on i686 and s390x
  - Don’t build Python extension with C++ on Python 3.14+


author: Jerry James <loganjerry@gmail.com> - 1.15-1
changelog:
  - Update to 1.15 (rhbz#2241663)
  - Change doc subpackage architecture to noarch
  - Change Source URL to tarball with the tests included
  - Add a %check script
  - Do not glob the library name
  - Minor spec file cleanups


author: José Matos <jamatos@fedoraproject.org> - 2.4.0-2
changelog:
  - All the changes below come from Jerry James <loganjerry@gmail.com> (from Fri Feb 23 2024)
  - Use virtual Provides instead of empty packages
  - Link with flexiblas instead of gslcblas
  - Move documentation into a doc subpackage
  - Various minor spec file cleanups
  - Add patch to fix FTBFS on big endian systems


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-1
changelog:
  - Update to 3.7.2; 2 tests are still disabled due to a regression in proj 9.6.2
  - Introduce new style pyproject macros


author: Carl George <carlwgeorge@fedoraproject.org> - 3.50.2.0-1
changelog:
  - Update to version 3.50.2.0
  - Port to pyproject macros rhbz#2377454
  - Add upstream patch to avoid segfault during tests


author: Paul Howarth <paul@city-fan.org> - 2.6.1-56
changelog:
  - Stop using deprecated %py3_build/%py3_install macros (rhbz#2377592)
  - Drop support for building for multiple Python versions


author: Miro Hrončok <miro@hroncok.cz> - 1.4.1-8
changelog:
  - Remove unused BuildRequires for deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Ondřej Pohořelský <opohorel@redhat.com> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Migrated to new python packaging guidelines
  - Resolves: rhbz#2377697, rhbz#2377047


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.3.1-33
changelog:
  - F41+: Use the provisional pyproject declarative buildsystem
  - Since this is only for F41+, drop EPEL conditionals
  - Always run an import-only smoke test; add a bcond vtk_dep for optionally
    including VTK integration modules in this


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.4.0-1
changelog:
  - Update to 5.4.0 (close RHBZ#2368139)
  - Drop the plotly dependency from the “vis” extra until the python-plotly
    package can be updated


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Sandro <devel@penguinpee.nl> - 2.10.2-1
changelog:
  - Update to 2.10.2
  - Add NumPy 2.x support (since 2.10.0)
  - Drop patches (appear to be no longer required)
  - Close RHBZ#2332471


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-2
changelog:
  - add python3-pyliblo3 subpackage
  - move 'Obsoletes:' tag to python3-pyliblo3 subpackage
  - move doc subpackage after the python3-pyliblo3 subpackage
  - remove 'Recommends:' tag 
  - rename python-pyliblo3 to python3-pyliblo3
  - remove macro %{modname} for better readability


author: Jerry James <loganjerry@gmail.com> - 4.9.1-1
changelog:
  - Version 4.9.1
  - Fixes CVE-2024-21506 (rhbz#2273860)
  - Fixes CVE-2024-5629 (rhbz#2290587)
  - Modernize the spec file
  - Fix up the license information
  - Add check script
  - Package the ocsp, snappy, and zstd extras
  - Build docs for Fedora only
  - Permit use of pytest-asyncio 0.23 until Fedora can catch up


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.1-1
changelog:
  - Update to version 0.6.1; Fixes RHBZ#2386831
  - Automate patching the path-based safetensors crate dependency
  - A patch fixing several failing tests has been merged upstream


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-3
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Pavol Sloboda <psloboda@redhat.com> - 1.00.14-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively.


author: Cristian Le <git@lecris.dev> - 2.6.0-2
changelog:
  - Fix python build
  - Cleanup the spec file to use %conf
  - Set the python CMAKE_BUILD_TYPE to RelWithDebInfo
  - Made sure the python files do not bundle Spglib
  - Fixed the tmt tests, for now


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-1
changelog:
  - Version 2022.0.0
  - Drop unnecessary Werror patch
  - Drop unnecessary python shebang mangling
  - Let pkgconfig specify the version of hwloc to use


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-3
changelog:
  - Add patch to fix linking tbbmalloc with GCC 15
  - Update %giturl for the uxlfoundation change
  - Fix intersphinx_mapping to use local objects.inv


author: Jerry James <loganjerry@gmail.com> - 2022.2.0-1
changelog:
  - Version 2022.2.0
  - Drop the doc subpackage which cannot be built due to missing deps
  - Add patch to disable -fcf-protection=full on non-x86 architectures


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-9
changelog:
  - Update to the upstream v6.17 @ e8da3cdc
  - Handle new radiacode entropy source
  - Handle changes in jitterentropy library
  - Drop older i686 force-PIC fix


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-7
changelog:
  - Added -DSM_CONF_STDBOOL_H in /usr/bin/make -O -j${RPM_BUILD_NCPUS} V=1 VERBOSE=1 to fix BZ#2385632.


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-8
changelog:
  - Added the line '/usr/lib/sysusers.d/smf-spf.conf' in %files.
  - Added the line 'install -m0644 -D /builddir/build/SOURCES/smf-spf.sysusers /builddir/build/BUILD/smf-spf-2.5.1_20220423g061e937-build/BUILDROOT/usr/lib/sysusers.d/smfs.conf'.


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.57.1-1
changelog:
  - Update to 0.57.1; Fixes: RHBZ#2280939, RHBZ#2301323, RHBZ#2280426,
    RHBZ#2280433, RHBZ#2280449, RHBZ#2280455, RHBZ#2280469, RHBZ#2280475,
    RHBZ#2280487, RHBZ#2302835, RHBZ#2307674


author: Peter Czanik <peter@czanik.hu> - 4.9.0-1
changelog:
  - update to 4.9.0
  - add destination drivers for ClickHouse and PubSub
  - add missing Python dependencies


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 258~rc1-1
changelog:
  - Version 258~rc1
  - See https://raw.githubusercontent.com/systemd/systemd/v258-rc1/NEWS. Too
    many changes to list or discuss here.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 258~rc3-1
changelog:
  - Version 258~rc3
  - A large number of fixes in various components
  - Hardware database and syscall numbers are updated


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 258-1
changelog:
  - Version 258 💝
  - See https://raw.githubusercontent.com/systemd/systemd/v258/NEWS for the
    final list of changes.


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1:2025.10-1
changelog:
  - Update to 2025.10 GA (rhbz#2401964)
  - Fix booting when using FW device-tree (rhbz#2402498)
  - Fix for some variants of Raspberry Pi
  - Fixes for Jetson device booting


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.30-4
changelog:
  - Disable perl-Coro for rawhide, as this blocks rebuilding
    for perl 5.42 (see https://bugzilla.redhat.com/show_bug.cgi?id=2379448)


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-9
changelog:
  - Update architectures for asan/tsan/ubsan tests based on GCC 15
  - Adds riscv64 to supported architectures for all three kinds of tsts


author: Patrick Monnerat <patrick@monnerat.net> 2.5.0-3
changelog:
  - Patch "pastekey" fixes a crash pasting an encrypted private key.
    https://github.com/chris2511/xca/commit/d29d55a
  - Patch "revokedel" fixes a freeze when deleting a certificate.
    https://github.com/chris2511/xca/commit/43e1b33
  - Patch "delete_after_revoke" fixes a crash deleting+revoking a certificate.
    https://bugzilla.redhat.com/show_bug.cgi?id=2259477


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-5
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
  	CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
  	CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-7
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
  	CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434046)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434048)


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-4
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.3-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
          [XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Richard W.M. Jones <rjones@redhat.com> - 4.5.2-5
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.0.4-13
changelog:
  - Regenerate C source from Vala source and enable
    -Werror=incompatible-pointer-types again
    (Thanks to Florian Weimer <fweimer@redhat.com>)


author: Neil Hanlon <neil@shrug.pw> - 1.9.1-4
changelog:
  - switch to pure cmake (1.9.0 turned configure into a wrapper which dropped options)
  - resolve ftbfs, fti, new version (#226393 #2301380 #2292226)
  - resolve CVE-2024-39844 (#2295622)


