# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Shlomi Fish <shlomif@shlomifish.org> 3.4.0-2
changelog:
  - Remove unused / unavailable deps ( eg - python3-random2 )
  - Use pyprojectize/etc. to modernize the .spec
  - rhbz#2379434
  - rhbz#2377406


author: Björn Persson <Bjorn@Rombobjörn.se> - 2.9-1
changelog:
  - Upgraded to 2.9.
  - Set_Up and Tear_Down procedures are now called for testsuites derived from
    Ahven.Framework.Test_Suite.


author: Jerry James <loganjerry@gmail.com> - 2.3.3-23
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Correct License fields from Apache-2.0 to CECILL-C
  - Do configuration steps in %conf


author: Michal Schorm <mschorm@redhat.com> - 3.3.2-3
changelog:
  - Rebuilt for  https://fedoraproject.org/wiki/Changes/switch_distribution_default_MariaDB_from_10.11_to_11.8


author: Packit <hello@packit.dev> - 43.33-1
changelog:
  - Revert "Default to GTK UI when available, fallback to Web UI otherwise"
    (k.koukiou)
  - Rename DNF strings to Flatpak in installation.py (jkonecny)
  - Remove unused Flatpak manager code (jkonecny)


author: Packit <hello@packit.dev> - 43.36-1
changelog:
  - packit: drive jobs from supported_releases per branch; dedupe and group
    targets (k.koukiou)
  - Fix pylint warnings caused by dynamic kickstart command imports (k.koukiou)
  - core: kickstart: implement OS-release based version detection (k.koukiou)
  - build: decouple BASE_CONTAINER from branch configuration (k.koukiou)
  - workflows: remove hardcoded CONTAINER_TAG="lorax" usage (k.koukiou)
  - dracut module requires generic initramfs (jstodola)


author: Packit <hello@packit.dev> - 43.37-1
changelog:
  - Log correct boot option for iSCSI boot without iBFT (jstodola)
  - Get full nevra string from dnf instead of composing it (pkratoch)
  - Add release notes for RDP kickstart support (adamkankovsky)
  - test: Enable kickstart RDP command in Anaconda (adamkankovsky)
  - Enable kickstart RDP command in Anaconda (adamkankovsky)
  - storage: devicetree: read VERSION or VERSION_CODENAME for identifying OS from
    os-release (k.koukiou)


author: Packit <hello@packit.dev> - 43.39-1
changelog:
  - Fix setting of kernel console logging level for anaconda (rvykydal)
  - Use new more suitable API for Gtk UI required space check (rvykydal)
  - Add GetFreeSpaceForSystem API (rvykydal)
  - docs: update CONTRIBUTING.rst with new branching approach (k.koukiou)


author: Packit <hello@packit.dev> - 43.41-1
changelog:
  - data: profiles: enable geolocation on Fedora Workstation live image
    (matiwari)
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
  - pyanaconda: dnf: clarify is_ready boolean return (k.koukiou)
  - tui: make SoftwareSpoke ready once installation source succeeds or fails
    (k.koukiou)
  - spec: enable live in ELN (yselkowi)
  - Mark unused variables with a leading underscore (a.badger)


author: Packit <hello@packit.dev> - 43.44-1
changelog:
  - flatpak: enable installation with CDROM source type (bciconel)
  - storage: Improve NotEnoughFreeSpaceError message with specific request
    details (k.koukiou)
  - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)


author: Katerina Koukiou <kkoukiou@redhat.com> - 48-2
changelog:
  - Fix: users: disallow proceeding from users page when neither root or user is configured (rhbz#2379957, rhbz#2392205, rhbz#2392203)
  - Fix: prevent installations with not enough space on partitions used for system (rhbz#2351824)


author: Packit <hello@packit.dev> - 50-1
changelog:
  - fix(timezone): correctly parse timezones with multiple slashes
  - fix(timezone): when reading timezone from backend read value from dbus object
  - datetime:: dissallow proceeding custom NTP modal with empty values
  - storage: Add mountpoints size check to storage review screen
  - storage: Make size check on review screen a blocking error


author: Packit <hello@packit.dev> - 51-1
changelog:
  - storage: detect locked LUKS on selected disks including whole-disk LUKS (rhbz#2396646)
  - Consume branding for Fedora from cockpit/static/branding.css
  - webui-desktop: fix env variables scope for firefox to fix displayed icon


author: Packit <hello@packit.dev> - 53-1
changelog:
  - keyboard: in Gnome spawn Gnome keyboard settings in storage configurationscreen
  - storage: installation-method: the screen id is
    'anaconda-screen-method' (Fixes notification for missing space for /boot)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 53.1-1
changelog:
  - components/localization: Only offer ASCII-capable keyboard layouts (rhbz#2402430)
  - localization: dissallow layouts which do not support ASCII input in gnome
  - storage: normalize locale decimals for PatternFly slider input (rhbz#2403028)
  - review: storage: don't use action-description from blivet in conditions as it's translated
  - storage: stop using inputValue from slider as it cannot parse localized floats
  - storage: encryption: show warning when the compositor layout differs from target system default
  - localization: set virtual console keymap explicity when choosing keyboards


author: Jerry James <loganjerry@gmail.com> - 4.13.2-3
changelog:
  - Add java-headless dependency to the antlr4 package
  - Simplify swift conditionals
  - Do configuration actions in %conf


author: Simone Caronni <negativo17@gmail.com> - 011.3-5
changelog:
  - Remove all EL7 / Python 2 conditionals.
  - Trim changelog.
  - Format SPEC file and sort all Requires/BuildRequires.


author: Mattia Verga <mattia.verga@protonmail.com> - 0.94-10
changelog:
  - Disable build on i686 (fix Fedora#2300567)
  - Switch Tycho index files to upstream provided
  - Switch 42xx index files to 52xx


author: Mattia Verga <mattia.verga@proton.me> - 0.96-2
changelog:
  - Rename binaries names conflicting with cfitsio binaries
  - Remove fitsverify binary which is now provided by own package


author: Sébastien Le Roux <sebastien.leroux@ipcms.unistra.fr> - 1.1.17-1
changelog:
  - Bug corrections and improvements (see: https://github.com/Slookeur/atomes-GNU/releases/tag/v1.1.17)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.5-2
changelog:
  - obsolete -freeworld package, since it's been a meta-package only
    and currently doesn't pull it any extra packages anymore
  - cleanup: drop old Obs/Conf for -freeworld-mms package


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.43.1-1
changelog:
  - Update to binutils 2.43.1-1
  - Add: binutils-fix-ar-test.patch
  - Update: binutils-riscv-testsuite-fixes.patch
  - Update: binutils-testsuite-fixes.patch
  - Retire: binutils-special-sections-in-groups.patch
  - Retire: binutils-gold-powerpc.patch
  - Retire: binutils-handle-corrupt-version-info.patch
  - Retire: binutils-execstack-error.patch
  - Retire: binutils-BPF-reloc-4.patch
  - Retire: binutils-x86-64-v3.patch
  - Retire: binutils-big-merge.patch
  - Retire: binutils-aarch64-urcbig-bti-programs.patch
  - Retire: i686-AVX10.1-part-1.patch
  - Retire: i686-AVX10.1-part-2.patch
  - Retire: i686-AVX10.1-part-3.patch
  - Retire: i686-AVX10.1-part-4.patch
  - Retire: i686-AVX10.1-part-5.patch
  - Retire: i686-AVX10.1-part-6.patch
  - Retire: binutils-riscv-SUB_ULEB128.patch
  - Retire: binutils-ppc-dt_relr-relocs.patch
  - Retire: binutils-demangler-updates.patch
  - Retire: binutils-Intel-APX-part-1.patch
  - Retire: binutils-power-11.patch
  - Retire: binutils-Intel-APX-part-1-fixes.patch
  - Retire: binutils-multilib.am.patch
  - Retire: binutils-Intel-APX-CODE_6_GOTTPOFF.patch
  - Retire: binutils-archive-DT_SYMTAB.patch


author: Paul Howarth <paul@city-fan.org> - 2.2.16-1
changelog:
  - Update to 2.2.16 (rhbz#2314037)
    - Bluefish 2.2.16 is mostly a maintenance release
    - New feature: Bookmarks can now be generated from external commands such as
      ctags
    - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
    - The old built-in javascript beautifier has been removed; Bluefish now uses
      the jsbeautify from your system (if available)
    - The word-wrap function has been fixed
  - Add fix for type issue causing FTBFS with gcc 14
    (https://sourceforge.net/p/bluefish/tickets/95/)
  - Drop support for EL-7 and Fedora releases of a similar vintage


author: Paul Howarth <paul@city-fan.org> - 2.2.17-1
changelog:
  - Update to 2.2.17 (rhbz#2356356)
    - Bluefish 2.2.17 is a maintenance release that has only code clean-up fixes
      to comply better with modern compiler standards
    - It furthermore has fixes for a 64-bit Windows build of Bluefish with Msys2
  - Use %{make_build} and %{make_install}
  - Assume %{_pkgdocdir} macro always available


author: Bryn M. Reeves <bmr@redhat.com> - 1.6.6-1
changelog:
  - tests: drop remaining Python2 compat handling
  - boom.config: drop Python2 compat handling for ConfigParser
  - dist: update example boom.conf
  - boom: use correct option names in BoomConfig.__str__()
  - boom: use write_boom_config() in boom.command.create_config()
  - config: add missing [cache] section to boom.config.__make_config()
  - config: add missing [cache] section handling to boom.config._sync_config()
  - config: treat {boom,boot}_root and {boom,boot}_path as synonyms
  - dist: enable check in boom-boot.spec
  - dist: replace license classifier with SPDX expressions
  - boom: replace __make_map_key() function with dictionary comprehension
  - dist: clean up copyright statements and convert to SPDX license headers
  - dist: update GPLv2 text in COPYING
  - boom: use lazy printf formatting when logging
  - boom: fix report argument formatting
  - tests: drop separate coverage runs and split out reporting step
  - tests: switch Fedora tests to fedora:latest
  - tests: bracket test cases with log messages
  - tests: fix duplicate log handlers in test suite
  - report: strip trailing whitespace from report output
  - legacy: use 'is' instead of explicit type comparison
  - boom: clean up new OsProfile if setting uname_pattern fails
  - boom: add CentOS Stream to uname heuristics table
  - boom: fix license headers across tree
  - dist: update spec file changelog and release
  - dist: drop unused systemd-rpm-macros BuildRequires
  - dist: fix Source URL and autosetup invocation


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.9-2
changelog:
  - Fix setuptools-gettext 0.1.14 compatibility
  - Only work around wrong locale installation path if it happens


author: Kate Hsuan <hpa@redhat.com> - 1.4.0-2
changelog:
  - tuned is the default power profile management daemon in Fedora
  - https://pagure.io/fesco/issue/3222


author: Jerry James <loganjerry@gmail.com> - 10.9.2-9
changelog:
  - Stop building for 32-bit x86
  - Convert the License field to SPDX
  - Add additional licenses found on review of the code


author: Joshua Strobl <me@joshuastrobl.com> - 0.5.1-7
changelog:
  - Remove budgie-backgrounds and slick-greeter as required packages, keep it to being part of comp instead


author: Joshua Strobl <joshua@buddiesofbudgie.org> - 0.5.3-1
changelog:
  - Turn off GNOME donation in gnome-settings-daemon housekeeping plugin as no desktop check is performed in gsd-housekeeping


author: Than Ngo <than@redhat.com> - 147.0.7727.116-2
changelog:
  - Fix FTBFS with rust 1.95
  - Backport the upstream fix GL native pixmap import support reset in GpuInit


author: Than Ngo <than@redhat.com> - 147.0.7727.137-1
changelog:
  - Update to 147.0.7727.137
     * Critical CVE-2026-7363: Use after free in Canvas
     * Critical CVE-2026-7361: Use after free in iOS
     * Critical CVE-2026-7344: Use after free in Accessibility
     * Critical CVE-2026-7343: Use after free in Views
     * High CVE-2026-7333: Use after free in GPU
     * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
     * High CVE-2026-7359: Use after free in ANGLE
     * High CVE-2026-7358: Use after free in Animation
     * High CVE-2026-7334: Use after free in Views
     * High CVE-2026-7357: Use after free in GPU
     * High CVE-2026-7356: Use after free in Navigation
     * High CVE-2026-7354: Out of bounds read and write in Angle
     * High CVE-2026-7353: Heap buffer overflow in Skia
     * High CVE-2026-7352: Use after free in Media
     * High CVE-2026-7351: Race in MHTML
     * High CVE-2026-7350: Use after free in WebMIDI
     * High CVE-2026-7349: Use after free in Cast
     * High CVE-2026-7348: Use after free in Codecs
     * High CVE-2026-7335: Use after free in media
     * High CVE-2026-7336: Use after free in WebRTC
     * High CVE-2026-7337: Type Confusion in V8
     * High CVE-2026-7347: Use after free in Chromoting
     * High CVE-2026-7346: Inappropriate implementation in Tint
     * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
     * High CVE-2026-7338: Use after free in Cast
     * High CVE-2026-7342: Use after free in WebView
     * High CVE-2026-7341: Use after free in WebRTC
     * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
     * Medium CVE-2026-7340: Integer overflow in ANGLE
     * Medium CVE-2026-7355: Use after free in Media


author: Than Ngo <than@redhat.com> - 148.0.7778.96-1
changelog:
  - Update to 148.0.7778.96
     * CVE-2026-7896: Integer overflow in Blink
     * CVE-2026-7897: Use after free in Mobile
     * CVE-2026-7898: Use after free in Chromoting
     * CVE-2026-7899: Out of bounds read and write in V8
     * CVE-2026-7900: Heap buffer overflow in ANGLE
     * CVE-2026-7901: Use after free in ANGLE
     * CVE-2026-7902: Out of bounds memory access in V8
     * CVE-2026-7903: Integer overflow in ANGLE
     * CVE-2026-7904: Out of bounds read in Fonts
     * CVE-2026-7905: Insufficient validation of untrusted input in Media
     * CVE-2026-7906: Use after free in SVG
     * CVE-2026-7907: Use after free in DOM
     * CVE-2026-7908: Use after free in Fullscreen
     * CVE-2026-7909: Inappropriate implementation in ServiceWorker
     * CVE-2026-7910: Use after free in Views
     * CVE-2026-7911: Use after free in Aura
     * CVE-2026-7912: Integer overflow in GPU
     * CVE-2026-7913: Insufficient policy enforcement in DevTools
     * CVE-2026-7914: Type Confusion in Accessibility
     * CVE-2026-7915: Insufficient data validation in DevTools
     * CVE-2026-7916: Insufficient data validation in InterestGroups
     * CVE-2026-7917: Use after free in Fullscreen
     * CVE-2026-7918: Use after free in GPU
     * CVE-2026-7919: Use after free in Aura
     * CVE-2026-7920: Use after free in Skia
     * CVE-2026-7921: Use after free in Passwords
     * CVE-2026-7922: Use after free in ServiceWorker
     * CVE-2026-7923: Out of bounds write in Skia
     * CVE-2026-7924: Uninitialized Use in Dawn
     * CVE-2026-7925: Use after free in Chromoting
     * CVE-2026-7926: Use after free in PresentationAPI
     * CVE-2026-7927: Type Confusion in Runtime
     * CVE-2026-7928: Use after free in WebRTC
     * CVE-2026-7929: Use after free in MediaRecording
     * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
     * CVE-2026-7931: Insufficient validation of untrusted input in iOS
     * CVE-2026-7932: Insufficient policy enforcement in Downloads
     * CVE-2026-7933: Out of bounds read in WebCodecs
     * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
     * CVE-2026-7935: Inappropriate implementation in Speech
     * CVE-2026-7936: Object lifecycle issue in V8
     * CVE-2026-7937: Insufficient policy enforcement in DevTools
     * CVE-2026-7938: Use after free in CSS
     * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
     * CVE-2026-7940: Use after free in V8
     * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
     * CVE-2026-7942: Integer overflow in ANGLE
     * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
     * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
     * CVE-2026-7945: Insufficient validation of untrusted input in COOP
     * CVE-2026-7946: Insufficient policy enforcement in WebUI
     * CVE-2026-7947: Insufficient validation of untrusted input in Network
     * CVE-2026-7948: Race in Chromoting
     * CVE-2026-7949: Out of bounds read in Skia
     * CVE-2026-7950: Out of bounds read and write in GFX
     * CVE-2026-7951: Out of bounds write in WebRTC
     * CVE-2026-7952: Insufficient policy enforcement in Extensions
     * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
     * CVE-2026-7954: Race in Shared Storage
     * CVE-2026-7955: Uninitialized Use in GPU
     * CVE-2026-7956: Use after free in Navigation
     * CVE-2026-7957: Out of bounds write in Media
     * CVE-2026-7958: Inappropriate implementation in ServiceWorker
     * CVE-2026-7959: Inappropriate implementation in Navigation
     * CVE-2026-7960: Race in Speech
     * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
     * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
     * CVE-2026-7963: Inappropriate implementation in ServiceWorker
     * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
     * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
     * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
     * CVE-2026-7968: Insufficient validation of untrusted input in CORS
     * CVE-2026-7969: Integer overflow in Network
     * CVE-2026-7970: Use after free in TopChrome
     * CVE-2026-7971: Inappropriate implementation in ORB
     * CVE-2026-7972: Uninitialized Use in GPU
     * CVE-2026-7973: Integer overflow in Dawn
     * CVE-2026-7974: Use after free in Blink
     * CVE-2026-7975: Use after free in DevTools
     * CVE-2026-7976: Use after free in Views
     * CVE-2026-7977: Inappropriate implementation in Canvas
     * CVE-2026-7978: Inappropriate implementation in Companion
     * CVE-2026-7979: Inappropriate implementation in Media
     * CVE-2026-7980: Use after free in WebAudio
     * CVE-2026-7981: Out of bounds read in Codecs
     * CVE-2026-7982: Uninitialized Use in WebCodecs
     * CVE-2026-7983: Out of bounds read in Dawn
     * CVE-2026-7984: Use after free in ReadingMode
     * CVE-2026-7985: Use after free in GPU
     * CVE-2026-7986: Insufficient policy enforcement in Autofill
     * CVE-2026-7987: Use after free in WebRTC
     * CVE-2026-7988: Type Confusion in WebRTC
     * CVE-2026-7989: Insufficient data validation in DataTransfer
     * CVE-2026-7990: Insufficient validation of untrusted input in Updater
     * CVE-2026-7991: Use after free in UI
     * CVE-2026-7992: Insufficient validation of untrusted input in UI
     * CVE-2026-7993: Insufficient validation of untrusted input in Payments
     * CVE-2026-7994: Inappropriate implementation in Chromoting
     * CVE-2026-7995: Out of bounds read in AdFilter
     * CVE-2026-7996: Insufficient validation of untrusted input in SSL
     * CVE-2026-7997: Insufficient validation of untrusted input in Updater
     * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
     * CVE-2026-7999: Inappropriate implementation in V8
     * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
     * CVE-2026-8001: Use after free in Printing
     * CVE-2026-8002: Use after free in Audio
     * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
     * CVE-2026-8004: Insufficient policy enforcement in DevTools
     * CVE-2026-8005: Insufficient validation of untrusted input in Cast
     * CVE-2026-8006: Insufficient policy enforcement in DevTools
     * CVE-2026-8007: Insufficient validation of untrusted input in Cast
     * CVE-2026-8008: Inappropriate implementation in DevTools
     * CVE-2026-8009: Inappropriate implementation in Cast
     * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8011: Insufficient policy enforcement in Search
     * CVE-2026-8012: Inappropriate implementation in MHTML
     * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
     * CVE-2026-8014: Inappropriate implementation in Preload
     * CVE-2026-8015: Inappropriate implementation in Media
     * CVE-2026-8016: Use after free in WebRTC
     * CVE-2026-8017: Side-channel information leakage in Media
     * CVE-2026-8018: Insufficient policy enforcement in DevTools
     * CVE-2026-8019: Insufficient policy enforcement in WebApp
     * CVE-2026-8020: Uninitialized Use in GPU
     * CVE-2026-8021: Script injection in UI
     * CVE-2026-8022: Inappropriate implementation in MHTML
  - Remove old remoting-no-tests patch
  - Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
  - Fix build error causing by sanitizer defines in GN
  - Refresh rust-enable-unstable_feature patch
  - Fix build error with system rust compiler
  - Fix build error causing by new clang++ options which are not supported yet
  - Fix build error causing by harfbuzz library rename


author: Than Ngo <than@redhat.com> - 148.0.7778.167-1
changelog:
  - Update to 148.0.7778.167
     * CVE-2026-8509: Heap buffer overflow in WebML
     * CVE-2026-8510: Integer overflow in Skia
     * CVE-2026-8511: Use after free in UI
     * CVE-2026-8512: Use after free in FileSystem
     * CVE-2026-8513: Use after free in Input
     * CVE-2026-8514: Use after free in Aura
     * CVE-2026-8515: Use after free in HID
     * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
     * CVE-2026-8517: Object lifecycle issue in WebShare
     * CVE-2026-8518: Use after free in Blink
     * CVE-2026-8519: Integer overflow in ANGLE
     * CVE-2026-8520: Race in Payments
     * CVE-2026-8521: Use after free in Tab Groups
     * CVE-2026-8522: Use after free in Downloads
     * CVE-2026-8523: Use after free in Mojo
     * CVE-2026-8558: Out of bounds write in Fonts
     * CVE-2026-8524: Out of bounds write in WebAudio
     * CVE-2026-8525: Heap buffer overflow in ANGLE
     * CVE-2026-8526: Out of bounds write in WebRTC
     * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
     * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8529: Heap buffer overflow in Codecs
     * CVE-2026-8530: Use after free in Network
     * CVE-2026-8531: Heap buffer overflow in WebML
     * CVE-2026-8532: Integer overflow in XML
     * CVE-2026-8533: Use after free in Accessibility
     * CVE-2026-8534: Integer overflow in GPU
     * CVE-2026-8535: Out of bounds read in Media
     * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
     * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
     * CVE-2026-8538: Insufficient validation of untrusted input in GPU
     * CVE-2026-8539: Script injection in SanitizerAPI
     * CVE-2026-8540: Type Confusion in V8
     * CVE-2026-8541: Out of bounds read in UI
     * CVE-2026-8542: Use after free in Core
     * CVE-2026-8543: Out of bounds read in FileSystem
     * CVE-2026-8544: Use after free in Media
     * CVE-2026-8545: Object corruption in Compositing
     * CVE-2026-8546: Out of bounds read in GPU
     * CVE-2026-8547: Insufficient policy enforcement in Passwords
     * CVE-2026-8548: Out of bounds write in Media
     * CVE-2026-8549: Use after free in Media
     * CVE-2026-8550: Use after free in Google Lens
     * CVE-2026-8551: Use after free in Downloads
     * CVE-2026-8552: Heap buffer overflow in GPU
     * CVE-2026-8553: Use after free in GPU
     * CVE-2026-8554: Type Confusion in ANGLE
     * CVE-2026-8555: Use after free in GTK
     * CVE-2026-8556: Inappropriate implementation in ANGLE
     * CVE-2026-8557: Use after free in Accessibility
     * CVE-2026-8559: Integer overflow in Internationalization
     * CVE-2026-8560: Heap buffer overflow in SwiftShader
     * CVE-2026-8561: Incorrect security UI in Fullscreen
     * CVE-2026-8562: Side-channel information leakage in Navigation
     * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
     * CVE-2026-8564: Incorrect security UI in Downloads
     * CVE-2026-8565: Inappropriate implementation in Downloads
     * CVE-2026-8566: Insufficient policy enforcement in Payments
     * CVE-2026-8567: Integer overflow in ANGLE
     * CVE-2026-8568: Insufficient policy enforcement in AI
     * CVE-2026-8569: Out of bounds write in Codecs
     * CVE-2026-8570: Type Confusion in V8
     * CVE-2026-8571: Insufficient policy enforcement in GPU
     * CVE-2026-8572: Insufficient policy enforcement in Network
     * CVE-2026-8573: Integer overflow in Codecs
     * CVE-2026-8574: Use after free in Core
     * CVE-2026-8575: Use after free in UI
     * CVE-2026-8576: Inappropriate implementation in CORS
     * CVE-2026-8577: Integer overflow in Fonts
     * CVE-2026-8578: Out of bounds read in GPU
     * CVE-2026-8579: Insufficient validation of untrusted input in Skia
     * CVE-2026-8580: Use after free in Mojo
     * CVE-2026-8581: Use after free in GPU
     * CVE-2026-8582: Object lifecycle issue in Dawn
     * CVE-2026-8583: Insufficient policy enforcement in WebXR
     * CVE-2026-8584: Inappropriate implementation in Views
     * CVE-2026-8585: Inappropriate implementation in Media
     * CVE-2026-8586: Inappropriate implementation in Chromoting
     * CVE-2026-8587: Use after free in Extensions


author: Than Ngo <than@redhat.com> - 148.0.7778.178-1
changelog:
  - Update to 148.0.7778.178
    * CVE-2026-9111: Use after free in WebRTC
    * CVE-2026-9110: Inappropriate implementation in UI
    * CVE-2026-9112: Use after free in GPU
    * CVE-2026-9113: Out of bounds read in GPU
    * CVE-2026-9114: Use after free in QUIC
    * CVE-2026-9115: Insufficient policy enforcement in Service Worker
    * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-9117: Type Confusion in GFX
    * CVE-2026-9118: Use after free in XR
    * CVE-2026-9119: Heap buffer overflow in WebRTC
    * CVE-2026-9120: Use after free in WebRTC
    * CVE-2026-9126: Use after free in DOM
    * CVE-2026-9121: Out of bounds read in GPU
    * CVE-2026-9122: Out of bounds read in GPU
    * CVE-2026-9123: Heap buffer overflow in Chromecast
    * CVE-2026-9124: Insufficient validation of untrusted input in Input
  - Backport upstream patches to improve auto dark image inversion logic
  - Update default chromium browser config


author: Than Ngo <than@redhat.com> - 148.0.7778.215-1
changelog:
  - Update to 148.0.7778.215
    * CVE-2026-9872: Out of bounds write in GPU
    * CVE-2026-9873: Use after free in Network
    * CVE-2026-9874: Use after free in Dawn
    * CVE-2026-9875: Out of bounds read in WebGL
    * CVE-2026-9876: Use after free in WebGL
    * CVE-2026-9877: Use after free in ANGLE
    * CVE-2026-9878: Use after free in ANGLE
    * CVE-2026-9879: Out of bounds write in ANGLE
    * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
    * CVE-2026-9881: Use after free in Bluetooth
    * CVE-2026-9882: Integer overflow in ANGLE
    * CVE-2026-9883: Use after free in Base
    * CVE-2026-9884: Use after free in Browser
    * CVE-2026-9885: Insufficient validation of untrusted input in UI
    * CVE-2026-9886: Use after free in Base
    * CVE-2026-9887: Use after free in Proxy
    * CVE-2026-9888: Use after free in WebView
    * CVE-2026-9889: Out of bounds read and write in Dawn
    * CVE-2026-9890: Use after free in XR
    * CVE-2026-9891: Use after free in Extensions
    * CVE-2026-9892: Inappropriate implementation in Skia
    * CVE-2026-9893: Use after free in Skia
    * CVE-2026-9894: Use after free in GPU
    * CVE-2026-9895: Out of bounds read in GPU
    * CVE-2026-9896: Out of bounds write in V8
    * CVE-2026-9897: Use after free in DOM
    * CVE-2026-9898: Insufficient validation of untrusted input in GPU
    * CVE-2026-9899: Use after free in ANGLE
    * CVE-2026-9900: Out of bounds write in ANGLE
    * CVE-2026-9901: Use after free in ANGLE
    * CVE-2026-9902: Use after free in Accessibility
    * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
    * CVE-2026-9904: Use after free in ANGLE
    * CVE-2026-9905: Use after free in Accessibility
    * CVE-2026-9906: Out of bounds write in GPU
    * CVE-2026-9907: Out of bounds read in Dawn
    * CVE-2026-9908: Out of bounds read in ANGLE
    * CVE-2026-9909: Integer overflow in Skia
    * CVE-2026-9910: Out of bounds memory access in ANGLE
    * CVE-2026-9911: Integer overflow in ANGLE
    * CVE-2026-9912: Inappropriate implementation in GPU
    * CVE-2026-9913: Inappropriate implementation in ANGLE
    * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9915: Heap buffer overflow in ANGLE
    * CVE-2026-9916: Out of bounds write in ANGLE
    * CVE-2026-9917: Uninitialized Use in WebGL
    * CVE-2026-9918: Inappropriate implementation in Tint
    * CVE-2026-9919: Out of bounds read in WebGL
    * CVE-2026-9920: Uninitialized Use in GPU
    * CVE-2026-9921: Uninitialized Use in WebGL
    * CVE-2026-9922: Use after free in GPU
    * CVE-2026-9923: Use after free in Skia
    * CVE-2026-9924: Heap buffer overflow in ANGLE
    * CVE-2026-9925: Use after free in ANGLE
    * CVE-2026-9926: Heap buffer overflow in ANGLE
    * CVE-2026-9927: Use after free in ANGLE
    * CVE-2026-9928: Out of bounds read in ANGLE
    * CVE-2026-9929: Inappropriate implementation in WebGL
    * CVE-2026-9930: Out of bounds write in Dawn
    * CVE-2026-9931: Use after free in GPU
    * CVE-2026-9932: Use after free in ANGLE
    * CVE-2026-9933: Use after free in Input
    * CVE-2026-9934: Use after free in Aura
    * CVE-2026-9935: Uninitialized Use in ANGLE
    * CVE-2026-9936: Use after free in GFX
    * CVE-2026-9937: Use after free in UI
    * CVE-2026-9938: Inappropriate implementation in V8
    * CVE-2026-9939: Heap buffer overflow in WebCodecs
    * CVE-2026-9940: Heap buffer overflow in ANGLE
    * CVE-2026-9941: Use after free in ANGLE
    * CVE-2026-9942: Uninitialized Use in ANGLE
    * CVE-2026-9943: Out of bounds read in WebGL
    * CVE-2026-9944: Uninitialized Use in ANGLE
    * CVE-2026-9945: Use after free in Media
    * CVE-2026-9946: Use after free in ANGLE
    * CVE-2026-9947: Use after free in XML
    * CVE-2026-9948: Use after free in Views
    * CVE-2026-9949: Use after free in Core
    * CVE-2026-9950: Insufficient validation of untrusted input in iOS
    * CVE-2026-9951: Use after free in UI
    * CVE-2026-9952: Use after free in WebAudio
    * CVE-2026-9953: Out of bounds read in ANGLE
    * CVE-2026-9954: Use after free in TabStrip
    * CVE-2026-9955: Inappropriate implementation in iOS
    * CVE-2026-9956: Use after free in iOS
    * CVE-2026-9957: Use after free in PDF
    * CVE-2026-9958: Use after free in PDFium
    * CVE-2026-9959: Race in WebRTC
    * CVE-2026-9960: Integer overflow in PDFium
    * CVE-2026-9961: Use after free in SurfaceCapture
    * CVE-2026-9962: Use after free in WebRTC
    * CVE-2026-9963: Uninitialized Use in iOS
    * CVE-2026-9964: Use after free in Bluetooth
    * CVE-2026-9965: Out of bounds write in ANGLE
    * CVE-2026-9966: Integer overflow in XML
    * CVE-2026-9967: Out of bounds write in GPU
    * CVE-2026-9968: Integer overflow in V8
    * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9970: Use after free in WebGL
    * CVE-2026-9971: Inappropriate implementation in iOS
    * CVE-2026-9972: Uninitialized Use in Gamepad
    * CVE-2026-9973: Out of bounds write in V8
    * CVE-2026-9974: Out of bounds write in GPU
    * CVE-2026-9975: Out of bounds read and write in ANGLE
    * CVE-2026-9976: Inappropriate implementation in USB
    * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
    * CVE-2026-9978: Use after free in Glic
    * CVE-2026-9979: Insufficient validation of untrusted input in Input
    * CVE-2026-9980: Insufficient validation of untrusted input in Printing
    * CVE-2026-9981: Inappropriate implementation in Skia
    * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9983: Type Confusion in Skia
    * CVE-2026-9984: Use after free in UI
    * CVE-2026-9985: Insufficient validation of untrusted input in Media
    * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
    * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-9988: Use after free in WebRTC
    * CVE-2026-9989: Inappropriate implementation in Media
    * CVE-2026-9990: Use after free in WebAppInstalls
    * CVE-2026-9991: Inappropriate implementation in Media
    * CVE-2026-9992: Use after free in Network
    * CVE-2026-9993: Use after free in Views
    * CVE-2026-9994: Use after free in Core
    * CVE-2026-9995: Use after free in WebXR
    * CVE-2026-9996: Out of bounds read in WebRTC
    * CVE-2026-9997: Use after free in Input
    * CVE-2026-9998: Integer overflow in Skia
    * CVE-2026-9999: Inappropriate implementation in ANGLE
    * CVE-2026-10000: Use after free in Passwords
    * CVE-2026-10001: Use after free in PerformanceManager
    * CVE-2026-10002: Use after free in PDFium
    * CVE-2026-10003: Use after free in Views
    * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
    * CVE-2026-10005: Use after free in WebAppInstalls
    * CVE-2026-10006: Race in WebAudio
    * CVE-2026-10007: Use after free in SVG
    * CVE-2026-10008: Uninitialized Use in GPU
    * CVE-2026-10009: Integer overflow in Skia
    * CVE-2026-10010: Inappropriate implementation in Input
    * CVE-2026-10011: Inappropriate implementation in Skia
    * CVE-2026-10012: Use after free in Skia
    * CVE-2026-10013: Use after free in WebCodecs
    * CVE-2026-10014: Use after free in WebMIDI
    * CVE-2026-10015: Integer overflow in WTF
    * CVE-2026-10016: Use after free in DOM
    * CVE-2026-10017: Out of bounds read in Headless
    * CVE-2026-10018: Integer overflow in ANGLE
    * CVE-2026-10019: Integer overflow in ANGLE
    * CVE-2026-10020: Insufficient validation of untrusted input in Skia
    * CVE-2026-10021: Insufficient validation of untrusted input in USB
    * CVE-2026-10022: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 149.0.7827.53-1
changelog:
  - Update to 149.0.7827.53
    * CVE-2026-10881: Out of bounds read and write in ANGLE
    * CVE-2026-10882: Use after free in Network
    * CVE-2026-10883: Out of bounds write in ANGLE
    * CVE-2026-10884: Use after free in Chromecast
    * CVE-2026-10885: Use after free in Chrome for iOS
    * CVE-2026-10886: Use after free in FileSystem
    * CVE-2026-10887: Use after free in Chromoting
    * CVE-2026-10888: Use after free in Cast Streaming
    * CVE-2026-10889: Out of bounds read in ANGLE
    * CVE-2026-10890: Use after free in Cast
    * CVE-2026-10891: Use after free in GFX
    * CVE-2026-10892: Out of bounds write in GPU
    * CVE-2026-10893: Use after free in Chromoting
    * CVE-2026-10894: Use after free in Printing
    * CVE-2026-10895: Use after free in Ozone
    * CVE-2026-10896: Use after free in Chrome for iOS
    * CVE-2026-10897: Out of bounds write in GPU
    * CVE-2026-10898: Stack buffer overflow in GPU
    * CVE-2026-10899: Use after free in Ozone
    * CVE-2026-10900: Use after free in Passwords
    * CVE-2026-10901: Use after free in Passwords
    * CVE-2026-10902: Use after free in Ozone
    * CVE-2026-10903: Use after free in WebRTC
    * CVE-2026-10904: Inappropriate implementation in V8
    * CVE-2026-10905: Use after free in Network
    * CVE-2026-10906: Use after free in WebAuthentication
    * CVE-2026-10907: Out of bounds write in ANGLE
    * CVE-2026-10908: Use after free in FullScreen
    * CVE-2026-10909: Use after free in Dawn
    * CVE-2026-10910: Type Confusion in V8
    * CVE-2026-10911: Insufficient validation of untrusted input in Media
    * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
    * CVE-2026-10913: Use after free in ANGLE
    * CVE-2026-10914: Use after free in ANGLE
    * CVE-2026-10915: Use after free in Core
    * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10917: Insufficient validation of untrusted input in Media
    * CVE-2026-10918: Use after free in Viz
    * CVE-2026-10919: Use after free in ANGLE
    * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
    * CVE-2026-10921: Integer overflow in Dawn
    * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10923: Use after free in WebAppInstalls
    * CVE-2026-10924: Integer overflow in Chromecast
    * CVE-2026-10925: Out of bounds write in Skia
    * CVE-2026-10926: Use after free in Cast
    * CVE-2026-10927: Out of bounds read in Dawn
    * CVE-2026-10928: Script injection in Headless
    * CVE-2026-10929: Heap buffer overflow in ANGLE
    * CVE-2026-10930: Out of bounds read in ANGLE
    * CVE-2026-10931: Use after free in FileSystem
    * CVE-2026-10932: Use after free in UI
    * CVE-2026-10933: Use after free in Audio
    * CVE-2026-10934: Use after free in Autofill
    * CVE-2026-10935: Inappropriate implementation in V8
    * CVE-2026-10936: Type Confusion in V8
    * CVE-2026-10937: Inappropriate implementation in Passwords
    * CVE-2026-10938: Insufficient validation of untrusted input in Input
    * CVE-2026-10939: Use after free in WebRTC
    * CVE-2026-10940: Race in Codecs
    * CVE-2026-10941: Out of bounds memory access in Skia
    * CVE-2026-10942: Insufficient validation of untrusted input in UI
    * CVE-2026-10943: Use after free in WebRTC
    * CVE-2026-10944: Insufficient policy enforcement in Autofill
    * CVE-2026-10945: Use after free in PDF
    * CVE-2026-10946: Heap buffer overflow in Media
    * CVE-2026-10947: Use after free in WebRTC
    * CVE-2026-10948: Use after free in WebRTC
    * CVE-2026-10949: Heap buffer overflow in Video
    * CVE-2026-10950: Insufficient policy enforcement in Autofill
    * CVE-2026-10951: Use after free in Autofill
    * CVE-2026-10952: Use after free in Chrome for iOS
    * CVE-2026-10953: Use after free in Core
    * CVE-2026-10954: Use after free in Actor
    * CVE-2026-10955: Type Confusion in ANGLE
    * CVE-2026-10956: Use after free in MimeHandlerView
    * CVE-2026-10957: Use after free in Glic
    * CVE-2026-10958: Use after free in Chrome for iOS
    * CVE-2026-10959: Use after free in Input
    * CVE-2026-10960: Uninitialized Use in Codecs
    * CVE-2026-10961: Use after free in Chrome for iOS
    * CVE-2026-10962: Type Confusion in Media
    * CVE-2026-10963: Integer overflow in V8
    * CVE-2026-10964: Integer overflow in V8
    * CVE-2026-10965: Integer overflow in DevTools
    * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
    * CVE-2026-10967: Use after free in SurfaceCapture
    * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
    * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
    * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
    * CVE-2026-10971: Insufficient validation of untrusted input in Printing
    * CVE-2026-10972: Use after free in Ozone
    * CVE-2026-10973: Uninitialized Use in Dawn
    * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-10975: Use after free in WebRTC
    * CVE-2026-10976: Uninitialized Use in Dawn
    * CVE-2026-10977: Uninitialized Use in Skia
    * CVE-2026-10978: Use after free in Chromoting
    * CVE-2026-10979: Out of bounds read in ANGLE
    * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
    * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
    * CVE-2026-10982: Use after free in WebXR
    * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
    * CVE-2026-10984: Inappropriate implementation in Accessibility
    * CVE-2026-10985: Out of bounds read in Skia
    * CVE-2026-10986: Integer overflow in Media
    * CVE-2026-10987: Integer overflow in V8
    * CVE-2026-10988: Use after free in Views
    * CVE-2026-10989: Inappropriate implementation in V8
    * CVE-2026-10990: Use after free in Glic
    * CVE-2026-10991: Use after free in V8
    * CVE-2026-10992: Insufficient data validation in Animation
    * CVE-2026-10993: Heap buffer overflow in Skia
    * CVE-2026-10994: Uninitialized Use in ANGLE
    * CVE-2026-10995: Heap buffer overflow in TabStrip
    * CVE-2026-10996: Inappropriate implementation in Workers
    * CVE-2026-10997: Insufficient policy enforcement in Extensions
    * CVE-2026-10998: Out of bounds read in Media
    * CVE-2026-10999: Out of bounds memory access in ANGLE
    * CVE-2026-11000: Use after free in Fonts
    * CVE-2026-11001: Incorrect security UI in Payments
    * CVE-2026-11002: Use after free in Autofill
    * CVE-2026-11003: Use after free in WebRTC
    * CVE-2026-11004: Out of bounds read in ANGLE
    * CVE-2026-11005: Out of bounds read in ANGLE
    * CVE-2026-11006: Out of bounds read in Dawn
    * CVE-2026-11007: Insufficient validation of untrusted input in WebView
    * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-11009: Use after free in USB
    * CVE-2026-11010: Use after free in WebShare
    * CVE-2026-11011: Insufficient policy enforcement in Password Manager
    * CVE-2026-11012: Use after free in Serial
    * CVE-2026-11013: Insufficient validation of untrusted input in Network
    * CVE-2026-11014: Insufficient policy enforcement in Extensions
    * CVE-2026-11015: Out of bounds read in WebGPU
    * CVE-2026-11016: Insufficient validation of untrusted input in Network
    * CVE-2026-11017: Inappropriate implementation in Link Preview
    * CVE-2026-11018: Insufficient policy enforcement in Actor
    * CVE-2026-11019: Inappropriate implementation in Payments
    * CVE-2026-11020: Inappropriate implementation in Extensions
    * CVE-2026-11021: Insufficient validation of untrusted input in GPU
    * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-11024: Stack buffer overflow in Skia
    * CVE-2026-11025: Insufficient policy enforcement in Navigation
    * CVE-2026-11026: Insufficient policy enforcement in Extensions
    * CVE-2026-11027: Insufficient validation of untrusted input in Glic
    * CVE-2026-11028: Use after free in Media
    * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
    * CVE-2026-11030: Use after free in Network
    * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11032: Insufficient data validation in Password Manager
    * CVE-2026-11033: Uninitialized Use in WebML
    * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
    * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
    * CVE-2026-11036: Inappropriate implementation in DOM
    * CVE-2026-11037: Out of bounds write in Codecs
    * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
    * CVE-2026-11039: Uninitialized Use in Skia
    * CVE-2026-11040: Use after free in ANGLE
    * CVE-2026-11041: Insufficient validation of untrusted input in Media
    * CVE-2026-11042: Use after free in Views
    * CVE-2026-11043: Out of bounds write in ANGLE
    * CVE-2026-11044: Integer overflow in ANGLE
    * CVE-2026-11045: Insufficient validation of untrusted input in GPU
    * CVE-2026-11046: Insufficient validation of untrusted input in Media
    * CVE-2026-11047: Insufficient validation of untrusted input in Base
    * CVE-2026-11048: Inappropriate implementation in Extensions
    * CVE-2026-11049: Use after free in Password Manager
    * CVE-2026-11050: Use after free in V8
    * CVE-2026-11051: Out of bounds read in ANGLE
    * CVE-2026-11052: Type Confusion in GPU
    * CVE-2026-11053: VULNERABILITY in WebRTC
    * CVE-2026-11054: Use after free in WebRTC
    * CVE-2026-11055: Use after free in ANGLE
    * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
    * CVE-2026-11057: Uninitialized Use in Skia
    * CVE-2026-11058: Integer overflow in CredentialProvider
    * CVE-2026-11059: Use after free in Blink
    * CVE-2026-11060: Use after free in Media
    * CVE-2026-11061: Out of bounds read in ANGLE
    * CVE-2026-11062: Insufficient policy enforcement in Extensions
    * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
    * CVE-2026-11064: Uninitialized Use in GPU
    * CVE-2026-11065: Use after free in ANGLE
    * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-11067: Uninitialized Use in Dawn
    * CVE-2026-11068: Use after free in WebSockets
    * CVE-2026-11069: Insufficient validation of untrusted input in Cast
    * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11071: Use after free in Base
    * CVE-2026-11072: Use after free in WebView
    * CVE-2026-11073: Use after free in WebGL
    * CVE-2026-11074: Use after free in WebRTC
    * CVE-2026-11075: Out of bounds read in V8
    * CVE-2026-11076: Type Confusion in CSS
    * CVE-2026-11077: Out of bounds read in Dawn
    * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
    * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11080: Use after free in WebView
    * CVE-2026-11081: Policy bypass in Canvas
    * CVE-2026-11082: Use after free in GPU
    * CVE-2026-11083: Inappropriate implementation in Password Manager
    * CVE-2026-11084: Inappropriate implementation in Password Manager
    * CVE-2026-11085: Integer overflow in GPU
    * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11087: Uninitialized Use in ANGLE
    * CVE-2026-11088: Integer overflow in ANGLE
    * CVE-2026-11089: Uninitialized Use in Media
    * CVE-2026-11090: Uninitialized Use in ANGLE
    * CVE-2026-11091: Inappropriate implementation in Dawn
    * CVE-2026-11092: Insufficient policy enforcement in DevTools
    * CVE-2026-11093: Insufficient validation of untrusted input in Printing
    * CVE-2026-11094: Use after free in Codecs
    * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11096: Out of bounds read in WebRTC
    * CVE-2026-11097: Inappropriate implementation in WebView
    * CVE-2026-11098: Insufficient validation of untrusted input in GPU
    * CVE-2026-11099: Vulnerability in Skia
    * CVE-2026-11100: Use after free in File Input
    * CVE-2026-11101: Uninitialized Use in Dawn
    * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-11103: Inappropriate implementation in Installer
    * CVE-2026-11104: Uninitialized Use in ANGLE
    * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
    * CVE-2026-11106: Inappropriate implementation in Media
    * CVE-2026-11107: Inappropriate implementation in Downloads
    * CVE-2026-11108: Inappropriate implementation in NFC
    * CVE-2026-11109: Uninitialized Use in ANGLE
    * CVE-2026-11110: Uninitialized Use in ANGLE
    * CVE-2026-11111: Out of bounds read in ANGLE
    * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-11114: Use after free in Device Trust
    * CVE-2026-11115: Use after free in Updater
    * CVE-2026-11116: Use after free in Chromoting
    * CVE-2026-11117: Use after free in Views
    * CVE-2026-11118: Use after free in WebRTC
    * CVE-2026-11119: Insufficient validation of untrusted input in GPU
    * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
    * CVE-2026-11121: Insufficient validation of untrusted input in Skia
    * CVE-2026-11122: Inappropriate implementation in Keyboard
    * CVE-2026-11123: Uninitialized Use in ANGLE
    * CVE-2026-11124: Heap buffer overflow in Skia
    * CVE-2026-11125: Use after free in Compositing
    * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11127: Inappropriate implementation in WebAPKs
    * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
    * CVE-2026-11129: Inappropriate implementation in Extensions
    * CVE-2026-11130: Use after free in Media
    * CVE-2026-11131: Use after free in Autofill
    * CVE-2026-11132: Policy bypass in Paint
    * CVE-2026-11133: Insufficient policy enforcement in Paint
    * CVE-2026-11134: Insufficient data validation in Media
    * CVE-2026-11135: Insufficient policy enforcement in Autofill
    * CVE-2026-11136: Use after free in Canvas
    * CVE-2026-11137: Uninitialized Use in ANGLE
    * CVE-2026-11138: Uninitialized Use in ANGLE
    * CVE-2026-11139: Policy bypass in Paint
    * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-11141: Uninitialized Use in Audio
    * CVE-2026-11142: Policy bypass in Paint
    * CVE-2026-11143: Heap buffer overflow in Extensions
    * CVE-2026-11144: Use after free in Media
    * CVE-2026-11145: Race in Geolocation
    * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
    * CVE-2026-11147: Use after free in WebML
    * CVE-2026-11148: Inappropriate implementation in Payments
    * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11150: Inappropriate implementation in XML
    * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11152: Object lifecycle issue in Dawn
    * CVE-2026-11153: Side-channel information leakage in Forms
    * CVE-2026-11154: Use after free in Dawn
    * CVE-2026-11155: Insufficient policy enforcement in CSS
    * CVE-2026-11156: Inappropriate implementation in CSS
    * CVE-2026-11157: Script injection in Accessibility
    * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
    * CVE-2026-11159: Uninitialized Use in Skia
    * CVE-2026-11160: Out of bounds read in Input
    * CVE-2026-11161: Insufficient data validation in DataTransfer
    * CVE-2026-11162: Insufficient policy enforcement in CSS
    * CVE-2026-11163: Use after free in Messages
    * CVE-2026-11164: Use after free in Blink
    * CVE-2026-11165: Use after free in WebMIDI
    * CVE-2026-11166: Inappropriate implementation in SVG
    * CVE-2026-11167: Inappropriate implementation in WebView
    * CVE-2026-11168: Insufficient policy enforcement in Extensions
    * CVE-2026-11169: Inappropriate implementation in XML
    * CVE-2026-11170: Inappropriate implementation in Chromoting
    * CVE-2026-11171: Integer overflow in Blink
    * CVE-2026-11172: Incorrect security UI in Contact Picker
    * CVE-2026-11173: Out of bounds write in V8
    * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
    * CVE-2026-11175: Incorrect security UI in Messages
    * CVE-2026-11176: Inappropriate implementation in Media
    * CVE-2026-11177: Use after free in Omnibox
    * CVE-2026-11178: Policy bypass in WebView
    * CVE-2026-11179: Inappropriate implementation in ORB
    * CVE-2026-11180: Policy bypass in SVG
    * CVE-2026-11181: Inappropriate implementation in Media Session
    * CVE-2026-11182: Inappropriate implementation in SVG
    * CVE-2026-11183: Out of bounds read in GWP-ASan
    * CVE-2026-11184: Insufficient policy enforcement in Actor
    * CVE-2026-11185: Use after free in V8
    * CVE-2026-11186: Inappropriate implementation in CSS
    * CVE-2026-11187: Insufficient policy enforcement in Glic
    * CVE-2026-11188: Use after free in USB
    * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
    * CVE-2026-11190: Insufficient policy enforcement in Extensions
    * CVE-2026-11191: Out of bounds memory access in ANGLE
    * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11193: Insufficient policy enforcement in Password Manager
    * CVE-2026-11194: Inappropriate implementation in Network
    * CVE-2026-11195: Inappropriate implementation in MHTML
    * CVE-2026-11196: Type Confusion in XML
    * CVE-2026-11197: Insufficient policy enforcement in Workers
    * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
    * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
    * CVE-2026-11200: Inappropriate implementation in WebRTC
    * CVE-2026-11201: Use after free in ServiceWorker
    * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-11203: Policy bypass in GPU
    * CVE-2026-11204: Inappropriate implementation in Signin
    * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-11206: Policy bypass in ServiceWorker
    * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
    * CVE-2026-11208: Use after free in Codecs
    * CVE-2026-11209: Insufficient policy enforcement in Passwords
    * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
    * CVE-2026-11211: Integer overflow in V8
    * CVE-2026-11212: Insufficient policy enforcement in DevTools
    * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
    * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
    * CVE-2026-11215: Inappropriate implementation in Cronet
    * CVE-2026-11216: Incorrect security UI in File Input
    * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
    * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
    * CVE-2026-11219: Insufficient data validation in Navigation
    * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
    * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
    * CVE-2026-11222: Incorrect security UI in Tab Strip
    * CVE-2026-11223: Insufficient validation of untrusted input in Network
    * CVE-2026-11224: Use after free in Chromoting
    * CVE-2026-11225: Incorrect security UI in WebUI
    * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
    * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
    * CVE-2026-11228: Incorrect security UI in File Input
    * CVE-2026-11229: Insufficient policy enforcement in Enterprise
    * CVE-2026-11230: Use after free in Extensions
    * CVE-2026-11231: Inappropriate implementation in Safe Browsing
    * CVE-2026-11232: Inappropriate implementation in TabGroups
    * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
    * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
    * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
    * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
    * CVE-2026-11237: Insufficient validation of untrusted input in Media
    * CVE-2026-11238: Inappropriate implementation in DevTools
    * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11240: Insufficient validation of untrusted input in Loader
    * CVE-2026-11241: Insufficient validation of untrusted input in Cast
    * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
    * CVE-2026-11243: Incorrect security UI in Downloads
    * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
    * CVE-2026-11245: Inappropriate implementation in Payments
    * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
    * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
    * CVE-2026-11248: Policy bypass in Google Lens
    * CVE-2026-11249: Use after free in Network
    * CVE-2026-11250: Inappropriate implementation in DevTools
    * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
    * CVE-2026-11252: Policy bypass in Content Settings
    * CVE-2026-11253: Race in Permissions
    * CVE-2026-11254: Inappropriate implementation in Permissions
    * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
    * CVE-2026-11256: Out of bounds read in GPU
    * CVE-2026-11257: Inappropriate implementation in Browser
    * CVE-2026-11258: Inappropriate implementation in File System Access
    * CVE-2026-11259: Insufficient validation of untrusted input in Cast
    * CVE-2026-11260: Policy bypass in Permissions
    * CVE-2026-11261: Insufficient validation of untrusted input in PDF
    * CVE-2026-11262: Use after free in TabStrip
    * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
    * CVE-2026-11264: Policy bypass in Content Security Policy
    * CVE-2026-11265: Insufficient data validation in Autofill
    * CVE-2026-11266: Policy bypass in SafeBrowsing
    * CVE-2026-11267: Insufficient policy enforcement in Extensions
    * CVE-2026-11268: Uninitialized Use in ANGLE
    * CVE-2026-11269: Inappropriate implementation in Extensions
    * CVE-2026-11270: Inappropriate implementation in UI
    * CVE-2026-11271: Incorrect security UI in Passwords
    * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
    * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
    * CVE-2026-11274: Inappropriate implementation in DOM Distiller
    * CVE-2026-11275: Insufficient policy enforcement in Page Info
    * CVE-2026-11276: Inappropriate implementation in Cast
    * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11278: Inappropriate implementation in CustomTabs
    * CVE-2026-11279: Out of bounds read in DevTools
    * CVE-2026-11280: Insufficient validation of untrusted input in Signin
    * CVE-2026-11281: Integer overflow in Chromoting
    * CVE-2026-11282: Policy bypass in Sandbox
    * CVE-2026-11283: Policy bypass in Shortcuts
    * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
    * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
    * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
    * CVE-2026-11288: Policy bypass in CSS
    * CVE-2026-11289: Side-channel information leakage in Paint
    * CVE-2026-11290: Integer overflow in WebView
    * CVE-2026-11291: Policy bypass in Android Autofill
    * CVE-2026-11292: Policy bypass in Blink
    * CVE-2026-11293: Use after free in Input
    * CVE-2026-11294: Inappropriate implementation in Passwords
    * CVE-2026-11295: Inappropriate implementation in WebView
    * CVE-2026-11296: Inappropriate implementation in ImageCapture
    * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
    * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11299: Out of bounds read in Fonts
    * CVE-2026-11300: Inappropriate implementation in Permissions
    * CVE-2026-11301: Out of bounds read in LiveCaption
    * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-11303: Use after free in PDFium
    * CVE-2026-11304: Use after free in PDFium
    * CVE-2026-11305: Use after free in PDFium
    * CVE-2026-11306: Use after free in PDFium
    * CVE-2026-11307: Use after free in PDFium
    * CVE-2026-11308: Inappropriate implementation in Extensions
    * CVE-2026-11309: Insufficient policy enforcement in History


author: Than Ngo <than@redhat.com> - 149.0.7827.102-1
changelog:
  - Update to 149.0.7827.102
    * CVE-2026-11628: Use after free in Ozone
    * CVE-2026-11629: Use after free in Ozone
    * CVE-2026-11630: Use after free in File Input
    * CVE-2026-11631: Use after free in Aura
    * CVE-2026-11632: Use after free in TabStrip
    * CVE-2026-11633: Use after free in Bluetooth
    * CVE-2026-11634: Use after free in Gamepad
    * CVE-2026-11635: Use after free in Bluetooth
    * CVE-2026-11636: Use after free in Autofill
    * CVE-2026-11637: Use after free in Views
    * CVE-2026-11638: Use after free in Printing
    * CVE-2026-11639: Use after free in Compositing
    * CVE-2026-11640: Integer overflow in libyuv
    * CVE-2026-11641: Use after free in Bluetooth
    * CVE-2026-11642: Use after free in Web Apps
    * CVE-2026-11643: Use after free in Proxy
    * CVE-2026-11644: Use after free in Views
    * CVE-2026-11645: Out of bounds memory access in V8
    * CVE-2026-11646: Use after free in ViewTransitions
    * CVE-2026-11647: Use after free in Printing
    * CVE-2026-11648: Use after free in FullScreen
    * CVE-2026-11649: Use after free in V8
    * CVE-2026-11650: Use after free in V8
    * CVE-2026-11651: Use after free in Network
    * CVE-2026-11652: Use after free in Extensions
    * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11654: Use after free in CameraCapture
    * CVE-2026-11655: Integer overflow in Media
    * CVE-2026-11656: Use after free in ServiceWorker
    * CVE-2026-11657: Use after free in Payments
    * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
    * CVE-2026-11659: Insufficient validation of untrusted input in UI
    * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
    * CVE-2026-11661: Use after free in Views
    * CVE-2026-11662: Type Confusion in Bindings
    * CVE-2026-11663: Use after free in Skia
    * CVE-2026-11664: Use after free in Payments
    * CVE-2026-11665: Out of bounds read in Dawn
    * CVE-2026-11666: Insufficient validation of untrusted input in Input
    * CVE-2026-11667: Out of bounds read in WebRTC
    * CVE-2026-11668: Uninitialized Use in Codecs
    * CVE-2026-11669: Integer overflow in Media
    * CVE-2026-11670: Use after free in PDF
    * CVE-2026-11671: Use after free in Navigation
    * CVE-2026-11672: Out of bounds write in GPU
    * CVE-2026-11673: Use after free in InterestGroups
    * CVE-2026-11674: Use after free in Guest View
    * CVE-2026-11675: Insufficient validation of untrusted input in Skia
    * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11677: Race in Network
    * CVE-2026-11678: Integer overflow in libyuv
    * CVE-2026-11679: Use after free in Codecs
    * CVE-2026-11680: Use after free in Media
    * CVE-2026-11681: Use after free in Ozone
    * CVE-2026-11682: Insufficient validation of untrusted input in Views
    * CVE-2026-11683: Use after free in WebCodecs
    * CVE-2026-11684: Insufficient policy enforcement in Network
    * CVE-2026-11685: Insufficient data validation in MediaCapture
    * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
    * CVE-2026-11687: Use after free in Dawn
    * CVE-2026-11688: Object lifecycle issue in SVG
    * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
    * CVE-2026-11690: Out of bounds read and write in Media
    * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
    * CVE-2026-11692: Use after free in Read Anything
    * CVE-2026-11693: Inappropriate implementation in Plugins
    * CVE-2026-11694: Use after free in ServiceWorker
    * CVE-2026-11695: Inappropriate implementation in Passwords
    * CVE-2026-11696: Uninitialized Use in Video
    * CVE-2026-11697: Insufficient validation of untrusted input in UI
    * CVE-2026-11698: Use after free in Bluetooth
    * CVE-2026-11699: Use after free in Bluetooth
    * CVE-2026-11700: Use after free in Tracing
    * CVE-2026-11701: Insufficient validation of untrusted input in Guest View
  - Refresh ppc64le patches


author: Than Ngo <than@redhat.com> - 149.0.7827.114-1
changelog:
  - Update to 149.0.7827.114
    * CVE-2026-12007: Use after free  Core
    * CVE-2026-12008: Use after free  DigitalCredentials
    * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
    * CVE-2026-12010: Heap buffer overflow  GPU
    * CVE-2026-12011: Use after free  WebMIDI
    * CVE-2026-12012: Use after free  Network
    * CVE-2026-12013: Use after free  Media
    * CVE-2026-12014: Use after free  Cast
    * CVE-2026-12015: Use after free  Autofill
    * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
    * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
    * CVE-2026-12018: Inappropriate implementation  Mojo
    * CVE-2026-12019: Out of bounds write  Codecs
    * CVE-2026-12020: Use after free  Autofill
    * CVE-2026-12022: Race  Safe Browsing
    * CVE-2026-12023: Use after free  GPU
    * CVE-2026-12024: Insufficient policy enforcement  DevTools
    * CVE-2026-12025: Insufficient validation of untrusted input  Network
    * CVE-2026-12026: Out of bounds read  Video
    * CVE-2026-12027: Insufficient policy enforcement  Headless
    * CVE-2026-12028: Use after free  GPU
    * CVE-2026-12029: Use after free  Video
    * CVE-2026-12030: Heap buffer overflow  GPU
    * CVE-2026-12031: Inappropriate implementation  Views
    * CVE-2026-12032: Inappropriate implementation  Passwords
    * CVE-2026-12033: Out of bounds read  VideoCapture
    * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
    * CVE-2026-12035: Use after free  Views
  - Disable AI Mode settings


author: Than Ngo <than@redhat.com> - 149.0.7827.155-1
changelog:
  - Update to 149.0.7827.155
    * CVE-2026-12437: Use after free in WebShare
    * CVE-2026-12438: Inappropriate implementation in WebView
    * CVE-2026-12439: Use after free in Digital Credentials
    * CVE-2026-12440: Use after free in DigitalCredentials
    * CVE-2026-12441: Use after free in File Input
    * CVE-2026-12442: Use after free in Passwords
    * CVE-2026-12443: Use after free in Web Authentication
    * CVE-2026-12444: Out of bounds read in Chromoting
    * CVE-2026-12445: Use after free in Extensions
    * CVE-2026-12446: Insufficient data validation in Passwords
    * CVE-2026-12447: Heap buffer overflow in WebRTC
    * CVE-2026-12448: Inappropriate implementation in WebView
    * CVE-2026-12449: Use after free in Chromoting
    * CVE-2026-12450: Inappropriate implementation in Media
    * CVE-2026-12451: Use after free in DigitalCredentials
    * CVE-2026-12452: Use after free in Downloads
    * CVE-2026-12453: Insufficient validation of untrusted input in Input
    * CVE-2026-12454: Race in Safe Browsing
    * CVE-2026-12455: Use after free in Tab Strip
    * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
    * CVE-2026-12457: Insufficient data validation in Extensions
    * CVE-2026-12458: Incorrect security UI in Passwords
    * CVE-2026-12459: Inappropriate implementation in Serial
    * CVE-2026-12460: Insufficient policy enforcement in File System Access
    * CVE-2026-12461: Out of bounds read in WebRTC
    * CVE-2026-12462: Use after free in Media
    * CVE-2026-12463: Inappropriate implementation in Views
    * CVE-2026-12464: Use after free in Browser
    * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
    * CVE-2026-12466: Heap buffer overflow in WebRTC
    * CVE-2026-12467: Use after free in Extensions
    * CVE-2026-12468: Inappropriate implementation in Updater
    * CVE-2026-12469: Uninitialized Use in GPU


author: Miroslav Lichvar <mlichvar@redhat.com> 4.7-2
changelog:
  - let systemd create /var/lib/chrony and /var/log/chrony (#2372944)
  - drop workaround for broken build on aarch64
  - drop old conflict with NetworkManager


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Stephane Thiell <sthiell@stanford.edu> - 1.9.3-6
changelog:
  - Migrate from deprecated setup.py build/install to pyproject macros
  - Switch Source0 to PyPI archive for canonical tree naming


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.4.1-2
changelog:
  - Drop aspell-en BuildRequires as it's deprecated
    https://fedoraproject.org/wiki/Changes/AspellDeprecation


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.12
changelog:
  - update from trunk
    - PRs ada/119571, analyzer/113253, bootstrap/119680, c/78008, c/81831,
  	c/101440, c/114957, c/117689, c/118118, c/119173, c/119582, c/119612,
  	c++/60972, c++/64500, c++/90468, c++/99546, c++/106976, c++/109961,
  	c++/113925, c++/116285, c++/116960, c++/117336, c++/117530,
  	c++/117849, c++/118249, c++/118626, c++/118629, c++/118698,
  	c++/118982, c++/119303, c++/119383, c++/119387, c++/119401,
  	c++/119462, c++/119518, c++/119551, c++/119563, c++/119564,
  	c++/119574, c++/119608, c++/119652, cobol/119283, cobol/119295,
  	cobol/119364, cobol/119414, cobol/119521, cobol/119682, d/117002,
  	d/117832, d/118309, driver/58973, fortran/101602, fortran/119460,
  	fortran/119656, gcov-profile/119535, gcov-profile/119553,
  	gcov-profile/119618, ipa/119599, libfortran/119460, libstdc++/109162,
  	libstdc++/110498, libstdc++/114758, libstdc++/114945,
  	libstdc++/115046, libstdc++/119517, libstdc++/119545,
  	libstdc++/119550, libstdc++/119593, libstdc++/119620,
  	libstdc++/119642, libstdc++/119671, middle-end/78874,
  	middle-end/101018, middle-end/112589, middle-end/116595,
  	middle-end/118965, middle-end/119442, middle-end/119482,
  	middle-end/119537, middle-end/119541, middle-end/119559,
  	middle-end/119613, middle-end/119662, preprocessor/118674,
  	preprocessor/119391, rtl-optimization/119291, rtl-optimization/119594,
  	rtl-optimization/119672, rtl-optimization/119689, target/117759,
  	target/119308, target/119369, target/119473, target/119539,
  	target/119549, target/119556, target/119572, target/119573,
  	target/119645, target/119664, target/119678, testsuite/116398,
  	testsuite/118597, tree-optimization/80331, tree-optimization/87502,
  	tree-optimization/103827, tree-optimization/113281,
  	tree-optimization/118924, tree-optimization/119491,
  	tree-optimization/119493, tree-optimization/119532,
  	tree-optimization/119534, tree-optimization/119586,
  	tree-optimization/119614, tree-optimization/119616,
  	tree-optimization/119640, web/119227
    - fix up LTO opts handling (##2356219, PR lto/119625)


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.13
changelog:
  - update from trunk and releases/gcc-14 branch
    - PRs ada/119643, c/88382, c/119717, c++/99214, c++/101180, c++/106618,
  	c++/111075, c++/112288, c++/113360, c++/113835, c++/114772,
  	c++/114970, c++/115639, c++/116416, c++/116954, c++/119175,
  	c++/119345, c++/119687, c++/119692, c++/119755, c++/119807,
  	cobol/119217, cobol/119302, cobol/119694, cobol/119759, cobol/119776,
  	cobol/119777, d/109023, d/119758, d/119761, d/119799, d/119817,
  	d/119826, driver/90465, driver/119727, fortran/106948, fortran/119669,
  	ipa/113203, ipa/119318, ipa/119803, libfortran/119502, libgcc/101075,
  	libgcc/119796, libgomp/119849, libstdc++/21334, libstdc++/119725,
  	libstdc++/119748, libstdc++/119840, lto/119792, middle-end/14708,
  	middle-end/105548, middle-end/119706, middle-end/119808,
  	modula2/119735, modula2/119779, rtl-optimization/118502,
  	rtl-optimization/119785, rust/119341, rust/119342, sanitizer/119801,
  	target/42683, target/97106, target/97585, target/106445,
  	target/108134, target/113633, target/116827, target/118794,
  	target/119298, target/119386, target/119533, target/119547,
  	target/119673, target/119784, target/119834, testsuite/117706,
  	translation/119684, tree-optimization/71094, tree-optimization/87909,
  	tree-optimization/112822, tree-optimization/116093,
  	tree-optimization/118476, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119718,
  	tree-optimization/119722, tree-optimization/119757,
  	tree-optimization/119778


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
  	c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
  	c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
  	fortran/102900, fortran/119928, fortran/119986, fortran/120049,
  	fortran/120107, fortran/120139, fortran/120163, fortran/120179,
  	fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
  	libfortran/120152, libfortran/120153, libfortran/120158,
  	libfortran/120196, libstdc++/118260, libstdc++/119427,
  	libstdc++/119714, libstdc++/120029, libstdc++/120114,
  	libstdc++/120159, libstdc++/120187, libstdc++/120190,
  	libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
  	modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
  	preprocessor/120061, target/119610, testsuite/119909,
  	tree-optimization/111873, tree-optimization/119712,
  	tree-optimization/120043, tree-optimization/120048,
  	tree-optimization/120074, tree-optimization/120089,
  	tree-optimization/120143, tree-optimization/120211


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-3
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/120665, ada/120705, ada/120854, c/120180, c++/116064, c++/120123,
  	c++/120363, c++/120413, c++/120414, c++/120471, c++/120502,
  	c++/120555, c++/120575, c++/120684, c++/120940, fortran/51961,
  	fortran/85750, fortran/99838, fortran/101735, fortran/102599,
  	fortran/114022, fortran/119856, fortran/119948, fortran/120193,
  	fortran/120355, fortran/120483, fortran/120711, fortran/120784,
  	ipa/120295, libfortran/119856, libstdc++/99832, libstdc++/120367,
  	libstdc++/120432, libstdc++/120465, libstdc++/120548,
  	libstdc++/120625, libstdc++/120648, libstdc++/120650,
  	libstdc++/120931, libstdc++/120934, middle-end/118694,
  	middle-end/120369, middle-end/120547, middle-end/120608,
  	middle-end/120631, rtl-optimization/116389, rtl-optimization/120050,
  	rtl-optimization/120182, rtl-optimization/120347,
  	rtl-optimization/120423, rtl-optimization/120550,
  	rtl-optimization/120795, target/86772, target/119971, target/120042,
  	target/120441, target/120442, target/120480, target/120624,
  	testsuite/52641, testsuite/120082, testsuite/120919,
  	tree-optimization/116352, tree-optimization/119960,
  	tree-optimization/120003, tree-optimization/120341,
  	tree-optimization/120357, tree-optimization/120638,
  	tree-optimization/120654, tree-optimization/120677,
  	tree-optimization/120729, tree-optimization/120927
  - fix up FE lowering of pointer arith (PR c/120837)
  - perform %check with -foffload=disable flag


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-4
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121056, c++/87097, c++/120569, c++/120628, c++/120954,
  	fortran/104428, fortran/120637, fortran/120843, fortran/120847,
  	fortran/121060, ipa/121023, libstdc++/118681, libstdc++/119754,
  	libstdc++/120997, middle-end/120709, modula2/117203, modula2/119650,
  	modula2/120253, modula2/120389, modula2/120474, modula2/120497,
  	modula2/120542, modula2/120606, modula2/120673, modula2/120731,
  	modula2/120912, rtl-optimization/120242, rtl-optimization/120627,
  	rtl-optimization/120736, rtl-optimization/120813, target/118241,
  	target/120356, target/120807, target/120908, target/120995,
  	target/120999, tree-optimization/118669, tree-optimization/120358,
  	tree-optimization/120780, tree-optimization/120817,
  	tree-optimization/120924, tree-optimization/120944,
  	tree-optimization/121035, tree-optimization/121049,
  	tree-optimization/121059, tree-optimization/121131


author: Jakub Jelinek <jakub@redhat.com> 15.1.1-5
changelog:
  - update from releases/gcc-15 branch
    - PRs cobol/119818, middle-end/120935, modula2/121164, testsuite/119508


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.2 release
    - PRs ada/120440, ada/121184, c/119950, c/120055, c/120353, c/120354,
  	c++/95615, c++/108080, c++/109283, c++/115605, c++/115908, c++/116775,
  	c++/118074, c++/118903, c++/119916, c++/120224, c++/120243,
  	c++/120273, c++/120412, c++/120453, c++/120495, c++/120577,
  	c++/120756, c++/120800, c++/120845, c++/121055, c++/121133,
  	c++/121219, c++/121238, cobol/119231, cobol/119323, cobol/119335,
  	cobol/119337, cobol/119377, cobol/119524, cobol/119632, cobol/119695,
  	cobol/119770, cobol/119771, cobol/119772, cobol/119790, cobol/119810,
  	cobol/119885, cobol/119975, cobol/120251, cobol/120328, cobol/120402,
  	cobol/120621, cobol/120765, cobol/120772, cobol/120779, cobol/120790,
  	cobol/120791, cobol/120794, fortran/119106, fortran/121145,
  	fortran/121203, ipa/114790, libstdc++/119962, libstdc++/121373,
  	lto/120308, middle-end/119835, middle-end/121095, middle-end/121159,
  	middle-end/121322, middle-end/121389, rtl-optimization/121340,
  	target/118891, target/119692, target/119737, target/119853,
  	target/119854, target/120119, target/120351, target/120427,
  	target/120530, target/120645, target/120714, target/121027,
  	target/121028, target/121064, target/121121, target/121274,
  	target/121277, testsuite/121286, testsuite/121288,
  	tree-optimization/117423, tree-optimization/118891,
  	tree-optimization/119085, tree-optimization/121127,
  	tree-optimization/121130, tree-optimization/121190,
  	tree-optimization/121202, tree-optimization/121256,
  	tree-optimization/121264, tree-optimization/121320,
  	tree-optimization/121323, tree-optimization/121413


author: Jakub Jelinek <jakub@redhat.com> 15.2.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/121968, bootstrap/118009, bootstrap/119089, c++/97740, c++/119859,
  	c++/120499, c++/120620, c++/121351, c++/121396, c++/121524,
  	c++/121724, c++/121795, c++/121801, c++/121977, c++/122015,
  	c++/122019, fortran/89092, fortran/121263, libfortran/121234,
  	libgcc/117600, libstdc++/110853, libstdc++/117276, libstdc++/119861,
  	libstdc++/120390, libstdc++/120698, libstdc++/121097,
  	libstdc++/121313, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, middle-end/121453,
  	middle-end/121828, middle-end/121831, rtl-optimization/87600,
  	rtl-optimization/120718, rtl-optimization/120983,
  	rtl-optimization/121253, rtl-optimization/121757, target/49857,
  	target/81540, target/116445, target/118280, target/118885,
  	target/119830, target/120476, target/120691, target/120986,
  	target/121007, target/121118, target/121208, target/121294,
  	target/121414, target/121449, target/121464, target/121510,
  	target/121534, target/121542, target/121548, target/121602,
  	target/121608, target/121634, target/121749, target/121794,
  	target/121906, testsuite/118567, tree-optimization/107997,
  	tree-optimization/121370, tree-optimization/121527,
  	tree-optimization/121659, tree-optimization/121844,
  	tree-optimization/121870, tree-optimization/122016


author: Petr Pisar <ppisar@redhat.com> - 1.2.1-1
changelog:
  - 1.2.1 bump
  - Fix building against rpm-5.99.91 (bug #2382611)
  - Fix lzma link argument in pkg-config file
  - Fix building with CMake 4 (bug #2380521)
  - Fix defining STDOUT_FILENO
  - Fix building with cmake and ninja (bug #2380983)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250402-1.git86c0178
changelog:
  - policies, alg_lists, openssl: remove KYBER from allowed values
  - sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250602-1.git9a48d06
changelog:
  - NO-PQ, cryptopolicies: add experimental value suppression
  - openssl: fix mistakes in integrity-only cipher definitions
  - FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  - openssl, policies: implement group_key_share option


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250620-1.git9496ef7
changelog:
  - sequoia: Add PQC algorithms
  - sequoia: Do not include EdDSA in FIPS policy
  - sequoia: Generate AEAD policy
  - FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl
  - openssl: send one PQ and one classic key_share; prioritize PQ groups
  - TEST-PQ: be more careful with the ordering


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250714-1.gitcd6043a
changelog:
  - FIPS: disable MLKEM768-X25519 for openssh (no-op)
  - python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  - gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert


author: Richard W.M. Jones <rjones@redhat.com> - 6.0.0-7
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.1.0-2
changelog:
  - Support re-generating C++ sources before building them
  - Enable C++ source re-generation by default.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.2.0-1
changelog:
  - Update to 27.2.0 (close RHBZ#2343202)
  - Upstream added a Python implementation, packaged as python3-cucumber-
    messages


author: Paul Howarth <paul@city-fan.org> - 1.7.2-1
changelog:
  - Update to 1.7.2 (rhbz#2391098)
    - Add support for libneon 34, 35
    - Increase buf read size to 64 (fixes read issue on linux 6.16)
    - Allow setting a mount password via DAVFS_PASSWORD
    - Introduce sync_on_lookup option (off by default)
    - Don't compress man pages


author: Packit <hello@packit.dev> - 19.2-1
changelog:
  - Update to version 19.2
  - Resolves: rhbz#2363940
  - Remove 0003-let-dbg_assert-format-the-string.patch
  - Disable s390x again due to several errors in check


author: Packit <hello@packit.dev> - 19.2.1-1
changelog:
  - Update to version 19.2.1
  - Resolves: rhbz#2370349
  - Re-enable s390x again after the fix of upstream issue #10218


author: Sérgio Basto <sergio@serjux.com> - 1.5.87-2
changelog:
  - Drop debconf-gnome on epel 10 because we don't have perl-GTK3 package
    and I don't know if we'll ever have or want have it (perl-GTK3 on epel 10)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.5.87-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix sbin merge for all releases


author: Simone Caronni <negativo17@gmail.com> - 2.48-2
changelog:
  - Parse the Architectures field in the Release file to select
    architectures. Fixes mirroring specific architectures from
    ports.ubuntu.com.


author: Mark Wielaard <mjw@fedoraproject.org> - 5.2-3
changelog:
  - Add 0001-Add-debugedit-classify-ar-and-use-it-before-running-.patch
  - Install debugedit-classify-ar and man page


author: Petr Pisar <ppisar@redhat.com> - 4.22.0-5
changelog:
  - Fix reporting a reboot failure by dnf-automatic
  - Fix a documentation of --disableexcludes option
  - Provide dnf4 by python3-dnf package (bug #2328463)


author: Pavel Raiskup <praiskup@redhat.com> - 2.0-1
changelog:
  - new upstream release, with DNF5 support
    https://github.com/praiskup/dnf-plugin-diff/releases/tag/v2.0


author: Evan Goode <egoode@redhat.com> - 4.9.0-1
changelog:
  - Enable leaves and show-leaves plugins for RHEL
  - expired-pgp-keys: New plugin for detecting expired PGP keys
  - reposync: Respect --norepopath with --metadata-path
  - doc: copr plugin does not respect IP family preference
  - expired-pgp-keys: Fix calling the hook at resolved time


author: Evan Goode <egoode@redhat.com> - 4.10.0-1
changelog:
  - CMakeLists.txt: Allow overriding PYTHON_INSTALL_DIR
  - Add Amazon Linux to copr chroots
  - needs-restarting: Add --exclude-services
  - needs-restarting: Add --exclude-services to man page
  - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp
  - needs-restarting: "Regular files" are often on 00:xx devices
  - needs-restarting tests: Can't discriminate block devices any more


author: Evan Goode <egoode@redhat.com> - 4.10.1-1
changelog:
  - reposync: Avoid multiple downloads of duplicate packages
  - doc: needs-restarting uses UnitsLoadStartTimestamp boot time
  - debuginfo-install: Fix missing dnf.cli import
  - copr Fix missing dnf.cli import
  - tests: Fix missing dnf.cli imports


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0-1
changelog:
  - Update to release v0.31.0
  - Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.35.0-1
changelog:
  - Update to release v0.35.0
  - Resolves: rhbz#2487819
  - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
  - Upstream enhancements, new features, and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.3.1-1
changelog:
  - Update to release v29.3.1
  - Resolves: rhbz#2451425
  - Upstream notes that this release resolves: CVE-2026-34040,
    CVE-2026-33997, CVE-2026-33748, CVE-2026-33747
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.0-1
changelog:
  - Update to release v29.4.0
  - Resolves: rhbz#2455894
  - Resolves  CVE-2026-34986: rhbz#2455665
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.1-1
changelog:
  - Update to release v29.4.1
  - Resolves: 2459826
  - Upstream fixes
  - Built with golang 1.26 (rawhide and f44 only at this time)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.2-1
changelog:
  - Update to release v29.4.2
  - Resolves: rhbz#2459826
  - Upstream fixes
  - This release includes hardening for CVE-2026-31431
  - Temporary skip for branch protection test


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.0-1
changelog:
  - Update to release v29.5.0
  - Resolves: rhbz#2467552
  - Resolves CVE-2026-32288
  - Resolves CVE-2026-31431
  - Upstream new features, fixes, and enhancements


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.5.1-1
changelog:
  - Update to release v29.5.1
  - Resolves: rhbz#2467552
  - Resolves: CVE-2026-41567, CVE-2026-41568, CVE-2026-42306
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.0-1
changelog:
  - Update to release v29.6.0
  - Resolves: rhbz#2490590
  - Resolves CVE-2026-39828: rhbz#2489945
  - Resolves CVE-2026-39829: rhbz#2490099
  - Resolves CVE-2026-39830: rhbz#2490466
  - Upstream fixes and enhancements


author: François Kooman <fkooman@tuxed.net> - 20250606-3
changelog:
  - update `dumpasn1.cfg`
  - use manpage directly from official repository
  - confirmed with author upstream moved to GitHub


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.18.22-1
changelog:
  - Update to 1.18.22.
  - Remove all EL7-related conditionals and parts.
  - Update for current Python packaging guidelines (rhbz#2377253).
  - Add support for DNF5 (rhbz#2326283).


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Carl George <carlwgeorge@fedoraproject.org> - 1.1.0-4
changelog:
  - Fix FTBFS
  - Allow building with bravado 12
  - Allow building with cryptography 45
  - Avoid installing support files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.30.5618.102^gitc0ed34e-1
changelog:
  - Put the snapshot info in the version field instead of release
  - Fix forge macros creating a massive release tag including snapshot info
    for secondary/bundled sources


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.3-1
changelog:
  - Project moved from GitLab to GitHub (gridhead/firmitas to fedora-infra/firmitas)
  - Add CI workflow for the project
  - Automated dependency update - Bump requests from 2.31.0 to 2.32.2
  - Automated dependency update - Bump urllib3 from 1.26.18 to 1.26.19
  - Automated dependency update - Bump cryptography from 41.0.7 to 42.0.4


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.4-1
changelog:
  - Attempt fixing the FTBFS RHBZ#2307964
  - More information on https://github.com/fedora-infra/firmitas/releases/tag/v0.1.4


author: Michel Lind <salimma@fedoraproject.org> - 3.10.1-1
changelog:
  - Update to 3.10.1, fixes rhbz#2323329
  - This release is compatible with Python 3.14, resolves rhbz#2326226


author: Ondrej Holy <oholy@redhat.com> - 2:3.27.1-1
changelog:
  - Update to 3.27.1 (CVE-2026-55191, CVE-2026-55192, CVE-2026-55193,
    CVE-2026-55194, CVE-2026-55648, CVE-2026-55827)
    Resolves: rhbz#2488900


author: Alexey Kurov <nucleo@fedoraproject.org> - 10.2.1-4
changelog:
  - Removed unrecognized options enable-systemd and disable-exampledir
  - Fixed sysconfdir option warning
  - Added option for support of PCRE2
  - Own local state file dir
  - Minimum libyang version 2.1.128


author: Terje Rosten <terjeros@gmail.com> - 3.7.2-54
changelog:
  - Various fixes to improve Python 3 support
  - Add back regex support on Fedora (patch from Debian, thanks!)


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Jerry James <loganjerry@gmail.com> - 1.2.7-1
changelog:
  - Version 1.2.7
  - Setting LC_ALL is no longer necessary
  - Build documentation with AutoDoc
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 2.8.2-1
changelog:
  - Version 2.8.2
  - Predownloaded ATLAS data is no longer needed for the tests
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude


author: Jerry James <loganjerry@gmail.com> - 1.0.5-1
changelog:
  - Version 1.0.5
  - Drop upstreamed set_unexpected patch
  - Setting LC_ALL is no longer necessary
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 1.6.9-1
changelog:
  - Version 1.6.9
  - gap-pkg-io is now an optional dependency instead of required
  - avoid use of %exclude


author: Jerry James <loganjerry@gmail.com> - 1.76-1
changelog:
  - Version 1.76
  - Fix loading of the package for generating documentation
  - Setting LC_ALL is no longer required
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 1.3.7-1
changelog:
  - Version 1.3.7
  - Change from C++11 to C++14 has been upstreamed
  - Setting LC_ALL is no longer necessary


author: Jerry James <loganjerry@gmail.com> - 2-1
changelog:
  - Several refinements and improvements
  - Rename gap_pkg_name to gap_pkgname
  - Rename gap_upstream_name to gap_upname
  - Remove gap_install_list
  - Add gap_skip_docs boolean conditional
  - Add gap_skip_check boolean conditional


author: Benjamin Gilbert <bgilbert@backtick.net> - 2.43.5-1
changelog:
  - Update to 2.43.5
  - Drop BMP, ICO, PNM, and TGA loaders; these are now supported via Glycin
  - Drop thumbnailer config, since gdk-pixbuf dropped the thumbnailer


author: Dan Streetman <ddstreet@ieee.org> - 43-0.2
changelog:
  - Change dbus-daemon.service to dbus-broker.service in preset files (rhbz#2373032)
  - I see you, Tom. I see you.


author: Jens Petersen <petersen@redhat.com> - 9.10.1-3
changelog:
  - new packages: ghc-experimental, ghc-platform, ghc-toolchain, os-string
  - note prof subpackages currently have incomplete deps
    due to metadata generation issue


author: Jens Petersen <petersen@redhat.com> - 9.10.1-7
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.5.11-1
changelog:
  - Update to 0.5.11
  - Fix compatibility with Mercurial 6.4 (rhbz#2259038)
  - Fix access to ssh remotes with absolute path in no-mercurial mode
  - Fix missing `distutils` error messages with Python 3.12


author: Michel Lind <salimma@fedoraproject.org> - 2.5.0-2
changelog:
  - incorporate fixes from #9 by Steve Traylen <steve.traylen@cern.ch>
  - * set PBR_VERSION
  - * simplified git checkout and tarball generation
  - * enforce that license is shipped
  - * add import checks
  - * exclude tests
  - convert the git checkout procedure into a shell script for automation
  - switch tarball to zstd compression
  - automatically apply patches (if any)
  - add rpmlint config


author: Dominik Mierzejewski <dominik@greysector.net> - 45~20250512gitf7501bc-1
changelog:
  - update to 20250512 git snapshot
  - remove rpaths with a patch
  - make file lists more explicit
  - filter out private plugin Provides:
  - bytecompile Python code and use appropriate macro in file list
  - correct License: tag
  - fix version
  - drop unused dependency


author: Luya Tshimbalanga <luya@fedoraproject.org> - 24-3
changelog:
  - Switch to [gnome-shell-rpm-generators](https://fedoraproject.org/wiki/Cha
    nges/GnomeShellExtensionDependencyGenerator) for build requirement


author: Akira TAGOH <tagoh@redhat.com> - 20250701-2
changelog:
  - Add fallback config of monospace for following languages. See
    https://fedoraproject.org/wiki/Changes/SetDefaultMonospaceFallbackFont
    - Arabic
    - Bengali
    - Devanagari
    - Ethiopic
    - Georgian
    - Gujarati
    - Hebrew
    - Kannada
    - Khmer
    - Oriya
    - Sinhala
    - Tamil
    - Telugu
    - Thai


author: Marcin Dulak <marcindulak@fedoraproject.org> - 25.7.0-1
changelog:
  - New upstream release
  - Move away from deprecated setup.py build/install
  - Remove temporary python3 top level dir


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.48.4-45
changelog:
  - Skip test_service_config, which times out
  - This appears to be due to an unsafe combination of death tests and
    threads


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.26.2-2
changelog:
  - Move aom, curl, openal, openjpeg to main package
  - Move lv2 to separate subpackage (rhbz#1731750)
  - Enable dvdspu, faad, qsv (x86_64 only)
  - Enable dc1394 and zxing in extras subpackage


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-2
changelog:
  - Modernize spec: use %make_install and add %check section
  - Use %make_install instead of manual make install
  - Move validation to %check
  - Remove deprecated %ldconfig_scriptlets
  - Fix trailing whitespace in Summary


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-3
changelog:
  - Modernize macros and paths
  - Use %{_metainfodir} for metainfo
  - Sort BuildRequires and change Source0 to Source
  - Clean up %prep chmod calls
  - Add %license to doc subpackage


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-4
changelog:
  - Convert BuildRequires to pkgconfig style
  - Use pkgconfig() for atk, cairo, gtk+-3.0, libofx, and libsoup-3.0


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-5
changelog:
  - Final cleanup of spec file
  - Add -p1 to %autosetup
  - Use trailing slashes for directories in %files
  - Consistent use of %{_metainfodir}


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Maxwell G <maxwell@gtmx.me> - 0.6.0^git4407164-1
changelog:
  - Update to new upstream https://git.sr.ht/~xenrox/hut
  - Use 0.6.0 post-release snapshot commit 4407164
  - Use vendored dependencies
  - Fixes: rhbz#2368037


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.29.5111.102-7
changelog:
  - Don’t link the top-level absl_flags library; it is not required in
    absl-cpp-20230802, and not present in absl-cpp-20240116
  - Add #include directives for compatibility with absl-cpp-20240116


author: Packit <hello@packit.dev> - 55-1
changelog:
  Changes with 55
  ----------------
    - chore: bump dependencies via gobump (#460)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal
    - deps: bump images (#483)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-03-24


author: Packit <hello@packit.dev> - 57-1
changelog:
  Changes with 57
  ----------------
    - deps: update `images` to 0.254.0 (#489)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-06


author: Packit <hello@packit.dev> - 58-1
changelog:
  Changes with 58
  ----------------
    - deps: bump images to 0.256.0 (#491)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-07


author: Packit <hello@packit.dev> - 60-1
changelog:
  Changes with 60
  ----------------
    - Support --in-vm in image-builder (#485)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: bump images to 0.258.0 (#495)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-04-14


author: Packit <hello@packit.dev> - 63-1
changelog:
  Changes with 63
  ----------------
    - deps: bump images to 0.259.0 (#501)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - docs: update satellite info (#503)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: `--version` -> `version` subcommand (#505)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - many: Generate rpmlist as an output of manifestgen (#502)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-29


author: Packit <hello@packit.dev> - 64-1
changelog:
  Changes with 64
  ----------------
    - cmd: drop "bootc is experimental" (#510)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump osbuild/images dependency (#507)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: update dependencies (w/o osbuild/images) (#508)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: fix broken link (#509)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal
    - doc: introduce advanced bootc (#462)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - docs: generate manpages (#504)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: hide `--use-librepo` (#513)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: hide `--with-rpmlist` (#512)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-13


author: Packit <hello@packit.dev> - 65-1
changelog:
  Changes with 65
  ----------------
    - deps: bump images to 0.266.0 (#520)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#515)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: default to XDG cache directory for non-root users (#511)
      - Author: Guillermo N. Leiro Arroyo, Reviewers: Brian C. Lane, Lukáš Zapletal

  osbuild/images changes (v0.262.0 -> v0.266.0):

    - Add bootc-foundry boot test infrastructure (HMS-10336) (#2335)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Update RHEL 9 and 10 OCI image definitions [HMS-10328, HMS-10472] (#2333)
      - Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß, Simon de Vlieger
    - Update osbuild dependency commit ID (#2321)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild dependency commit ID (#2328)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260504 (#2323)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - boot-azure: switch machine type (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß
    - ci: include flatpaks (#2349)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - ci: use f43 for cross-arch (#2322)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - defs/bootc: set XBOOTLDR GUID (#2325)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - disk: partition table policies (#2330)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/rhel-9: fix OCI partitioning (#2351)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger, Tomáš Hozza
    - experimental: use yamlplus (#2319)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - fedora: remove vc4 module blacklist from ostree kernel options (#2331)
      - Author: Paul Whalen, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - flatpak: use container resolver to resolve flatpak refs (#2334)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - import ELN (HMS-10620, HMS-10621, HMS-10623) (#2318)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - many: bootc sealed images (composefs, and bootloader) (HMS-10628) (#2326)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - pkg/bootc/resolver: handle missing 'bootc container inspect' (#2342)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - rhel: enable sshd service for WSL images (#2332)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - schutzbot: update terraform commit ID (#2341)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - test: close filesystem/disk customization coverage gaps with osbuild-composer (#2329)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-21


author: Packit <hello@packit.dev> - 66-1
changelog:
  Changes with 66
  ----------------
    - cmd: introduce profiling options (#516)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: bump osbuild/images dependency (#524)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - packit: enable ELN (HMS-10701) (#521)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  osbuild/images changes (v0.266.0 -> v0.267.0):

    - Add osbuild stages for mounting erofs and squashfs compressed filesystems (#2348)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - arch: map OCI platform architecture to GOARCH (#2315)
      - Author: Zephyr Lykos, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - bootloaders: Move the iso bootloader setup into its own struct (#2347)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - container: resolve containers using skopeo [RHEL-56367] (#2346)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Tomáš Hozza
    - fedora: Update IoT arm images with newer RPi dtbs (#2358)
      - Author: Peter Robinson, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Koscielniak
    - many: upgrade deps with deprecated APIs (HMS-10702) (#2356)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-25


author: Packit <hello@packit.dev> - 68-1
changelog:
  Changes with 68
  ----------------
    - Containerfile*: correct base image reference in tag (#531)
      - Author: Zephyr Lykos, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#533)
      - Author: SchutzBot, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: bump osbuild/images dependency (#538)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: mention additional requirements (#530)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: `--force-defs-dir` (#534)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: `bootc inspect` (#529)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - pr-best-practices: Update authentication scheme for Jira Cloud (HMS-10749) (#535)
      - Author: Florian Schüller, Reviewers: Lukáš Zapletal, Simon de Vlieger

  osbuild/images changes (v0.267.0 -> v0.270.0):

    - Break down imgtestlib module and  use log sections (#2383)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - CI: run tests on Fedora 44 (#2343)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Make EFIPartitionTable function public, move it into disk (#2354)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Repos: Add/update AlmaLinux repository definitions (#2376)
      - Author: Eduard Abdullin, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update dependencies 2026-05-25 (#2368)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc: assert non-nil kernel info (#2370)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - cicd: run gobump per commit (#2352)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - container: guess at mime type (#2372)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - depsolver: catch all errors from the child process (#2365)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - distro/loader: expand installerConfig template by copying (HMS-10718) (#2373)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal
    - distro: Make isoCustomizations usable by bootcImageType (#2360)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - fedora: drop no_timer_check leftover (#2282)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - gitlab: exit with error code when manifests fail to validate (#2374)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal
    - install-dependencies: Add a note about it being used by image-builder-cli workflows (#2353)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - loader: allow custom path (#2378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - many: fix non-determistic manifest generation (#2381)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - pr-best-practices: Update authentication scheme for Jira Cloud (HMS-10749) (#2386)
      - Author: Florian Schüller, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stage/grub2: allow VFAT for boot fs (#2371)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-06-04


author: Packit <hello@packit.dev> - 69-1
changelog:
  Changes with 69
  ----------------
    - deps: bump osbuild/images dependency (#548)
      - Author: SchutzBot, Reviewers: Nobody
    - deps: bump osbuild/images dependency (#551)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: bump osbuild/images dependency (#552)
      - Author: SchutzBot, Reviewers: Simon de Vlieger
    - deps: images 0.273.0 (#549)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lucas Garfield
    - main: `system` subcommand (#537)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane

  osbuild/images changes (v0.270.0 -> v0.274.0):

    - Add BootcRootFS pipeline and use it for bootc pxe-tar-xz (#2361)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Add Custom menus to X86 and PPC64 ISO bootloaders (#2394)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test: stop testing EOL RHEL releases (#2415)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Update dependencies 2026-05-31 (#2391)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - Update dependencies 2026-06-07 (#2402)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - config-list: narrow down the matrix (#2366)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - data/repositories: add PQC keys to rolling distros (#2411)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: drop `golang.org/x/exp/slices` (#2399)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - distro/eln: clean up part 1 (HMS-10764) (#2384)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/eln: installers use erofs (HMS-10634) (#2398)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - fedora-42: eol (#2385)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - imgtestlib: support bootc-foundry image types (#2393)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - manifest: use boot root for fix bls (#2412)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    - many: copy boot files from build (#2410)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - many: initial `systemd-boot` support (#2392)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - oscap: drop dead code (#2409)
      - Author: Simon de Vlieger, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - test/imgtestlib: boot test network installer on RHEL 10.2 (#2387)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2026-06-17


author: Adam Williamson <awilliam@redhat.com> - 1.1.16-10
changelog:
  - Backport PR #458 to go with backport of oz PR #310 (image size units)
  - Backport PR #459 to hopefully fix Python 3.12 compatibility


author: Martin Kolman <mkolman@redhat.com> - 0.3.99-1
changelog:
  - Default initial-setup-gui GDK to X11 for all display servers (ales.astone)
  - Configure a seat session for running wayland compositors (ales.astone)
  - Add support for generic Wayland support through Weston (neal)
  - Allow running the graphical setup in graphic servers other than Xorg (ales.astone)
  - windowmanager: Remove kwin (ales.astone)


author: Martin Kolman <mkolman@redhat.com> - 0.3.100-1
changelog:
  - spec: Disable shipping the X11 backend for all but RHEL < 10 (neal)
  - spec: Restructure and modernize (neal)


author: Neal Gompa <ngompa@fedoraproject.org> - 24.09-3
changelog:
  - Add SDDM and initial-setup-gui configuration packages
  - Split desktop session file into its own subpackage


author: Neal Gompa <ngompa@fedoraproject.org> - 43.0-1
changelog:
  - Bump for F43 backgrounds
  - ShellCheck fixes for gpg-agent startup script
  - Fixes for prelink handling logic in profile.d shell scripts


author: Alexander Ploumistos <alexpl@fedoraproject.org> - 2.1.1-1
changelog:
  - Update to v2.1.1
  - Disable tests
  - Remove explicit glib2 dependencies
  - Clean up spec files
  - Remove shebang lines from non-executable files


author: Peter Bieringer <pb@bieringer.de> - 4.2.2-1
changelog:
  - include databases/registries/lisp/site-db as no longer reachable for download
  - add additional Perl requirements


author: Peter Bieringer <pb@bieringer.de> - 4.3.0-1
changelog:
  - Final release 4.3.0
  - Update recommend IP2Location >= 8.6.0
  - Remove ipv6calc.sgml from doc
  - Use now only releases from GitHub


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.7.0-2
changelog:
  - Patch kamelion-qmk-helper for qmk-via-api 0.8
  - Account for licenses of statically-linked Rust dependencies


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-0]
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert fragnesia for so I can replace it with the newer one (Justin M. Forbes)
  - net/sched: act_pedit: extend the writable skb range per key (Zhang Cen)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-4]
changelog:
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-5]
changelog:
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling)
  - xfrm: esp: restore combined single-frag length gate (Jingguo Tan)
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)
  - Revert "v3 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer" (Justin M. Forbes)
  - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
  - ASoC: rt722-sdca: add FU06 Playback Switch for speaker mute control (Aaron Ma)
  - ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic (Syed Saba Kareem)
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Mark Pearson)
  - ASoC: amd: acp-sdw-legacy: rename the dmic component name (Vijendar Mukunda)
  - ASoC: amd: acp: update dmic_num logic for acp pdm dmic (Vijendar Mukunda)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.10-1]
changelog:
  - ata: libata-scsi: do not needlessly defer commands when using PMP with FBS (Niklas Cassel)
  - ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS (Niklas Cassel)
  - ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT (Niklas Cassel)
  - ata: libata-scsi: improve readability of ata_scsi_qc_issue() (Niklas Cassel)
  - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)
  - ksmbd: close durable scavenger races against m_fp_list lookups (DaeMyung Kang)
  - iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (Eder Zulian)
  - iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs (Guanghui Feng)
  - drm/i915/cx0: Rename intel_clear_response_ready flag (Suraj Kandpal)
  - drm/i915/cx0: Clear response ready & error bit (Suraj Kandpal)
  - drm/i915/pps: Enable panel power earlier (Mika Kahola)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.11-1]
changelog:
  - Revert "crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks" (Justin M. Forbes)
  - Revert "rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg" (Justin M. Forbes)
  - Revert "rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer" (Justin M. Forbes)
  - Linux v7.0.11


author: Augusto Caringi <acaringi@redhat.com> [7.0.12-1]
changelog:
  - Revert "xfrm: esp: restore combined single-frag length gate" (Justin M. Forbes)
  - Revert "ipv6: preserve insertion order for same-scope addresses" (Justin M. Forbes)
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (Alexandru Hossu)
  - Linux v7.0.12


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.12-1]
changelog:
  - New config setting for ARM64 Erratum (Justin M. Forbes)
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Shanker Donthineni)
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)
  - arm64: cputype: Add C1-Premium definitions (Mark Rutland)
  - arm64: cputype: Add C1-Ultra definitions (Mark Rutland)


author: Ben Boeckel <fedora@me.benboeckel.net> - 0.19.1-7
changelog:
  - Modernize RPM macros (rhbz#2377298)
  - Remove atomicwrites dependency (https://github.com/lucc/khard/pull/343)


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Kevin Fenzi <kevin@scrye.com> - 1.35.3-3
changelog:
  - Add patch from Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> with sysusers.d handling
  - Fixes rhbz#2364015


author: Packit <hello@packit.dev> - 4-1
changelog:
  Changes with 4
  ----------------
    * ci: pull osbuild from COPR (#3)
      * Author: Simon de Vlieger, Reviewers: Nobody

  — Somewhere on the Internet, 2025-04-09


author: Packit <hello@packit.dev> - 5-1
changelog:
  Changes with 5
  ----------------
    * Fixed cli pkg name in README.md (#8)
      * Author: Fabian Arrotin, Reviewers: Simon de Vlieger
    * ci: enable epel8 in packit (#6)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * many: replace `$arch` and `$buildarch` variable manually (COMPOSER-2507) (#10)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * readme updates (#7)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane

  — Somewhere on the Internet, 2025-04-16


author: Packit <hello@packit.dev> - 6-1
changelog:
  Changes with 6
  ----------------
    * build: include `arch` in artifact names (#12)
      * Author: Simon de Vlieger, Reviewers: Nobody

  — Somewhere on the Internet, 2025-04-17


author: Packit <hello@packit.dev> - 8-1
changelog:
  Changes with 8
  ----------------
    * builder: return `release` in results (#14)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-07-24


author: Packit <hello@packit.dev> - 12-1
changelog:
  Changes with 12
  ----------------
    * Actions: add workflow for marking and closing stale issues and PRs (#124)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * build(deps): bump ludeeus/action-shellcheck from 1.1.0 to 2.0.0 (#115)
      * Author: dependabot[bot], Reviewers: Ondřej Budai
    * ci: add Fedora 37 (#111)
      * Author: Ondřej Budai, Reviewers: Tomáš Hozza
    * docs: Update architecture diagram (#114)
      * Author: Simon Steinbeiß, Reviewers: Tomáš Hozza
    * hub: mark baseurl as required in repo schema (#112)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai
    * koji-osbuild.spec: migrate the license field to SPDX (#113)
      * Author: Ondřej Budai, Reviewers: Tomáš Hozza
    * plugin/builder: increase retries for requests to composer (#128)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2024-11-14


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.6-1
changelog:
  - Update to release v1.31.6
  - Resolves rhbz#2345513
  - Resolves CVE-2025-0426
  - Upstream security and other fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.9-1
changelog:
  - Update to release v1.31.9
  - Resolves rhbz#2366642
  - Upstream fixes
  - Add fedpkg mockbuild artifacts to .gitignore
  - Update template to vendored archive version


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.12-1
changelog:
  - Update to release v1.31.12
  - Resolves: rhbz#2388412
  - Resolves: CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fix


author: Mike FABIAN <mfabian@redhat.com> - 0.0.69-1
changelog:
  - Update to 0.0.69
  - Add Georgian console fonts
  - Add Adlm script to SN
  - Add dra, Tutg, ath, cmc, Cham, tai
  - Remove License classifier (license tag with SPDX license expression is
    already there)
  - Remove 0001-Georgian-add-georgian-console-fonts.patch (included upstream)
  - Stop using deprecated %py3_build/%py3_install macros Resolves:
    rhbz#2377304


author: Mike FABIAN <mfabian@redhat.com> - 0.0.70-1
changelog:
  - Update to 0.0.70
  - Add a few dz keyboards (Resolves: https://github.com/mike-
    fabian/langtable/issues/25)
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Add GS, ady, bqi, isv, kbd, kek, lzz, mww, oka, pi, pms, suz, Suni,
    si_ID.UTF-8 zgh_MA.UTF-8
  - Add mdf_RU.UTF-8 to RU


author: Mike FABIAN <mfabian@redhat.com> - 0.0.71-1
changelog:
  - Update to 0.0.71
  - Add xdq, sus, mrh, hrx, brh, ary, en_SE.UTF-8
  - Get new translations and translation changes from CLDR
  - setup.py: use open() instead of deprecated codecs.open(), declare minimum
    Python version >= 3.8
  - Add Yangon timezone id part
  - languages.xml: Rename Asia/Rangoon to Asia/Yangon
  - territories.xml: Rename Asia/Rangoon to Asia/Yangon


author: Xavier Bachelot <xavier@bachelot.org> - 2.8.2-16
changelog:
  - Drop EL7/python2 support
  - Set min_hash_algo to sha256 for f42+
  - Fix conditional around JAVA_HOME export
  - Add patch to fix build with gcc15


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 0.10.11-1
changelog:
  - update to 0.10.11 (resolves rhbz#2348998)
  - fix FTBFS due to missing tox.ini (resolves rhbz#2354084)


author: Adam Williamson <awilliam@redhat.com> - 0.3.4-1
changelog:
  - Update to 0.3.4, drop merged and no-longer-needed patches
  - Fix Python build/install so Python subpackage works
  - Fix build on EPEL 8 and 9
  - Include latest database from upstream


author: Evan Goode <egoode@redhat.com> - 0.74.0-1
changelog:
  - Update to 0.74.0
  - Update ko.po
  - Split $releasever to $releasever_major and $releasever_minor in the C API
  - Merge `bootc` branch to master
  - ConfigParser: make splitReleasever public
  - C API: Detect releasever_major, releasever_minor from provides
  - C API: support shell-style variable substitution
  - module: Warn if module config file is inaccessible
  - Enable automatic PR reviews


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Michel Lind <salimma@fedoraproject.org> - 0.5.5-1
changelog:
  - Update to version 0.5.5; Fixes: RHBZ#2334136
  - Drop deprecated Python bindings on Fedora >= 42 and EL >= 10


author: Steve Dickson <steved@redhat.com> 2.8.7-3
changelog:
  - libnfsidmap: avoid malloc(0) for empty Local-Realms
  - Removed warnings in nfs_sockaddr2universal()


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.2.4-3
changelog:
  - Initial pathrs release
  - Pathrs v0.2.4
  - Provides libpathrs used by runc and other packages
  - Exclude i686 arch


author: Ales Nezbeda <anezbeda@redhat.com> - 16.3-5
changelog:
  - Disable openssl ENGINE_API
  - Fedora change: https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - BZ: 2300910


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.15-1
changelog:
  - Release version 2.17.15 (Michal Srb)
  - reporter-bugzilla: Make the supplementary bugs easily identifiable (Michal Srb)
  - reporter-bugzilla: Fix formatting in the supplementary bugs (Michal Srb)
  - reporter-bugzilla: Fix code comment (Michal Srb)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2020.12.R1-18
changelog:
  - Make it build with the latest Python
    Fixes: RHBZ#2259655, RHBZ#2242706, RHBZ#2242709
  - Update summary and description
  - Drop deprecated macros


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Michal Schmidt <mschmidt@redhat.com> - 9.8.60-3
changelog:
  - Remove redundant %setup invocation.
  - Replace custom patch files with "git format-patch" from upstream git.


author: Miroslav Suchý <msuchy@redhat.com> 26-1
changelog:
  - in verbose mode always print the text of license
  - finally make transformer work
  - fixes and more tests
  - add test for BSD-3-Clause-Clear
  - add tests
  - rework handling not-allowed licensing with exception
  - do not print the long traceback with -v on mismatch


author: Miro Hrončok <miro@hroncok.cz> - 10.4.0-2
changelog:
  - Adjust tests for recently (Python 3.13, 3.12.4+) added text/markdown
    mimetype
  - Fixes: rhbz#2279995


author: Carl George <carlwgeorge@fedoraproject.org> - 1.15.0-1
changelog:
  - Update to version 1.15.0 rhbz#2250567
  - Port to pyproject macros
  - Drop python3-litecli subpackage


author: Simone Caronni <negativo17@gmail.com> - 1:31.0-14
changelog:
  - Remove obsolete EL7, Python 2 conditionals and Conflicts.
  - Switch to a valid Source URL.
  - Explicitly list man pages.
  - Format SPEC file.
  - Trim changelog.


author: Brian C. Lane <bcl@redhat.com> 43.4-1
changelog:
  - runtime-postinstall: Remove root password (bcl@redhat.com)
    Resolves: rhbz#2364082
  - tests: Update magic module usage (bcl@redhat.com)
  - utils: Remove old filediff.py script (bcl@redhat.com)
  - dnfbase: Use load_repos instead of update_and_load_enabled_repos (bcl@redhat.com)
    Fixes #1464


author: Brian C. Lane <bcl@redhat.com> 43.5-1
changelog:
  - templates.d: Remove libdir variable from templates (bcl@redhat.com)
  - runtime-cleanup: Move rpm database cleanup to the end (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 43.6-1
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk@redhat.com)
  - use /mnt/sysroot PATH in profile (butirsky@gmail.com)
  - fix chroot path in .bash_history (butirsky@gmail.com)


author: Brian C. Lane <bcl@redhat.com> 43.7-1
changelog:
  - runtime-cleanup: don't strip avahi-libs (awilliam@redhat.com)
  - treebuilder: use fedora-eln-logos for ELN (yselkowi@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 43.8-1
changelog:
  - pylilnt: Drop old rules and ignore .tito (bcl@redhat.com)
  - tito: Add support for tagging the version in pyproject.toml (bcl@redhat.com)
  - lorax.spec: Update for pyproject.toml use (bcl@redhat.com)
  - pyproject: Add cmdline scripts (bcl@redhat.com)
  - bin: symlink to scripts from src/bin (bcl@redhat.com)
  - Move cmdline scripts under pylorax.cmdline (bcl@redhat.com)
  - pylorax: Move cmdline into a pylorax.cmdline module (bcl@redhat.com)
  - pyproject: Add a pyproject.toml config file (bcl@redhat.com)
  - Makefile: Stop running setup.py directly (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 43.10-1
changelog:
  - executils: Remove binary_output flag (bcl@redhat.com)
  - logging: Set encoding=UTF-8 on FileHandler (bcl@redhat.com)
  - executils: Set encoding to UTF-8 for _run_program (bcl@redhat.com)
  - tests: Add template runcmd unicode test (bcl@redhat.com)
  - tests: Add some unicode to the executils tests (bcl@redhat.com)
  - templates: Remove explicit installation of anaconda-widgets (k.koukiou@gmail.com)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.5.3^20220831git2d4ba970-10
changelog:
  - F42+: Add old style pre scriptlet for LXDM user creation so as to make it work
    when upgrading from F41


author: Hans de Goede <hans@hansg.org> - 0.7.6-34
changelog:
  - Switch back to https://github.com/thelaui/M.A.R.S. upstream which has
    merged all the patches to remove non-free data files
  - Remove all references to dead marsshooter<dot>org domain which is now
    filled with spam


author: Sérgio Basto <sergio@serjux.com> - 2.5.3-3
changelog:
  - Update provides and obsoletes for openjpeg2 of Fedora 40
  - Also add a more agressive way to remove old openjpeg-libs (1.x)


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Dominik Mierzejewski <dominik@greysector.net> - 3.0.2-9
changelog:
  - switch to tar.gz source to avoid manual build
  - build using CMake (use upstream SONAME)
  - ship pkg-config and CMake files (resolves rhbz#2378931)
  - fix build with CMake 4.0
  - use dos2unix instead of sed


author: RPM Fusion Release Engineering <sergiomb@rpmfusion.org> - 2.2.1-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add GCC-15 patch from upstream


author: Fedora Release Engineering <releng@fedoraproject.org> - 7.28.0-7
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add mini patch for GCC 15
  - Drop BR gtk2-devel
  - Fix conditionals for epel9+


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Pavel Raiskup <pavel@raiskup.cz> 43.5-1
changelog:
  - add PQ keys to rhel9 (msuchy@redhat.com)
  - Switch Mageia 10+ and Cauldron to DNF5 (ngompa@mageia.org)
  - EOL Fedora 41


author: Pavel Raiskup <pavel@raiskup.cz> 44.3-1
changelog:
  - the fedora-release-eln renamed to fedora-eln-release
  - Add config for Fedora 44 version of RISC-V port (marcin@juszkiewicz.com.pl)
  - set bootstrap_image_ready=True for AlmaLinux configs (andrew.lukoshko@gmail.com)
  - re-enable bootstrap images for x86_64_v2 AlmaLinux configs (andrew.lukoshko@gmail.com)
  - remove dependency on python3-dnf (msuchy@redhat.com)


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 0.2.2-1
changelog:
  - Update to 0.2.2
  - Test desktop file
  - Add AppData file and test it
  - Remove environment-modules-gui provides
  - Clarify license used for icon files (CC-BY-SA-3.0)


author: Tobias Girstmair <t-fedora@girst.at> - 4.0.0~a4-1
changelog:
  - Update to 4.0.0a4 for Python 3.14 compatibility (RHBZ#2367738) and fix gstreamer 1.26 compatibility


author: Jerry James <loganjerry@gmail.com> - 0.9.0-4
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Steve Cossette <farchord@gmail.com> - 3.8-1
changelog:
  - Update to 3.8 to fix several CVEs:
  - CVE-2024-48991: Prevent race condition on /proc/$PID/exec evaluation
  - CVE-2024-11003: Drop usage of Module::ScanDeps to prevent LPE.
  - CVE-2024-48990: Do not set PYTHONPATH environment variable to prevent a LPE.
  - CVE-2024-48992: Do not set RUBYLIB environment variable to prevent a LPE.


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Richard Russon <rich@flatcap.org> - 20260406-1
changelog:
  - Features
    - #4799 Add IMAP connection monitoring, timeouts, and reconnection backoff
  - Bug Fixes
    - #4755 Fix off-by-one in ARRAY_RESERVE()
    - #4819 Fix IMAP crash when changing folders
    - Fix freeze in IMAP with OpenSSL
    - Fix blocking IMAP pipeline drain with many mailboxes
    - Fix crash on threaded index update
    - Fix crash on NULL thread in display subject
    - Fix menu half-down when data fits in one page
    - Fix alias search prompt
    - Fix index tag colours
    - Protect hooks against unhook during execution
    - Fix leak in pattern alias search
    - Consistently convert headers to LF EOL convention
  - Changed Config
    - Changed: `compose_show_preview = yes`
    Display a preview of the message body in the Compose window
  - Docs
    - `$message_id_format`: mention Base64Url encoding
    - Fix descriptions of deprecated config options
  - Build
    - #4826 Use optreset on Solaris too
    - #4827 Avoid function name clash on Solaris
    - #4828 Allow Solaris to use qsort_s
    - Check docs requirements in configure
  - Code
    - Fix graphviz debug output


author: Richard Russon <rich@flatcap.org> - 20260504-1
changelog:
  - Security
    - Fix GSSAPI buffer underflow on short unwrapped tokens
    - Reject percent-encoded NUL bytes in URL decoding
    - Skip CN fallback when SAN dNSName entries exist (RFC6125)
    - Cap POP3 UIDL responses to prevent OOM from a malicious server
    - Harden POP host URL copy
  - Bug Fixes
    - #4836 imap: fix memory leak in `msg_parse_flags`
    - #4849 Fix memmove in `mutt_str_expand_tabs`
    - #4850 IMAP: enhance stability with re-entrancy protection and reconnection fixes
    - #4852 Say which mailcap field we are looking for
    - #4853 Don't overwrite content_type
    - pager: fix crash on `uncolor *`
    - pager: fix wrong line index in signature syntax realloc
    - pager: fix OOB read on short log lines in `display_line()`
    - pager: fix off-by-one in newline restoration
    - imap: fix sort for missing emails
    - imap: fix crash when syncing mailbox on exit
    - Fix crash in `cmd_parse_fetch()` when edata is NULL
    - log: fix missing errors on startup
    - Force cursor to be visible on exit


author: Richard Russon <rich@flatcap.org> - 20260616-1
changelog:
  - Security
    - #4900 bcache: sanitize mailbox names that escape the cache dir
    - #4901 auth_gss: fix out-of-bounds read of GSS security token
  - Bug Fixes
    - #4866 Fix broken message-hook in the pager
    - #4869 Fix duplicate "no mail" message
    - #4874 Restore the `-C` command-line flag
    - #4882 Refresh notmuch tag completion cache, and fix a tag completion crash
    - #4893 Fix index-format-hook parsing
    - #4897 Allow `<entire-thread>` from any mailbox type, and fix a related crash
    - email: fix header rewind after mbox separator
    - imap: retry login after a failure
    - maildir/notmuch: fix memory leak
    - config: fix inherited has_been_set
    - main: fix inverted condition in init_nntp
  - Code
    - test: fix conddate after 2038


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-9
changelog:
  - Spec file and macro cleanups
  - move some files into the packages that have the dependencies they rely on
    (e.g. systemd, logrotate are not present in nginx-core, so don't install
    files pertaining to them there)
  - remove unused LDFLAGS and DESTDIR overrides, for perl we patch the
    Makefile.PL already
  - use zlib-ng-devel dependency also in nginx-mod-devel
  - improve macro consistency
  - sync configure command in macros.nginxmods.in with main package


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.0-1
changelog:
  - update to 1.30.0
  - drop upstreamed manpage patch - https://github.com/nginx/nginx/pull/1089
  - refresh other patches


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.1-1
changelog:
  - update to 1.30.1
  - fixes CVE-2026-42926, CVE-2026-42945, CVE-2026-42946, CVE-2026-42934,
    CVE-2026-40460 and CVE-2026-40701


author: Kevin Fenzi <kevin@scrye.com> - 8.3.3-1
changelog:
  - Update to 8.3.3 (fixes rhbz#2277754 )
  - Fix FTBFS (fixes rhbz#2341174 )
  - Fix FTI (fixes rhbz#372002 )


author: Sandro <devel@penguinpee.nl>
changelog:
  - Add python3-ninja sub package providing metadata for Python packages
    depending on ninja to facilitate automatic dependency resolution.


author: Jerry James <loganjerry@gmail.com> - 2.16.0-1
changelog:
  - Version 2.16.0
  - Remove the deprecated ocaml-atdgen-devel package
  - New ocaml-atdcpp package for generating C++


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 16.11.0-1
changelog:
  - Update to latest version (#2335692)
  - Drop webservice subpackage as we don't have streamlit packaged


author: Haibo Lin <hlin@redhat.com> - 0.8.1-1
changelog:
  - client: Make black happy
  - client: Print OIDC exchange info to stderr
  - client: Require browser or TTY for authorization code flow
  - server: Add support for post-compose script
  - server: Allow customizing TTL for raw config composes
  - server: Delete generatelocalhostcert command
  - server: Ensure the dest dir of git clone does not exist
  - server: Gather git checkout/clone error message
  - server: Make sure writing COMPOSE_ID file


author: Haibo Lin <hlin@redhat.com> - 0.9.0-1
changelog:
  - server: Add `odcs-manager metrics` command
  - server: Add cleanup command to odcs-manager
  - server: Fix black complaints
  - server: Allow , in NVR input
  - README: explain ODCS project future


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-13
changelog:
  - Clean up spec file from pre-systemd times
  - Use systemd services to initiate oddjobd configuration reload
  - Resolves: rhbz#2248817


author: Pavol Sloboda <psloboda@redhat.com> - 0.07.18-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively. Also
    it was mentioned in the spec file twice as a BuildRequires.


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add V2 Solver API with complete package metadata, per-transaction results, and RHSM secrets discovery (HMS-10029) (#2287)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    - Add tests for PQC key handling in osbuild [HMS-10057] (#2310)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Makefile: new target: rpm-nocheck (#2309)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2308)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260118 (#2312)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Add RHEL10 x86 and ARM COPR builds (#2311)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - stages: fix org.osbuild.ostree.grub2 permissions (#2307)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Brian C. Lane
    - test: add a wait to mitigate race condition (#2314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: add one-block tolerance to fscache test (#2316)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: increase sendmsg test size (#2315)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 171-1
changelog:
  Changes with 171
  ----------------
    - Improve robustness of --in-vm support (#2292)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support running bootc-image-builder with --in-vm (#2328)
      - Author: Alexander Larsson, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc.install.config: add ostree.bls-append-except-default option (#2319)
      - Author: Joel Capitao, Reviewers: Brian C. Lane, Simon de Vlieger
    - grub2.iso: configurable entries (HMS-10018, HMS-10015) (#2317)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Ondřej Budai
    - mockbuild: fix PQC builds on RHEL 10 (#2327)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - monitor: Report if the runner is running in a vm (#2320)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-27


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - SPEC: initrd sub-package fixups and exclude i686 arch on el (#2334)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2333)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260201 (#2330)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild-mpp: Refactor to use osbuild.solver module (#2331)
      - Author: Mark Kemel, Reviewers: Nobody
    - test_objectstore: add time.sleep(0.1) to solve flaky tests (#2318)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-06


author: Packit <hello@packit.dev> - 174-1
changelog:
  * Fix packaging conflict in initrd directory causing downgrade failures by @thozza in https://github.com/osbuild/osbuild/pull/2347
   * stages/bootc.install-to-fs: add bootupd-skip-boot-uuid option by @jbtrystram in https://github.com/osbuild/osbuild/pull/2345
   * qemu: Don't always pass -cpu host by @alexlarsson in https://github.com/osbuild/osbuild/pull/2356
   * spec: drop typer-slim dependency and use only python3-typer by @achilleas-k in https://github.com/osbuild/osbuild/pull/2358
   * qemu: Handle container storage.conf not listing graphroot by @alexlarsson in https://github.com/osbuild/osbuild/pull/2357
   * stages/erofs: quiet stdout by @supakeen in https://github.com/osbuild/osbuild/pull/2359
   * qemu: Default to 3GB vm instead of 4GB by @alexlarsson in https://github.com/osbuild/osbuild/pull/2361


   **Full Changelog**: https://github.com/osbuild/osbuild/compare/v173...v174


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - CI: run tests on 9.7+10.1 GA and 9.8+10.2 nightly (HMS-9794) (#2351)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Revert "schutzbot: update libsemanage before installing osbuild" (#2378)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Solver: fix `repo_ids` to restrict all dependency resolution, not just top-level packages (HMS-10314) (#2379)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Solver: implement per-transaction package excludes in the DNF5 solver (HMS-10318) (#2381)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2383)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - Update osbuild-ci container images (#2367)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - Update snapshots to 20260308 (#2382)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: shift manifest guide headings one level down (#2385)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - solver: add cost field to Repository model (#2380)
      - Author: Mark Kemel, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/rpm: add nodeps option for `rpm install --nodeps` (#2387)
      - Author: Dusty Mabe, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages: add coreos.bfb for NVIDIA BlueField DPUs (#2349)
      - Author: Sagi Zigmon, Reviewers: Nobody

  — Somewhere on the Internet, 2026-03-11


author: Packit <hello@packit.dev> - 177-1
changelog:
  Changes with 177
  ----------------
    - Add stages used for building s390x isos (HMS-9967) (#2390)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: default to using DNF5 depsolver on Fedora 45+ (current Rawhide) (HMS-10343) (#2389)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to support building ppc64le isos (HMS-9968) (#2377)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2394)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2392)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260315 (#2393)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260322 (#2397)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - buildroot: Use bwrap's --drop-cap ALL (#2395)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Alexander Larsson
    - chore: clean up team ssh keys (#2391)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Anna Vítová, Tomáš Hozza
    - cli: Print checkpoint cache status (#2388)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - stages/aleph: make path parametrizable (#2384)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - tools/osbuild-store: do stuff with sources and store (HMS-10238) (#2364)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-26


author: Packit <hello@packit.dev> - 178-1
changelog:
  Changes with 178
  ----------------
    - Packit: disable s390x builds in COPR (#2406)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Simon de Vlieger
    - Support uri encoded urls (#2405)
      - Author: Justin Sherrill, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild-ci container images (#2408)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260329 (#2403)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stage: flatpak.build-import-bundle.oci (HMS-10170) (#2400)
      - Author: Simon de Vlieger, Reviewers: Dusty Mabe, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-02


author: Packit <hello@packit.dev> - 181-1
changelog:
  Changes with 181
  ----------------
    - stages/bootc.install-to-fs: remount /dev (#2440)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-11


author: Packit <hello@packit.dev> - 183-1
changelog:
  Changes with 183
  ----------------
    - .gitlab-ci.yml: add 9.8-ga and 10.2-ga (#2457)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    - Optimize osbuild-depsolve-dnf memory and runtime performance (HMS-10526) (#2456)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal
    - Update images dependency ref to latest (#2461)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - mounts/ddi: mounting of DDIs (#2459)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - runners: `eln11` (HMS-10652, HMS-10652) (#2453)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - test: update container IDs for manifest-list-test (#2455)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-27


author: Packit <hello@packit.dev> - 185-1
changelog:
  Changes with 185
  ----------------
    - Update snapshots to 20260531 (#2466)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - ci: fix `test_qemu` (#2483)
      - Author: Simon de Vlieger, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - org.osbuild.ovf: support setting virtual hardware version (HMS-3248) (#2468)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - runners: Add Oracle Linux 9 runner symlinked to CentOS9 (#2476)
      - Author: Laurence Rochfort, Reviewers: Brian C. Lane, Simon de Vlieger
    - sources/librepo: accept SHA1 (#2477)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-06-17


author: Adam Williamson <awilliam@redhat.com> - 0.18.1-17
changelog:
  - Update to latest git master, drops retired m2crypto dep (#2318309)
  - Backport PR #316 to fix build with one of the master patches


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.3.rc1
changelog:
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook
  - Enable fencing regression tests again


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - seems as if pre-tasks need to have tags to be executed
    at least that worked on a pull request via pagure


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-11
changelog:
  - Convert STI tests to TMT (rhbz#2383013)
  - Update for new upstream release tarball: Pacemaker-3.0.1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1
  - now you can add a new revision
    rpmdev-bumpspec -c "test" pacemaker.spec
  - or run tests locally
    tmt run discover provision prepare execute --how tmt --verbose -v -v --debug
  - Removed tier1 test again as it was just for investigation of a CI issue


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.2-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.2


author: Frédéric Bérat <fberat@redhat.com> - 0.5-15
changelog:
  - Use a `%{!r: ... }` guard around package notes LDFLAGS to prevent double
    inclusion when performing a relocatable link (`-r`). Relates to
    RHBZ#2362272.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.18-1
changelog:
  - Version 0.18
  - This is a major version update that adds dlopen-notes parser, allows
    automatic generation of Requires/Recommends/Suggests from package dlopen
    notes. See the new macro file for details of use and for example
    https://src.fedoraproject.org/rpms/systemd/pull-request/246.
  - The new fileattr plugin is in the package-notes subpackage, so that needs
    to be installed to activate the feature.
  - No changes to package note handling.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 0.19-1
changelog:
  - Version 0.19
  - Fixes a bug where dlopen output was dependent on binary sort order when
    multiple binaries used notes.


author: Packit <hello@packit.dev> - 1.13.0-1
changelog:
  - `packit init` now automatically retrieves the latest version of the pre-commit hook to be added to the user's pre-commit configuration file. (#2651)
  - Resolves: rhbz#2420553


author: Packit <hello@packit.dev> - 1.14.0-1
changelog:
  - We have added the `--preserve-spec` flag to the `prepare-sources` and `srpm` commands. When used, Packit will not change the spec file in any way (e.g., release is not bumped, Source0 is not changed). When enabled, it implies `--no-update-release`. (#2653)
  - Resolves: rhbz#2427944


author: Packit <hello@packit.dev> - 1.15.0-1
changelog:
  - The `version_suffix` configuration option is now supported in Packit. This option is meant for appending information to the Version field in RPM spec files. This is useful for post-release snapshots following RPM versioning conventions. The `version_suffix` behaves similarly to the already existing `release_suffix` and also supports expansion of environment variables. (#2664)
  - Packit now supports `bodhi_extra_params` configuration option to customize creating Bodhi updates. (#2682)
  - Resolves: rhbz#2439424


author: Packit <hello@packit.dev> - 1.15.1-1
changelog:
  - We have fixed a bug that prevented running `sync_release()` on a `PackitAPI` instance initialized with `non_git_upstream=True` repeatedly due to an improper clean-up. (#2691)
  - Resolves: rhbz#2445195


author: Packit <hello@packit.dev> - 1.15.2-1
changelog:
  - Packit now uses the specfile library's sanitization when parsing spec files.
  - Resolves: rhbz#2450841


author: Packit <hello@packit.dev> - 1.15.3-1
changelog:
  - We've fixed the formatting of the strings Packit appends to the changelog. Now there will be at most one blank line before or after the Packit comment. (#2707)
  - Resolves: rhbz#2453842


author: Packit <hello@packit.dev> - 1.16.0-1
changelog:
  - Packit CLI has a new option `--[no-]update-release` that, by default, follows the value of the option set in the config, and also allows you to override manually, if necessary. (#2713)
  - In addition to `version_update_mask`, users can now use a new `version_update_specifiers` configuration option to control the upstream versions allowed to be release-synced. The option accepts [PEP440 version specifier sets](https://packaging.pypa.io/en/stable/specifiers.html), for example `version_update_specifiers: >=1.0,~=1.0`. (#2710)
  - Resolves: rhbz#2461103


author: Packit <hello@packit.dev> - 0.1.3-1
changelog:
  - Add some installability checks (Akashdeep Dhar)
  - Update Packit configuration (Akashdeep Dhar)
  - Step down the version requirement for python-gitlab (Akashdeep Dhar)
  - Bump version from v0.1.2 to v0.1.3 (fedohide-origin)
  - Automated dependency updates (renovate[bot])
  - add fedora-rawhide & fedora-40 aliases to packit jobs config (Shubham Karande)
  - Change the recordings after the GitLab Runners tokens were purged (Akashdeep Dhar)
  - Remove stray GitLab Runners token when detected (Akashdeep Dhar)
  - Remove stray IntelliJ files (Akashdeep Dhar)
  - Rework the testcases to address cleaning of repositories (Akashdeep Dhar)
  - Add refreshed recordings for the newly added functionalities (Akashdeep Dhar)
  - Include view and work code for retaining issue ticket order (Akashdeep Dhar)
  - Add options and variables to track the new feature (Akashdeep Dhar)
  - Update dependency ruff to ^0.0.285 || ^0.1.0 || ^0.2.0 || ^0.3.0 (renovate[bot])
  - Rework the recordings to address the changed tests (Akashdeep Dhar)
  - Clean statutory rate limit addressing functions (Akashdeep Dhar)
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Update recordings to speed up the testing process (Akashdeep Dhar)
  - Change the testcases to accommodate the shift (Akashdeep Dhar)
  - Modify the condition config for the test environment (Akashdeep Dhar)
  - Replace scoped client object in favor for contextualized client object (Akashdeep Dhar)
  - Introduce two shared variables to contextualize GitLab client and project objects (Akashdeep Dhar)
  - Move repository checking code from requests to python-gitlab (Akashdeep Dhar)
  - update_doc_use_venv_instead_of_virtualenv (ooooo)
  - Complete first run of refactoring (Akashdeep Dhar)
  - Add python-gitlab in dependencies (Akashdeep Dhar)
  - Automated dependency updates (renovate[bot])
  - Update dependency ruff to ^0.0.285 || ^0.1.0 || ^0.2.0 (renovate[bot])
  - Update dependency black to v24 (renovate[bot])
  - Update dependency pytest to v8 (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Resolves rhbz#2269273


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.3.5-3
changelog:
  - Work around numpy 2.2 issues (close RHBZ#2341169)
  - Fix one issue, and skip tests for two others that we don’t know what to
    do about


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260507.g1afd4ed-1
changelog:
  - Install pesto, its SELinux policy, and the man page from the spec file
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_01_20.386b5f5..2026_05_07.1afd4ed


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - New maintainer
    - This release resolves CVE-2011-3599
    - Added a statement to recommend against using DSA
    - Fixed a few long standing bugs
    - The build process is moved to Dist::Zilla
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
    - This module is now marked as deprecated: Crypt-DSA-GMP is a possible
      replacement
    - Improve the call to IPC::Open3::open3
    - Replace two arg open (CVE-2026-8704)
    - Replace rand() (CVE-2026-8700)
    - Add a security policy
    - Add use warnings
    - Typo fix (CPAN RT#86424)


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Fixed key material reuse for multiple signing events (CVE-2026-12205,
      CWE-323)
      - sign() reused the DSA nonce k across signatures (r and k^-1 were cached
        on the key and not regenerated), allowing private-key recovery from two
        signatures over different messages
      - Now generates a fresh nonce per signature
      - Keys used to sign more than once with an affected version should be
        considered compromised


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Drop 5.006 support
    - Compensate for perls without installsitescript
  - Use %{make_build} and %{make_install}


author: Charles R. Anderson <cra@alum.wpi.edu> 0.001-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(blib) instead of perl-blib
  - Remove explicit Requires: perl(Exporter)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Paul Howarth <paul@city-fan.org> - 1.896-1
changelog:
  - Update to 1.896 (rhbz#2291411)
    - Weaken internal core MCE reference to reap workers automatically upon
      leaving the scope i.e. omitting shutdown
      - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
      - Call finish explicitly to reap workers
      - This resolves the case when omitting calling $mce->run(), $mce->run(1) or
        $mce->shutdown() inside a scope, causing workers to linger around until
        completion of the script


author: Paul Howarth <paul@city-fan.org> - 1.897-1
changelog:
  - Update to 1.897
    - In scalar context, the init function in MCE Child and models Flow, Grep,
      Loop, Map, Step, and Stream returns a guard to call finish automatically
      upon leaving the { scope } (i.e. omitting finish)
    - Add out_iter_callback to MCE::Candy


author: Paul Howarth <paul@city-fan.org> - 1.898-1
changelog:
  - Update to 1.898 (rhbz#2307114)
    - Fix for MCE::Child, Can't call method "len" on an undefined value
      during global destruction (GH#22)


author: Paul Howarth <paul@city-fan.org> - 2.28-1
changelog:
  - Update to 2.28
    Fixes:
    - Some 'deprecated' texts made it to types.db
    Improvements:
    - text/ecmascript RFC9239
    - Default charsets according to RFC6657
    - Update reference to specs RFC6838 and RFC9694
    - IANA updates
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.29-1
changelog:
  - Update to 2.29
    - Require 5.16 (2012)
    - Remove xt/98perl.t
    - ::Type->defaultCharset()
    - Remove use of bareword filehandle
    - IANA updates


author: Petr Pisar <ppisar@redhat.com> 1.20250203-1
changelog:
  - 1.20250203 version packaged
  - JavaScript and CSS files for dmarc_httpd removed because of no source code


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.006000-1
changelog:
  - Update to 2.006000.
  - Reflect perl(Reply::Plugin) having been added to Fedora.
  - Remove references to perl-Type-Tie.


author: Aaron Rainbolt <arraybolt@fedoraproject.org> - 1:1.9.0-33
changelog:
  - Set minimum CMake version to 3.5 (rhbz#2381472)
  - Set non-standard CMake variables back to expected values (rhbz#2381665)
  - Migrate InstallMgr test to tmt framework (rhbz#2383081)


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Remi Collet <remi@remirepo.net> - 8.3.0-1
changelog:
  - update to 8.3.0
  - re-license spec file to CECILL-2.1
  - fix build with old libip2location using patch from
    https://github.com/chrislim2888/IP2Location-PECL-Extension/pull/25


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.2
  - raise dependency on sebastian/recursion-context 6
  - rename to php-sebastian-exporter6
  - move to /usr/share/php/SebastianBergmann/Exporter6


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-recursion-context6
  - move to /usr/share/php/SebastianBergmann/RecursionContext6


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-recursion-context7
  - move to /usr/share/php/SebastianBergmann/RecursionContext7


author: Remi Collet <remi@remirepo.net> - 5.0.0-1
changelog:
  - update to 5.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-type5
  - move to /usr/share/php/SebastianBergmann/Type5


author: Remi Collet <remi@remirepo.net> - 2.0.1-1
changelog:
  - update to 2.0.1
  - move to /usr/share/php/Yoast/PHPUnitPolyfills2
  - raise dependency on PHP 5.6
  - drop phpunit7, add phpunit10


author: Remi Collet <remi@remirepo.net> - 11.0.0-1
changelog:
  - update to 11.0.0
  - raise dependency on phpunit/phpunit 12.0
  - raise dependency on phpunit/php-code-coverage 12
  - raise dependency on phpunit/php-file-iterator 6
  - raise dependency on sebastian/cli-parser 4
  - raise dependency on sebastian/diff 7
  - raise dependency on sebastian/version 6


author: Remi Collet <remi@remirepo.net> - 11.0.1-1
changelog:
  - update to 11.0.1 (no change)
  - raise dependency on phpunit/phpunit 12.1.6
  - raise dependency on phpunit/php-code-coverage 12.3


author: Remi Collet <remi@remirepo.net> - 11.0.2-1
changelog:
  - update to 11.0.2 (no change)
  - raise dependency on phpunit/phpunit 12.3.7
  - raise dependency on phpunit/php-code-coverage 12.3.6


author: Remi Collet <remi@remirepo.net> - 12.5.19-1
changelog:
  - update to 12.5.19
  - raise dependency on phpunit/php-code-coverage 12.5.5
  - raise dependency on sebastian/comparator 7.1.5


author: Remi Collet <remi@remirepo.net> - 12.5.21-1
changelog:
  - update to 12.5.21
  - raise dependency on phpunit/php-code-coverage 12.5.6
  - raise dependency on sebastian/environment 8.1.0


author: Remi Collet <remi@remirepo.net> - 12.5.26-1
changelog:
  - update to 12.5.26
  - raise dependency on sebastian/cli-parser 4.2.1
  - raise dependency on sebastian/comparator 7.1.8
  - raise dependency on sebastian/environment 8.1.1
  - raise dependency on sebastian/exporter 7.0.3
  - raise dependency on sebastian/type 6.0.4


author: Remi Collet <remi@remirepo.net> - 12.5.29-1
changelog:
  - update to 12.5.29
  - raise dependency on phpunit/php-code-coverage 12.5.7
  - raise dependency on sebastian/global-state 8.0.2


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Adam Williamson <awilliam@redhat.com> - 6.6.4-3
changelog:
  - Backport MR #99 to fix launcher icon when selecting dark mode
  - Backport MR #100 to maybe fix strange behavior in wifi page


author: Michel Lind <salimma@fedoraproject.org> - 1.3.13-1
changelog:
  - Backport unreleased fix for CVE-2026-44742
  - With 1.3.13 we no longer need to exclude example_project


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.19.6-13
changelog:
  - Temporarily use GCC 14 to workaround FTBFS on i686 and s390x
  - Don’t build Python extension with C++ on Python 3.14+


author: Pavel Raiskup <praiskup@redhat.com> 1.26-1
changelog:
  - dnf5 compat: Use file:// in baseurls explicitly
  - pair_srpm_rpm: migrate to DNF5, keep DNF4 backward compat
  - pair_srpm_rpm: use a correct specifier for logging strings


author: Jerry James <loganjerry@gmail.com> - 1.15-1
changelog:
  - Update to 1.15 (rhbz#2241663)
  - Change doc subpackage architecture to noarch
  - Change Source URL to tarball with the tests included
  - Add a %check script
  - Do not glob the library name
  - Minor spec file cleanups


author: Michael J Gruber <mjg@fedoraproject.org> - 3.59-1
changelog:
  - Upgrade to version 3.59 (rhbz#2302675)
  - core: strip whitespaces from OUTPUT, OUTPUT_PART events
  - external_script module: fix clicking on parts of message
  - mpris module: fix kdeconnect interaction


author: Michael J Gruber <mjg@fedoraproject.org> - 3.60-1
changelog:
  - Upgrade to version 3.60 (rhbz#2321559)
  - external_script module: add composite placeholder
  - playerctl module: hide non-can-play players and use chrome and chromium
    as default value


author: Michael J Gruber <mjg@fedoraproject.org> - 3.61-1
changelog:
  - Upgrade to version 3.61 (rhbz#2330535)
  - argparsers: pgrep i3 with shmlog
  - modules: fix SyntaxWarning for python 3.12+
  - conky module: fix tempfile and ignore new output
  - mpris module: hide all non can_play players
  - playerctl module: gi.require_version notification fix


author: Michael J Gruber <mjg@fedoraproject.org> - 3.62-1
changelog:
  - Upgrade to version 3.62 (rhbz#2368349)
  - py3: add new helper: get_replacements_list
  - conky module: add fallback delete parameter for py3.11 or less
  - external_script module: adjust how urgent is specified
  - external_script module: allow scripts to specify urgent
  - mpris module: implement track number support
  - mpris module: use new helper: get_replacements_list
  - various fixes


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Adam Williamson <awilliam@redhat.com> - 1.0.3-16
changelog:
  - Backport #1964 (partial) and #2361 (rebased) to fix build with Python 3.14
  - Rebuilt for Python 3.14


author: Adam Williamson <awilliam@redhat.com> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - Drop patches merged upstream
  - Backport more patches to fix build/tests and a FICS bug with Python 3.13+


author: José Matos <jamatos@fedoraproject.org> - 2.4.0-2
changelog:
  - All the changes below come from Jerry James <loganjerry@gmail.com> (from Fri Feb 23 2024)
  - Use virtual Provides instead of empty packages
  - Link with flexiblas instead of gslcblas
  - Move documentation into a doc subpackage
  - Various minor spec file cleanups
  - Add patch to fix FTBFS on big endian systems


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Brian C. Lane <bcl@redhat.com> - 3.63-1
changelog:
  - Do not remove "md" prefix from RAID names (vtrefny)
  - Add Fedora 43 support (bcl)
  - workflows: Switch to ubuntu-latest (bcl)
  - Update formatting of certificate section documentation (rvykydal)
  - Update %certificate documentation with not about bundles (rvykydal)
  - Fix formatting of %certificate documentation example (rvykydal)
  - Update %certificate section documentation (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.64-1
changelog:
  - workflow: Add python 3.13 testing (bcl)
  - tests: Remove unused import of constants (bcl)
  - realm: Clean up documentation (bcl)
  - Add support for new bootc kickstart command (ppolawsk)
  - Update documentation for clearpart --initlabel option. (rvykydal)
  - Update the %certificate section documentation (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.65-1
changelog:
  - workflows: Add python 3.14 to the test matrix (bcl)
  - Add support for RDP (jkonecny)
  - Deprecate VNC (jkonecny)
  - docs: Fix chapter numbering after adding certificate (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.66-1
changelog:
  - workflows: Use py3.14 beta.4 (bcl)
  - pylint: Ignore files in .git (bcl)
  - pyproject: Bump setuptools to 77 or later (bcl)
  - Makefile: Stop running setup.py directly (bcl)


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.0.6-1
changelog:
  - Update to latest upstream release (closes rhbz#2338907)
  - Fix CVE-2025-24359 (closes rhbz#2341976)


author: Sandro <devel@penguinpee.nl> - 1.6.2-8
changelog:
  - Apply patches for Python 3.13 (RHBZ#2276611)
  - Drop dependency on future
  - Fix indentation in docstring


author: Sandro <devel@penguinpee.nl> - 1.7.0-1
changelog:
  - Update to 1.7.0 (RHBZ#2307372)
  - Drop patches (merged upstream)
  - Use tag instead of commit (releases are tagged now)


author: Sandro <devel@penguinpee.nl> - 1.8.0-1
changelog:
  - Update to 1.8.0 (RHBZ#2364087)
  - Add 'scipy' extra
  - Read dependencies from defined extras
  - Add tutorial to docs


author: Miro Hrončok <miro@hroncok.cz> - 1.2.6-30
changelog:
  - Replace nose test-framework functionality with pytest
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Scott K Logan <logans@cottsay.net> - 3.0-19
changelog:
  - Add proposed patch to unblock Python 3.14 builds (rhbz#2328004)
  - Switch to pyproject build macros (rhbz#2377504)


author: Scott K Logan <logans@cottsay.net> - 1.1.0-1
changelog:
  - Update to 1.1.0 (rhbz#2394423)
  - Replace macro use in URL/Source0 fields for spec legibility
  - Move doc subpackage after python3 so %{summary} resolves correctly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 15.0.1-9
changelog:
  - Rebuilt for Python 3.13 (close RHBZ#2291652)
  - Applied a simple patch for 'pipes' module removal in Python 3.13


author: Scott K Logan <logans@cottsay.net> - 15.0.1-12
changelog:
  - Add missing BuildRequires: /usr/bin/script (rhbz#2341136)
  - Switch to pyproject build macros (rhbz#2377563)


author: Miro Hrončok <miro@hroncok.cz> - 1.4.1-8
changelog:
  - Remove unused BuildRequires for deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Michel Lind <salimma@fedoraproject.org> - 25.1-1
changelog:
  - Update to 25.1; Resolves: RHBZ#2239310
  - This fixes building with Python 3.14; Resolves: RHBZ#2336944
  - Modernize packaging; Resolves: RHBZ#2377642
  - Re-enable tests
  - Update automatically converted SPDX license; this is BSD-3-Clause


author: Benjamin A. Beasley <code@musicinmybrain.net> - 10.0-12
changelog:
  - Patch for pipes module removal in Python 3.13 (fix RHBZ#2245647)
  - At least do an import-only check when tests are disabled
  - Fix and re-enable the tests
  - Add a bootstrap conditional


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.2-5
changelog:
  - Drop unused test dependency on deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Jason Montleon <jmontleo@redhat.com 1:30.1.0-5
changelog:
  - Fix fail to install for tests sub-package for EPEL 9.
  - BZ #2314125 will fully resolve FTI on EPEL 10.


author: Miro Hrončok <mhroncok@redhat.com> - 1:31.0.0-2
changelog:
  - Remove unused tests Requires
  - https://fedoraproject.org/wiki/Changes/DeprecateNose
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonMock


author: Jerry James <loganjerry@gmail.com> - 3.0.1-1
changelog:
  - Version 3.0.1
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patch for python 3.13 support


author: Jerry James <loganjerry@gmail.com> - 1.3.0-7
changelog:
  - Restore the doc subpackage
  - Minimize the LaTeX dependencies
  - Use modern python macros
  - Migrate License field to SPDX
  - Package the gmpy2 extra
  - Minor spec file cleanups


author: Joel Capitao <jcapitao@redhat.com> 5.6.0-2
changelog:
  - Use \
  TOX_TESTENV_PASSENV="${TOX_TESTENV_PASSENV:-*}" \
  \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    PATH="/builddir/build/BUILD/python-oslo-context-5.7.0-build/BUILDROOT/usr/bin:$PATH"\
    PYTHONPATH="${PYTHONPATH:-/builddir/build/BUILD/python-oslo-context-5.7.0-build/BUILDROOT/usr/lib64/python3.14/site-packages:/builddir/build/BUILD/python-oslo-context-5.7.0-build/BUILDROOT/usr/lib/python3.14/site-packages}"\
    PYTHONDONTWRITEBYTECODE=1\
    PYTEST_ADDOPTS="${PYTEST_ADDOPTS:-} --ignore=/builddir/build/BUILD/python-oslo-context-5.7.0-build/.pyproject-builddir"\
    PYTEST_XDIST_AUTO_NUM_WORKERS="${PYTEST_XDIST_AUTO_NUM_WORKERS:-8}" \
  HOSTNAME="rpmbuild" \
  /usr/bin/python3 -m tox --current-env --assert-config -q --recreate -e "py314" macro


author: Paul Howarth <paul@city-fan.org> - 3.4.0-6
changelog:
  - Fix detection of SHA1 signing support
    https://github.com/paramiko/paramiko/pull/2420
    https://github.com/pyca/cryptography/issues/11332
    https://github.com/PyO3/pyo3/issues/3059
  - Remove cache Sphinx build folder ".doctrees"


author: Paul Howarth <paul@city-fan.org> - 3.4.1-1
changelog:
  - Update to 3.4.1
    - Massage our import of the TripleDES cipher to support Cryptography ≥ 43;
      this should prevent 'CryptographyDeprecationWarning' from appearing upon
      import (GH#2419, GH#2421)
    - Modify a test-harness skiptest check to work with newer versions of
      Cryptography (GH#2420)
    - Fix a 64-bit-ism in the test suite so the tests don't encounter a false
      negative on 32-bit systems (GH#2353)


author: Paul Howarth <paul@city-fan.org> - 3.5.0-1
changelog:
  - Update to 3.5.0 (rhbz#2312503)
    - Add support for AES-GCM encryption ciphers (128 and 256 bit variants)
      (GH#982, GH#2157, GH#2444, rhbz#2311855); this functionality has been
      tested in client mode against OpenSSH 9.0, 9.2 and 9.6, as well as against
      a number of proprietary appliance SSH servers
    - Check for 'None' transport members inside '~paramiko.channel.Channel' when
      closing the channel; this likely doesn't come up much in the real world,
      but was causing warnings in the test suite


author: Paul Howarth <paul@city-fan.org> - 3.5.1-1
changelog:
  - Update to 3.5.1 (rhbz#2343673)
    - Private key material is now explicitly 'unpadded' during decryption,
      removing a reliance on some lax OpenSSL behavior and making us compatible
      with future Cryptography releases (GH#2490)


author: Miro Hrončok <miro@hroncok.cz> - 25.1.1-3
changelog:
  - Run functional tests
  - Drop test requirement of python-wheel-wheel
  - Use pytest-xdist to run tests faster


author: Miro Hrončok <miro@hroncok.cz> - 25.1.1-11
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile


author: Miro Hrončok <miro@hroncok.cz> - 25.1.1-13
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem even in truststore
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2380441


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.26-2
changelog:
  - Add a weak dependency on python3-jsonschema
  - Remove testing workaround for formerly-missing JSON schema file


author: Jerry James <loganjerry@gmail.com> - 0.25.1-1
changelog:
  - Version 0.25.1
  - Use the pyproject declarative buildsystem
  - Drop all patches
  - Drop pkg_resources workaround


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-2
changelog:
  - add python3-pyliblo3 subpackage
  - move 'Obsoletes:' tag to python3-pyliblo3 subpackage
  - move doc subpackage after the python3-pyliblo3 subpackage
  - remove 'Recommends:' tag 
  - rename python-pyliblo3 to python3-pyliblo3
  - remove macro %{modname} for better readability


author: Jerry James <loganjerry@gmail.com> - 4.9.1-1
changelog:
  - Version 4.9.1
  - Fixes CVE-2024-21506 (rhbz#2273860)
  - Fixes CVE-2024-5629 (rhbz#2290587)
  - Modernize the spec file
  - Fix up the license information
  - Add check script
  - Package the ocsp, snappy, and zstd extras
  - Build docs for Fedora only
  - Permit use of pytest-asyncio 0.23 until Fedora can catch up


author: Scott K Logan <logans@cottsay.net> - 0.26.0-1
changelog:
  - Update to 0.26.0 (rhbz#2307470)
  - Switch to pyproject build macros (rhbz#2378179)
  - Add patch for sphinx 8 compatibility (rhbz#2329891)
  - Review SPDX licensing


author: Scott K Logan <logans@cottsay.net> - 1.6.0-1
changelog:
  - Update to 1.6.0 (rhbz#2342035)
  - Drop spec file support for RHEL 7
  - Review SPDX licensing
  - Fix summary on Python 3 subpackage


author: Carl George <carlwgeorge@fedoraproject.org> - 24.2.0-1
changelog:
  - Update to version 24.2.0 rhbz#2258307
  - Remove hatch-fancy-pypi-readme build-system dependency
  - Disable docs when building for RHEL (EPEL)


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - jquery and underscore are no longer installed
  - Assert that a license file is installed


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Orion Poplawski <orion@nwra.com> - 5.0-6
changelog:
  - Rebuild without bootstrop (rhbz#2314522)
  - Add upstream fix for doc build with sphinx 8.x (rhbz#2329899)


author: Sandro <devel@penguinpee.nl> - 1.4.0-1
changelog:
  - Update to 1.4.0 (RHBZ#2348983)
  - Remove conditionals for EOL release
  - Review and update versions of bundled fonts
  - Drop dependency on `fontawesome4-fonts-web`


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-1
changelog:
  - Update to version 1.12
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )
  - Rebuilt for Python 3.14.0rc2+ bytecode (resolves rhbz#2388850)


author: Parag Nemade <pnemade AT redhat DOT com> - 2.6.0-1
changelog:
  - Update to 2.6.0 version (#2307515)
  - Use pyproject macros
  - Drop python2 subpackage as its not compatible with new python packaging


author: Adam Williamson <awilliam@redhat.com> - 2.4.0-2
changelog:
  - Backport PR #1377 to fix tests with Python 3.13
  - Run tests with -n auto to avoid hang (GH #1369)
  - Rebuilt for Python 3.13


author: Carl George <carlwgeorge@fedoraproject.org> - 3.50.2.0-1
changelog:
  - Update to version 3.50.2.0
  - Port to pyproject macros rhbz#2377454
  - Add upstream patch to avoid segfault during tests


author: Lumír Balhar <lbalhar@redhat.com> - 5.0.1-2
changelog:
  - Deprecate python3-async-timeout
  https://fedoraproject.org/wiki/Changes/DeprecatePythonAsyncTimeout


author: Carl George <carlwgeorge@fedoraproject.org> - 0.5.17-1
changelog:
  - Update to version 0.5.17 rhbz#2333482
  - Add missing click dependency
  - Avoid duplicate LICENSE.txt file


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 1.1.0~b1-2
changelog:
  - Apply suggested changes from package review
  - Add -l to the %pyproject_save_files macro to enforce the license is
    installed
  - Drop the note about Python 3.8 from the description


author: Scott K Logan <logans@cottsay.net> - 4.1.4-1
changelog:
  - Update to 4.1.4 (rhbz#2143436)
  - Define _description variable to reduce duplication
  - Drop macro from URL to improve ergonomics
  - Use modern Python packaging macros


author: Miro Hrončok <mhroncok@redhat.com> - 2.49.0-24
changelog:
  - Remove unused test BuildRequires
  - https://fedoraproject.org/wiki/Changes/DeprecateNose
  - Run a very basic import check during the build


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 2.3.1-0.1.20230409gitcda5072
changelog:
  - Update BuildRequires to python3-cryptography (RHBZ#2061786)
  - Update to 2.3.1 prerelease with support for python3-cryptography


author: Miro Hrončok <miro@hroncok.cz> - 1.3.0-3
changelog:
  - Fedora ELN: Build python3-build+virtualenv package
  - Fixes: https://github.com/fedora-eln/eln/issues/309


author: Adam Williamson <awilliam@redhat.com> - 1.6.22-6
changelog:
  - Backport PR #111 to handle changed ntpath.isabs in Python 3.13 (#2259550)
  - Rebuilt for Python 3.13


author: Miro Hrončok <miro@hroncok.cz> - 2024.08.30-4
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337319


author: Scott K Logan <logans@cottsay.net> - 0.18.1-1
changelog:
  - Update to 0.18.1 (rhbz#2300129)
  - Drop RHEL 7 spec support
  - Use boolean operators for backwards compatibility package dependencies


author: Brian C. Lane <bcl@redhat.com> - 4.0.1-1
changelog:
  - Update to new upstream version 4.0.1
  - Update spec to use pyproject_ macros
  - Drop html docs, generation with sphinx no longer works
  - Use docopt-ng on Fedora


author: Paul Howarth <paul@city-fan.org> - 2.6.1-56
changelog:
  - Stop using deprecated %py3_build/%py3_install macros (rhbz#2377592)
  - Drop support for building for multiple Python versions


author: Carl George <carlwgeorge@fedoraproject.org> - 1.6^1.1484546-1
changelog:
  - Update to latest upstream snapshot
  - Resolves Python 3.13 build error rhbz#2246053
  - Switch to SPDX license notation


author: Miro Hrončok <miro@hroncok.cz> - 3.0.11-5
changelog:
  - Avoid accidentally including bogus *.txt files as documentation
  - Include README.rst and CHANGES.rst instead


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.2.3-17
changelog:
  - Fix build with pytest-asyncio 1.x
  - Address future deprecations
  - Convert to pyproject macros (rhbz#2377610)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Michel Lind <salimma@fedoraproject.org> - 1.0.6-1
changelog:
  - Update to version 1.0.6
  - Modernize to follow the latest Python packaging guidelines
  - Generate extras subpackages
  - Enable import checks
  - Run unit tests
  - Use proper SPDX license identifier (zlib -> Zlib)
  - Enable Packit for future Rawhide updates


author: Michel Lind <salimma@fedoraproject.org> - 1.1.8-1
changelog:
  - Update to 1.1.8 upstream release
  - Add conditional BR on openssl to run some tests
  - Remove unneeded `upstream_project_url` from packit.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 4.1.2-1
changelog:
  - Update to 4.1.2
  - snapper: Add support for specifying snapper config name (RhBug:2089544)
  - rpmconf: Implement unattended config option


author: Carl George <carlwgeorge@fedoraproject.org> - 0.9.0-1
changelog:
  - Switch to docopt-ng upstream rhbz#2267060
  - Convert to pyproject macros
  - Confirmed SPDX license identifier


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.2.0-7
changelog:
  - Completely modernize (and greatly simplify) the packaging
  - Use pyproject-rpm-macros (fix RHBZ#2377674)
  - Package from the GitHub archive instead of the PyPI sdist
  - Run the tests
  - Use the provisional pyproject declarative buildsystem


author: Michel Lind <salimma@fedoraproject.org> - 9.0.4-9
changelog:
  - Replace mock with unittest.mock
  - Use bcond to toggle tests and gate test BRs but keep them disabled for now


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-6
changelog:
  - Use XWayland to run the graphical tests
  - Accurately categorize skipped tests, and re-enable a few.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.0~20231031git5aea0fd-1
changelog:
  - Update to a pre-release snapshot of 0.5.0
  - Update to current packaging standards, with pyproject-rpm-macros
  - Run the tests (with a few unexplained failures)


author: Steve Traylen <steve.traylen@cern.ch> - 0.5-1
changelog:
  - Update to 0.5 release - rhbz#1595860
  - Run tests with pytest macro - rhbz#2319655
  - Correct autogenerated license field
  - Switch source to github URL


author: Ondřej Pohořelský <opohorel@redhat.com> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Migrated to new python packaging guidelines
  - Resolves: rhbz#2377697, rhbz#2377047


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Drop bodhi-client dependency (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - Show how to get only version numbers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.3-1
changelog:
  - Make sure everything behaves correctly during the branching window
    (frostyx@email.cz)
  - Add releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.5-1
changelog:
  - Implement a caching mechanism (frostyx@email.cz)
  - Return bodhi releases as simple dicts (frostyx@email.cz)
  - Add CLI (mfocko@redhat.com)
  - Use pagination for bodhi's API (carlwgeorge@gmail.com)
  - Combine HTTP calls in bodhi_active_releases (carlwgeorge@gmail.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.7-1
changelog:
  - Exclude archived releases (nforro@redhat.com)
  - Generate aliases for minor versions of EPEL (nforro@redhat.com)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.19.2-1
changelog:
  - Version 0.19.2 (rhbz#2355107)
  - Just two small changes related to unexpected AttributeError thrown by the
    code.


author: Michel Lind <salimma@fedoraproject.org> - 5.1.0-1
changelog:
  - Update to version 5.1.0; Resolves: rhbz#2319659
  - Modernize spec for the latest packaging guidelines


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-35
changelog:
  - Drop unneeded BuildRequires for python3-spec and python3-nose, use unittest
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.4.16-12
changelog:
  - Remove obsolete test skip (regression was fixed in Python 3.12.1)
  - Report and skip regressions related to URL formation in Python 3.14;
    fixes RHBZ#2336951


author: Miro Hrončok <miro@hroncok.cz> - 0.3.2-2
changelog:
  - Do not attempt to generate test requirements using tox, there is no tox
    configuration
  - Fixes: rhbz#2354142


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.3.1-33
changelog:
  - F41+: Use the provisional pyproject declarative buildsystem
  - Since this is only for F41+, drop EPEL conditionals
  - Always run an import-only smoke test; add a bcond vtk_dep for optionally
    including VTK integration modules in this


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.4.0-1
changelog:
  - Update to 5.4.0 (close RHBZ#2368139)
  - Drop the plotly dependency from the “vis” extra until the python-plotly
    package can be updated


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.4.1-2
changelog:
  - Assert that the .dist-info directory contains a license file
  - Since AUTHORS is packaged as a license file in .dist-info too, don’t
    package a separate, duplicate copy of it


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.0-1
changelog:
  - Update to 4.0.0 (close RHBZ#2341728)
  - Remove conditionals for Fedora 40, since this version will never ship
    there
  - Print reasons for skipped tests


author: Carl George <carlwgeorge@fedoraproject.org> - 1.0.8-1
changelog:
  - Update to version 1.0.8 rhbz#2359117
  - Fix Python 3.14 AttributeError rhbz#2353138
  - Enable tests on EPEL


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.1-7
changelog:
  - Do not spuriously attempt to generate BuildRequires from tox
    (fix RHBZ#2354110)
  - Add an import-only smoke test, and document why we cannot run tests
  - Fix missing license file
  - Remove language about Python 3 in the description, left over from when we
    also had Python 2


author: Miroslav Suchý <msuchy@redhat.com> 2.4.1-1
changelog:
  - remove python2 code
  - spec: generate only python3 package
  - use SPDX identifier for license
  - add PCI subsystem support (jussi.kuokkanen@protonmail.com)


author: Steve Traylen <steve.traylen@cern.ch> - 1.48.0-4
changelog:
  - Create sub packages for ciso, async and extra
  - Stop running non-existent tox testing
  - Relax some strong versionion of dependencies


author: Miro Hrončok <miro@hroncok.cz> - 8.37.0-11
changelog:
  - Remove -s from ipython's shebang
  - Allows ipython to see user-installed packages
  - Fixes: rhbz#2404039


author: Sandro <devel@penguinpee.nl> - 1.1.1-1
changelog:
  - New package: python-ipython-pygments-lexers
  - Defines a variety of Pygments lexers for highlighting IPython code
  - Close RHBZ#2352575


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-13
changelog:
  - Use pytest instead of nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose
  - Use a proper SPDX License tag


author: Ondrej Mosnáček <omosnacek@gmail.com> - 4.0.0-2
changelog:
  - Fix the install command to comply with guidelines
  - Use %{pyproject_[save_]files}
  - Fix EPEL9 build


author: Björn Esser <besser82@fedoraproject.org> - 0.2.4-30
changelog:
  - Run unittests directly
    Fixes: rhbz#2319667
  - Modernize spec-file
  - Add patch to fix setuptool warnings


author: Göran Uddeborg <goeran@uddeborg.se> - 0.9.0-1
changelog:
  - Upgrade to version 0.9.0 rhbz#2348855
  - Replaces the previous workaround for Python 3.14 rhbz#2327982


author: Sudip Shil <sshil@redhat.com> - 1.0.9-12
changelog:
  - Migrate to %pyproject_* macros and remove deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /install


author: Miro Hrončok <miro@hroncok.cz> - 1.1.9-3
changelog:
  - Stop providing the legacy lark-parser Python package metadata
  - python3-lark-parser is still Provided+Obsoleted on the RPM level


author: Carl George <carlwgeorge@fedoraproject.org> - 2.9.1-10
changelog:
  - Update license tag to LGPL-3.0-or-later
  - Remove duplicate COPYING.LESSER.txt license file
  - Run an import check and the upstream test suite in %check


author: Paul Howarth <paul@city-fan.org> - 3.0.0-1
changelog:
  - Update to 3.0.0
    - Dropped support for Python <3.9
    - Modernized project metadata re: Python interpreters, development


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.3-1
changelog:
  - Version 5.3 (rhbz#2352617)
  - Upstream release notes suggest only small backward-compatible changes


author: Packit <hello@packit.dev> - 20231020-1
changelog:
  - [packit] 20231020 upstream release
  - Resolves rhbz#2245262 Upstream tag: 20231020 Upstream commit: d31e0d38


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.3-5
changelog:
  - Backport a patch for a DeprecationWarning in Python 3.14
  - As a side effect, we no longer need to patch the tests to work without
    pytest-mypy-plugins.


author: Sandro <devel@penguinpee.nl> - 2.0.0-1
changelog:
  - Update to 2.0.0 (RHBZ#2255304)
  - Changes entry point to `black`.
  - Changes namespace from `pylsp.pylsp_black` to `pylsp.black`.
  - Drop patch in favor of inline patching


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.15.6-3
changelog:
  - Replace spurious/obsolete BuildRequires on python-pytest-runner
  - Depend directly on pytest instead


author: Dan Callaghan <djc@djc.id.au> - 0.3.0-1
changelog:
  - new upstream release 0.3.0:
    https://github.com/matrix-org/matrix-synapse-ldap3/releases/tag/v0.3.0


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.3.0-1
changelog:
  - Update to latest upstream version 1.3.0 (closes rhbz#2219697)
  - Fix rhbz#2219756, rhbz#2261581 and rhbz#2232585


author: Michele Baldessari <michele@acksyn.org> - 0.12.0-6
changelog:
  - Apply patches from v0.12.0 to 6accdc4c4a7fe4d808b674a97fb5474e12621504
  - Also apply PR 73 to avoid python 3.13 breakage (although it will regress on more obscure image formats)


author: Konrad Kleine <kkleine@redhat.com> - 2.6.1-4
changelog:
  - Drop -devel package
  - Everything it included is now part of  the main package
  - The main package obsoletes the -devel package
  - The main package provides the -devel name


author: Dmitry Tantsur <dtantsur@proton.me> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - Use poetry instead of explicit setup.py, switch to new packaging macros
  - Patch out the hardcoded poetry version, we have a much newer one


author: Dmitry Tantsur <dtantsur@proton.me> - 4.4.0-1
changelog:
  - Update to 4.4.0 (fixes #2291789, #2296411)
  - Remove the poetry hack, fixed upstream
  - Downgrade the cffi dependency - the Python 3.13 fix is already here


author: Petr Šplíchal <psplicha@redhat.com> - 1.9.0-1
changelog:
  - Fix initializing version object by a version object (#48)
  - Send cookies with Python 3 as well
  - Rename required package, fix docs building & tests (#46)
  - Do not build and test on `epel-7` anymore
  - Use the `py3_shebang_fix` macro instead of `pathfix.py`
  - Add an explicit config for building readthedocs
  - Include srpm build requirements in Packit config
  - Remove 'enable_net' from Packit config
  - Remove 'metadata' from Packit config
  - Add missing build job(s) to Packit config


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.4-3
changelog:
  - Remove deprecated pytest-runner dependency
  - Since the patch offered upstream introduces a "test" extra, use it
  - Assert that .dist-info contains a license file


author: Sandro <devel@penguinpee.nl> - 2.10.2-1
changelog:
  - Update to 2.10.2
  - Add NumPy 2.x support (since 2.10.0)
  - Drop patches (appear to be no longer required)
  - Close RHBZ#2332471


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Richard Shaw <hobbes1069@gmail.com> - 1.0.1-40
changelog:
  - Update to use pyproject over deprecated setuptools for builds.
  - Add patch for urlparse as for Python 3 it has been moved to urllib.parse.


author: Stephen Smoogen <ssmoogen@redhat.com> - 0.2.22-1
changelog:
  - Initial package build
  - Get initial review done
  - Upload packages to src.fedoraproject.org
  - Attempt to build.


author: Miro Hrončok <miro@hroncok.cz> - 4.1.0-16
changelog:
  - Drop redundant test BuildRequires on deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Michel Lind <salimma@fedoraproject.org> - 0.5.7-1
changelog:
  - Update to 0.5.7 upstream release
  - Resolves: rhbz#2371010
  - This includes tox.ini; Resolves: rhbz#2354116


author: Adam Williamson <awilliam@redhat.com> - 2.0.2-13
changelog:
  - Backport PR #47 to drop use of (and undeclared dep on) six
  - Backport PR #49 to drop unused footgun pam.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.19.0-11
changelog:
  - Correct the License (and convert to SPDX)
  - Before 1.19.1, the package had an incorrect trove classifier indicating a
    BSD license, but the license file had MIT text; see
    https://github.com/r1chardj0n3s/parse/issues/145.


author: Dan Callaghan <djc@djc.id.au> - 8.13.48-1
changelog:
  - new upstream release 8.13.48:
    https://github.com/daviddrysdale/python-phonenumbers/blob/v8.13.48/python/HISTORY.md


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.24.4-3
changelog:
  - Temporarily omit dask/xarray to build for Python 3.14
  - Disable dask extra until it can be built
  - Disable xarray extra until it can be built, and due to a circular
    dependency
  - Fixes RHBZ#2372030


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.4.5-1
changelog:
  - Starting with Fedora 43, do not build PDF documentation
  - Drop the -doc subpackage (again, starting with Fedora 43)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.24.1-6
changelog:
  - Omit xarray integration tests on F43+
  - Fix RHBZ#2385510 and fix RHBZ#2372034 by working around the failure of
    python-xarray to build and install with Python 3.14.


author: Vojtech Trefny <vtrefny@redhat.com> - 0.25-1
changelog:
  - New version 0.25
  - Remove unneeded IAstroidChecker (bcl)
  - Replace check_messages decorator with only_required_for_messages (bcl)
  - spec: Change license string to the SPDX format required by Fedora
    (vtrefny)


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 1.1-5
changelog:
  - Fix Python 3.12 compatibility (rhbz#2175200, rhbz#2220425)
  - Verify that the License tag is valid SPDX


author: Jerry James <loganjerry@gmail.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Verify the license is valid SPDX
  - Automatically generate python BuildRequires
  - Modernize python RPM macro usage
  - Update description to remove upper bound on graphviz attribute support


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.3.0-2
changelog:
  - Test fix: patch httpretty socket for latest urllib3 release
  - Test fix: work around expired test token
  - Fixes RHBZ#2334702


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.0-14
changelog:
  - Port to pyproject-rpm-macros; drop obsolete practices
  - Start packaging CHANGELOG.md
  - Run an import-only “smoke test”


author: Christian Krause <chkr@fedoraproject.org> - 3.6.9-1
changelog:
  - Update to 3.6.9 (#2267692)
  - Remove example client and server (upstream split the source package)
  - Remove according weak requirements for example tools


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-2
changelog:
  - Stop disabling tests by default
  - Use generated BuildRequires, and prune some obsolete or bogus manual ones
  - Add an import-only smoke test, even when tests are disabled
  - Update the License field to just "MIT"


author: Hirotaka Wakabayashi <hiwkby@yahoo.com> - 2.3.0^20200513git60b6f10-5.20200513git60b6f10
changelog:
  - Requires legacy-cgi as build dependency (Fedora#2245641)
  - Removes python3-cgi dependency ad runtime


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
author:
  Fedora Release Engineering <releng@fedoraproject.org> - 2.3.0^20200513git60b6f10-6.20200513git60b6f10


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
author:
  Fedora Release Engineering <releng@fedoraproject.org> - 2.3.0^20200513git60b6f10-7.20200513git60b6f10


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
author:
  Fedora Release Engineering <releng@fedoraproject.org> - 2.3.0^20200513git60b6f10-9.20200513git60b6f10


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-1
changelog:
  - Update to 3.7.2; 2 tests are still disabled due to a regression in proj 9.6.2
  - Introduce new style pyproject macros


author: Kevin Fenzi <kevin@scrye.com> - 2.6-1
changelog:
  - Update to 2.6. Fixes rhbz#2326182
  - Moderize spec and check license
  - Fix FTBFS. Fixes rhbz#2319703


author: Fabian Affolter <mail@fabian-affolter.ch> - 0.6.5-1
changelog:
  - Update to latest upstream release (closes rhbz#2354883)
  - Replace py3_build/py3_install (closes rhbz#2378096)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.8.6-5
changelog:
  - Remove spurious/obsolete BuildRequires on python-pytest-runner
  - Add a direct BuildRequires on pytest


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.8-7
changelog:
  - Use tomllib instead of toml (used only in tests)
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Scott K Logan <logans@cottsay.net> - 0.9.3-1
changelog:
  - Update to 0.9.3 (rhbz#2241970)
  - Define _description variable to reduce duplication
  - Drop macro from URL to improve ergonomics
  - Use modern Python packaging macros
  - Switch to SPDX license identifier


author: Michel Lind <salimma@fedoraproject.org> - 4.0-25
changelog:
  - Use `pytest` instead of the removed `setup.py test` for setuptools 74+ compatibility
  - Mark as deprecated


author: Michel Lind <salimma@fedoraproject.org> - 4.0-27
changelog:
  - Link to approved Change Proposal for deprecating python-pytest-runner
  - Also mark python3-pytest-runner subpackage as deprecated


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.8.0-1
changelog:
  - Update to 1.8.0 - Closes rhbz#2319440
  - pyprojectize the spec
  - Drop all patches
  - Remove all unneeded prep changes


author: Scott Talbert <swt@techie.net> - 3.0.0-1
changelog:
  - Update to new upstream release 3.0.0
  - Update License tag to use SPDX identifiers
  - Modernize Python packaging


author: Scott Talbert <swt@techie.net> - 3.0-1
changelog:
  - Update to new upstream release 3.0
  - Update License tag to use SPDX identifiers
  - Modernize Python packaging


author: Packit <hello@packit.dev> - 1.16.6-1
changelog:
  - Update to 1.16.6 upstream release
  - Resolves: rhbz#2275890
  - Splits the examples into a separate subpackage


author: Packit <hello@packit.dev> - 1.17.0-1
changelog:
  - Update to 1.17.0 upstream release
  - Resolves: rhbz#2336120
  - The pyxdf.examples package is renamed to pyxdf.cli; we still package it
    as python3-pyxdf-examples.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.28.0-2
changelog:
  - Restore dependencies that haven't been detected automatically
    (erroneously removed in 0.25.0-3).


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.3-11
changelog:
  - Assert that the .dist-info directory contains a license file
  - Do not package a duplicate license file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.4.0-1
changelog:
  - Update to 1.4.0 (close RHBZ#2308262)
  - Re-enable the server_test, which now works properly offline


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 3.0.0-1
changelog:
  - Update to upstream
  - Disable crypt check. Crypt module has been removed from python3.13,
    repoze-who works well without it and therefore this test is useless
  - Use pytest instead of setup.py test


author: David Shea <reallylongword@gmail.com> - 0.3.1-38
changelog:
  - Switch to pyproject macros
  - Remove python2 support
  - Switch to github for the upstream source
  - Run the tests in %check


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.25-6
changelog:
  - rhbz#2378169 Migrating to pyproject macros
  - https://fedoraproject.org/wiki/Changes/DeprecateSetuppyMacros


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.27-1
changelog:
  - New upstream version 1.27
  - Fix serialisation on FIPS enabled system
  - Rebuilt for Python 3.14.0rc3 bytecode


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.0-9
changelog:
  - Don't try to generate build dependencies by tox, there is no tox configuration
  - Fixes: rhbz#2354121


author: Packit <hello@packit.dev> - 0.9.0-1
changelog:
  - Supports recording of the requests done by `httpx` via `record_httpx()` and `recording_httpx()` decorators. (#297)


author: Packit <hello@packit.dev> - 0.9.1-1
changelog:
  - Adjusted `requre-purge` to not replace GitHub tokens with dummy token that
    still looks like a legit one and also case-sensitiveness on the cookies from
    Pagure.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.1-13
changelog:
  - Simplify and reformat the spec file
  - Deconditionalize the tests
  - Stop using the “forge macros,” which don’t contribute much here


author: Pavol Sloboda <psloboda@redhat.com> - 1.00.14-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively.


author: Michel Lind <salimma@fedoraproject.org> - 0.4-13
changelog:
  - Switch test runner from tox (which calls setup.py test) to pytest
  - Verify SPDX conversion
  - Update source URL
  - Resolves: rhbz#2319713


author: Miro Hrončok <mhroncok@redhat.com> - 2.4.0-8
changelog:
  - Generate BuildRequires dynamically
  - Drop unneeded build dependency on python3dist(toml)
  - Drop duplicate runtime dependency on python3-dateutil


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.1-1
changelog:
  - Update to version 0.6.1; Fixes RHBZ#2386831
  - Automate patching the path-based safetensors crate dependency
  - A patch fixing several failing tests has been merged upstream


author: Cristian Le <git@lecris.dev> - 0.10.7-3
changelog:
  - Various simplifications
  - Added `Requires: ninja-build` by default
  - Removed `Suggests` and `Recommends`, these are not likely to be used
  - Removed the test conditional for epel10 since everything will be packaged
  - Removed the `pyproject` subpackage since it's empty and all dependents
    are gone


author: Miro Hrončok <miro@hroncok.cz> - 1.3.0-39
changelog:
  - Convert to modern Python packaging guidelines
  - Stop building the documentation
  - Fixes: rhbz#2319715


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.0-6
changelog:
  - Adapt for fit_params renaming in scikit-learn 1.6 (fix RHBZ#2341213)
  - Since this patch is specific to Fedora 42 and later, remove conditionals
    pertaining to older releases.


author: Matthieu Saulnier <fantom@fedoraproject.org> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - Update URL and SourcesURL tags
  - Remove python3-omemo-backend-signal as BuildRequires


author: Packit <hello@packit.dev> - 1.19.4-1
changelog:
  - Update to 1.19.4 upstream release
  - Resolves: rhbz#2374311
  - Remove upstream’s upper-bound on the version of python-packaging
  - Add bootstrap conditional to break new snakemake circular dep.


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Packit <hello@packit.dev> - 0.41.0-1
changelog:
  - Fixed an issue where the value of a tag could have been incorrectly expanded if the spec file contained a macro definition shadowing the tag name, e.g.:
  ```
  %global release 12
  %global release_string %{release}%{?dist}
  Release: %{release_string}
  ```
  In this case, with `dist` being `.fc44`, `Specfile.expanded_release` returned `12.fc44.fc44` instead of `12.fc44`. (#539)


author: Cristian Le <git@lecris.dev> - 2.6.0-2
changelog:
  - Fix python build
  - Cleanup the spec file to use %conf
  - Set the python CMAKE_BUILD_TYPE to RelWithDebInfo
  - Made sure the python files do not bundle Spglib
  - Fixed the tmt tests, for now


author: Jerry James <loganjerry@gmail.com> - 1.0.0-1
changelog:
  - Version 1.0.0
  - Use the pyproject declarative buildsystem
  - Stop building documentation, which now requires use of a bundled sphinx
    theme with an unknown license


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-0.24.b2
changelog:
  - Remove patch for compatibility with click 8.2
  - Due to numerous regressions, we are going to revert back to click 8.1.7


author: Dan Callaghan <djc@djc.id.au> - 1.8.1-1
changelog:
  - new upstream release 1.8.1:
    https://sphinxcontrib-httpdomain.readthedocs.io/en/stable/#version-1-8-0


author: Jerry James <loganjerry@gmail.com> - 0.2.4-1
changelog:
  - Version 0.2.4
  - Drop upstreamed patches
  - Remove MIT and Unlicense from the License field
  - Run tests in verbose mode
  - Add LICENSE file


author: Jerry James <loganjerry@gmail.com> - 1.14.0-1
changelog:
  - Version 1.14.0
  - Drop upstreamed tempfile flush patch
  - Add patch to avoid intersphinx_registry
  - Drop workaround for buggy lark on ppc64le
  - Drop examples subpackage


author: Jerry James <loganjerry@gmail.com> - 1.14.0-4
changelog:
  - Make the package noarch again
  - Use the pyproject declarative buildsystem
  - Restrict build to x86_64
  - Remove note about aesara, which has fallen into disrepair


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-1
changelog:
  - Version 2022.0.0
  - Drop unnecessary Werror patch
  - Drop unnecessary python shebang mangling
  - Let pkgconfig specify the version of hwloc to use


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-3
changelog:
  - Add patch to fix linking tbbmalloc with GCC 15
  - Update %giturl for the uxlfoundation change
  - Fix intersphinx_mapping to use local objects.inv


author: Jerry James <loganjerry@gmail.com> - 2022.2.0-1
changelog:
  - Version 2022.2.0
  - Drop the doc subpackage which cannot be built due to missing deps
  - Add patch to disable -fcf-protection=full on non-x86 architectures


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Miroslav Suchý <msuchy@redhat.com> 1.6-1
changelog:
  - remove license classifier from setup.py
  - modernize python macros
  - update license to SPDX in README
  - update license to SPDX in setup.py too


author: Michel Lind <salimma@fedoraproject.org> - 2.7.1-14
changelog:
  - Fix building with Python 3.14; Resolves: RHBZ#2343971
  - Fix building with pygments 2.19.1; Resolves: RHBZ#2350306


author: Jerry James <loganjerry@gmail.com> - 1.0.0-3
changelog:
  - Add upstream patch for python 3.14 compatibility
  - Update License field
  - Use modern python build macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.5.0-4
changelog:
  - Update to 3.5.0 (close RHBZ#2361673)
  - Report and skip brittle integration tests failing with current fonttools;
    fixes RHBZ#2372184


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-1
changelog:
  - Update to 0.17.0 (close RHBZ#2322970)
  - Don’t package a duplicate LICENSE file; assert one is found and handled
  - Add missing extras metpackages


author: Michel Lind <salimma@fedoraproject.org> - 1.4.0-1
changelog:
  - Update to version 1.4.0; Fixes: RHBZ#2386033
  - Modernize packaging; Fixes: RHBZ#2378304
  - Run unit tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.34.0-2
changelog:
  - Build for Python 3.14 (fix RHBZ#2372189)
  - Disable uvloop dep., and therefore the "standard" extra, for now
  - Do not error on warnings, as this is too strict and there are new
    DeprecationWarnings
  - Patch test_loop_auto for Python 3.14


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.30-4
changelog:
  - Disable perl-Coro for rawhide, as this blocks rebuilding
    for perl 5.42 (see https://bugzilla.redhat.com/show_bug.cgi?id=2379448)


author: Sandro <devel@penguinpee.nl> - 3.1.1.post2-1
changelog:
  - Update to 3.1.1.post2
  - Make `pyproject.toml` compatible with `setuptools` >= 69.
  - Fix RHBZ#2259653.


author: Davide Cavalca <dcavalca@fedoraproject.org> - 6.0.0-5
changelog:
  - Relax test dependencies
  - relax version pins
  - drop ruff as it's not actually needed
  - drop eventlet as it's been retired


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-3
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 1.8.8-1
changelog:
  - Update to upstream. Fix open redirect issue in 1.8-branch rhbz#2305065
  - pypi_source constructed manually according to project/name case inconsistency
  - only require legacy-cgi on on systems where it's present
  - remove python3.9 patch (applied upstream)


author: Carl George <carlwgeorge@fedoraproject.org> - 1.8.9-1
changelog:
  - Update to version 1.8.9 rhbz#2325373
  - Port to pyproject macros
  - Remove old provides/obsoletes for python3-webob1.2


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.7.4-35
changelog:
  - Switch from 'setup.py test' to '\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    PATH="/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/bin:$PATH"\
    PYTHONPATH="${PYTHONPATH:-/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/lib64/python3.14/site-packages:/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/lib/python3.14/site-packages}"\
    PYTHONDONTWRITEBYTECODE=1\
    \
    PYTEST_XDIST_AUTO_NUM_WORKERS="${PYTEST_XDIST_AUTO_NUM_WORKERS:-8}" /usr/bin/pytest'
  - Resolves: rhbz#2319736


author: Dan Callaghan <djc@djc.id.au> - 0.9.2-29
changelog:
  - Updated license tag to valid SPDX identifier
  - Dropped nose dependency and usage of setuptools test command


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.0.4-13
changelog:
  - Regenerate C source from Vala source and enable
    -Werror=incompatible-pointer-types again
    (Thanks to Florian Weimer <fweimer@redhat.com>)


author: Jerry James <loganjerry@gmail.com> - 5.1-1
changelog:
  - Version 5.1 (rhbz#2290844)
  - Add patch for python 3.13 compatibility (rhbz#2280553)
  - Minor spec file cleanups


author: David Auer <dreua@posteo.de> - 5.2-1
changelog:
  - Version 5.2 (rhbz#2322672, rhbz#2329901)
  - Remove patch
  - Remove setuptools version requirement in tox.ini


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Miro Hrončok <mhroncok@redhat.com> - 3.15.0~b2-5
changelog:
  - Restore compatibility with setuptools nspkg.pth files in site module
  - Fixes: rhbz#2486045
  - Fixes: rhbz#2486059
  - Fixes: rhbz#2487621
  - Fixes: rhbz#2488369


author: Ben Boeckel <fedora@me.benboeckel.net> - 1.9.4-1
changelog:
  - Update to 1.9.4 (rhbz#2324228)
  - Support Python 3.13 (rhbz#2315724)
  - Update license to GPL-3.0 (no "or later" present in comment headers)


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Pavel Raiskup <praiskup@redhat.com> 2.1-1
changelog:
  - The wait-for-ssh script was moved to resalloc-helpers
  - releng: release to all active Fedora releases


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.3-1
changelog:
  - Add functionality for tagging resource by its crn (j1.kyjovsky@gmail.com)
  - Add option for specifying resource group (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - Log the instance create request content
  - Allow specifying a list of Floating IPs
  - Drop executable bits from PYTHONPATH scripts


author: Jakub Kadlcik <frostyx@email.cz> 3.3-1
changelog:
  - Make the INVALID_SPEC_TEMPLATE really invalid
  - Use quote from shlex instead of deprecated pipes
  - rpkg-macros.spec: testsuite work-around for new git
  - Fix FTBFS on Fedora 38+


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-6
changelog:
  - Fix for CVE-2026-41035
  - Fixing bad time in rsync logs
  - Fixing regression from CVE-2024-12086 fix
  - Fixing improper clearing of DISPLAY env variable


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.1.0-24
changelog:
  - Use recent gem packaging style
  - Modify License tag
  - Use test-unit for testsuite
  - Upstream PR to suppress warnings for literal string


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-2
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to verson 1.2.0; Fixes RHBZ#2393793
  - MSRV is now 1.87, edition is 2024
  - The dev-dependency on criterion is now removed via patch rather than
    tomcli


author: Robby Callicotte <rcallicotte@fedoraproject.org> - 3007.4-1
changelog:
  - Update to 3007.4 RHBZ#2366381 - Resolves CVE-2024-38824 RHBZ#2372731 -
    Resolves CVE-2024-38824 RHBZ#2372733 - Resolves CVE-2025-22239
    RHBZ#2372732 - Resolves CVE-2025-22239 RHBZ#2372734 - Resolves
    CVE-2025-22236 RHBZ#2372774 - Resolves CVE-2025-22236 RHBZ#2372776 -
    Resolves CVE-2025-22242 RHBZ#2372741 - Resolves CVE-2025-22242
    RHBZ#2372745 - Resolves CVE-2025-22240 RHBZ#2372746 - Resolves
    CVE-2025-22241 RHBZ#2372748 - Resolves CVE-2025-22240 RHBZ#2372752 -
    Resolves CVE-2025-22241 RHBZ#2372753


author: Stephane Thiell <sthiell@stanford.edu> 0.6.1-7
changelog:
  - Migrate from deprecated setup.py build/install to pyproject macros
  - Switch Source0 to PyPI archive


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.15-1
changelog:
  - restorecon.py: exclude more paths
  - Improve disable_ipv6 plugin then_text
  - Update generated configuration files
  - Update translations


author: Paul Pfeister <code@pfeister.dev> - 0.15.0-1
changelog:
  - Importable module renamed to sherlock_project (see Debian 1072733).
  - --dump-response flag added to aid in debugging.


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-7
changelog:
  - Added -DSM_CONF_STDBOOL_H in /usr/bin/make -O -j${RPM_BUILD_NCPUS} V=1 VERBOSE=1 to fix BZ#2385632.


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-8
changelog:
  - Added the line '/usr/lib/sysusers.d/smf-spf.conf' in %files.
  - Added the line 'install -m0644 -D /builddir/build/SOURCES/smf-spf.sysusers /builddir/build/BUILD/smf-spf-2.5.1_20220423g061e937-build/BUILDROOT/usr/lib/sysusers.d/smfs.conf'.


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Clark Williams <williams@redhat.com> - 1.28.1-1
changelog:
  - stalld: bump version to 1.28.1
  - tests: Fix journal flush race in logging destinations test
  - Merge remote-tracking branch 'wander/dev' into devel
  - stalld: fix format string type mismatch in set_cpu_affinity
  - stalld: fix error return in queue_track_get_cpu
  - stalld: fix snprintf truncation check in is_runnable
  - stalld: fix missing null-termination in is_runnable
  - stalld: guard nextline() returns in sched_debug parsing
  - stalld: remove NULL deref in fill_waiting_task error handler
  - stalld: fix type mismatches in detect_task_format
  - stalld: fix format string type mismatch for time_t
  - stalld: use CLOCK_MONOTONIC for starvation detection
  - stalld: remove async-signal-unsafe calls from signal handler
  - stalld: fix data race on config_buffer_size
  - stalld: fix signed integer overflow in set_reservation
  - stalld: check pthread_create return in conservative_main
  - stalld: check pthread_create return in aggressive_main
  - stalld: fix buffer underflow in sched_debug_get
  - stalld: fix buffer underflow in read_proc_stat
  - stalld: fix uninitialized buffer use in find_debugfs_mount_point
  - stalld: fix inverted DAEMON_UMASK value
  - stalld: fix data race on thread_running
  - bpf: Replace linear task scan with hash map
  - tests: Fix async-signal-unsafe handler
  - tests: Reduce timing and replace sleeps with event waits
  - tests: Remove redundant sleeps after start_stalld
  - tests: Drop redundant sleeps in test_pidfile
  - tests: Replace init sleeps in test_affinity
  - tests: Reduce starvation_gen durations
  - tests: Reduce default wait timeouts
  - tests: Extract wait_for_process_exit helper
  - tests: Introduce and adopt process helpers
  - tests: Remove dead code after making fail() fatal
  - tests: Abort immediately on test failure
  - tests: Remove if-wrappers around assert calls
  - tests: Replace wait conditionals with asserts
  - tests: Introduce and adopt assert_success() helper
  - tests: Remove weak, redundant, and assertion-free test blocks
  - tests: Introduce and adopt assert_log_contains() helper
  - tests: Remove redundant pkill from cleanup
  - tests: Add idle CPU skipping assertion
  - tests: Fix CPU selection grep substring matches
  - tests: Add assertions to SCHED_OTHER restoration test
  - chore: Remove legacy test infrastructure and stale docs
  - tests: Fix repeated log match finding same line
  - tests: Fix subshell swallowing test results
  - tests: Fix boost verification in runtime and duration tests
  - tests: Introduce assert_stalld_rejects() helper
  - tests: Consolidate and adopt init_functional_test()
  - tests: Fix task exit timing in test_boost_restoration
  - tests: Introduce find_starved_child() helper
  - tests: Introduce starvation and boost asserts
  - tests: Introduce cleanup_scenario() helper
  - tests: Introduce test_section() helper
  - stalld: Reject --force_fifo in single-threaded mode


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.57.1-1
changelog:
  - Update to 0.57.1; Fixes: RHBZ#2280939, RHBZ#2301323, RHBZ#2280426,
    RHBZ#2280433, RHBZ#2280449, RHBZ#2280455, RHBZ#2280469, RHBZ#2280475,
    RHBZ#2280487, RHBZ#2302835, RHBZ#2307674


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.0-1
changelog:
  - Initial release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.1.0


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.1.0-2
changelog:
  - Existing release for SyncStar project
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.0-1
changelog:
  - Second release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.0


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.1-1
changelog:
  - Third release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.1


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.2-1
changelog:
  - Fourth release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.2


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.2-2
changelog:
  - Temporarily disabled the buildtime checks until an approach is finalized
  - See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/ZSHSHZKVA4XJQBJD7FMMCALKN4UP5SAJ/


author: Peter Czanik <peter@czanik.hu> - 4.9.0-1
changelog:
  - update to 4.9.0
  - add destination drivers for ClickHouse and PubSub
  - add missing Python dependencies


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Tony Asleson <tasleson@redhat.com> - 0.10.4-8
changelog:
  - Workaround for: https://github.com/open-iscsi/rtslib-fb/issues/220
  - Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2383084


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Than Ngo <than@redhat.com> - 11:2023-74
changelog:
  - fixed rhbz#2314476, missing dependencies for package texlive-europasscv
  - fixed rhbz#2295803, Chessboard requires skaknew for a font


author: Than Ngo <than@redhat.com> - 11:2023-77
changelog:
  - Fixed rhbz#2284201 - texlive-tcolorbox has missing dependencies
  - Fixed rhbz#2359772 - texlive-readarray requires texlive-forloop


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-4
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259
          CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263
          CVE-2026-50264


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Jakub Kadlcik <frostyx@email.cz>
changelog:
  - Use rpm.ds instead of deprecated hdr.dsFromHeader (frostyx@email.cz)
  - Support branch aliases in releasers (frostyx@email.cz)
  - Document how to automate bodhi updates (msuchy@redhat.com)
  - Use raw strings for regex patterns (frostyx@email.cz)
  - Allow tito build without .tito directory (frostyx@email.cz)
  - Unify README and index.md (msuchy@redhat.com)
  - Fix PEP8 issues found by runtests.py (frostyx@email.cz)
  - Replace egrep with grep -E (frostyx@email.cz)
  - Don't use --cacheonly on DNF5 (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.26-1
changelog:
  - Fix issue with missing version numbers in the changelog (frostyx@email.cz)
  - Tito wrapper for easier development (praiskup@redhat.com)


author: Jakub Kadlčík <frostyx@email.cz>
changelog:
  - Defer submodule detection to git
  - Many improvements to tests and they now run during package build
  - New config option `buildconfig.test_version_suffix`


author: Didier Fabert <didier.fabert@gmail.com> - 0.1-35.20171025gitab9bbbd
changelog:
  - Stop using deprecated py3_build/py3_install macros https://bugzilla.redhat.com/show_bug.cgi?id=2378474
  - migrated to last commit


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
      resolves: RHEL-79943
    - functions: make calc_isolated_cores return CPU ranges
      resolves: RHEL-75751
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
      resolves: RHEL-61801
    - realtime: Disable appropriate P-State drivers
      resolves: RHEL-85637
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
      resolves: RHEL-71304
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
      resolves: RHEL-101578
    - gui: fix the profile deleter script


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1:2025.10-1
changelog:
  - Update to 2025.10 GA (rhbz#2401964)
  - Fix booting when using FW device-tree (rhbz#2402498)
  - Fix for some variants of Raspberry Pi
  - Fixes for Jetson device booting


author: Jens Petersen <petersen@redhat.com> - 17.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode17.0.0/
  - https://blog.unicode.org/2025/09/unicode-170-release-announcement.html


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.18.0-1
changelog:
  - Update to 8.18.0
  - Resolves: rhbz#2423186
  - Build against LibRaw
  - Switch from spng to libpng (preferred upstream)
  - Disable new uhdr feature (lack of libuhdr)


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Patrick Monnerat <patrick@monnerat.net> 2.5.0-3
changelog:
  - Patch "pastekey" fixes a crash pasting an encrypted private key.
    https://github.com/chris2511/xca/commit/d29d55a
  - Patch "revokedel" fixes a freeze when deleting a certificate.
    https://github.com/chris2511/xca/commit/43e1b33
  - Patch "delete_after_revoke" fixes a crash deleting+revoking a certificate.
    https://bugzilla.redhat.com/show_bug.cgi?id=2259477


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-2
changelog:
  - Require and use mutter as default compositor in RHEL
  - Make other compositors very weak dependencies in RHEL


author: Richard W.M. Jones <rjones@redhat.com> - 4.5.2-5
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Maxwell G <maxwell@gtmx.me> - 2026.02.21-1
changelog:
  - Update to 2026.02.21. Fixes rhbz#2441709.
  - Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)


author: Maxwell G <maxwell@gtmx.me> - 2026.06.09-1
changelog:
  - Update to 2026.06.09. Fixes rhbz#2487407.
  - Mitigates CVE-2026-50019, CVE-2026-50023, CVE-2026-50574


author: Neil Hanlon <neil@shrug.pw> - 1.9.1-4
changelog:
  - switch to pure cmake (1.9.0 turned configure into a wrapper which dropped options)
  - resolve ftbfs, fti, new version (#226393 #2301380 #2292226)
  - resolve CVE-2024-39844 (#2295622)


