# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-5
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Resolves: rhbz#2424132 Upgrade from freeipa-4.12.5-3 and 390-ds-
    base-3.1.3-10 to latest rawhide fails


author: Jerry James <loganjerry@gmail.com> - 1.6.15-1
changelog:
  - Verion 1.6.15
  - Drop upstreamed const patch
  - Force use of environment-modules in Rawhide until Lmod is fixed


author: josef radinger <cheese@nosuchhost.net> - 1:3.6.5-2
changelog:
  - bump version
  - add patch https://github.com/GreycLab/CImg/commit/94f00eb0302a9db7aa8ea4034fb48a8a4dbbbb8e.patch
    and https://github.com/GreycLab/CImg/commit/50674b2dcfe004673f629bbb37bc9c960f2ae614.patch (modified)
    to fix compile error for i686 https://github.com/GreycLab/CImg/issues/471


author: Jerry James <loganjerry@gmail.com> - 1.26.05-1
changelog:
  - Version 1.26.05
  - Update to normaliz 3.11.1
  - Build with jansson support
  - Remove Lmod workaround
  - Unbundle pythoncapi-compat


author: Íñigo Huguet <ihuguet@riseup.net>
changelog:
  - Update to 1.56-rc2 release
  - Fixes CVE-2025-9615. To achieve it, remove normal users' permission to modify system connections.


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.56.0-1
changelog:
  - Update to 1.56.0 release
  - Enable polkit_noauth_group=wheel (rhbz#2437985)
  - Fix bugs related to secrets handling and permissions


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.4-5
changelog:
  - Go back to bundling dr_flac and dr_mp3, since it is not straightforward to
    patch for the current releases


author: Dominik Mierzejewski <dominik@greysector.net> - 2.0.5^20260117git1be041b-1
changelog:
  - update to 20260117 snapshot from stable-2.0 branch
  - fixes CVE-2025-14369 (resolves rhbz#2431177)
  - fixes rpmbuild -bi --short-circuit


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.0.0~20260117gitb00e4a3-1
changelog:
  - update to 20260117 snapshot from main (3.0) branch
  - fixes CVE-2025-14369 (resolves rhbz#2431178)
  - fixes rpmbuild -bi --short-circuit


author: Jerry James <loganjerry@gmail.com> - 4.4.1p5-1
changelog:
  - Version 4.4.1p5
  - Drop sharutils build dependency
  - Drop upstreamed ntl8 and flint3.3 patches
  - Drop workaround for normaliz 3.10.5
  - Build with C++20


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.0-1
changelog:
  - Version 0.7.0
  - linkdupes subpackage is added. It is required by build-reproducibility-
    srpm-macros, so it'll be pulled into buildroots.
  - redhat-rpm-config needs to be updated to call
    %__os_install_post_hardlink in %__os_install_post for the helper to
    actually be used in builds.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.1-1
changelog:
  - Version 0.7.1
  - This implements https://fedoraproject.org/wiki/Changes/Hardlink_identical
    _files_in_packages_by_default.


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.15-1
changelog:
  - update to 3.6.2.15 (resolves rhbz#2416531)
  - drop serial ctest call work-around, fixed upstream
    (https://github.com/adventuregamestudio/ags/pull/2910)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251011-1
changelog:
  - Update to 20251011
  - qcom: add CDSP firmware for kaanapali platform
  - qcom: add version for A650 GMU firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
  - qcom: Add firmwares for Kaanapali GPU
  - qcom: Update A623 GMU fw
  - qcom: Fix QCS615 chipset's GPU secure fw
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - WHENCE: remove link for Kaanapali video firmware
  - intel_vpu: Update NPU firmware
  - Add Dell ISH firmware for Intel Lunar Lake systems
  - Update VCN for Navi1x, Green Sardine and Renoir
  - qcom: vpu: update video firmware binary for SM8550
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
  - qcom: vpu: add video firmware for Kaanapali
  - qcom: Update DSP firmware for qcs8300 platform.
  - qcom: Add Audio topology for HAMOA-EVK
  - intel/ish:Add ISH firmware file for Intel Lunar Lake platform
  - mediatek: update firmware version info for MT7986/81/16
  - ql2500_fw: update ISP25xx Firmware
  - qcom: Update aic100 firmware files
  - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
  - mediatek: mtk_wed: drop links for mt7988
  - qcom: Update DSP firmware for qcs8300 platform.
  - powervr: update firmware for Imagination Technologies BXS-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform.
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - qcom: move LEMANS EVK firmware to correct location


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251021-1
changelog:
  - Update to 20251021
  - Revert "update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: DMC Xe2LPD v2.29 / Xe3LPD v2.32 / Xe3LPD_3002 v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - Add ISH firmware file for Intel Pather Lake platform
  - Update firmware file for Intel Magnetar/BlazarU/BlazarI core


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251111-1
changelog:
  - Update to 20251111
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - Update firmware file for Intel BlazarI/BlazarU core
  - Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - Update AMD cpu microcode
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - update firmware for MT7920/MT7922/MT7925 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251125-1
changelog:
  - Update to 20251125
  - Revert "amdgpu: update GC 11.0.1 firmware"
  - QCA: Add Bluetooth firmware for WCN685x uart interface
  - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
  - qcom: venus-5.4: update firmware binary for v5.4
  - qcom: venus-5.4: remove unused firmware file
  - iwlwifi: add Sc/Wh FW for core98-181 release
  - amdgpu: DMCUB updates for various ASICs
  - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
  - ASoC: tas2781: Add more symbol links on SPI devices
  - amdgpu: update numerous firmware
  - amdgpu: add vce1 firmware
  - mediatek MT7922: update bluetooth firmware to 20251118163447
  - update firmware for MT7922 WiFi device
  - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
  - qcom: add ADSP, CDSP firmware for sm8750 platform
  - rtl_nic: add firmware rtl9151a-1
  - qcom: Update aic100 firmware files
  - mt76: add firmware for MT7990
  - mt76: update firmware for MT7992/MT7996
  - cirrus: cs35l57: Add firmware for a few Dell products
  - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
  - qcom: Add sdx35 Foxconn vendor firmware image file
  - Update AMD cpu microcode


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260110-1
changelog:
  - Update to 20260110
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20260106153314
  - mediatek MT7920: update bluetooth firmware to 20260105151350
  - mediatek MT7922: update bluetooth firmware to 20260106153735
  - update firmware for MT7922 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
  - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
  - qcom: Update DSP firmware for sa8775 platform
  - QCA: Add Bluetooth firmware for QCC2072 uart interface
  - i915: Xe3p_LPD DMC v2.33
  - qcom: Update DSP firmware for qcs8300 platform
  - update firmware for MT7920 WiFi device
  - qcom: Update aic100 firmware files
  - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
  - firmware: Revert kernel_boot.elf due to license compliance issue
  - add firmware for an8811hb 2.5G ethernet phy
  - i915: Xe3LPD_3002 DMC v2.28
  - i915: Xe3LPD DMC v2.33
  - intel_vpu: Add firmware for 50xx NPUs and update older ones
  - Update AMD SEV firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: venus-5.4: fix ELF segment alignment to 4 bytes
  - mediatek MT7925: update bluetooth firmware to 20251210093205
  - update firmware for MT7925 WiFi device
  - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
  - qcom: Update CDSP firmware for qcm6490 platform
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
  - iwlwifi: Add firmware file for Intel Scorpius core
  - rtw89: 8852b: update fw to v0.29.29.15
  - cirrus: cs35l41: Update firmware and tuning for various HP laptops
  - cirrus: cs35l41: Add support for new HP Clipper laptop
  - qcom: drop compatibility a640_zap.mdt symlink
  - qcom: add version for a530v3_gpmu.fw2
  - xe: Update GUC to v70.55.3 for BMG, PTL
  - iwlwifi: add Bz/Sc FW for core101-82 release
  - iwlwifi: Add Sc/Gf firmware for core101-82 release
  - iwlwifi: update ty/So/Ma firmwares for core101-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Add firmwares for sm8150/sm8450/sm8550/sm8650/sm8750 GPUs
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - cirrus: cs35l41: Add support for new HP laptops
  - Revert "amdgpu: update GC 11.5.0 firmware"
  - Update amd-ucode copyright information
  - Update AMD cpu microcode
  - Update firmware file for Intel Scorpius core
  - Update firmware file for Intel BlazarIGfP core
  - Update firmware file for Intel BlazarI core
  - Update firmware file for Intel BlazarU-HrPGfP core
  - Update firmware file for Intel BlazarU core
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: update ADSP firmware for x1e80100 platform, change the license
  - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
  - Reapply "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update GC 10.3.6 firmware"
  - Revert "amdgpu: update GC 11.5.1 firmware"
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251124093155
  - intel_vpu: Update NPU firmware
  - qcom: vpu: update video firmware binary for SM8250
  - xe: Update GUC to v70.54.0 for BMG, PTL


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260221-1
changelog:
  - Update to 20260221
  - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Update DSP firmware for qcs8300 platform
  - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
  - qcom: Update DSP firmware for sa8775p platform
  - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
  - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
  - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
  - rtw89: 8852b: update txpwr element to R43
  - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
  - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
  - xe: Update GUC to v70.58.0 for LNL, BMG, PTL
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - qcom: Add gpu firmwares for Glymur chipset
  - qcom: vpu: add video firmware for Glymur
  - qcom: add QUPv3 firmware for x1e80100 platform
  - Bluetooth: Add symbolic links for Intel Solar JfP2/1, Solar, Pulsar, AX201 firmware variants
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - qcom: add ADSP, CDSP firmware for glymur platform
  - ASoC: tas2783: Add Firmware files for tas2783A
  - Update firmware file for Intel Solar core
  - mediatek MT7921: update bluetooth firmware to 20251223091725
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - Add firmware for airoha-npu-7581 driver used for MT7990 offloading
  - Add Dell ISH firmware for Intel panther lake systems
  - update Aeonsemi AS21x1x firmware to 1.9.1
  - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
  - ice: update DDP LAG package to 1.3.2.0
  - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
  - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
  - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
  - Update firmware for NPU PHX, STX and STX HALO
  - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
  - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
  - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
  - Intel IPU7: Update firmware binary for Panther Lake
  - update firmware for MT7921 WiFi device
  - Add firmware file for Intel ScorpiusGfp2 core
  - Update firmware file for Intel Scorpius/BlazarIGfP/BlazarI/BlazarU-HrPGfP/BlazarU core
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
  - Add firmware for airoha-npu-7583 driver
  - iwlwifi: add Bz/Sc, Hr/Gf FW for core102-56 release
  - iwlwifi: update ty/So/Ma firmwares for core102-56 release
  - xe: Add GSC 105.0.2.1301 for PTL
  - mediatek: rename MT8188 SCP firmware
  - qcom: Update DSP firmware for QCM6490 platform
  - qcom: sync audioreach firmwares from v1.0.1 build


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260309-1
changelog:
  - Update to 20260309
  - mediatek MT7922: update bluetooth firmware to 20260224103448
  - update firmware for MT7922 WiFi device
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
  - Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
  - amdgpu: updates for various GPUs/ASICs
  - Add firmware file for Intel BlazarIGfp2 core
  - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
  - qcom: Update CDSP firmware for QCM6490 platform
  - add firmware for Lontium LT8713SX DP hub
  - qcom: sync audioreach firmwares from v1.0.2 build
  - qcom: update ADSP, CDSP firmware for sm8750  platform
  - qcom: update ADSP dtb.mbn for glymur platform
  - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
  - Renaming the file back for HP EliteBook X Flip G1i
  - amdnpu: Restore old NPU firmware for compatibility
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
  - update firmware for MT7902 BT device
  - update firmware for MT7902 WiFi device


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260410-1
changelog:
  - Update to 20260410
  - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
  - qcom: sync audioreach firmwares from v1.0.3 build
  - intel_vpu: Update NPU firmware
  - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
  - nvidia: add acr/bl symlink for booting GSP-RM on GA100
  - qcom: add QUPv3 firmware for shikra
  - xe: Update GUC to v70.60.0 for LNL, BMG, PTL
  - qcom: update ADSP firmware for sm8750 platform
  - qcom: update CDSP firmware for glymur platform
  - cirrus: cs35l41: Add support for new HP laptops
  - cirrus: cs35l41: Add support for new ASUS laptops
  - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
  - qcom: vpu: add video firmware for SM8450
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - iwlwifi: add Bz/Sc/Hr/Gf FW for core103-40 release
  - iwlwifi: update ty/So/Ma firmwares for core103-40 release
  - amdgpu: DMCUB updates for various ASICs
  - xe: Update PTL GSC to v105.0.2.1397
  - add firmware for Moxa mux50u devices
  - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
  - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - update firmware for qat_4xxx/qat_402xx/qat_420xx devices
  - update firmware for an8811hb 2.5G ethernet phy
  - qcom: Add FW blobs for DELL XPS13 9345
  - amdgpu: DMCUB updates for various ASICs
  - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
  - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
  - Add firmware file for Intel BlazarIW/BlazarIGfp2
  - iwlwifi: add Bz/Wh FW for core102-56 release
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
  - mediatek MT7921: update bluetooth firmware to 20260224111243
  - mediatek MT7920: update bluetooth firmware to 20260224111231
  - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
  - Add ISH firmware file for Intel Wildcat Lake platform
  - Update firmware for MT7920/MT7921 WiFi device
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Add firmware file for Intel ScorpiusGfp2 core
  - iwlwifi: Update firmware file for Intel Quasar/Scorpius/BlazarIGfP/BlazarI/BlazarU-HrPGfP/BlazarU core
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS615 platform
  - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260519-1
changelog:
  - Update to 20260519
  - ASoC: tas2783: Add Firmware files for tas2783A projects
  - add firmware for MT7927 WiFi device
  - Add HP ISH firmware for Intel Panther Lake systems
  - ti: Add PCM6240 firmware with multiple audio profiles support
  - qcom: add CDSP firmware for shikra platform
  - amdgpu: updates for various ASICs
  - qcom: update ADSP firmware for x1e80100 platform
  - qcom: Add cdsp1r.jsn for sa8775p platform
  - Add firmware for Lontium LT9611C
  - xe: Update GUC to v70.65.0 for LNL, BMG, PTL
  - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
  - Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
  - qcom: update ADSP firmware for x1e80100 platform
  - linux-firmware:Add firmware for Lontium LT7911EXC bridge
  - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
  - qcom: Update CDSP firmware for Kaanapali platform
  - qcom: vpu: add Gen2 firmware binary for Agatti
  - amdgpu: DMCUB updates for various ASICs
  - Add firmware file for Intel BlazarIGfp2/BlazarIW/ScorpiusGfp2
  - Update firmware file for Intel BlazarI/BlazarU/BlazarU-HrPGfP/Scorpius core
  - qcom: Update ADSP firmware for Glymur platform
  - mediatek MT7925: update bluetooth firmware to 20260414153243
  - update firmware for MT7925 WiFi device
  - Revert "Update firmware file for Intel Quasar core"
  - qcom: Add gpdspr.jsn for qcs8300 platform
  - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
  - ath12k: QCC2072 hw1.0: add board-2.bin
  - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
  - ath12k: IPQ5424 hw1.0: add board-2.bin
  - qcom: Update ADSP firmware for Kaanapali platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
  - amdgpu: DMCUB updates for DCN36
  - Update AMD cpu microcode
  - powervr: update Imagination Rogue firmware images
  - qcom: Update ADSP firmware for Kaanapali platform
  - i915: Xe3LPD DMC v2.34
  - i915: Xe3LPD_3002 DMC v2.29
  - qcom: Update ADSP firmware for QCM6490 platform
  - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
  - mediatek: vpu: drop old sym link


author: Packit <hello@packit.dev> - 44.17-1
changelog:
  - rescue: Change 'immutable' to 'atomic' in warning message (k.koukiou)
  - Only show compatible translations in text mode (mkolman)
  - Add instructions for externally build boot iso updates (mkolman)


author: Packit <hello@packit.dev> - 44.18-1
changelog:
  - Always restorecon user home directory after creating it (awilliam)
  - Replace direct inst call with DRACUT_NO_XATTR=1 workaround (k.koukiou)
  - Restructure readthedocs documentation with audience-based organization
    (k.koukiou)
  - dracut: Include systemd-sysroot-fstab-check binary in initramfs (k.koukiou)


author: Packit <hello@packit.dev> - 44.20-1
changelog:
  - Don't pass `-R /` to shadow commands (awilliam)
    Resolves: rhbz#2435621
  - chore: Support multiple console= kernel entries (ppolawsk)
  - Include JS files to translations (baurthefirst)
  - glib: Fix TypeError in timeout callback (k.koukiou)
  - flatpak: tests: fix unreachable code (fsouza.bruno)
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
  - flatpak: Make installation failures non-blocking (bciconel)
  - Allow manual trigger for container-rebuild-action workflow (k.koukiou)


author: Packit <hello@packit.dev> - 44.21-1
changelog:
  - anaconda.conf: Add clk_ignore_unused, pd_ignore_unused to preserved_arguments
    (johannes.goede)
  - storage/bootloader/utils: Make create_bls_entries() work with kernel-uki-
    dtbloader (johannes.goede)
  - data/profile.d/fedora-kde-mobile: Set the correct payload settings (neal)


author: Packit <hello@packit.dev> - 44.24-1
changelog:
  - Fix crash when org.freedesktop.ScreenSaver Inhibit is unavailable (k.koukiou)
    Resolves: rhbz#2440367


author: Packit <hello@packit.dev> - 44.25-1
changelog:
  - Workaround rsync xattr errors on KIWI boxed-build ISOs (adamkankovsky)
  - Make --enable-vt-switch backwards compatible with older gnome-kiosk
    (k.koukiou)
  - Add --enable-vt-switch when running gnome-kiosk (mkolman)
  - Fix asyncio deprecation warnings flooding logs in text mode (bciconel)
  - Hub: Fix grid layout alignment in Hub (yueyuankun)
  - liveinst: prevent launching multiple installer instances (k.koukiou)
    Resolves: rhbz#2440264
  - doc: update documentation for webui boot.iso build and PR inclusion
    (rvykydal)


author: Packit <hello@packit.dev> - 60-1
changelog:
  - components: implement new Software selection page
   - components: payload: software selection: implement package group selection
   - Bring gnome-control-center window to front when already open (rhbz#2415043)


author: Packit <hello@packit.dev> - 62-1
changelog:
  - components: localization: fix TypeError with undefined locale
    (Resolves: rhbz#2422032)
  - Remove hardcoded window size from Firefox launch
  - Remove 'WebUI' from bug report titles and description
  - Set Bugzilla component to anaconda-webui only when bug is a front end exception
  - Enhance frontend exception reporting
  - components: localization: enable more than keyboard selection in Workstation


author: Packit <hello@packit.dev> - 64-1
changelog:
  * Tue Jan 27 2026 Packit <hello@packit.dev> - 63-1
  - Disable Firefox password manager popup in password fields (Resolves: rhbz#2400443)
  - Use python-bugzilla API for bug creation and attachments
  - spec: require system-logos instead of fedora-logos (Resolves: rhbz#2433186)


author: Packit <hello@packit.dev> - 65-1
changelog:
  - Enable crash-reporting dialog (Resolves: rhbz#2431541)
  - Embed cockpit-networkmanager for future usage in boot.iso (hidden in Live)
  - docs: add customization documentation
  - license: Convert license headers to SPDX format


author: Packit <hello@packit.dev> - 66-1
changelog:
  - Add show/hide toggle for Bugzilla API key field (Resolves: rhbz#2442575)
  - Fix user description not being sent to Bugzilla (Resolves: rhbz#2442593)


author: Packit <hello@packit.dev> - 67-1
changelog:
  - error reporting: add optional 'Restrict access to the report' via Bugzilla groups (Resolves: rhbz#2443308)
  - error reporting: Fix 'Cannot parse given Error object' crash in error handler (Resolves: rhbz#2444078)


author: Packit <hello@packit.dev> - 68-1
changelog:
  - Log Bugzilla bug number when crash report is created (Resolves: rhbz#2443015)
  - storage: fixe the UI flipping Reformat to YES on next/back (Resolves: rhbz#2443812)
  - Fix duplicate environment section in manual error reporting
  - Remove WebUI prefix from bug report short description
  - Revert "Launch slitherer as XWayland app to address the autoclose issue"
  - network: prevent closing modal when configuration is in progress (not relevant for Live ISO)


author: Nick Clifton <nickc@redhat.com> - 13.08-1
changelog:
  - Rebase sources and rebuild against the latest version of gcc.  (#2445165)
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)


author: Maxwell G <maxwell@gtmx.me> - 2.20.1-1
changelog:
  - Update to 2.20.1. Fixes rhbz#2382388.
  - Update bundled() Provides
  - Remove upstreamed patches
  - Remove old Provides and Obsoletes for ansible-base and Ansible <= 2.9


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Neal Gompa <ngompa@fedoraproject.org> - 1.35.0-1
changelog:
  - Update to version 1.35.0
    Resolves: rhbz#2419155
  - Add patch to fix build with Linux 6.19+ headers


author: Neal Gompa <ngompa@fedoraproject.org> - 1.37.2-1
changelog:
  - Update to version 1.37.2
  - Resolves: rhbz#2447761
  - Backport fixes for various altarch build failures


author: Rasmus Ory Nielsen <ron@ron.dk> - 1.23-1
changelog:
  - Updated to 1.23
  - Removed obsolete vcf_plugin_tests patch
  - Remove invalid `-errors` from PERL_LIBS to fix linker warnings


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260306-1.eb3ee43
changelog:
  - Update to latest firmware
  - Split out RPi5 bits to a new sub-package
  - Update sub package license details
  - Initial No RTC service for no RTC systems


author: Dalibor Pospisil <dapospis@redhat.com> - 1.31.4-1
changelog:
  - fixed getting base arch on Fedora and c10s
  - rlReport support SKIP result, by chuhu
  - fixed rlIsRHELLike on systems without /etc/os-release, e.g. RHEL-6
  - some minor updates


author: Dalibor Pospisil <dapospis@redhat.com> - 1.32
changelog:
  - introduction of the new way to foist the os-relase and thus present
    different system to the tests, including the version, by KwisatzHaderach


author: Dominik Mierzejewski <dominik@greysector.net> - 122-1
changelog:
  - update to 122 (resolves rhbz#2342841)
  - rebase patch for using system GTest
  - fix setting the RPATH to private shared library
  - skip v8 tests (not available in Fedora)


author: Dominik Mierzejewski <dominik@greysector.net> - 126-1
changelog:
  - update to 126 (resolves rhbz#2439791)
  - backport upstream fix for https://github.com/WebAssembly/binaryen/issues/8360


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Bastien Nocera <bnocera@redhat.com> - 5.86-4
changelog:
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Update audio output patch to be upstream version
  - Fix "bluetoothctl list" empty output (Closes: #2440346)


author: Jonathan Wakely <jwakely@fedoraproject.org> - 1.90.0-1
changelog:
  - Rebase to 1.90.0
  - See https://fedoraproject.org/wiki/Changes/F44Boost189
  - Drop boost-system subpackage and libboost_thread.so linker script
  - Add new boost-charconv, boost-cobalt, and boost-process subpackages


author: Jonathan Wakely <jwakely@fedoraproject.org> - 1.90.0-7
changelog:
  - Add workaround for failing regex tests (#2430541)
  - Add BR:which as needed by the bootstrap.sh script
  - Add additional SPDX tags


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.1^20250418.947f7ab-1
changelog:
  - Update to 0.0.1^20250418.947f7ab
  - Change snapshot information field format
  - Rebuild for c4core 0.2.9


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-6
changelog:
  - Change: Dropping of cert.pem file (Resolves: rhbz#2360110)
    https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Remove the following symlinks:
  -    # /etc/pki/tls/cert.pem
  -    # /etc/pki/tls/certs/ca-certificates.crt
  -    # /etc/pki/tls/certs/ca-bundle.trust.crt
  -    # /etc/pki/tls/certs/ca-bundle.crt
  -    # /etc/ssl/cert.pem
  -    # /etc/ssl/certs/ca-certificates.crt
  -    # /etc/ssl/certs/ca-bundle.trust.crt
  -    # /etc/ssl/certs/ca-bundle.crt
  - Directory /etc/pki/ca-trust/extracted/openssl is being deprecated,
    it is removed upon updating unless there are files present inside it.


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-8
changelog:
  - update-ca-trust: Added a temporary, compatibility option `--rhbz2387674` to
    the `extract` command. This flag restores legacy certificate
    symlinks (e.g., `/etc/ssl/cert.pem`) to address issues with older software
    that has not yet adapted to their removal. This essentially provides a
    temporary way to revert the "Dropping of cert.pem file".


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.304-2
changelog:
  - Update to CKBI 2.80_v9.0.304 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"


author: Jens Petersen <petersen@redhat.com> - 3.10.3.0-1
changelog:
  - https://github.com/haskell/cabal/blob/master/release-notes/Cabal-3.10.1.0.md
  - https://github.com/haskell/cabal/blob/master/release-notes/Cabal-3.10.2.0.md
  - https://github.com/haskell/cabal/blob/master/release-notes/Cabal-3.10.2.1.md
  - https://github.com/haskell/cabal/blob/master/release-notes/Cabal-3.10.3.0.md


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Than Ngo <than@redhat.com> - 144.0.6^chromium144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
  - * CVE-2026-0899: Out of bounds memory access in V8
  - * CVE-2026-0900: Inappropriate implementation in V8
  - * CVE-2026-0901: Inappropriate implementation in Blink
  - * CVE-2026-0902: Inappropriate implementation in V8
  - * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  - * CVE-2026-0904: Incorrect security UI in Digital Credentials
  - * CVE-2026-0905: Insufficient policy enforcement in Network
  - * CVE-2026-0906: Incorrect security UI
  - * CVE-2026-0907: Incorrect security UI in Split View
  - * CVE-2026-0908: Use after free in ANGLE
  - Hoshino Lina: Update to cef-144.0.6+g5f7e671 (rhbz#2431156)


author: Than Ngo <than@redhat.com> - 144.0.11^chromium144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
  - * CVE-2026-1861: Heap buffer overflow in libvpx
  - * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.45-1
changelog:
  - Update to 145.0.7632.45
  - * CVE-2026-2313: Use after free in CSS
  - * CVE-2026-2314: Heap buffer overflow in Codecs
  - * CVE-2026-2315: Inappropriate implementation in WebGPU
  - * CVE-2026-2316: Insufficient policy enforcement in Frames
  - * CVE-2026-2317: Inappropriate implementation in Animation
  - * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  - * CVE-2026-2319: Race in DevTools
  - * CVE-2026-2320: Inappropriate implementation in File input
  - * CVE-2026-2321: Use after free in Ozone
  - * CVE-2026-2322: Inappropriate implementation in File input
  - * CVE-2026-2323: Inappropriate implementation in Downloads
  - Hoshino Lina: Update to cef-145.0.25+g265860d


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.75-1
changelog:
  - Update to 145.0.7632.75
  - * CVE-2026-2441: Use after free in CSS
  - Fix FTFS on aarch64/ppc64le caused by missing include file (el9)
  - Enable rustc_nightly_capability


author: Troy Dawson <tdawson@redhat.com> - 0.10.1-1
changelog:
  - Determining if package is synced solely on distrobaker config (sgajdosi)
  - Use the authenticated session for PP API (sgallagh)


author: Troy Dawson <tdawson@redhat.com> - 0.10.2-1
changelog:
  - Add support for cXs-aie-partner branches : CS-3294 (michal)
  - Determine_rhel_state: Add check for locked tags: CS-2997 (sgallagh)
  - Fix use-before-assignment (sgallagh)


author: Than Ngo <than@redhat.com> - 144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
    * CVE-2026-1861: Heap buffer overflow in libvpx
    * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Than Ngo <than@redhat.com> - 145.0.7632.45-1
changelog:
  - Update to 145.0.7632.45
    * CVE-2026-2313: Use after free in CSS
    * CVE-2026-2314: Heap buffer overflow in Codecs
    * CVE-2026-2315: Inappropriate implementation in WebGPU
    * CVE-2026-2316: Insufficient policy enforcement in Frames
    * CVE-2026-2317: Inappropriate implementation in Animation
    * CVE-2026-2318: Inappropriate implementation in PictureInPicture
    * CVE-2026-2319: Race in DevTools
    * CVE-2026-2320: Inappropriate implementation in File input
    * CVE-2026-2321: Use after free in Ozone
    * CVE-2026-2322: Inappropriate implementation in File input
    * CVE-2026-2323: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 145.0.7632.109-1
changelog:
  - Update to 145.0.7632.109
    * CVE-2026-2648: Heap buffer overflow in PDFium
    * CVE-2026-2649: Integer overflow in V8
    * CVE-2026-2650: Heap buffer overflow in Media


author: Than Ngo <than@redhat.com> - 145.0.7632.116-1
changelog:
  - Update to 145.0.7632.116
    * CVE-2026-3061: Out of bounds read in Media
    * CVE-2026-3062: Out of bounds read and write in Tint
    * CVE-2026-3063: Inappropriate implementation in DevTools


author: Than Ngo <than@redhat.com> - 145.0.7632.159-1
changelog:
  - Update to 145.0.7632.159
    * CVE-2026-3536: Integer overflow in ANGLE
    * CVE-2026-3537: Object lifecycle issue in PowerVR
    * CVE-2026-3538: Integer overflow in Skia
    * CVE-2026-3539: Object lifecycle issue in DevTools
    * CVE-2026-3540: Inappropriate implementation in WebAudio
    * CVE-2026-3541: Inappropriate implementation in CSS
    * CVE-2026-3542: Inappropriate implementation in WebAssembly
    * CVE-2026-3543: Inappropriate implementation in V8
    * CVE-2026-3544: Heap buffer overflow in WebCodecs
    * CVE-2026-3545: Insufficient data validation in Navigation


author: Than Ngo <than@redhat.com> - 146.0.7680.71-1
changelog:
  - Update to 146.0.7680.71
    * CVE-2026-3913: Heap buffer overflow in WebML
    * CVE-2026-3914: Integer overflow in WebML
    * CVE-2026-3915: Heap buffer overflow in WebML
    * CVE-2026-3916: Out of bounds read in Web Speech
    * CVE-2026-3917: Use after free in Agents
    * CVE-2026-3918: Use after free in WebMCP
    * CVE-2026-3919: Use after free in Extensions
    * CVE-2026-3920: Out of bounds memory access in WebML
    * CVE-2026-3921: Use after free in TextEncoding
    * CVE-2026-3922: Use after free in MediaStream
    * CVE-2026-3923: Use after free in WebMIDI
    * CVE-2026-3924: Use after free in WindowDialog
    * CVE-2026-3925: Incorrect security UI in LookalikeChecks
    * CVE-2026-3926: Out of bounds read in V8
    * CVE-2026-3927: Incorrect security UI in PictureInPicture
    * CVE-2026-3928: Insufficient policy enforcement in Extensions
    * CVE-2026-3929: Side-channel information leakage in ResourceTiming
    * CVE-2026-3930: Unsafe navigation in Navigation
    * CVE-2026-3931: Heap buffer overflow in Skia
    * CVE-2026-3932: Insufficient policy enforcement in PDF
    * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
    * CVE-2026-3935: Incorrect security UI in WebAppInstalls
    * CVE-2026-3936: Use after free in WebView
    * CVE-2026-3937: Incorrect security UI in Downloads
    * CVE-2026-3938: Insufficient policy enforcement in Clipboard
    * CVE-2026-3939: Insufficient policy enforcement in PDF
    * CVE-2026-3940: Insufficient policy enforcement in DevTools
    * CVE-2026-3941: Insufficient policy enforcement in DevTools
    * CVE-2026-3942: Incorrect security UI in PictureInPicture


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> - 1.16-13
changelog:
  - civetweb 1.16, handle cmake-4 doesn't support cmake < 3.5 
  - upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
    don't seem to be any adverse effects building civetweb with that change.
    And someday there might even be a civetweb-1.17.


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.0-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
    Resolves: rhbz#2341012
  - New subpackage pcs-web-ui - enables standalone web UI when the subpackage is installed on the system (default), uninstall the subpackage to disable the web UI
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.22
  - Fixes for compatibility with Ruby 3.4
    Resolves: rhbz#2331005


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.1-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
    Resolves: rhbz#2371770
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.23 (see CHANGELOG_WUI.md)
  - There is now a changelog for the HA Cluster Management Cockpit application and the standalone web UI in both packages
  - The upstream version of pcs-web-ui can now be queried through RPM in both packages - see bundled(pcs-web-ui)
  - Updated bundled Python dependency dacite
  - Compatibility with rubygem-rack >= 3
    Resolves: rhbz#2372462


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.2-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.2 (see CHANGELOG_WUI.md)
    Resolves: rhbz#2432985, rhbz#2433035
  - Fixed FTBFS with Python 3.15
    Resolves: rhbz#2440684
  - Fixed issues with installing pcs on Fedora 43+, upgrade and uninstall


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.2-2
changelog:
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 (see CHANGELOG_WUI.md)
    Resolves: rhbz#2454042
  - Fixed a crash when running pcs resource|stonith list
    Resolves: rhbz#2458608
  - Fixed order of resources in sets when listing configuration of constraints
    Resolves: rhbz#2461143


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-19
changelog:
  - Auto-sync with upstream branch master,
    commit 755798985d0dc2438c546851f926087158955614:
  - aarch64: Fix PT_GNU_PROPERTY checks for static exe (BZ 33713)
  - tst-sig-redzone: Decorate assembly function
  - hurd: check that signal processing does not hurt the x86_64 redzone
  - hurd: also test mmx state restoration
  - mach/hurd: add `bits/in.h`
  - Better terminology for ‘long double’ in manual
  - Update copyright dates not handled by scripts/update-copyrights
  - Update copyright dates with scripts/update-copyrights
  - Pass glibc pre-commit checks
  - malloc_info: fix closing </sizes> tag typo
  - LoongArch: Use generic __builtin_trap in abort.
  - malloc: Fix clang build after 1c588a2187
  - elf: Fix elf/tst-decorate-maps on aarch64 after 321e1fc73f
  - misc: Enable tst-atomic for clang
  - math: Use math_opt_barrier on ldbl-128 powl underflow/overflow handling
  - stdio: Fix tst-vfprintf-user-type on clang
  - x86: Do not use __builtin_isinf_sign for _Float64x/long double
  - x86: Do not use __builtin_fpclassify for _Float64x/long double
  - resolv: Add test for NOERROR/NODATA handling [BZ #14308]


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-21
changelog:
  - Auto-sync with upstream branch master,
    commit e539a269990dac3ff4d2432c0eb6966a5ee4f274:
  - hurd: Fix sigreturn clobbering some xmm registers (Samuel Thibault)
  - Linux: test sizes larger than UINT_MAX for copy_file_range (Xi Ruoyao)
  - Update the bundled <linux/fuse.h> userspace header from Linux 6.18 (Xi Ruoyao)
  - Linux: fix copy_file_range test on Linux >= 6.18 (Xi Ruoyao)
  - Switch currency symbol for the bg_BG locale to euro (Florian Weimer)


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 7b543dcdf97d07fd4346feb17916e08fe83ad0ae:
  - elf: Ignore LD_PROFILE if LD_PROFILE_OUTPUT is not set (bug 33797) (Florian Weimer)
  - hurd: make __thread_set_pcsptp align stack (Samuel Thibault)
  - Update advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0861 (Siddhesh Poyarekar)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915) (Carlos O'Donell)
  - memalign: reinstate alignment overflow check (CVE-2026-0861) (Siddhesh Poyarekar)
  - malloc: Add tst-mallocfork to tests-exclude-threaded exception list (Arjun Shankar)
  - aarch64: Fix LD_AUDIT with GCS in permissive mode (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for GCS handling (Adhemerval Zanella)
  - aarch64: Add LD_AUDIT tests for BTI handling (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for BTI handling (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_fpclassify for _Float64x/long double" (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_isinf_sign for _Float64x/long double" (Adhemerval Zanella)
  - aarch64: update NEWS for 2.43 release (Yury Khrustalev)
  - aarch64: Add LD_DEBUG=security to log BTI and GCS warnings (Yury Khrustalev)
  - tst-if_nameindex.c: Fix minimum buffer size (Samuel Thibault)
  - ldbl-128ibm-compat: Add local aliases for printf family symbols (Sachin Monga)
  - math: Fix powerpc64le -Os build after 6b7067460f (Adhemerval Zanella)
  - x86: Fix x86_64 build failure with -Os (BZ 33367) (Adhemerval Zanella)
  - math: Sync acosh from CORE-MATH (Adhemerval Zanella)
  - math: Sync atanh from CORE-MATH (Adhemerval Zanella)
  - math: Sync asinh from CORE-MATH (Adhemerval Zanella)
  - aarch64: Fix error messages for GCS and BTI incompatible modules (Yury Khrustalev)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-1
changelog:
  - Auto-sync with upstream branch master,
    commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc:
  - po: Incorporate translatins (nl updated, ar new) (Andreas K. Hüttel)
  - Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling (Aurelien Jarno)
  - NEWS: add new section 2.43.1 (Andreas K. Hüttel)
  - Replace advisories directory with file ADVISORIES (Andreas K. Hüttel)
  - Create ChangeLog.old/ChangeLog.32 (Andreas K. Hüttel)
  - version.h, include/features.h: Increase version number (Andreas K. Hüttel)
  - contrib.texi: Add missing accent (Andreas K. Hüttel)
  - tst-cond23: add <support/test-driver.h> include (Aurelien Jarno)
  - install.texi, INSTALL: update versions (Andreas K. Hüttel)
  - contrib.texi: Updates (Andreas K. Hüttel)
  - NEWS: Insert list of fixed security advisories (Andreas K. Hüttel)
  - NEWS: Mention build issues due to const-preserving macros (Andreas K. Hüttel)
  - NEWS: Insert list of fixed bugs (Andreas K. Hüttel)
  - NEWS: Editorial changes (Andreas K. Hüttel)
  - NEWS: Additional items and minor consolidation (Andreas K. Hüttel)
  - NEWS: Group ISO C23 related changes (Andreas K. Hüttel)
  - po: Incorporate translations (Andreas K. Hüttel)
  - Update advisory text for GLIBC-SA-2026-0003 (Adhemerval Zanella)
  - Add advisory text for CVE-2025-15281 (Carlos O'Donell)
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814) (Adhemerval Zanella)
  - libc.pot: regenerate (Andreas K. Hüttel)
  - Linux: fix tst-copy_file_range-large failure in 32-bit glibc build on 64-bit kernel [BZ 33790] (Xi Ruoyao)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-2
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 48f5a05a7a1eeb9e0567ab429f654648f831307f:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Don't include <bits/openat2.h> directly (bug 33848) (Andreas Schwab)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-1
changelog:
  - Update to release v1.8.0
  - Resolves: rhbz#2392433
  - Upstream fixes and new features
  - Correct packit configuration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-2
changelog:
  - Resolve CVE-2025-47910
  - Resolves: rhbz#2398656, rhbz#2398402
  - Rebuild with go 1.25.1 (fc44, fc43) or 1.24.7 (fc42, fc41)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.0-1
changelog:
  - Update to release v1.9.0
  - Resolves: rhbz#2420515
  - Resolves CVE-2025-58188: rhbz#2411454, rhbz#2411189, rhbz#2410923
  - Resolves CVE-2025-58185: rhbz#2410556, rhbz#2410277, rhbz#2409991
  - Resolves CVE-2025-61723: rhbz#2409605, rhbz#2409325, rhbz#2409043
  - Resolves CVE-2025-58189: rhbz#2408135, rhbz#2407858, rhbz#2407588
  - Fixes CVE-2025-67499, a bug in the nftables backend for the portmap
    plugin
  - Additional changes


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.8-1
changelog:
  - rebase to latest upstream release (rhbz#2397467)
  - remove downstream patch for selinux options deprecated since 2009


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-1
changelog:
  - rebase to the latest upstream release (rhbz#2436690)
  - enable manual URLs in --help
  - use glibc-all-langpacks to make sure that all locale data required by tests
    will be always present


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-2
changelog:
  - enable the execution of the downstream df/direct.sh test
  - temporarily disable test-getaddrinfo on RHEL builds


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-3
changelog:
  - fix possible hangups during testsuite execution
  - rewrite (un)expand multibyte support using the mbbuf module (rhbz#2443041)


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.1
changelog:
  - update from trunk
    - PRs c++/81337, c++/115163, c++/123526, fortran/77415, ipa/122458,
  	ipa/123543, libfortran/123012, middle-end/123175,
  	rtl-optimization/123523, target/123415, testsuite/121752,
  	testsuite/123129, tree-optimization/122824, tree-optimization/122830,
  	tree-optimization/123417, tree-optimization/123528


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.2
changelog:
  - update from trunk
    - PRs fortran/91960, fortran/112460, libstdc++/123396,
  	rtl-optimization/123444, rtl-optimization/123501, target/117581,
  	target/123484, testsuite/123098, tree-optimization/122843,
  	tree-optimization/122845, tree-optimization/123301,
  	tree-optimization/123525, tree-optimization/123539


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.3
changelog:
  - update from trunk
    - PRs c/123309, c++/120775, c++/122634, c++/123081, c++/123551,
  	debug/121045, driver/108865, driver/123504, ipa/122852, ipa/123542,
  	middle-end/123115, middle-end/123392, middle-end/123573,
  	rtl-optimization/123312, rtl-optimization/123544, target/38118,
  	target/114528, target/120250, target/121240, target/123092,
  	testsuite/122522, tree-optimization/119402, tree-optimization/120322,
  	tree-optimization/123109, tree-optimization/123190,
  	tree-optimization/123530


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.4
changelog:
  - update from trunk
    - PRs ada/68179, ada/123589, algol68/123007, algol68/123653, algol68/123734,
  	analyzer/123145, analyzer/123540, c/123437, c++/122391, c++/123601,
  	c++/123627, c++/123639, c++/123677, c++/123692, c++/123694,
  	diagnostics/122622, fortran/94377, fortran/109512, fortran/123375,
  	ipa/123412, libgcc/123650, libgomp/88707, libgomp/122314,
  	libgomp/122356, libstdc++/114153, middle-end/123697,
  	middle-end/123744, modula2/123739, pch/110746,
  	rtl-optimization/121787, rtl-optimization/122215,
  	rtl-optimization/123380, rtl-optimization/123585, sarif-replay/123056,
  	target/71340, target/113666, target/117575, target/122781,
  	target/122869, target/123279, target/123460, target/123521,
  	target/123584, target/123603, target/123607, target/123626,
  	target/123631, target/123724, target/123742, testsuite/123175,
  	testsuite/123751, tree-optimization/113524, tree-optimization/123061,
  	tree-optimization/123314, tree-optimization/123513,
  	tree-optimization/123602, tree-optimization/123636,
  	tree-optimization/123645, tree-optimization/123656,
  	tree-optimization/123729, tree-optimization/123731,
  	tree-optimization/123736, tree-optimization/123741,
  	tree-optimization/123745, tree-optimization/123753,
  	tree-optimization/123755, tree-optimization/123756


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.5
changelog:
  - update from trunk
    - PRs algol68/123733, algol68/123785, c++/101140, c++/122494, c++/122609,
  	c++/123354, c++/123404, c++/123578, c++/123597, c++/123620,
  	c++/123663, c++/123667, c++/123676, c++/123684, c++/123737,
  	c++/123814, d/122800, fortran/118955, fortran/123772,
  	libstdc++/123758, middle-end/122348, middle-end/123703,
  	middle-end/123709, middle-end/123775, other/67300,
  	rtl-optimization/80357, rtl-optimization/94014,
  	rtl-optimization/123144, target/123780, target/123791, target/123792,
  	tree-optimization/106883, tree-optimization/120258,
  	tree-optimization/121347, tree-optimization/122474,
  	tree-optimization/122749, tree-optimization/123628,
  	tree-optimization/123657, tree-optimization/123767,
  	tree-optimization/123771, tree-optimization/123776,
  	tree-optimization/123778, tree-optimization/123794,
  	tree-optimization/123799, tree-optimization/123803,
  	tree-optimization/123820


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.6
changelog:
  - update from trunk
    - PRs ada/89159, ada/121316, ada/123580, ada/123832, ada/123857, ada/123861,
  	ada/123867, ada/123902, algol68/123959, analyzer/98447,
  	analyzer/116228, analyzer/116865, analyzer/117491, analyzer/122623,
  	analyzer/123880, c/101312, c/102846, c/123500, c/123583, c/123882,
  	c++/38612, c++/102613, c++/102846, c++/110871, c++/110872, c++/113968,
  	c++/114450, c++/121832, c++/122169, c++/122785, c++/123557,
  	c++/123611, c++/123614, c++/123659, c++/123695, c++/123738,
  	c++/123752, c++/123790, c++/123818, c++/123825, c++/123837,
  	c++/123845, c++/123866, c++/123871, c++/123913, c++/123918,
  	c++/123920, c++/123934, c++/123964, c++/123977, c++/124002,
  	cobol/119332, d/116975, d/120096, d/121477, d/122817, d/123046,
  	d/123263, d/123264, d/123349, d/123407, d/123419, d/123422, d/123798,
  	debug/110885, debug/123376, debug/123886, diagnostics/110522,
  	fortran/117303, fortran/123868, fortran/123941, fortran/123952,
  	gcov-profile/121084, gcov-profile/121123, gcov-profile/121409,
  	gcov-profile/123855, ipa/106260, ipa/111036, ipa/116296, ipa/123226,
  	ipa/123416, ipa/123619, libffi/117635, libgomp/113213, libgomp/121813,
  	libitm/69018, libstdc++/86164, libstdc++/114865, libstdc++/117404,
  	libstdc++/120567, libstdc++/123921, middle-end/49330,
  	middle-end/97898, middle-end/118608, middle-end/121661,
  	middle-end/122689, middle-end/123447, middle-end/123575,
  	middle-end/123826, middle-end/123869, middle-end/123876,
  	middle-end/123887, middle-end/123892, middle-end/123978, other/123841,
  	rtl-optimization/106859, rtl-optimization/119982,
  	rtl-optimization/122170, rtl-optimization/123294,
  	rtl-optimization/123322, rtl-optimization/123833,
  	rtl-optimization/123922, target/36503, target/117048, target/121571,
  	target/122097, target/122343, target/123016, target/123206,
  	target/123245, target/123548, target/123604, target/123766,
  	target/123779, target/123806, target/123807, target/123824,
  	target/123870, target/123910, target/123969, target/123971,
  	testsuite/123559, testsuite/123936, translation/89915,
  	tree-optimization/109410, tree-optimization/110043,
  	tree-optimization/114274, tree-optimization/114969,
  	tree-optimization/116747, tree-optimization/121104,
  	tree-optimization/121726, tree-optimization/122197,
  	tree-optimization/122537, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123672,
  	tree-optimization/123849, tree-optimization/123864,
  	tree-optimization/123897, tree-optimization/123898,
  	tree-optimization/123925, tree-optimization/123940,
  	tree-optimization/123958, tree-optimization/123983,
  	tree-optimization/123986


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.7
changelog:
  - update from trunk
    - PRs ada/121576, ada/124025, c++/123616, c++/123640, c++/123823,
  	c++/123889, c++/123984, d/123995, d/124026, fortran/85547,
  	fortran/122949, fortran/123545, fortran/123673, fortran/123961,
  	rtl-optimization/123796, target/123911, target/123926,
  	testsuite/124036, tree-optimization/117217, tree-optimization/123225,
  	tree-optimization/124034


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/124016, ada/124054, ada/124106, ada/124179, ada/124192,
  	ada/124201, ada/124224, ada/124226, ada/124282, ada/124285,
  	algol68/124028, algol68/124049, algol68/124115, analyzer/108400,
  	analyzer/111099, analyzer/113496, analyzer/117369, analyzer/121928,
  	analyzer/123973, analyzer/123981, analyzer/124055, analyzer/124073,
  	analyzer/124104, analyzer/124116, analyzer/124139, analyzer/124188,
  	analyzer/124195, analyzer/124232, c/87591, c/105555, c/119651,
  	c/123365, c/123472, c/123716, c++/98939, c++/101670, c++/102397,
  	c++/119756, c++/120685, c++/120974, c++/121500, c++/121822,
  	c++/122318, c++/122621, c++/123143, c++/123440, c++/123608,
  	c++/123612, c++/123641, c++/123642, c++/123660, c++/123661,
  	c++/123662, c++/123989, c++/124012, c++/124045, c++/124070,
  	c++/124096, c++/124119, c++/124150, c++/124153, c++/124173,
  	c++/124184, c++/124204, c++/124215, c++/124227, cobol/119455,
  	cobol/121499, cobol/122839, cobol/123238, demangler/106641,
  	diagnostics/122001, diagnostics/124014, fortran/78187, fortran/80012,
  	fortran/88076, fortran/99250, fortran/108663, fortran/120505,
  	fortran/121360, fortran/121429, fortran/122491, fortran/123943,
  	fortran/123947, fortran/123949, fortran/124071, fortran/124080,
  	fortran/124208, fortran/124235, fortran/124286, ipa/122856,
  	ipa/123229, ipa/123629, libfortran/88076, libfortran/123366,
  	libstdc++/105580, libstdc++/113450, libstdc++/119745,
  	libstdc++/121402, libstdc++/121771, libstdc++/123176,
  	libstdc++/123875, libstdc++/123908, libstdc++/123991,
  	libstdc++/124015, libstdc++/124024, libstdc++/124124,
  	middle-end/113436, middle-end/123386, middle-end/124056,
  	middle-end/124250, middle-end/124280, other/88472,
  	rtl-optimization/116053, rtl-optimization/116600,
  	rtl-optimization/120169, rtl-optimization/121191,
  	rtl-optimization/123048, rtl-optimization/123381,
  	rtl-optimization/123994, rtl-optimization/124062,
  	rtl-optimization/124079, target/57261, target/80881, target/112400,
  	target/113453, target/115042, target/119979, target/120233,
  	target/120234, target/120241, target/120888, target/122448,
  	target/123137, target/123195, target/123285, target/123556,
  	target/123624, target/124048, target/124094, target/124098,
  	target/124134, target/124136, target/124138, target/124147,
  	target/124162, target/124167, target/124194, target/124236,
  	target/124294, testsuite/103515, testsuite/115827, testsuite/123191,
  	testsuite/124064, translation/118988, tree-optimization/90036,
  	tree-optimization/95825, tree-optimization/99959,
  	tree-optimization/107690, tree-optimization/110091,
  	tree-optimization/114375, tree-optimization/117935,
  	tree-optimization/121103, tree-optimization/122297,
  	tree-optimization/124038, tree-optimization/124068,
  	tree-optimization/124086, tree-optimization/124099,
  	tree-optimization/124108, tree-optimization/124130,
  	tree-optimization/124132, tree-optimization/124142,
  	tree-optimization/124288


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.9
changelog:
  - update from trunk
    - PRs c/122572, c++/123408, c++/123665, c++/123810, c++/124229, c++/124306,
  	c++/124324, c++/124368, cobol/119456, fortran/124330, ipa/60674,
  	libfortran/124330, libstdc++/117402, libstdc++/119197,
  	libstdc++/122217, libstdc++/124363, middle-end/45273,
  	rtl-optimization/123786, rtl-optimization/124041,
  	rtl-optimization/124351, target/64835, target/124165, target/124315,
  	target/124335, target/124336, target/124341, target/124349,
  	target/124366, target/124367, testsuite/122961, testsuite/124320,
  	testsuite/124359, tree-optimization/119568
    - fix -flto -g handling of aarch64 AEABI attributes
      (#2439677, PR target/124365)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.10
changelog:
  - update from trunk
    - PRs ada/107475, ada/120669, ada/124369, ada/124376, algol68/124322,
  	algol68/124372, analyzer/107646, analyzer/124375, analyzer/124433,
  	analyzer/124451, bootstrap/124406, bootstrap/124547, c/97991,
  	c/122866, c/123461, c/123856, c/124230, c++/39057, c++/109521,
  	c++/115852, c++/118482, c++/120039, c++/120285, c++/122559,
  	c++/122786, c++/123618, c++/123622, c++/124118, c++/124145,
  	c++/124154, c++/124200, c++/124297, c++/124307, c++/124309,
  	c++/124311, c++/124331, c++/124388, c++/124389, c++/124390,
  	c++/124397, c++/124399, c++/124404, c++/124417, c++/124425,
  	c++/124431, c++/124440, c++/124447, c++/124456, c++/124459,
  	c++/124466, c++/124472, c++/124474, c++/124478, c++/124483,
  	c++/124485, c++/124489, c++/124493, c++/124494, c++/124496,
  	c++/124575, d/123202, d/124158, driver/69367, driver/69849,
  	fortran/82721, fortran/84779, fortran/93832, fortran/95338,
  	fortran/97818, fortran/102333, fortran/102459, fortran/102596,
  	fortran/103139, fortran/105168, fortran/106946, fortran/110877,
  	fortran/115316, fortran/120286, fortran/120723, fortran/121043,
  	fortran/121743, fortran/122696, fortran/122902, fortran/124161,
  	fortran/124450, fortran/124482, gcov-profile/123923,
  	gcov-profile/124075, ipa/124291, ipa/124462, libfortran/124371,
  	libstdc++/116110, libstdc++/118030, libstdc++/118341,
  	libstdc++/119794, libstdc++/120527, libstdc++/121790,
  	libstdc++/122300, libstdc++/122567, libstdc++/124268,
  	libstdc++/124290, libstdc++/124443, libstdc++/124444,
  	libstdc++/124463, libstdc++/124513, libstdc++/124568,
  	middle-end/120030, middle-end/121159, middle-end/124435,
  	middle-end/124491, middle-end/124552, objc/124260, other/124508,
  	preprocessor/105412, rtl-optimization/121649, rtl-optimization/123094,
  	rtl-optimization/123822, rtl-optimization/124078,
  	rtl-optimization/124439, rtl-optimization/124452,
  	rtl-optimization/124454, rtl-optimization/124476, target/117182,
  	target/122000, target/122925, target/122953, target/123271,
  	target/123749, target/124044, target/124126, target/124333,
  	target/124403, target/124407, target/124409, target/124436,
  	target/124461, target/124565, target/124566, testsuite/112520,
  	testsuite/119930, testsuite/124066, testsuite/124484,
  	translation/124422, tree-optimization/80006, tree-optimization/98064,
  	tree-optimization/120987, tree-optimization/122380,
  	tree-optimization/124037, tree-optimization/124135,
  	tree-optimization/124358, tree-optimization/124528,
  	tree-optimization/124555, tree-optimization/124578


author: Petr Menšík <pemensik@redhat.com> - 0.37.2-1
changelog:
  - Update to 0.37.2
  - Fixes silent TLS certificate verification bypass on HTTPS Redirect via
    proxy (CVE-2026-32627, rhbz#2448105)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-5
changelog:
  - Add --skip-dynamic-tags for annocheck
  - annocheck test fails on aarch64 for pinns due to changes in binutils not
    handled by annocheck.
  - See https://sourceware.org/bugzilla/show_bug.cgi?id=33963 for more
    informaton
  - Tempory skip. Remove when annocheck 13.07 or newer is deployed in Fedora
    packit CI


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.0-3
changelog:
  - Release v1.35
  - Initial release of v1.35 for Fedora rawhide (F44) and F43
  - Requires golang 1.25
  - Upstream new features and fixes
  - Urgent Upgrade Note from upstream: "Action required:
    container_spec_memory_limit_bytes has moved from the memory metrics
    category to the new spec category. Update your CRI-O configuration to
    include spec in included_pod_metrics if you rely on this metric."


author: Ralf Senderek <innovation@senderek.ie> 3.4.8-12
changelog:
  - add a %generate_buildrequires section (PR#8)
  - remove duplications from -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer


author: Ralf Senderek <innovation@senderek.ie> 3.4.8-15
changelog:
  - Update cryptlib-3.4.8 with source code https://github.com/cryptlib/cryptlib
  - Update all files in the cryptlib tools package to version 1.1


author: Ralf Senderek <innovation@senderek.ie> 3.4.8-12
changelog:
  - add a %generate_buildrequires section (PR#8)
  - remove duplications from -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer


author: Vladis Dronov <vdronov@redhat.com> - 15.9-25
changelog:
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors (bz 2279099)
  - Minor edits in the rpm scripts and the changelog


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.16-1
changelog:
  - 2.4.16 (fedora#2417970)
  - rebuild due binutils bug (fedora#2418285)
  - fix division by zero crash in pstops (fedora#2415396)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.17-1
changelog:
  - 2.4.17 (fedora#2456363, fedora#2456362, fedora#2454994, fedora#2454993,
    fedora#2454992, fedora#2454990)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.0.3-3
changelog:
  - Change license tag (GPL-2.0-or-later -> GPL-2.0-only or GPL-3.0-only)
  - Move license texts to -data subpackage so they're always installed
  - Add links to upstream commits for patches


author: Paul Howarth <paul@city-fan.org> - 1.7.2-1
changelog:
  - Update to 1.7.2 (rhbz#2391098)
    - Add support for libneon 34, 35
    - Increase buf read size to 64 (fixes read issue on linux 6.16)
    - Allow setting a mount password via DAVFS_PASSWORD
    - Introduce sync_on_lookup option (off by default)
    - Don't compress man pages


author: Paul Howarth <paul@city-fan.org> - 1.7.3-1
changelog:
  - Update to 1.7.3 (rhbz#2447065)
    - Add musl support
    - Fix macro-substitution in manual pages
    - Remove hardcoded neon versions from configure.ac
  - Consider AUTHORS as a license file rather than just documentation


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)


author: Parag Nemade <pnemade AT redhat DOT com> - 4.1-2
changelog:
  - zh_TW: change default inputmethod to ibus-chewing
    https://fedoraproject.org/wiki/Changes/IBusChewingForZhTW


author: Akira TAGOH <tagoh@redhat.com> - 4.1-3
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Mike FABIAN <mfabian@redht.com> - 4.2-2
changelog:
  - Resolves: rhbz#2310426 Add ibus-cangjie-engine-cangjie and ibus-cangjie-engine-quick as recommends for zh_HK


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.25.0-1
changelog:
  - Update to version 1.25.0
    + Resolves: 2416455
    + New BuildRequires: cmake(Qt6LinguistTools)
    + Add translations
    + Add svg icons


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.2.0-1
changelog:
  - Update to 4.2.0 (close RHBZ#2412720)
  - App ID changes from com.github.cassidyjames.dippi to
    com.cassidyjames.dippi


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.0.2-1
changelog:
  - Update to 5.0.2
  - Correct/update License from GPL-3.0-only AND CC0-1.0 to GPL-3.0-or-later
    AND CC0-1.0
  - Add new Croatian translations for Summary and description


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Miroslav Suchý <msuchy@redhat.com> 1.115-1
changelog:
  - update copr keys
  - Update for openSUSE 16 keys
  - Update changelog
  - Microsoft: add 2025 & open tech keys
  - alpine-linux: Add loongarch64 key
  - fedora: Update rawhide symlink


author: Pavel Raiskup <pavel@raiskup.cz> 1.116-1
changelog:
  - Add CentOS PQC signing keys
  - Add RHEL PQC signing keys
  - suse: Update RPM-GPG-KEY-SuSE-SLE-12
  - Refresh CentOS SIG Extras key
  - Update CentOS SIG keys downlod script
  - Add missing CentOS SIG keys
  - Add new Slack key used by versions 4.47 and above
  - Add openSUSE Leap SLE imports
  - Add Slack key


author: Evan Goode <egoode@redhat.com> - 4.10.1-1
changelog:
  - reposync: Avoid multiple downloads of duplicate packages
  - doc: needs-restarting uses UnitsLoadStartTimestamp boot time
  - debuginfo-install: Fix missing dnf.cli import
  - copr Fix missing dnf.cli import
  - tests: Fix missing dnf.cli imports


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-2
changelog:
  - Fix a crash in dnf5daemon-server when receiving an unknown locale from
    a D-Bus client (CVE-2026-3836) (bug #2445771)


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-3
changelog:
  - Fix a crash when formatting an RPM scriptlet output containing a non-ASCII
    character in C locale (bug #2443774)


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
changelog:
  - Updated to version 2.5.1
  - Upstream change notes:
    * This patch release fixes `assert()` usage for compatibility with newer
      libc versions and handles byte order correctly in cryptopan plugin to
      work for big endian systems.
    * Commits:
      ac12e05 copyright
      ed3ea49 cryptopan reference implementation
      997f047 cryptopan endian
      fa3cabb assert


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.2-1
changelog:
  - Updated to version 2.5.2
  - Upstream change notes:
    * This patch release fixes compatibility with GNU/Hurd and fixes running
      tests in parallel.
    * Commits:
      ea9c431 GNU/Hurd
      67800d4 Paralell tests take 2
      57dd3e0 Plugins tests
      f5246e4 strptime


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.5-2
changelog:
  - Add rpminspect.yaml with temporary skip
  - the stack-prot annocheck test is failing on ppc64le and s390x but not
    other arch. Normally should skip
  - skip: stack-prot test because function fatalf is part of the CGO runtime
    library which is compiled without stack protection


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.1.3-1
changelog:
  - Update to release v5.1.3
  - Resolves rhbz#2458697
  - Resolves CVE-2026-33747: rhbz#2452188, rhbz#2452199
  - Resolves CVE-2026-33748: rhbz#2453089
  - Upstream fixes


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241216git660795b-1
changelog:
  - Update to 0^20241216git660795b
  - dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve
    detection of ARM64EC.
  - dr_mp3 0.6.40: Improve detection of ARM64EC
  - dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded
    files. Improve detection of ARM64EC.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20250722git80bc891-1
changelog:
  - Update to 0^20250722git80bc891
  - New CMake build system for tests, and redesigned tests overall
  - dr_flac 0.13.0: BREAKING API CHANGES and fixes
  - dr_mp3 0.7.0: BREAKING API CHANGES and fixes
  - dr_wav 0.14.0: BREAKING API CHANGES and fixes


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251201.877b096-1
changelog:
  - Update to 0^20251201.80bc891
  - dr_flac 0.13.2
  - dr_mp3 0.7.2
  - dr_wav 0.14.2
  - Change snapshot information field format in Release


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.8.1-1
changelog:
  - Update to v0.8.1
  - Drop Patch1 (unbundle picojson - replaced with nlohmann_json upstream)
  - Drop Patch3 (unbundle rang - dependency dropped upstream)
  - Drop Patch4 (libfmt10 compatibility - backport from this release)


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-3
changelog:
  - Add calling a little python script in the install stage to revert
    the (upstream) replacing of directories by a symlinks 
    which causes upgrade problems with rpm for the data package.


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-4
changelog:
  - Add a LUA script in a pretrans section to assist in replacing a directory
    by a symlink (this removes the need for the python script added in
    the previous commit)


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-5
changelog:
  - Forgot to update the changelog date for the previous commit, so fixed this
    with this update.
  - Also fix a typo in the ghost definitions.


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.28.0-1
changelog:
  - Update to 1.28.0
  - Fix FTBFS by forcing std17
  - Close: rhbz#2337186
  - Fix: rhbz#2340116
  - Rebuild for jpegxl (libjxl) 0.11.1


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-ATOMIC_VAR_INIT.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-more-dwarf5-lang.patch
    elfutils-0.192-fix-zsh-profile.patch
    elfutils-0.192-stacktrace-lto.patch
    elfutils-0.192-imasig-fail-free.patch
    elfutils-0.192-strip-ignore-non-ET_REL.patch


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 5.0.1-2
changelog:
  - Update python version validation (resolves rhbz#2424298)
    Upstream has indicated that python 3.8.1+ should all be supported


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.19.3-2
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13268 Revert
    "Orphaned for 6+ weeks"


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Jens Petersen <petersen@redhat.com> - 1.7.1-29
changelog:
  - merging now prompts even with --merge (--no-prompt) when branch unmergeable
  - parallel: restore package header output for merge
  - parallel: fix error for -F/-E when run outside dist-git
  - createKojiSidetag: needs krbTicket


author: Jens Petersen <petersen@redhat.com> - 1.7.1-34
changelog:
  - rebuild for haxr xmlrpc to Accept: application/xml
  - use rpmbuild-order 0.4.13
  - [epel] recommends epel-rpm-macros


author: Jens Petersen <petersen@redhat.com> - 1.8-35
changelog:
  - https://hackage.haskell.org/package/fbrnch-1.8/changelog
  - new 'branch-log' command
  - 'build','parallel': can now merge --from a particular branch
  - 'commit': requires -b option to confirm non-rawhide commit
  - 'compare-tarballs': new command to diff source tarballs
  - 'copr --failures': fetches tails of failed build logs
  - new 'repoquery' command which wraps fedora-repoquery
  - 'update-sources': prep in tmpdir; compares tarballs; improved ver-rel logic
  - `FBRNCH_KOJI_PROFILE` provides experimental Koji profile support (eg riscv)
  - merge handling improvements
  - tries to setup git upstream branch tracking


author: Jens Petersen <petersen@redhat.com> - 1.8.1-38
changelog:
  - new native watchtask implementation and command
  - local build.log's now generated with 'script' tool instead of tee pipe
  - some web API calls now retry to help with connection issues
  - update-sources try to take "sources" changes into account now
  - merge tries to rebase if origin ahead
  - more details: https://hackage.haskell.org/package/fbrnch-1.8.1/changelog


author: Miroslav Suchý <msuchy@redhat.com> 1.66-1
changelog:
  - Mark LicenseRef-CRC32 as deprecated
  - allow packages that includes or bundle ccan as an exception
  - add LicenseRef-Julius-dictation-kit as not allowed
  - add Seiko-Epson license to firmware
  - add public domain findings for sc
  - add ultra permissive dedication of perl-Math-FFT
  - add aastr ultra permissive dedication
  - add GPL-2.0-or-later WITH mif-exception
  - add public domain dedication for libtelnet
  - Add PHP-3.0
  - LicenseRef-Fedora-Public-Domain: Add zpaqfranz


author: Miroslav Suchý <msuchy@redhat.com> 1.67-1
changelog:
  - add autossh man page ultra permissive dedication
  - add LGPL-2.1-only WITH Digia-Qt-LGPL-exception-1.1
  - add jove license
  - add man2html license
  - add DocBook-DTD license
  - add BSD-2-Clause-pkgconf-disclaimer
  - correct expression of PHP-3.0
  - Add SpacemiT esos.elf license as allowed-firmware
  - Add 7zip public domain headers
  - add Game-Programming-Gems license
  - add LGPL-2.1-or-later WITH polyparse-exception
  - add GPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - enhance BSD-3-Clause-Clear usage text
  - document known exception for kernel for BSD-3-Clause-Clear
  - add LicenseRef-Hauppauge-firmware-eula as not allowed
  - add LicenseRef-Hauppauge as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.68-1
changelog:
  - add CC-SA-1.0 as allowed-content
  - allow golang-x-perf to use CC-BY-4.0 for code as an exception
  - add GPL-3.0-or-later WITH Libtool-exception
  - UltraPermissive: Add a text found in libisds
  - add LicenseRef-Geotrans as not-allowed
  - Add public-domain dedication for jemalloc/rust-tikv-jemalloc-sys
  - add Aspell-RU
  - add ngrep
  - add Unlicense-libwhirlpool
  - add Unlicense-libtelnet
  - add CDLA-Permissive-2.0
  - add BSD-3-Clause WITH AdditionRef-Dart
  - add UltraPermissive dedication of autossh


author: Miroslav Suchý <msuchy@redhat.com> 1.70-1
changelog:
  - add GPL-2.0-only WITH Universal-FOSS-exception-1.0
  - add libpng licenses
  - add UltraPermissive dedication of tolua++
  - add note and link that APSL-1.x can be used as APSL-2.0
  - add LicenseRef-Remix-icon as not-allowed
  - describe how to use LicenseRef-IUPAC-InChI-Trust
  - Add public-domain dedication for dcm2niix
  - add LicenseRef-Aalok-Everfree as not-allowed
  - add public domain dedication of libtommath
  - add public domain dedication of heimdal


author: Miroslav Suchý <msuchy@redhat.com> 1.71-1
changelog:
  - add GPL-2.0-or-later WITH LicenseRef-Fedora-Temporary-kvirc-openssl-exception
  - add GPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-cryptsetup-OpenSSL-
    exception
  - add LGPL-2.1-or-later WITH LicenseRef-Fedora-Temporary-Simple-Library-
    exception
  - add AGPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817
  - add LGPL-2.0-only WITH LicenseRef-Fedora-Temporary-Classpath-exception-
    variation
  - add LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib
  - add LicenseRef-Fedora-Temporary-OSSP
  - add LicenseRef-Fedora-Temporary-AZL
  - add LicenseRef-Fedora-Temporary-Python-trace
  - add Advanced-Cryptics-Dictionary license
  - add BSD-Mark-Modifications license
  - Remove deprecated parts from JSON
  - grammar: sort ID alphabetically
  - grammar: do not allow bad license with OR operator
  - add WTFNMFPL license
  - add LicenseRef-HPND-TAES as not-allowed
  - add LGPL-2.0-only WITH Universal-FOSS-exception-1.0
  - OPUBL-1.0: Move packages_with_exceptions into [license]
  - Add public-domain dedication for tinyxml2
  - add WordNet license
  - Extend ISO-8879 exception to dotnet10.0


author: Miroslav Suchý <msuchy@redhat.com> 1.73-1
changelog:
  - add dedications from linux-firmware from qcom/NOTICE.txt
  - add LGPL-2.0-only WITH Classpath-exception-2.0-short
  - add OSSP license
  - add GPL-3.0-or-later WITH GCC-exception-2.0
  - add hyphen-bulgarian license
  - add GPL-2.0-or-later WITH kvirc-openssl-exception
  - add LICENCE.siano from linux-firmware to firmware.txt
  - add HPND-SMC
  - removed LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Wadalab
  - rename LicenseRef-Fedora-Temporary-* to AdditionRef-Fedora-Temporary-*


author: Miroslav Suchý <msuchy@redhat.com> 1.74-1
changelog:
  - remove LicenseRef-Romio as it equals to SPDX ID mpich2
  - add public domain dedication from gstreamer1-plugins-bad-free
  - add public domain dedication from openmpi
  - add LICENSE.QualcommAtheros_ar3k from linux-firmware to firmware.txt
  - add text to LicenseRef-* licenses
  - add public domain dedication from rb_libtorrent
  - add LicenseRef-BSD-TPM as not-allowed
  - add LicenseRef-Hippocratic-3.0 as not-allowed
  - add LICENSE.i915 from linux-firmware to firmware.txt
  - add LICENCE.IntcSST2 from linux-firmware to firmware.txt
  - add LicenseRef-ECMA-spec license
  - add NPL-1.1 license
  - rename LGPL-2.1-or-later_WITH_AdditionRef-Fedora-Temporary-Simple-Library-
    exception to final LGPL-2.1-or-later_WITH_Simple-Library-Usage-exception
  - rename LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib to ALGLIB-
    Documentation
  - rename AGPL-3.0-or-later_WITH_AdditionRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817 to AGPL-3.0-or-later_WITH_PS-or-PDF-font-
    exception-20170817
  - add firmware license from linux-firmware - LICENSE.amdnpu
  - add firmware license from linux-firmware - LICENCE.Marvell
  - add firmware license from linux-firmware - LICENCE.OLPC
  - add firmware license from linux-firmware - LICENCE.ti-connectivity
  - add firmware license from linux-firmware - LICENCE.xc4000
  - add firmware license from linux-firmware - LICENCE.adsp_sst
  - add LICENCE.mediatek from linux-firmware to firmware.txt


author: Miroslav Suchý <msuchy@redhat.com> 1.75-1
changelog:
  - add MIT WITH fmt-exception
  - add LicenseRef-Remix-icon-license-1.0 as not-allowed
  - add LPD-document as allowed-content
  - add public domain dedication from tcputils
  - add GPL-2.0-only WITH eCos-exception-2.0 as allowed
  - rename temporary AdditionRef-WebM-patent-license to Google-Patent-WebM
  - Add public-domain dedication for python-rnc2rng
  - add public domain dedication from enchant
  - Add rocq-doc as known exception to OPUBL-1.0
  - add GPL-3.0-or-later WITH CGAL-linking-exception
  - replace temporary ID with sqlitestudio-OpenSSL-exception
  - add gstreamer1-doc as known exception to OPUBL-1.0
  - add public domain dedication from fcitx5-mozc
  - add public domain dedication from bsd-games


author: Jens Petersen <petersen@redhat.com> - 0.7.2-1
changelog:
  - https://hackage.haskell.org/package/fedora-repoquery-0.7.2/changelog
  - warn when no release specified
  - add support for epel10.x minor releases
  - also parse c8s, c9s, c10s
  - use eln via download.fp.o (or dl.fp.o) and drop its channels
  - support short pneumonics for common queryformats (nv,nvr,nvra,envr,envra)


author: Jens Petersen <petersen@redhat.com> - 0.8-1
changelog:
  - https://hackage.haskell.org/package/fedora-repoquery-0.8/changelog
  - parsing and completion of all dnf options
  - add generated fish and zsh completion files for fedora-repoquery (frpq
    pending)


author: Miroslav Suchý <msuchy@redhat.com> 41.2-1
changelog:
  - remove-retired-packages: detect removed subpackages
  - no need to check if F41 is prerelease
  - add new line to repoquery to make remove-retired-packages work with dnf5


author: Miroslav Suchý <msuchy@redhat.com> 41.3-1
changelog:
  - correctly detect tmux
  - requires sudo
  - add reverence to `dnf history` in man page
  - add old gpg keys
  - group minimal install does not exist anymore
  - move rawhide version


author: Miroslav Suchý <msuchy@redhat.com> 42.3-1
changelog:
  - add upgrade to Fedora 43
  - remove upgrade to F40 that is EOL
  - typo
  - dnf5 uses /var/cache/libdnf5


author: Miroslav Suchý <msuchy@redhat.com> 42.4-1
changelog:
  - migrate from python3-dnf to python-libdnf5
  - use spdx id as license name
  - update link to documentation
  - add upgrade to F44
  - do not check if F43 is prerelease
  - simplify spec - remove f40- code


author: Kim B. Heino <b@bbbs.net> - 0.31-1
changelog:
  - Upgrade to 0.31
  - CVE-2025-67603: Add PolicyKit authorization to D-Bus methods
  - CVE-2025-67858: Verify interface input parameter on D-Bus methods


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-3
changelog:
  - Rebuild against MIT Kerberos 1.22.2
  - Fix build against NodeJS in F44/45
  - Allow SELinux policy for ipa-otpd in non-IPA environment (standalone SSSD)
  - Fix freeipa-client package scriptlet to not fail when config is missing
  - Resolves: rhbz#2439482


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-8
changelog:
  - Fix SELinux policy for SSSD MFA helpers
  - Fix cases when passkey child was crashing when called from ipa-otpd


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-9
changelog:
  - Ensure proper error code return in case MS-PAC generator not yet enabled
  - Resolves: rhbz#2448253
  - Rebuild against Samba 4.24.0 final release
  - Related: rhbz#2448612


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.23.0-1
changelog:
  - Update to 3.23.0 (CVE-2026-26965, CVE-2026-26955, CVE-2026-26271,
    CVE-2026-25997, CVE-2026-25959, CVE-2026-25955, CVE-2026-25954,
    CVE-2026-25953, CVE-2026-25952, CVE-2026-25942, CVE-2026-25941)
    Resolves: rhbz#2442589
  - Small spec cleanups
  - Enable rdp2tcp channel support


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.0-1
changelog:
  - Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
    CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885,
    CVE-2026-31897)
    Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415
    Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428
    Resolves: rhbz#2447431


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.2-1
changelog:
  - Update to 3.24.2 (CVE-2026-33952, CVE-2026-33977, CVE-2026-33982,
    CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-33986,
    CVE-2026-33987, CVE-2026-33995)
    Resolves: rhbz#2448592


author: Jerry James <loganjerry@gmail.com> - 0.9.6-1
changelog:
  - Version 0.9.6
  - Drop unneeded makefile patch
  - Build with cmake
  - Add patch to build shared library instead of static library
  - Use the %license macro


author: Tom Callaway <spot@fedoraproject.org> - 3.18.2-1
changelog:
  - update to 3.18.2
  - make explicit Requires also arch specific to prevent weird multilib combinations


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Jerry James <loganjerry@gmail.com> - 2.8.2-1
changelog:
  - Version 2.8.2
  - Predownloaded ATLAS data is no longer needed for the tests
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude


author: Marek Kasik <mkasik@redhat.com> - 3.12.1-4
changelog:
  - Rebuild (poppler)
  - Statically link stdc++ due to undefined references
  -   Assisted-by: Claude Code


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Rename 'gdb-add-rpm-suggestion-script.patch' to
    'gdb-rpm-suggestion-script.patch' and
    'gdb-6.3-rh-testversion-20041202.patch' to
    'gdb-test-show-version.patch'.  The new names better reflect the
    patch contents.


author: Kevin Buettner <kevinb@redhat.com> - 17.1-1
changelog:
  - Rebase to FSF GDB 17.1.
    Deleted: gdb-fix-bg-execution-repeat.patch
    Backport 919ba8ce158e, "bfd: fix build with C23", from Guinevere Larsen,
    fixing RH BZ 2424325.
    Backport "Fix some more C23 const-correctness issues", from Keith Seitz,
    fixing same class of problem described by RH BZ 2424325.
    Backport 777079c67c81, "[gdb/build, c++20] Fix deprecated implicit
    capture in cooked_index::set_contents", from Tom de Vries, fixing more
    FTBS problems.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Remove gcc-gdb-plugin BuildRequires and build with --disable-gdb-compile
    due to this feature's brokenness. Tests using this feature skip cleanly
    without timeouts.  Reduces binary size and attack surface.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit 70b66cf338b14336 to fix RH BZ 2402580.
    This backport will not be needed once we rebase to GDB 18.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Backport upstream commit c1da013915e from Kevin Buettner to fix
    gcore failures caused by glibc 2.42 guard page changes (RHBZ 2413405).
  - Backport upstream commit d2cc16cd7fc from Jan Vrany to fix
    FAILs in gdb.base/fileio.exp caused by macro expansion of
    path components in OUTDIR.


author: Jens Petersen <petersen@redhat.com> - 9.6.6-146
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Jens Petersen <petersen@redhat.com> - 9.8.4-147
changelog:
  - rebase to 9.8.4 from ghc9.8
  - https://downloads.haskell.org/~ghc/9.8.1/docs/users_guide/9.8.1-notes.html
  - https://downloads.haskell.org/~ghc/9.8.2/docs/users_guide/9.8.2-notes.html
  - https://downloads.haskell.org/~ghc/9.8.3/docs/users_guide/9.8.3-notes.html
  - https://downloads.haskell.org/~ghc/9.8.4/docs/users_guide/9.8.4-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.8.4-148
changelog:
  - revert Unique Word64 on i686 to avoid compilation crashes
    https://gitlab.haskell.org/ghc/ghc/-/issues/25904
  - disable haddock for ix86 and make doc-index arch


author: Jens Petersen <petersen@redhat.com> - 9.10.3-150
changelog:
  - rebase to ghc-9.10.3 from ghc9.10
  - https://downloads.haskell.org/~ghc/9.10.1/docs/users_guide/9.10.1-notes.html
  - https://downloads.haskell.org/~ghc/9.10.2/docs/users_guide/9.10.2-notes.html
  - https://downloads.haskell.org/~ghc/9.10.3/docs/users_guide/9.10.3-notes.html
  - new packages: ghc-experimental, ghc-platform, ghc-toolchain, os-string
  - add openSUSE's backport of riscv64 NCG
  - drop --hash-unit-ids


author: Jens Petersen <petersen@redhat.com> - 9.10.3-152
changelog:
  - obsolete ghc9.10
  - reenable building hadrian
  - ppc64le NCG: add an upstream patch for the clrrxi instruction
  - boot again from Rawhide (#2435862)


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.9-1
changelog:
  - Version 0.1.9 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-9-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.10-1
changelog:
  - Version 0.1.10 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-10-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.11-1
changelog:
  - Version 0.1.11 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-11-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.12-1
changelog:
  - Version 0.1.12 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-12-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.13-1
changelog:
  - Version 0.1.13 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-13-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.14-1
changelog:
  - Version 0.1.14 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-14-released/


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2:56-1
changelog:
  - Update spec to comply with the latest packaging guidelines
  - Drop recommends for unrelated tools
  - Trim description


author: Milan Crha <mcrha@redhat.com> - 50~beta-7
changelog:
  - dnf5-plugin: Update the dnf5 plugin with the recent upstream fixes
  - reload package information after repository is enabled
  - change when repository GPG keys are auto-accepted
  - show fedora-third-party repositories in their section


author: Mosaab Alzoubi <mosaab[AT]ruya[DOT]systems> - 0-55.20251223git
changelog:
  - Update on 2025-12-23
  - Use stable branch instead of master
  - Add next generation of Gnulib the python release of Gnulib
  - Fix building tests
  - Re-struct for gnulib ng with python base
  - Update dependencies


author: Sérgio Basto <sergio@serjux.com> - 0-78.20260302git4a3650d
changelog:
  - Update to git4a3650d branch stable-202601 with ISO C23 fixes
  - The git-merge-changelog binary has been removed from the source and is now maintained in a separate repository.


author: Leo Sandoval <lsandova@redhat.com> - 2.12-51
changelog:
  - Revert 'Increase EFI max allocation to max usable address'
  - Related: #2427945
  - Related: #2263643
  - Fix ppc64le build (Hans de Goede)
  - Fix 20-install.sh installing the hmac under the wrong filename (Hans de Goede)


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 2.12-53
changelog:
  - Revert "Add support for Linux EFI stub loading on arm architectures"
    this fixes aarch64 kernels with stubble-/systemd-stub not booting


author: Josue Hernandez <josherna@redhat.com> - 2.12-54
changelog:
  - verifiers: Allocate EFI pages instead of grub_malloc for verified buffer
  - Resolves: #2427945
  - Resolves: #2263643


author: Leo Sandoval <lsandova@redhat.com> - 2.12-56
changelog:
  - Revert 'verifiers: Allocate EFI pages instead of grub_malloc for verified buffer'
  - Resolves: #2453022
  - Resolves: #2451630
  - Resolves: #2450672
  - Related: #2427945
  - Related: #2263643


author: Leo Sandoval <lsandova@redhat.com> - 8.40-83
changelog:
  - grubby-bls: in s390* systems, run zipl on grub cfg update event
    Fixes previous commit and formats better the conditions that trigger grub cfg updates


author: Milan Crha <mcrha@redhat.com> - 4.22.1-2
changelog:
  - Add a patch "gtkapplication-wayland: Add a missing NULL check when
    forgetting a window"
  - Resolves: rhbz#2450986


author: Andrea Musuruane <musuruan@gmail.com> - 2.6.1-3
changelog:
  - Rebuilt for SDL3 >= 3.4.2 (fixes BZ #2434639)
  - Added missing dependency for gobject-introspection


author: Daniel Milnes <daniel@daniel-milnes.uk> - 1.0.0-1
changelog:
  - Update to 1.0.0 (rhbz#2457679)
  - Migrate to pyproject-srpm-macros (rhbz#2377284)
  - Fix Fedora 44 FTBFS (rhbz#2429404)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~alpha1-3
changelog:
  - Resolves: #2321990#c10 Keep xinit postun in ibus for back compatibility
  - Resolves: #2418564 Do not install ibus-xinit in COSMIC desktop
  - Resolves: #2418670 Disable X11 display in GTK3 Wayland with hibernation
  - Resolves: #2418908 Delete Python2 and subpackage python3-ibus
  - Fix GTK3 build in src/tests/ibus-keypress
  - Add warning to clean VALA files in configure
  - Order locale compose and user compose


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~alpha1-4
changelog:
  - Resolves: #2419469 Fix SEGV with double bus_name_acquired_cb()
  - Resolves: #2424256 Delete Requires desktop-file-utils in spec
  - Resolves: #2425585 Separate lxqt-wayland-session and lxqt-x11-session in spec
  - Resolves: #2428238 Add awesome in spec
  - Rebase: #1797120 Fix assertion in panel_binding_construct()
  - Connect delete surrounding text in ibus-wayland
  - Fix Backspace after commit-text in Ghostty in ibus-wayland


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~rc1-1
changelog:
  - Bump to 1.5.34-rc1
  - Update translations
  - Fix "no memory" error with focus changes in Sway
  - Resolves #2444009 Latch key in Latvian(tilde) keymap
  - Fix only GTK3 builds
  - Close leaked keymap fd on early return in ibus-wayland


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-1
changelog:
  - Bump to 1.5.18
  - Fix Backspace in prediction
  - Update translations
  - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI
  - Delete gnome-themes-extra from Fedora CI


author: Packit <hello@packit.dev> - 44-1
changelog:
  Changes with 44
  ----------------
    - [RFC] main: print pretty json manifest (#414)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: document details about  {,bib}cmd{ManifestFromCobra,Build} (#402)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: fix anaconda-iso mTLS key extraction (#404)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    - bib: small cleanups (#400)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cmd: move `awscloudNewUploader` back into upload.go (#397)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: remove bibupload as it was never exposed to the public (#405)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - data: install tmpfiles.d/image-builder.conf to auto-clean cache (#418)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: error when image-builder is used to create anaconda-iso (#401)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: add rhel specific tests (#403)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 45-1
changelog:
  Changes with 45
  ----------------
    - deps: bump images to 0.231.0 (#425)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2026-01-05


author: Packit <hello@packit.dev> - 47-1
changelog:
  Changes with 47
  ----------------
    - Revert "spec: Use gosource macro for Source0" (#433)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-16


author: Packit <hello@packit.dev> - 48-1
changelog:
  Changes with 48
  ----------------
    - Add pxe-tar-xz to bib types and add boot tests for f43, stream9, and stream10 (#436)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support rootless bootc-image-builder (#445)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: fix constant format string (#438)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - tests: Fix bootc pxe testing (#439)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 50-1
changelog:
  Changes with 50
  ----------------
    - SPEC: define default permissions for /var/cache/image-builder (#454)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/cache from 4 to 5 (#434)
      - Author: {}, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - deps: bump Go to 1.24.12 and use new Go functions (#452)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to v0.240.0 (#456)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 51-1
changelog:
  Changes with 51
  ----------------
    - go.mod: update osbuild/images to v0.243.0 (#457)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-19


author: Packit <hello@packit.dev> - 53-1
changelog:
  Changes with 53
  ----------------
    - chore: bump dependencies via gobump (#475)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: allow specifying AWS credentials profile (#443)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: bump images to 0.248.0 (#479)
      - Author: Simon de Vlieger, Reviewers: Nobody
    - docs: update COPR command for RHEL (#477)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: bump ISO timeout (#469)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-03-13


author: Packit <hello@packit.dev> - 55-1
changelog:
  Changes with 55
  ----------------
    - chore: bump dependencies via gobump (#460)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal
    - deps: bump images (#483)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-03-24


author: Akira TAGOH <tagoh@redhat.com> - 1.8.10-1
changelog:
  - New upstream release.
  - Reflect correct environment variables to input method process.
    Resolves: rhbz#2324342
  - Correct DBus service filename
    Resolves: rhbz#2322097


author: Akira TAGOH <tagoh@redhat.com> - 1.8.11-1
changelog:
  - New upstream release.
  - Fix D-Bus session lifetime issue.
    Resolves: rhbz#2402652
  - Reset gtk-im-module gsettings key if no actions required for imsettings
    Resolves: rhbz#2402681


author: Mikhail Medvedev 1.5.2-1
changelog:
  - Fix: Memory leaks
  - Fix: Gigadevice status registers write error
  - Added new SPI chip sizes
  - Added Fidelix, Zetta, MXIC OTP algorithm
  - Added support for new Boya, Winbond chips


author: Mikhail Medvedev 1.5.3-1
changelog:
  - Last version of QHexEdit used
  - Hex-functions optimised
  - Added support GIANTEC, DOSILICON NOR FLASH chips
  - Fix: incorrect uninstall script
  - Fix: i2C 128K size is repeated twice
  - Fix: error calculating file size


author: Mikhail Medvedev 1.6.1-1
changelog:
  - Add new feature: compare files
  - Add new feature: fill test array
  - Fix: when the page size is changed, the buffer is cleared
  - Fix: the code is executed twice and the code slows down the display of the interface


author: Mikhail Medvedev 1.6.2-1
changelog:
  - Fix: program crashed if security registers was less than 256 bytes
  - Fix: Information in the status bar disappears when hovering over a menu
  - Added comparison of INTEL HEX and ASUS CAP with other files
  - Added close and minimise buttons for subordinate forms
  - New chips added to database
  - Chip information form code optimized


author: Mikhail Medvedev 1.7.1-1
changelog:
  - Fix: pressing the Stop key did not stop auto operations
  - Added support for SPI NAND flash
  - Added traditional chinese translation
  - New chips added to database


author: Mikhail Medvedev 1.7.2-1
changelog:
  - Fix: NAND Flash information form freeze
  - Added new images for CH341A v1.7    
  - Added programmer type menu
  - Added support for the AT24CM02 chip


author: Mikhail Medvedev 1.7.3-1
changelog:
  - Fix: Incorrect HexEdit size when starting the program
  - Added: saving program settings to an ini file


author: Mikhail Medvedev 1.8.1-1
changelog:
  - Fix: increased interface speed
  - Fix: increased SPI NOR Flash operations speed
  - Fix: incorrect chip page sizes values removed
  - Fix: unused files removed
  - Added: support for the CH347T programmer


author: Mikhail Medvedev 1.8.2-1
changelog:
  - Fix: error reading/writing data from I2C chips on the CH347T version 5.44
  - Fix: bit error during NOR/NAND operations in the CH347V1.1 programmer
  - Added: showing the programmer revision function
  - Added: erase check function
  - Added: filling code function


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-1
changelog:
  - New upstream snapshot.
  - Fixes CVEs 2025-11494, 2025-11495, 2026-2341, 2026-3441, 2026-3442.
    https://bugzilla.redhat.com/show_bug.cgi?id=2402843
    https://bugzilla.redhat.com/show_bug.cgi?id=2402846
    https://bugzilla.redhat.com/show_bug.cgi?id=2438918
    https://bugzilla.redhat.com/show_bug.cgi?id=2443834
  - Fixes CVEs 2025-69644, 2025-69645, 2025-69646.
    https://bugzilla.redhat.com/show_bug.cgi?id=2445281
    https://bugzilla.redhat.com/show_bug.cgi?id=2445284
    https://bugzilla.redhat.com/show_bug.cgi?id=2446276
  - Fixes FTBFS.
    https://bugzilla.redhat.com/show_bug.cgi?id=2434680
  - Relax BR of itcl/itk/iwidgets.
  - Patch "libtool_tag" to force C++ language tagging in libtool.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.1-0]
changelog:
  - Turn on ASUS_ARMOURY driver, fixes RHBZ 2433246 (Justin M. Forbes)
  - redhat/kernel.spec.template: Make -uki-dtbloader provide kernel-core-uname-r (Hans de Goede)
  - Linux v6.19.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.4-0]
changelog:
  - media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and XPS 14 9440 (Hans de Goede)
  - Linux v6.19.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.6-0]
changelog:
  - net: macb: Fix tx/rx malfunction after phy link down and up (Kevin Hao)
  - net: macb: Replace open-coded device config retrieval with of_device_get_match_data() (Kevin Hao)
  - net: macb: convert to use .get_rx_ring_count (Breno Leitao)
  - net: cadence: macb: Discard pm_runtime_put() return value (Rafael J. Wysocki)
  - arm64: dts: broadcom: bcm2712: Add watchdog DT node (Stanimir Varbanov)
  - arm64: dts: broadcom: bcm2712: Enable RNG (Peter Robinson)
  - fedora: minor beeper cleanups (Peter Robinson)
  - Add config introduced in 6.19.4 (Justin M. Forbes)
  - Linux v6.19.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.7-0]
changelog:
  - Add some BugsFixed by 6.19.7 (Justin M. Forbes)
  - drm/i915/psr: Compute psr_entry_setup_frames into intel_crtc_state (Jouni Högander)
  - drm/i915/psr: Disable PSR on update_m_n and update_lrr (Jouni Högander)
  - Turn on GPIB for Fedora (Justin M. Forbes)
  - drm/i915/psr: Fix for Panel Replay X granularity DPCD register handling (Jouni Högander)
  - drm/dp: Add definition for Panel Replay full-line granularity (Jouni Högander)
  - drm/i915/display: Allow async flip when Selective Fetch is enabled (Jouni Högander)
  - drm/i915/psr: Perform full frame update on async flip (Jouni Högander)
  - drm/i915/psr: Set plane id bit in crtc_state->async_flip_planes for PSR (Jouni Högander)
  - drm/i915/psr: Move sink_sync_latency to intel_connector (Jouni Högander)
  - drm/i915/psr: Move sink PSR and Panel Replay booleans to intel_connector (Jouni Högander)
  - drm/i915/psr: Move Panel Replay DSC sink support data to intel_connector (Jouni Högander)
  - drm/i915/psr: Clear pr_dpcd as well on disconnect (Jouni Högander)
  - drm/i915/psr: Move pr_dpcd and psr_dpcd to intel_connector (Jouni Högander)
  - drm/i915/psr: Compute Panel Replay/Adaptive Sync coexistence behavior (Jouni Högander)
  - drm/i915/psr: Use SU granularity information available in intel_connector (Jouni Högander)
  - drm/i915/psr: Add panel granularity information into intel_connector (Jouni Högander)
  - Work around binutils update in s390x perf (Justin M. Forbes)
  - iommu: Fix mapping check for 0x0 to avoid re-mapping it (Antheas Kapenekakis)
  - Revert the UKI dtbloader for F42 (Justin M. Forbes)
  - Turn on release_targets for F43/F42 (Justin M. Forbes)
  - Linux v6.19.7


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.8-0]
changelog:
  - Fix mute LED on HP OmniBook 7 Laptop 16 (Justin M. Forbes)
  - Add Lenovo bug to BugsFixed for 6.19.8 (Justin M. Forbes)
  - Turn on Uniwill x86 platform driver (Justin M. Forbes)
  - ASoC: SDCA: Add ASoC jack hookup in class driver (Charles Keepax)
  - Linux v6.19.8


author: Augusto Caringi <acaringi@redhat.com> [6.19.9-0]
changelog:
  - arm64: dts: broadcom: bcm2712-rpi: Move the firmware node down 1 level (Rob Herring (Arm))
  - arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712-rpi-5-b: add pinctrl properties for csi i2cs (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712: add camera backend node pispbe (Gregor Herburger)
  - arm64: dts: broadcom: rp1: add csi nodes (Gregor Herburger)
  - arm64: dts: broadcom: rp1: add i2c controller (Gregor Herburger)
  - mfd: bcm2835-pm: Add BCM2712 PM device support (Phil Elwell)
  - mfd: bcm2835-pm: Introduce SoC-specific type identifier (Phil Elwell)
  - arm64: dts: broadcom: bcm2712: Add V3D device node (Maíra Canal)
  - pmdomain: bcm: bcm2835-power: Fix broken reset status read (Maíra Canal)
  - arm64: dts: imx93-11x11-frdm: enable additional devices (Francesco Valla)
  - arm64: dts: imx93-11x11-frdm: Add MQS audio support (Daniel Baluta)
  - arm64: dts: freescale: add support for NXP i.MX93 FRDM (Fabian Pflug)
  - Revert "Fix mute LED on HP OmniBook 7 Laptop 16" (Justin M. Forbes)
  - Linux v6.19.9


author: Augusto Caringi <acaringi@redhat.com> [6.19.10-0]
changelog:
  - Add entries for 6.19.10 to BugsFixed (Justin M. Forbes)
  - Documentation: hid: intel-ish-hid: Document PRODUCT_FAMILY firmware matching (Vishnu Sankar)
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Vishnu Sankar)
  - Add BugsFixed for 6.19.10 (Justin M. Forbes)
  - drm/amdgpu: rework how we handle TLB fences (Alex Deucher)
  - Linux v6.19.10


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-2
changelog:
  - Skip unicode test in annocheck
  - unicode test fails in packit ci rpminspect on kubectl and kubeadm
  - failing symbol is 'go:(*struct { io.Reader; io.WriterTo }).Read' but
    looks correct


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.3-4
changelog:
  - Drop deprecated --fail-swap-on=false flag
  - Drop flag from kubeadm systemd drop-in file
  - Remove deprecated flags and comment out EnvironmentFiles


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.5-1
changelog:
  - Update to release v1.34.5
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.2-1
changelog:
  - Update to release v1.35.2
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-1
changelog:
  - Deploy initial v1.36.0 release
  - ACTION REQUIRED: kube-controller-manager: Renamed metric
    volume_operation_total_errors to volume_operation_errors_total. If you
    are using custom monitoring dashboards or alerting rules based on the
    volume_operation_total_errors metric, update them to use the new
    volume_operation_errors_total metric.
  - ACTION REQUIRED: Plugins can opt-in to parallel execution by returning
    AllowParallel: true from the PreBindPreFlight method.
  - Review Kubernetes change log for important information:
  - https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-
    1.36.md#changelog-since-v1350


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.1-2
changelog:
  - Add aarch64/ppcle64 test exemptions
  - Added test exemptions. Fedpkg scratch-builds for these arches pass but
    are failing when building for a PR. Seems to be flaky?


author: Richard Berger <richard.berger@outlook.com> - 20250612-1
changelog:
  - Version bump to 20250612
  - disable kim-api (orphaned package)
  - add patch to avoid segfault in Fortran interface


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.0-1
changelog:
  - Update to v4.0
  - Drop Patch1 (crash in lazbuild) - issue fixed upstream
  - Drop Patch2 (Qt5 segfault) - backport from this release
  - Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -> "LGPL-2.0-only WITH Independent-modules-exception")


author: Kalev Lember <kalevlember@gmail.com> - 1:1.41.0-1
changelog:
  - Update to 1.41.0
  - Build with llvm 20
  - Re-bootstrap on ppc64le to switch to 128-bit IEEE long double ABI


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.5-1
changelog:
  - Update to version 6.5.5
  - Drop soname patch, use new configure option --enable-librelease instead
  - Unbundle yaml-cpp, using new configure option --with-yaml-cpp
  - EPEL 7 EOL specfile cleanup


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.13-15
changelog:
  - use proper SPDX identifier for LGPLv2+ (verified against sources)
  - use modern spec macros where applicable
  - make -devel subpackage dependency on main package archful


author: Python Maint <python-maint@redhat.com> - 21.0.0-3
changelog:
  - Rebuilt for Python 3.14.0rc2 bytecode
  - Plus rebuild w/ liborc-2.2.0 + orc-format-1.1.1 (i.e. liborc-2.2.0-2)


author: Remi Collet <remi@remirepo.net> - 1.30.6-2
changelog:
  - temporarily drop man pages on Fedora 44 as FTBFS
    reported as https://jira.mongodb.org/browse/CDRIVER-6210


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Mattia Verga <mattia.verga@proton.me> - 2.1.7-1
changelog:
  - Update to 2.1.7 (Fedora#2419094)
  - Switch to use system's hidapi libs
  - QT client now built on QT6


author: Susi Lehtola <jussilehtola@fedoraproject.org> 2.9.0-1
changelog:
  - Disable build on i386 architecture where the build runs out of memory.
  - Update license tag to LGPL-3.0-only (generated library).
  - Update to 2.9.0.


author: Susi Lehtola <jussilehtola@fedoraproject.org> 2.9.0-2
changelog:
  - Devel package now pulls in boost, eigen3, gmp, and mpfr development
    packages that are needed to build against libint2.


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Remi Collet <remi@remirepo.net> - 1.1.4-8
changelog:
  - fix test suite with memcached 1.6.40
    reported as https://github.com/awesomized/libmemcached/issues/161
    using fix from https://github.com/awesomized/libmemcached/pull/162


author: Jerry James <loganjerry@gmail.com> - 3.5.2-1
changelog:
  - Version 3.5.2
  - Drop all patches
  - Add MIT to license due to rx-ranges and magic_enum
  - Drop the doc subpackage due to unavailable dependencies
  - Use HPCombi on aarch64


author: Milan Crha <mcrha@redhat.com> - 3.6.6-6
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Davide Cavalca <dcavalca@fedoraproject.org> - 23-8
changelog:
  - Convert license tag to SPDX
  - Update spec to the latest packaging guidelines
  - Disable broken test on ppc64le; Fixes: RHBZ#2261345


author: Miroslav Suchý <msuchy@redhat.com> 26-1
changelog:
  - in verbose mode always print the text of license
  - finally make transformer work
  - fixes and more tests
  - add test for BSD-3-Clause-Clear
  - add tests
  - rework handling not-allowed licensing with exception
  - do not print the long traceback with -v on mismatch


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.14.0-1
changelog:
  - Update to v1.14.0
  - Drop Patch0 (test failures - backported from this release)
  - Drop Patch1 (kernel 6.11+ issues - backported from this release)


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.01.12-1
changelog:
  - update to 2026.01.12 (resolves rhbz#2428676)
  - switch Source URL to https newly provided by upstream


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.02.26-1
changelog:
  - update to 2026.02.26 (resolves rhbz#2442890)
  - add strict dependency on main package to -tools subpackage


author: Brian C. Lane <bcl@redhat.com> 43.10-1
changelog:
  - executils: Remove binary_output flag (bcl@redhat.com)
  - logging: Set encoding=UTF-8 on FileHandler (bcl@redhat.com)
  - executils: Set encoding to UTF-8 for _run_program (bcl@redhat.com)
  - tests: Add template runcmd unicode test (bcl@redhat.com)
  - tests: Add some unicode to the executils tests (bcl@redhat.com)
  - templates: Remove explicit installation of anaconda-widgets (k.koukiou@gmail.com)


author: Brian C. Lane <bcl@redhat.com> 44.0-1
changelog:
  - maint: Switch default platform to F44 (bcl@redhat.com)
  - Drop all installs of shim-ia32 (it no longer exists) (awilliam@redhat.com)
  - templates: Support product version to contain blank character in
    templates.d/99-generic (songmingliang@uniontech.com)


author: Brian C. Lane <bcl@redhat.com> 44.1-1
changelog:
  - runtime-install: skip qcom-accel-firmware (awilliam@redhat.com)
  - executils: decoding after deserialization (oleg.sviridov@red-soft.ru)
  - mkksiso: make ISO reproducible with SOURCE_DATE_EPOCH (e.champetier@ateme.com)


author: Brian C. Lane <bcl@redhat.com> 44.2-1
changelog:
  - Add mac80211_hwsim for wifi testing to installer image (rvykydal@redhat.com)
  - runtime-install: drop tigervnc (awilliam@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 44.4-1
changelog:
  - Exclude build on the i686 architecture (berrange@redhat.com)
  - runtime-cleanup: mesa no longer includes gallium-pipe drivers (yselkowi@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 44.5-1
changelog:
  - runtime-cleanup: don't strip /usr/share from gdb-headless (awilliam@redhat.com)
  - runtime-cleanup: keep policycoreutils /usr/bin for load_policy and setfiles (k.koukiou@gmail.com)
  - executils: Ignore utf-8 decode errors (bcl@redhat.com)
  - mkksiso: Add a --tmp argument to set temporary directory (bcl@redhat.com)


author: Michel Lind <salimma@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to version 0.6.0
  - Resolves: rhbz#2428411
  - Enable Packit
  - Convert to use rpmautospec
  - Clean up spec to drop EL < 8 conditionals


author: Michal Schorm <mschorm@redhat.com> - 3:11.8.5-100
changelog:
  - Disable the 'distribution default' in MariaDB 10.11 (package 'mariadb10.11')
  - Enable the 'distribution default' in MariaDB 11.8 in this package


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.15-100
changelog:
  - Disable the 'distribution default' in MariaDB 10.11 in this package
  - Enable the 'distribution default' in MariaDB 11.8 (package 'mariadb11.8')


author: Jonathan Wright <jonathan@almalinux.org> - 4.3-6
changelog:
  - fix FTBFS on gcc15 rhbz#2340833
  - fix permissions on /usr/share/mdadm to be world-readable rhbz#2322402


author: Sandro Mani <manisandro@gmail.com>
changelog:
  - Backport fixes for CVE-2025-11494, CVE-2025-11495, CVE-2025-11082,
    CVE-2025-11081, CVE-2025-11083


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: psklenar@redhat.com <psklenar@redhat.com> - 5.8.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.6-1
changelog:
  - Make sure to install BuildRequires defined by macros (frostyx@email.cz)
  - unbreq plugin: performs action only when build is taking place (marian.koncek@mailbox.org)
  - simplify forcearch code


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - mock: Use umask 0022 instead of 0002 to avoid strange permissions (ngompa@velocitylimitless.com)
  - expand_spec plugin: generating expanded-spec.txt in postdeps hook (yzhu@redhat.com)
  - do not fail (not just) hermetic builds for missing resolv.conf
  - use skopeo for hermetic bootstrap images (tkopecek@redhat.com)
  - support yum for hermetic build (tkopecek@redhat.com)
  - allow access to the buildroot binary RPMs even in hermetic builds (tkopecek@redhat.com)
  - adapt mock to Changes/droppingOfCertPemFile
  - file_util: improve rmtree performance (#1672) (Gerasimov.N.V)
  - disable traceLog() wrapper (will be removed)
  - `mock --scrub=all` now correctly backs up successful builds from the buildroot (sergio@serjux.com)
  - update subscription-manager instructions (msuchy@redhat.com)
  - configs: Switch openSUSE Tumbleweed to DNF5 (ngompa@opensuse.org)
  - depend on DNF5 for EL11+ distributions (ngompa@centosproject.org)
  - depend on DNF5 for Mageia 10+ and Cauldron (ngompa@mageia.org)
  - select personality for RISC-V DNF transactions
  - document --scrub=bootstrap (negativo17@gmail.com)
  - unbreq supports `--isolation=simple` and `--no-bootstrap-chroot` (marian.koncek@mailbox.org)
  - unbreq plugin no longer crashes for `(foo if bar)` build deps (marian.koncek@mailbox.org)
  - unbreq performance has been significantly improved through caching (marian.koncek@mailbox.org)
  - unbreq logs standard outputs of failed commands (mkoncek@users.noreply.github.com)


author: Miroslav Suchý <msuchy@redhat.com> 42.2-1
changelog:
  - fix: expand Oracle Linux distro_id from ol to oraclelinux
    (avi.miller@oracle.com)
  - Navy Linux 8 configuration fixes (adil@linux.com)
  - EuroLinux end-of-life (praiskup@redhat.com)
  - bugfix: upgrade openeuler chroots to latest release and fix gpg check failed
    in 20.03 (pkwarcraft@gmail.com)
  - Add Azure Linux 3 configuration (negativo17@gmail.com)
  - Add Azure Linux 2 configuration (negativo17@gmail.com)
  - Add Kylin 10 configuration files (negativo17@gmail.com)
  - Add AlmaLinux Kitten 10 + EPEL 10 configs (ngompa@almalinux.org)
  - Add AlmaLinux Kitten 10 configs (ngompa@almalinux.org)
  - Add openSUSE Leap 15.6, move openSUSE Leap 15.5 to eol (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Pavel Raiskup <pavel@raiskup.cz> 43.5-1
changelog:
  - add PQ keys to rhel9 (msuchy@redhat.com)
  - Switch Mageia 10+ and Cauldron to DNF5 (ngompa@mageia.org)
  - EOL Fedora 41


author: Tomas Halman <thalman@redhat.com> - 2.4.16.11-1
changelog:
  Rebase to version 2.4.16.11
  - Resolves: rhbz#2357672 - mod_auth_openidc-2.4.16.11 is available
  - Resolves: CVE-2025-31492 mod_auth_openidc allows
              OIDCProviderAuthRequestMethod POSTs to leak protected data


author: Tomas Halman <thalman@redhat.com> - 2.4.17.2
changelog:
  Rebase to new version, opt in for autorelease and autochangelog
  - Resolves: rhbz#2361581 - mod_auth_openidc-2.4.17.2 is available


author: Sérgio Basto <sergio@serjux.com> - 0.40.0-1
changelog:
  - Update mpv to 0.40.0
  - filesystem package owns completions folders, no need to co-own
    these directories anymore


author: David Abdurachmanov <davidlt@rivosinc.com> - 8.4.7-5
changelog:
  - Disable numactrl and libquadmath on risc-v
  - Disable ld.gold on risc-v
  - Add list of skipped tests for risc-v


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Michel Lind <salimma@fedoraproject.org> - 2.102-1
changelog:
  - Update to 2.102 upstream release; Resolves: rhbz#2334057
  - Fix build with GCC 15; Resolves: rhbz#2340933


author: Timothée Ravier <tim@siosm.fr> - 2.23.0-4
changelog:
  - Fix macro expansion in description
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Use SPDX identifiers for license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_3


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.23.0-9
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.4-4
changelog:
  - based on PR#18 by Orion Poplawski
  - Build NUT-Monitor and ship in separate nut-monitor package (rhbz#2359149)
  - Move UPS drivers into /usr/libexec/nut


author: Tarulia Dulacre <mihawk.90+git@googlemail.com> - 2.4.3-1
changelog:
  - Update to 2.4.3 (rhbz#2372785)
  - change Supplements to Enhances reverse weak dependency (rhbz#2369371)


author: Marcin Juszkiewicz - 1.17.0-11
changelog:
  - skip 3 tests on riscv64: test_float8_e4m3fn_negative_nan,
    test_float8_e5m2_negative_nan, test_maxpool_2d_uint8_cpu


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.26.2-6
changelog:
  - clean up spec file formatting
  - Separate `%generate_buildrequires` after %prep section
  - Consolidate %doc directives into single line
  - Remove %license directive (already handled by %pyproject_save_files -l)


author: Dominik Mierzejewski <dominik@greysector.net> - 0.2.0.4-1
changelog:
  - update to 0.2.0.4 (resolves rhbz#2399635)
  - generate SO version from release version automatically


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Update to 3.25.0
  - Drop patches which are included in upstream
  - Adapt p11sak patch
  - Fix RPM build warnings
  - Add jq and openssl in Build Requirement, required for testcases


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Require openssl >= 3.5.1
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
  - Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Fix the image mode issue again as bootc expects to use /run/lock


author: Simon Pichugin <spichugi@redhat.com> - 2.6.10-4
changelog:
  - Fix LDAP initialization does unnecessary resolution of hostname (rhbz#2331728)
  - Convert STI tests to FMF (rhbz#2382998)


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-6
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex


author: Packit <hello@packit.dev> - 167-1
changelog:
  Changes with 167
  ----------------
    - Fix RHSM podman secrets and rhc configuration (HMS-9811 and HMS-9606) (#2265)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - GHA: update osbuild-ci* container images (#2286)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Move replace and rglob (#2267)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Solver: prepare for V2 API with per-transaction depsolve results (HMS-9062) (#2258)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2273)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2285)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Various fixes for --in-vm (#2271)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chroot: If we're unable to mount devtmpfs, bindmount host /dev (#2277)
      - Author: Alexander Larsson, Reviewers: Michael Vogt, Simon de Vlieger
    - osbuild/solver: replace request.RepositoryConfig with model.Repository (HMS-9062) (#2280)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild/util/rhsm: make Subscriptions.get_secrets() take list of URLs (HMS-9062) (#2278)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - ostree.config: Add some tests (#2268)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ostree.grub2: ostree requires leading / (#2272)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - runners: set up sequoia on RHEL (#2288)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - stages/ostree.{aleph,deploy.container}: support more imgref formats; make aleph stage more reliable (#2270)
      - Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    - stages/xorrisofs: allow setting more fields (#2269)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-17


author: Packit <hello@packit.dev> - 169-1
changelog:
  Changes with 169
  ----------------
    - Update images dependency ref to latest (#2299)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2305)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2296)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260101 (#2297)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260112 (#2306)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: introduce manifest guide (#2175)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - monitor: deep copy stage options in JSONSeqMonitor (#2293)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai, Simon Steinbeiß, Tomáš Hozza
    - stages/kickstart: support containers-storage transport (#2264)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/rpm: add option to ignore key import errors (HMS-9986) (#2301)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - stages/rpm: add support for setting the rpmkeys binary (#2303)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    - stages: add force option to org.osbuild.groups (#2304)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-14


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add V2 Solver API with complete package metadata, per-transaction results, and RHSM secrets discovery (HMS-10029) (#2287)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    - Add tests for PQC key handling in osbuild [HMS-10057] (#2310)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Makefile: new target: rpm-nocheck (#2309)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2308)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260118 (#2312)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Add RHEL10 x86 and ARM COPR builds (#2311)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - stages: fix org.osbuild.ostree.grub2 permissions (#2307)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Brian C. Lane
    - test: add a wait to mitigate race condition (#2314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: add one-block tolerance to fscache test (#2316)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: increase sendmsg test size (#2315)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 171-1
changelog:
  Changes with 171
  ----------------
    - Improve robustness of --in-vm support (#2292)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support running bootc-image-builder with --in-vm (#2328)
      - Author: Alexander Larsson, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc.install.config: add ostree.bls-append-except-default option (#2319)
      - Author: Joel Capitao, Reviewers: Brian C. Lane, Simon de Vlieger
    - grub2.iso: configurable entries (HMS-10018, HMS-10015) (#2317)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Ondřej Budai
    - mockbuild: fix PQC builds on RHEL 10 (#2327)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - monitor: Report if the runner is running in a vm (#2320)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-27


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - SPEC: initrd sub-package fixups and exclude i686 arch on el (#2334)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2333)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260201 (#2330)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild-mpp: Refactor to use osbuild.solver module (#2331)
      - Author: Mark Kemel, Reviewers: Nobody
    - test_objectstore: add time.sleep(0.1) to solve flaky tests (#2318)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-06


author: Packit <hello@packit.dev> - 173-1
changelog:
  Changes with 173
  ----------------
    - Revert "test_objectstore: add time.sleep(0.1) to solve flaky tests" (#2340)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: disable tests that tend to fail during rpmbuild in Koji (HMS-9796) (#2338)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2341)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260208 (#2335)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/module-config: postfix with `.module` (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 174-1
changelog:
  * Fix packaging conflict in initrd directory causing downgrade failures by @thozza in https://github.com/osbuild/osbuild/pull/2347
   * stages/bootc.install-to-fs: add bootupd-skip-boot-uuid option by @jbtrystram in https://github.com/osbuild/osbuild/pull/2345
   * qemu: Don't always pass -cpu host by @alexlarsson in https://github.com/osbuild/osbuild/pull/2356
   * spec: drop typer-slim dependency and use only python3-typer by @achilleas-k in https://github.com/osbuild/osbuild/pull/2358
   * qemu: Handle container storage.conf not listing graphroot by @alexlarsson in https://github.com/osbuild/osbuild/pull/2357
   * stages/erofs: quiet stdout by @supakeen in https://github.com/osbuild/osbuild/pull/2359
   * qemu: Default to 3GB vm instead of 4GB by @alexlarsson in https://github.com/osbuild/osbuild/pull/2361


   **Full Changelog**: https://github.com/osbuild/osbuild/compare/v173...v174


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - CI: run tests on 9.7+10.1 GA and 9.8+10.2 nightly (HMS-9794) (#2351)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Revert "schutzbot: update libsemanage before installing osbuild" (#2378)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Solver: fix `repo_ids` to restrict all dependency resolution, not just top-level packages (HMS-10314) (#2379)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Solver: implement per-transaction package excludes in the DNF5 solver (HMS-10318) (#2381)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2383)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - Update osbuild-ci container images (#2367)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - Update snapshots to 20260308 (#2382)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: shift manifest guide headings one level down (#2385)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - solver: add cost field to Repository model (#2380)
      - Author: Mark Kemel, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/rpm: add nodeps option for `rpm install --nodeps` (#2387)
      - Author: Dusty Mabe, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages: add coreos.bfb for NVIDIA BlueField DPUs (#2349)
      - Author: Sagi Zigmon, Reviewers: Nobody

  — Somewhere on the Internet, 2026-03-11


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Packit <hello@packit.dev> - 168-1
changelog:
  Changes with 168
  ----------------
    - Add DequeueAnyChannel to enable multi-tenant BootcPreManifest processing (HMS-10445) (#5084)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Ondřej Budai
    - Fail bootc composes on composer build version mismatch (HMS-10378) (#5082)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Ondřej Budai
    - Make bootc container source type configurable (HMS-10262) (#5087)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Replace monolithic bootc-manifest worker job with multi-stage server-orchestrated job graph (HMS-10378) (#5069)
      - Author: Tomáš Hozza, Reviewers: Nobody
    - Update snapshots to 20260405 (#5080)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5070)
      - Author: {}, Reviewers: Anna Vítová, Lukáš Zapletal
    - chore(deps): update konflux references (#5089)
      - Author: {}, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - chore: add .gitattributes file (#5078)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Simon de Vlieger, Tomáš Hozza
    - cloudapi: Add fedora names for network-installer (#5079)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - cmd/osbuild-worker: cleanup jobimpl-osbuild.go (#5083)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Tomáš Hozza
    - templates/packer: add container registries init script (#5086)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - worker: use slices.EqualFunc to compare dependency modules (#5085)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-15


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - Schutzfile: drop minor versions from bootc-foundry (#5134)
      - Author: Lukáš Zapletal, Reviewers: Simon Steinbeiß, Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add default target for bootc iso (#5125)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - go.mod: update osbuild/images to v0.261.0 (#5115)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Lukáš Zapletal, Sanne Raymaekers
    - test/repositories: switch RHEL 9.7 and 10.1 test repos to GA (#5122)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: drop ubi-wsl.sh test (#5130)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-13


author: John Kacur <jkacur@redhat.com> - 0.20-1
changelog:
  - Update to upstream version 0.20
  - Convert to pyproject-rpm-macros for modern Python packaging
  - Add pyproject.toml for modern Python packaging
  - Remove all patches (now included in upstream 0.20)


author: John Kacur <jkacur@redhat.com> - 0.20-2
changelog:
  - Add python3-pip, python3-setuptools, python3-wheel BuildRequires
  - Delete setup.py in %prep so pyproject.toml build is used
  - Compress man page during %prep similar to rteval
  - Install tuna script and compressed man page explicitly


author: John Kacur <jkacur@redhat.com> - 0.20-4
changelog:
  - Update pyproject.toml license format for modern setuptools
  - Disable the tuna apply functionality
  - Remove tuna apply from the man page
  - Print warning if setting affinity results in EPERM and continue
  - Add testing infrastructure using unittest framework


author: Numan Siddique <numans@ovn.org> - 24.09.2-04
changelog:
  - Update the OVN sources to upstream release v24.09.2
    with the base OVN commit df4f80a60d4cd712870aa73d32d5677448c11c78
    and OVS commit 9e07a69bbb2a7d3eb35f9b487161c50cfa5bd65e
    The below commits are also synced:

  - Prepare for 24.09.3.
  [Upstream: 0a899586b9ec222b335a956021971de1c2dd2312]

  - ic: Fix NULL ptr deref on log of duplicate routes.
  [Upstream: 5a19ae8fa2965e4bf6864f84dfd1adef85ba4b13]

  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes.
  [Upstream 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]

  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-1
changelog:
  - Updated the OVN sources to the upstream release v25.09.2 with the
    commit e3e0587865d8f02d0a8f72de53b82e464c5029d8.


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-82
changelog:
  - Updated the OVN sources to pick up the commits from v25.09.2 till the
    tip of branch-25.09 (c7066edbc3985f06c6bfa45e3724088baa97c4bd).
  - Updated the OVS sources to the branch-25.09 OVS submodule
    commit da6b84d691593e57951bcc5f2f916336c6e0d5cc.


author: Packit <hello@packit.dev> - 1.11.0-1
changelog:
  - `packit test` now supports running and validating TMT tests locally without requiring a PR or a release, including result parsing and basic failure reporting. (#2632)
  - Resolves: rhbz#2383891


author: Packit <hello@packit.dev> - 1.12.0-1
changelog:
  - Packit now automatically invokes an rpm build in mock when no rpm test is passed using `--rpm_paths` before running local tests with `packit test`. (#2636)
  - Fixed an issue where the upstream spec file was synchronized without applying packit's patches. (#2637)
    This happened when syncing a folder that contains the specfile, e.g.:
  ```yaml
  files_to_sync:
    - src: distro/
      dest: ./
  specfile_path: distro/my_pkg.spec
  ```
  - `packit init` now automatically adds a packit-specific pre-commit hook to user's pre-commit configuration file if present. Two new flags were added, which modify this behavior. (#2641)
  - Resolves: rhbz#2396659


author: Packit <hello@packit.dev> - 1.13.0-1
changelog:
  - `packit init` now automatically retrieves the latest version of the pre-commit hook to be added to the user's pre-commit configuration file. (#2651)
  - Resolves: rhbz#2420553


author: Packit <hello@packit.dev> - 1.14.0-1
changelog:
  - We have added the `--preserve-spec` flag to the `prepare-sources` and `srpm` commands. When used, Packit will not change the spec file in any way (e.g., release is not bumped, Source0 is not changed). When enabled, it implies `--no-update-release`. (#2653)
  - Resolves: rhbz#2427944


author: Packit <hello@packit.dev> - 1.15.0-1
changelog:
  - The `version_suffix` configuration option is now supported in Packit. This option is meant for appending information to the Version field in RPM spec files. This is useful for post-release snapshots following RPM versioning conventions. The `version_suffix` behaves similarly to the already existing `release_suffix` and also supports expansion of environment variables. (#2664)
  - Packit now supports `bodhi_extra_params` configuration option to customize creating Bodhi updates. (#2682)
  - Resolves: rhbz#2439424


author: Packit <hello@packit.dev> - 1.15.1-1
changelog:
  - We have fixed a bug that prevented running `sync_release()` on a `PackitAPI` instance initialized with `non_git_upstream=True` repeatedly due to an improper clean-up. (#2691)
  - Resolves: rhbz#2445195


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260507.g1afd4ed-1
changelog:
  - Install pesto, its SELinux policy, and the man page from the spec file
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_01_20.386b5f5..2026_05_07.1afd4ed


author: Sam Feifer <sfeifer@redhat.com> - 7.0.2-2
changelog:
  - Update selinux policy to fix pmda-hdb selinux issue
  - Patch pmda-hdb to fail gracefully when connection fails


author: Paul Howarth <paul@city-fan.org> - 1.3.15-1
changelog:
  - Update to 1.3.15
    - Improve Redis driver performance
    - Implement searchOn/deleteIfLowerThan into Redis
    - Prefer Redis::Fast


author: Paul Howarth <paul@city-fan.org> - 1.3.19-1
changelog:
  - Update to 1.3.19 (rhbz#2477392)
    - Apache::Session::Generate::SHA256 used a low-entropy seed (time, PID, rand,
      stringified hash ref) to derive session identifiers; use Crypt::URandom to
      generate session ids from a cryptographically secure source, falling back
      to the previous hashing method only if Crypt::URandom is unavailable
      (CVE-2026-8503, similar in scope to CVE-2025-40931 and CVE-2025-40932)
    - Fix Redis indexes: never cleaned before
    - Improve resilience and reliability of Patroni driver


author: Paul Howarth <paul@city-fan.org> - 2.150011-1
changelog:
  - Update to 2.150011 (rhbz#2432163)
    - Improved example of testing a minimum prerequisite version of a module
    - Remove some code meant to handle running on pre-v5.8 perl, even though v5.8
      was already a requirement
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.150012-1
changelog:
  - Update to 2.150012 (rhbz#2432714)
    - Distribution metadata update
  - Add workaround for test issues with CPAN::Meta::Requirements ≥ 2.144
    https://github.com/Perl-Toolchain-Gang/CPAN-Meta/issues/145


author: Paul Howarth <paul@city-fan.org> - 2.150013-1
changelog:
  - Update to 2.150013 (rhbz#2441425)
    - Fix an incompatibility with newer CPAN::Meta::Requirements (GH#145, GH#147)
  - Drop obsoletion of perl-Parse-CPAN-Meta introduced in 2016


author: Paul Howarth <paul@city-fan.org> - 0.48-1
changelog:
  - Update to 0.48
    - Performance: Optimize hot paths in Clone.xs
    - Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings
    - Fix: Don't require MGf_DUP flag for ext magic duplication
    - Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
    - Fix t/10-deep_recursion.t for Windows
    - Fix C89 declaration-after-statement violations in Clone.xs
    - Fix deep recursion stack overflow on Windows
    - Fix cloning of Math::BigInt::GMP objects (GH#16)
    - Fix cloning of threads::shared data structures (GH#18)
    - Add thread safety test for Class::DBI-like patterns (GH#14)
    - Add comprehensive documentation with examples and limitations
    - Improve README.md structure and installation instructions
    - Add DBI + DBD::SQLite as recommended test dependencies
    - Fix weakened reference cloning via deferred weakening (GH#15)
    - Fix memory leak when cloning non-existent hash values (GH#42)
    - Fix segfault when cloning DBI database handles (GH#27)
    - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)
    - Replace static recursion_depth with stack parameter
    - Fix C++ style comments in Clone.xs for C89 portability
    - Fix memory leak in Clone.xs (GH#42)
    - Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 aka CPAN RT#97525)
    - Rename tests with more readable names
    - Remove TODO from CoW test
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.219-1
changelog:
  - Update to 2.219
    - Add PERL_UNUSED_DECL for trace to silence clang warning
    - Fix indentation in Lzma.xs that triggers a clang warning
    - Remove vestigial references to Pod::Markdown (GH#14)
    - Fix POD typo
    - Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK
      (GH#16)
    - Remove unused constants (GH#17)
    - Documentation improvements (GH#15)


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - New maintainer
    - This release resolves CVE-2011-3599
    - Added a statement to recommend against using DSA
    - Fixed a few long standing bugs
    - The build process is moved to Dist::Zilla
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
    - This module is now marked as deprecated: Crypt-DSA-GMP is a possible
      replacement
    - Improve the call to IPC::Open3::open3
    - Replace two arg open (CVE-2026-8704)
    - Replace rand() (CVE-2026-8700)
    - Add a security policy
    - Add use warnings
    - Typo fix (CPAN RT#86424)


author: Paul Howarth <paul@city-fan.org> - 0.115-1
changelog:
  - Update to 0.115 (rhbz#2324463)
    - Cope with the user forgetting the first argument, generally "%c %o", to
      'describe_options', by assuming they meant that value exactly


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116 (rhbz#2335016)
    - Do not leave Getopt::Long configuration in an altered state after getting
      options


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117 (rhbz#2441109)
    - Add experimental generation of bash/zsh completion scripts for GLD-powered
      programs; this code might go away or change or break in the future, don't
      rely on it


author: Petr Pisar <ppisar@redhat.com> 1.20250203-1
changelog:
  - 1.20250203 version packaged
  - JavaScript and CSS files for dmarc_httpd removed because of no source code


author: Paul Howarth <paul@city-fan.org> - 2.033000-1
changelog:
  - Update to 2.033000
    - Remove backpan_directory option (GH#127)
  - Switch upstream source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 2.037000-1
changelog:
  - Update to 2.037000
    - Fix es_filter to merge into query (GH#132)
    - More ES 8 related fixes (GH#133)
    - Updated scripts in examples/ (GH#133)


author: Paul Howarth <paul@city-fan.org> - 2.039000-1
changelog:
  - Update to 2.039000
    - Add more types that can be scrolled (GH#134)
    - Fix 'all' fetching from CVE and example scripts (GH#135)


author: Paul Howarth <paul@city-fan.org> - 2.040000-1
changelog:
  - Update to 2.040000
    - Use a boolean in reverse_deps term (GH#136)
    - Allow JSON->true and JSON->false (GH#137)


author: Paul Howarth <paul@city-fan.org> - 0.63-1
changelog:
  - Update to 0.63
    - Remove the non-portable tests for Perl's "super" code points; testing
      values beyond 0x7FFF_FFFF isn’t necessary
    - Documentation typo corrections


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Unicode::UTF8 now allows noncharacters; they receive no special handling
      and are processed like any other code point
    - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
      (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
      reserved but should be allowed in interchange:
      https://www.unicode.org/versions/corrigendum9.html


author: Paul Howarth <paul@city-fan.org> - 0.65-1
changelog:
  - Update to 0.65
    - C99-compliant compiler is now required for Unicode::UTF8
    - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
      validation for non-ASCII input; this approach resulted in a 900% throughput
      improvement on English text and a 200% improvement on Swedish text compared
      with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Rewrote the UTF-8 validator using a shift-based DFA from
      https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
      up to 10x faster decoding compared with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.68-1
changelog:
  - Update to 0.68
    - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
      builds
    - Use Dist::Zilla for the distro
  - Package new LICENSE file
  - Drop hacks related to use of Module::Install, no longer needed


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Remi Collet <remi@remirepo.net> - 6.0.1-1
changelog:
  - update to 6.0.1
  - rename to php-phpdocumentor-reflection-docblock6
  - move to /usr/share/php/phpDocumentor/Reflection/DocBlock6
  - raise dependency on phpdocumentor/type-resolver 2.0
  - raise dependency on phpstan/phpdoc-parser 2.0


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-phpdocumentor-type-resolver1
  - move to /usr/share/php/phpDocumentor/Reflection/TypeResolver2


author: Remi Collet <remi@remirepo.net> - 14.0.0-1
changelog:
  - update to 14.0.0
  - raise dependency on sebastian/environment 9.1
  - add dependency on sebastian/git-state 1.0
  - rename to php-phpunit-php-code-coverage14
  - move to /usr/share/php/SebastianBergmann/CodeCoverage14


author: Remi Collet <remi@remirepo.net> - 4.0.0-1
changelog:
  - update to 4.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-cli-parser4
  - move to /usr/share/php/SebastianBergmann/CliParser4


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.4
  - raise dependency on sebastian/diff 8
  - raise dependency on sebastian/exporter 8
  - rename to php-sebastian-comparator8
  - move to /usr/share/php/SebastianBergmann/Comparator8


author: Remi Collet <remi@remirepo.net> - 8.1.0-1
changelog:
  - update to 8.1.0
  - open https://github.com/sebastianbergmann/comparator/pull/139
    raise dependency on sebastian/diff 8.1


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-diff7
  - move to /usr/share/php/SebastianBergmann/Diff7


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.4
  - rename to php-sebastian-diff8
  - move to /usr/share/php/SebastianBergmann/Diff8


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-environment8
  - move to /usr/share/php/SebastianBergmann/Environment8


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-webmozart-assert2
  - install in /usr/share/php/Webmozart/Assert2
  - raise dependency on PHP 8.2


author: Remi Collet <remi@remirepo.net> - 3.2.2-1
changelog:
  - update to 3.2.2
  - re-license spec file to CECILL-2.1
  - raise dependency on php 7.2
  - switch to phpunit11


author: Remi Collet <remi@remirepo.net> - 11.5.51-1
changelog:
  - update to 11.5.51
  - raise dependency on phpunit/php-file-iterator 5.1.1
  - re-add dependency on sebastian/recursion-context 6.0.3


author: Remi Collet <remi@remirepo.net> - 12.5.19-1
changelog:
  - update to 12.5.19
  - raise dependency on phpunit/php-code-coverage 12.5.5
  - raise dependency on sebastian/comparator 7.1.5


author: Remi Collet <remi@remirepo.net> - 12.5.21-1
changelog:
  - update to 12.5.21
  - raise dependency on phpunit/php-code-coverage 12.5.6
  - raise dependency on sebastian/environment 8.1.0


author: Remi Collet <remi@remirepo.net> - 13.1.1-1
changelog:
  - update to 13.1.1
  - raise dependency on sebastian/comparator 8.1
  - raise dependency on sebastian/diff 8.1
  - raise dependency on sebastian/environment 9.2
  - raise dependency on phpunit/php-code-coverage 14.0.0
  - add dependency on sebastian/git-state 1.0


author: Remi Collet <remi@remirepo.net> - 13.1.3-1
changelog:
  - update to 13.1.3
  - raise dependency on phpunit/php-code-coverage 14.1.1
  - raise dependency on sebastian/comparator 8.1.1
  - raise dependency on sebastian/exporter 8.0.1


author: Remi Collet <remi@remirepo.net> - 13.1.5-1
changelog:
  - update to 13.1.5
  - raise dependency on phpunit/php-code-coverage 14.1.2
  - raise dependency on sebastian/environment 9.3.0
  - raise dependency on sebastian/exporter 8.0.2


author: Remi Collet <remi@remirepo.net> - 13.1.10-1
changelog:
  - update to 13.1.10
  - raise dependency on sebastian/comparator 8.1.3
  - raise dependency on sebastian/diff 8.3


author: Adam Williamson <awilliam@redhat.com> - 6.6.4-3
changelog:
  - Backport MR #99 to fix launcher icon when selecting dark mode
  - Backport MR #100 to maybe fix strange behavior in wifi page


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.3-1
changelog:
  - New version
    Resolves: rhbz#2379297
  - Updated cyrus-imapd comment in config to point to the correct location
    Related: RHEL-63089


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.5-1
changelog:
  - New version
    Resolves: rhbz#2406450
  - Changed protocol for downloading sources from FTP to HTTP (HTTPS isn't supported)


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.10.7-3
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-128018


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.0-1
changelog:
  - Update to 4.7.0 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-0.html
  - Add sysusers.d config file to allow rpm to create users/groups automatically.
  - Modernise spec file


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.1-1
changelog:
  - Update to 4.7.1 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-1.html


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Petr Khartskhaev <pkhartsk@redhat.com> - 2.3.0-2
changelog:
  - Added a tmt test to run upstream's installcheck and specified
    instructions for manual testing in README


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-9
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Fixes for C23 compatibility
  - Update mod_vroot to 0.9.12
    - Implement a realpath(3) callback for the FSIO API, for better
      interoperability of other modules when mod_vroot is in effect


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-3
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866
  - Add explicit BR: libxcrypt-devel


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-1
changelog:
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)


author: Paul Howarth <paul@city-fan.org> - 1.3.9-1
changelog:
  - Update to 1.3.9 (see RELEASE_NOTES for details)
  - Update mod_proxy to 0.9.5
    - Implemented new IgnoreForeignAddress ProxyOption
    - Fixed passive data transfers to backend IPv4 address when IPv6 support is
      enabled


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-1
changelog:
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Tom spot Callaway <spotaws@amazon.com> - 2.9.4-2
changelog:
  - only run the tests on architectures where this app is likely to be
    actually used, due to itenerant failures on the other architectures


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-5
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/fixes_boost.patch.


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-6
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/boost-1.89.patch.


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.3-1
changelog:
  - Recognize wsl2 images produced by koji (lsedlar)
  - Specify data_files with relative paths (lsedlar)
  - Crossreference `koji_cache` from the Koji cache page (ahills)
  - Add documentation for `koji_cache` configuration (ahills)
  - Record exceptions for top level OTel span (lsedlar)
  - Update spec to match current python packaging guidelines


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.0-1
changelog:
  - Add more tracing to kojiwrapper (lsedlar)
  - phases: implement image-builder (supakeen)
  - Add a tracing span around call to skopeo inspect (lsedlar)
  - Add retries to skopeo inspect calls (lsedlar)
  - otel: Explicitly initialize telemetry provider and tracer (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.1-1
changelog:
  - osbuild: Handle wsl2 images (lsedlar)
  - repoclosure: Clean up cache for dnf5 (lsedlar)
  - Ignore errors for rmtree after archive extraction (dhodovsk)
  - imagebuilder: accept `manifest_type` (supakeen)
  - Add a telemetry span over image building threads (lsedlar)
  - Add specific exception for skopeo copy (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.13.0-1
changelog:
  - phase/kiwi, phase/image-builder: xorrisofs (cmdr)
  - phase/kiwi, phase/image-builder: iso fields (cmdr)
  - imagebuilder,kiwibuild: fix failable wildcard arch expansion (lsedlar)
  - Improve Koji task ID discovery and logging (awilliam)
  - phases/buildinstall: remove unused non-lorax paths (awilliam)
  - Correct ostree_installer phase name in log messages (awilliam)
  - phase/imagebuilder: failable arches fix (cmdr)
  - Move image sanity checks from test phase to image-generating phases (lsedlar)
  - Update phase diagram (lsedlar)
  - Remove OSBS and ImageContainer phases (awilliam)
  - Drop size check for ISOs (lsedlar)
  - Support list of URLs for rpm_repo_mapping (hlin)
  - docs: modernize Sphinx conf.py (hlin)
  - kiwi: also include subvariant in failure logging (awilliam)
  - kiwi: include image profile in global logs and watch-task filenames
    (awilliam)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.81-1
changelog:
  - New version
    Resolves: rhbz#2275179
  - Fixed vulnerability allowing recovery of NIST P-521 private keys
    Resolves: CVE-2024-31497


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.1.0-1
changelog:
  - Update to v25.1.0
  - Attempting using any methods that mutate an OpenSSL.SSL.Context after it
    has been used to create an OpenSSL.SSL.Connection will emit a warning. In
    a future release, this will raise an exception.


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.3.0-1
changelog:
  - Update to 25.3.0
  - pyOpenSSL now sets SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER on connections by
    default, matching CPython’s behavior.
  - Added OpenSSL.SSL.Context.clear_mode.
  - Added OpenSSL.SSL.Context.set_tls13_ciphersuites to set the allowed TLS
    1.3 ciphers.
  - Added OpenSSL.SSL.Connection.set_info_callback


author: Jeremy Cline <jeremycline@microsoft.com> - 26.0.0-1
changelog:
  - Update to v26.0.0
  - Added support for using aws-lc instead of OpenSSL.
  - Properly raise an error if a DTLS cookie callback returned a cookie
    longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a
    buffer-overflow. Credit to dark_haxor for reporting the issue.
    CVE-2026-27459
  - Added OpenSSL.SSL.Connection.get_group_name to determine which group name
    was negotiated.
  - Context.set_tlsext_servername_callback now handles exceptions raised in
    the callback by calling sys.excepthook and returning a fatal TLS alert.
    Previously, exceptions were silently swallowed and the handshake would
    proceed as if the callback had succeeded. Credit to Leury Castillo for
    reporting this issue. CVE-2026-27448


author: Brian C. Lane <bcl@redhat.com> - 3.65-1
changelog:
  - workflows: Add python 3.14 to the test matrix (bcl)
  - Add support for RDP (jkonecny)
  - Deprecate VNC (jkonecny)
  - docs: Fix chapter numbering after adding certificate (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.66-1
changelog:
  - workflows: Use py3.14 beta.4 (bcl)
  - pylint: Ignore files in .git (bcl)
  - pyproject: Bump setuptools to 77 or later (bcl)
  - Makefile: Stop running setup.py directly (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.67-1
changelog:
  - spec: Add python3-pytest to BuildRequires (bcl)
  - tests: Use pytest module instead of unittest (bcl)
  - workflows: Use py3.14 rc.1 (bcl)
  - Add Fedora 44 support (bcl)
  - spec: drop python3-build dependency (yselkowi)


author: Brian C. Lane <bcl@redhat.com> - 3.68-1
changelog:
  - rhsm: Add Flatpak registry option for RHEL10 (bciconel)
  - commands: bootc: remove 'experimental' warning (k.koukiou)


author: Brian C. Lane <bcl@redhat.com> - 3.69-1
changelog:
  - Makefile: Drop coverage-report.log (bcl)
  - Add Fedora 45 support (bcl)
  - tests: Use pytest-cov to support coverage of parallel tests from pytest-xdist (bcl)
  - workflows: Use latest released py3.14 and py3.12 (bcl)
  - test: Use pytest-xdist to run tests in parallel (bcl)
  - tests: Use ThreadingHTTPServer and threads for load and include tests (bcl)
  - tests: Mark helper classes as not tests (bcl)
  - bootc: Add bootc command to the RHEL10 handler (bcl)
  - rdp: Add rdp support to the RHEL10 handler (bcl)
  - raid: Update RHEL10 handler to match rhel10-branch (bcl)
  - Fix handling filesystem labels with spaces (marmarek)


author: Miro Hrončok <mhroncok@redhat.com> - 1.19.0-1
changelog:
  - Add -d option for %pyproject_buildrequires and %pyproject_wheel to specify a working directory
  - Fixes: rhbz#2371389


author: Charalampos Stratakis <cstratak@redhat.com> - 1.20.0-1
changelog:
  - Add %pyproject_patch_dependency macro for overriding dependency constraints
  - Overrides apply to both BuildRequires and runtime Requires (via METADATA patching)
  - Resolves: rhbz#2386906


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.20.1-1
changelog:
  - Move %pyproject_patch_dependency implementation to pyproject-srpm-macros
  - Make pyproject-rpm-macros depend on pyproject-srpm-macros
  - Resolves: rhbz#2463187


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.21.0-1
changelog:
  - Implement extras validation
  - %pyproject_buildrequires: validates if extras exist in upstream metadata, otherwise ValueError is raised on Fedora >=45 and RHEL >=11. It will emit a warning instead on older releases.
  - Both user-specified extras and metadata extras are normalized following PEP 685 conventions.


author: Miro Hrončok <mhroncok@redhat.com> - 1.22.0-1
changelog:
  - Add long option support for all public parametric macros
  - E.g. %pyproject_buildrequires --no-runtime is equivalent to %pyproject_buildrequires -R
  - %pyproject_save_files: Allow to use --auto instead of +auto
  - %pyproject_patch_dependency: Validate arguments early, in %prep


author: Miro Hrončok <mhroncok@redhat.com> - 1.22.2-1
changelog:
  - %pyproject_buildrequires: Fix "Requirement satisfied/not satisfied" messages to show overridden constraints from %pyproject_patch_dependency
  - %pyproject_buildrequires: Stop using deprecated argparse.FileType


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-2
changelog:
  - Security fixes for CVE-2025-47273, CVE-2024-47081 and CVE-2025-50181
  - Fixes: rhbz#2367430, rhbz#2372476, rhbz#2373817


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-11
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431977


author: Miro Hrončok <miro@hroncok.cz> - 7.3.19-1
changelog:
  - Fork pypy3.11 from pypy3.10
  - Make this the main pypy3 on Fedora 42+
  - Obsolete the removed pypy3.9 packages


author: Jerry James <loganjerry@gmail.com> - 1.19.1-4
changelog:
  - Update various npm components used in the build
  - Fix CVE-2025-69873: update ajv to 6.15.0/8.20.0
  - Fix CVE-2026-0540 and CVE-2026-41240: update DOMPurify to 3.4.2
  - Fix CVE-2026-3449: update @tootallnate/once to 3.0.1
  - Fix CVE-2026-4800: update lodash to 4.18.1
  - Fix CVE-2026-6321: update fast-uri to 3.1.2


author: Michel Lind <salimma@fedoraproject.org> - 4.12.0-1
changelog:
  - Update to 4.12.0 upstream release
  - Resolves: rhbz#2344661
  - Enable Packit
  - License audit: fix the old Callaway license to BSD-3-Clause


author: Miro Hrončok <mhroncok@redhat.com> - 3.14-8
changelog:
  - %python_extras_subpkg: Add -v option to specify the required version(-release)
  - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package)


author: Miro Hrončok <mhroncok@redhat.com> - 3.14-9
changelog:
  - %python_extras_subpkg: Only %ghost the egg-info/dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors


author: Miro Hrončok <mhroncok@redhat.com> - 3.14-11
changelog:
  - %python_wheel_inject_sbom: Add more metadata to the SBOM
  - %python_wheel_inject_sbom: Rename the SBOM file to limit the possibility of clashes


author: Miro Hrončok <mhroncok@redhat.com> - 3.14-12
changelog:
  - %python_wheel_inject_sbom: Hardcode the purl of this tool instead of constructing it at runtime
  - %py3_build, %py3_install, etc.: Bump the Fedora version in the deprecation message


author: Michel Lind <salimma@fedoraproject.org> - 2.8.5-1
changelog:
  - Update to 2.8.5 upstream release
  - Resolves: rhbz#2413751
  - Run tests with verbose output
  - Enable Packit


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 1.1.0~b1-2
changelog:
  - Apply suggested changes from package review
  - Add -l to the %pyproject_save_files macro to enforce the license is
    installed
  - Drop the note about Python 3.8 from the description


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.10-1
changelog:
  - Update to 0.1.10 (close RHBZ#2435502)
  - Starting in Fedora 44, drop the PDF manual and the -doc subpackage


author: Miro Hrončok <miro@hroncok.cz> - 2024.08.30-4
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337319


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.0-1
changelog:
  - Update to 6.0.0
  - Switch from PyPI sdist to GitHub archive as basis for filtered source
    archive, since the PyPI sdist now contains pre-generated HTML docs and is
    harder to audit


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 46.0.3-1
changelog:
  - Update to v46.0.3
  - Removed the deprecated get_attribute_for_oid method on
    CertificateSigningRequest. Users should use get_attribute_for_oid()
    instead.
  - Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the
    cipher module. These are still available in Decrepit cryptography.
  - In X.509, when performing a PSS signature with a SHA-3 hash, it is now
    encoded with the official NIST SHA3 OID.
  - Added support for free-threaded Python 3.14.


author: Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1
changelog:
  - Update to 46.0.7
  - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be
    passed to APIs that accept Python buffers, which could lead to buffer
    overflow. CVE-2026-39892


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Michel Lind <salimma@fedoraproject.org> - 6.0.5-1
changelog:
  - Update to version 6.0.5; Resolves RHBZ#2444118
  - Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
    requests via file upload limit bypass
  - Fixes CVE-2026-35192: Session fixation via public cached pages and
    SESSION_SAVE_EVERY_REQUEST
  - Fixes CVE-2026-6907: Potential exposure of private data due to incorrect
    handling of Vary: * in UpdateCacheMiddleware
  - Fixes CVE-2026-3902: ASGI header spoofing via underscore/hyphen
    conflation
  - Fixes CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
  - Fixes CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
  - Fixes CVE-2026-33033: Potential denial-of-service vulnerability in
    MultiPartParser via base64-encoded file upload
  - Fixes CVE-2026-33034: Potential denial-of-service vulnerability in ASGI
    requests via memory upload limit bypass
  - Fixes CVE-2026-25674: Potential incorrect permissions on newly created
    file system objects


author: Michel Lind <salimma@fedoraproject.org> - 6.0.0-1
changelog:
  - Update to 6.0.0 upstream release
  - Resolves: rhbz#1445556
  - Stop using deprecated macros; Resolves: rhbz#2377653
  - Drop old obsoletes, no longer needed
  - SPDX license audit; license is BSD-3-Clause
  - Run import checks; prepare to run unit tests


author: Michel Lind <salimma@fedoraproject.org> - 3.16.1-1
changelog:
  - Update to 3.16.1 upstream release
  - Resolves: rhbz#2386912
  - Enable Packit integration
  - Add import check


author: Michel Lind <salimma@fedoraproject.org> - 5.2.4-1
changelog:
  - Update to version 5.2.4
  - Skip test_strip_tags and test_parsing_errors on Python 3.14; Fixes:
    RHBZ#2374042


author: Michel Lind <salimma@fedoraproject.org> - 5.2.9-1
changelog:
  - Update to version 5.2.9
  - Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column
    aliases on PostgreSQL
  - Fixes CVE-2025-64460: Potential denial-of-service vulnerability in XML
    Deserializer
  - Fixes CVE-2025-64459: Potential SQL injection via _connector keyword
    argument (5.2.8)
  - Fixes CVE-2025-59681: Potential SQL injection in QuerySet.annotate(),
    alias(), aggregate(), and extra() on MySQL and MariaDB (5.2.7)
  - Fixes CVE-2025-59682: Potential partial directory-traversal via
    archive.extract() (5.2.7)
  - Fixes CVE-2025-57833: Potential SQL injection in FilteredRelation column
    aliases (5.2.6)


author: Michel Lind <salimma@fedoraproject.org> - 5.2.11-1
changelog:
  - Update to version 5.2.11; Resolves: RHBZ#2427483
  - `python-django5` is now the alternate `python3-django5` on Fedora 44+,
    `python3-django` is now Django 6.x
  - Fixes CVE-2025-13473: Username enumeration through timing difference in
    mod_wsgi authentication handler
  - Fixes CVE-2025-14550: Potential denial-of-service vulnerability via
    repeated headers when using ASGI
  - Fixes CVE-2026-1207: Potential SQL injection via raster lookups on
    PostGIS
  - Fixes CVE-2026-1285: Potential denial-of-service vulnerability in
    django.utils.text.Truncator HTML methods
  - Fixes CVE-2026-1287: Potential SQL injection in column aliases via
    control characters
  - Fixes CVE-2026-1312: Potential SQL injection via QuerySet.order_by and
    FilteredRelation
  - Fixed a bug in Django 5.2 where data exceeding max_length was silently
    truncated by QuerySet.bulk_create() on PostgreSQL
  - Fixed a bug where management command colorized help (introduced in Python
    3.14) ignored the --no-color option and the DJANGO_COLORS setting


author: Michel Lind <salimma@fedoraproject.org> - 5.2.14-1
changelog:
  - Update to version 5.2.14; Resolves RHBZ#2444117
  - Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
    requests via file upload limit bypass
  - Fixes CVE-2026-35192: Session fixation via public cached pages and
    SESSION_SAVE_EVERY_REQUEST
  - Fixes CVE-2026-6907: Potential exposure of private data due to incorrect
    handling of Vary: * in UpdateCacheMiddleware
  - Fixes CVE-2026-3902: ASGI header spoofing via underscore/hyphen
    conflation
  - Fixes CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
  - Fixes CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
  - Fixes CVE-2026-33033: Potential denial-of-service vulnerability in
    MultiPartParser via base64-encoded file upload
  - Fixes CVE-2026-33034: Potential denial-of-service vulnerability in ASGI
    requests via memory upload limit bypass
  - Fixes CVE-2026-25674: Potential incorrect permissions on newly created
    file system objects


author: Major Hayden <major@redhat.com> - 2.33.0-2
changelog:
  - ci: add Packit configuration for automated updates
  - Add pull_from_upstream job to open dist-git PRs on new releases


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.128.8-2
changelog:
  - Stop providing localized/translated Summary and description strings
  - Since upstream now uses AI for translations, there is too much churn for
    us to reliably track changes upstream.


author: Packit <hello@packit.dev> - 0.56.1-1
changelog:
  - We now use httpx when making requests from our Forgejo implementation. (#941)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.57.0-1
changelog:
  - We have fixed an issue with the new Forgejo version preventing ogr from working. (#949)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.58.0-1
changelog:
  - `PagureService` now accepts an optional `user_agent` argument to set a custom User-Agent header. (#953)
  - It is now possible to pass a `headers` argument in `PagureProject.get_file_content`. The default header is set to `Accept: text/plain`. (#954)
  - Resolves: rhbz#2420049


author: Packit <hello@packit.dev> - 0.59.0-1
changelog:
  - Improved handling of retries after errors to avoid hitting rate limits if possible. (#958)
  - `GithubPullRequest.labels` property is now cached for better performance and to be consistent with other services. (#960, #961)
  - Resolves: rhbz#2422233


author: Packit <hello@packit.dev> - 0.60.0-1
changelog:
  - A new method `get_rate_limit_remaining()` to check rate limit thresholds has been added to the service API. (#970)
  - Resolves: rhbz#2430818


author: Packit <hello@packit.dev> - 0.60.1-1
changelog:
  - The method `get_rate_limit_remaining()` now also supports repository-specific checks for GitHub. (#972)
  - Resolves: rhbz#2435481


author: Packit <hello@packit.dev> - 0.61.1-1
changelog:
  - Force downstream synchronization of upstream configuration to enable side tagging in EPEL 10.
  - Resolves: rhbz#2437993


author: Miro Hrončok <miro@hroncok.cz> - 7.0.0-8
changelog:
  - python3-psutil-tests: Add dependencies, don't package test_scripts
  - pytest is Recommended as it is optional but preferred
  - procps-ng is needed to run some tests


author: Michel Lind <salimma@fedoraproject.org> - 7.2.2-1
changelog:
  - Update to 7.2.2 upstream release
  - Resolves: rhbz#2396273
  - Refactor test runs
  - Drop the tests subpackage, removed in 7.2.0
  - Enforce that license file is shipped


author: Michel Lind <salimma@fedoraproject.org> - 0.3.2-2
changelog:
  - Disable update_readme_test, brings in additional dependency
  - Ship license text; update doc filenames


author: Michel Lind <salimma@fedoraproject.org> - 0.4.2-2
changelog:
  - Disable more unneeded test dependencies
  - Switch to using pytest directly so we can control verbosity easily


author: Michel Lind <salimma@fedoraproject.org> - 0.5.0-2
changelog:
  - Adjust patches for updated pyproject.toml
  - Adjust for upstream dropping tox.ini
  - Drop conditionals for old setuptools


author: Jerry James <loganjerry@gmail.com> - 0.9.1-6
changelog:
  - Remove old pep621 obsoletes
  - Use the pyproject declarative buildsystem
  - Fix building with the doc conditional
  - Remove redundant LICENSE installation
  - Minor spec file cleanups


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.10.0-9
changelog:
  - Modernize spec file and use pyproject macros
  - Replace %py3_check_import with %pyproject_check_import
  - Simplify package naming by using direct names instead of macros (i.e.
    srcname, slugname)
  - Remove manual file listings that are now handled by %pyproject_files
  - Add comment to specify the version for the existing patch to be deleted
  - Remove explicit runtime pytest dependency which is already handled via
    %pyproject_buildrequires macro


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.22-2
changelog:
  - No longer install “import multipart” compat shim
  - Drop Conflicts with and pre-F41 upgrade path for python3-multipart
  - All dependent packages now use “import python_multipart” rather than
    “import multipart”


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.30.0-9
changelog:
  - Unretirement request: pagure.io/releng/issue/12892 Revert "Retired: Fails
    to install: https://pagure.io/releng/issue/12871"


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Miro Hrončok <miro@hroncok.cz> - 2.32.4-2
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337320


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.0-1
changelog:
  - Create simple CLI tool to examine keycache in Python and refresh all entries in keycache
  - Verify Thread-safe + Unwritable Cache + Negative Cache
  - Revamp Sphinx documentation
  - Patch Enforcer to validate against multiple issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.6-1
changelog:
  - Fix SQL injection risk in KeyCache by using parameterized SQLite queries
  - Prevent sibling-path authorization bypass in Enforcer scope checks


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.7-1
changelog:
  - Remove legacy parent SciToken chaining behavior from token initialization and claim handling
  - Harden Enforcer scope path traversal validation (including encoded traversal checks)
  - Clean up documentation references to parent/chained SciTokens


author: Packit <hello@packit.dev> - 1.19.4-1
changelog:
  - Update to 1.19.4 upstream release
  - Resolves: rhbz#2374311
  - Remove upstream’s upper-bound on the version of python-packaging
  - Add bootstrap conditional to break new snakemake circular dep.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.0^20251001git4dd90dd-1
changelog:
  - Temporarily package a post-release snapshot
  - For compatibility with snakemake-interface-logger-plugins 2.0.0


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.23.0-1
changelog:
  - Update to 0.23.0 (close RHBZ#2438834)
  - Drop and Obsolete python3-typer-slim/python3-typer-cli subpackages


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.6.8-3
changelog:
  - Better generate test dependencies, skipping fewer tests
  - Add a conditional for the disabled pathops extra


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.15-46
changelog:
  - Add RPM Provides for python3.6-libs, python3.6-devel, python3.6-idle, python3.6-tkinter, python3.6-test


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Cristian Le <git@lecris.dev> - 7.5-1
changelog:
  - Update to 7.5 (rhbz#2093576,rhbz#2341257,rhbz#2350099)
  - Reworked most of the packaging
  - Use CMake build system
  - Use %forgemeta macros
  - Added devel packages
  - Debundled what could be debundled and commented on the rest


author: Peter Lemenkov <lemenkov@gmail.com> - 4.2.3-2
changelog:
  - Remove simplejson (use standard json module in Python 3)
  - Remove 7zip dependency (use zip instead)


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-5
changelog:
  - Major spec file overhaul for Fedora packaging compliance
  - Added compatibility wrapper for xdg import
  - Improved Qt resource and manpage generation logic
  - Refined file and symlink handling, .pth and compat modules
  - Cleaned up excludes, bytecode, and manual packaging


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-6
changelog:
  - Add xdg-wrapper.py and raysession_xdg_compat.py as packaged Sources
  - Reference those files using their Source4 and Source5 macros in the spec
  - Upload sources to distgit and adjust install logic to use Source macros


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-7
changelog:
  - Refactor install section: introduce DATADIR, PY_SITELIB, PY_LEGACY variables
  - Consolidate .pth and compat shim installation into loops
  - Clean up bytecode removal and DRY repeated paths
  - Fix rpmlint warnings and rebuild SRPM/RPM


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-9
changelog:
  - Improve resource handling: ensure Qt resources and fonts are
    correctly compiled/installed so icons and application fonts load
    at runtime (fix rcc detection and safe regeneration behavior).


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-5
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)
  - add a sshd helper to rescue, otherwise sshd does not start, PR 3510


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-7
changelog:
  - fix support for PowerNV machines without PPC PReP partitions (RHEL-134218)
  - fix duplicate execution of automated recovery (RHEL-110659)
  - fix sorting of stage scripts (RHEL-132181)
  - add support for dbus-broker (RHEL-134213)


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Richard W.M. Jones <rjones@redhat.com> - 6.17-4
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-9
changelog:
  - Update to the upstream v6.17 @ e8da3cdc
  - Handle new radiacode entropy source
  - Handle changes in jitterentropy library
  - Drop older i686 force-PIC fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Michel Lind <salimma@fedoraproject.org> - 0.20.0-5
changelog:
  - Bump termion dependency from 1 to 4 - Change default backend to crossterm
    - Drop ncurses and pancurses backends, ncurses-rs is archived


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Michel Lind <salimma@fedoraproject.org> - 0.5.2-4
changelog:
  - Unretire rust-outref as base64-simd needs it; Resolves: rhbz#2426767
  - Spec clean-up; use rust2rpm.toml and a diff file instead of modifying the
    spec directly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.0-2
changelog:
  - Expand dependency bounds downward rather than requiring old versions
  - Improve documentation for the metadata patch


author: Andreas Schneider <asn@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - https://github.com/z-galaxy/zlink/releases/tag/zlink-0.2.0
  - resolves: rhbz#2419337


author: Andreas Schneider <asn@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - https://github.com/z-galaxy/zlink/releases/tag/zlink-0.2.0
  - resolves: rhbz#2419341


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:2.37.0-2
changelog:
  - Properly generate Rust BuildRequires on Fedora
  - Update License (for s390utils/s390utils-base) to reflect Rust deps.


author: Dan Horák <dan[at]danny.cz> - 2:2.41.0-2
changelog:
  - rebuilt for rust-openssl CVEs
  - Resolves: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Zdenek Pytela <zpytela@redhat.com> - 42.20-1
changelog:
  - Support cockpit privileged access for the staff user
  - Update su_domain_type policy for kerberized su
  - Allow sshd-session inherit limits from its parent process
  - Allow systemd-machined read virtd process state
  - Allow kl2tpd create and use netlink_generic_socket
  - Update policy for redfish-finder
  - Label the greetd login manager framework as a display manager
  - Allow sshd-auth get attributes of sshd vsock socket
  - Confine redfish_finder - host api discovery service
  - Allow iptables read firewalld process state
  - Allow tuned_t use its private tmpfs files
  - The commit addresses the following AVC denials:


author: Zdenek Pytela <zpytela@redhat.com> - 42.21-1
changelog:
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  - Allow sshd-session read, write, and map ica tmpfs files
  - Allow aide get attributes of a filesystem with extended attributes
  - Set correct label for glycin fontconfig (bsc#1253682)
  - Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  - Logwatch zz-runtime uses uptime (bsc#1255862)
  - Add auth_login_pgm_signull interface (bsc#1255862)
  - Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  - Allow l2tpd_t access to netlink and sysfs
  - Label miscellaneous /dev/papr-* devices
  - Allow qemu-ga to skip authentication
  - Revert "Allow systemd-coredump signull containers"
  - Allow systemd-coredump signull containers
  - Allow virtqemud setattr dri devices
  - Allow irqbalance create and use netlink generic socket
  - Allow thumb_t connect to XDM over a unix domain stream socket
  - Allow systemd-homework to remove ~/.identity-blob
  - Revert "Allow kl2tpd create and use netlink_generic_socket"


author: Zdenek Pytela <zpytela@redhat.com> - 42.22-1
changelog:
  - Allow thumb_t stream connect to systemd-machined
  - Allow thumb_t stream connect to systemd-homed
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  - Allow sshd noatsecure on sshd-session execution
  - Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  - Allow kernel_t to read/write all domains' pipes
  - Allow domain read sysfs files
  - allow abrt_dump_oops to write to init sockets
  - Add insights_client service interfaces
  - Allow plasma login manager stop login services
  - Allow NM nvme dispatcher script start systemd services


author: Zdenek Pytela <zpytela@redhat.com> - 42.23-1
changelog:
  - Allow thumbnailer mount on fonts cache directories
  - Support confined users usage of bubblewrap
  - Allow vdagent get attributes of the pidfs filesystem
  - Allow sshd-session inherit limits from its parent sshd process
  - Revert "Allow sshd-session inherit limits from its parent process"
  - Allow sshd-session read network sysctls
  - Add the fs_write_tmpfs_files() interface
  - Update gpg policy for interactions with rhc-playbook-verifier
  - Allow rhc_playbook_verifier_t stream connect to itself
  - Update policy for rhc-worker-playbook
  - Allow sudodomain connect to gkeyringd over a unix stream socket
  - Allow tlshd communication to unconfined_t over a tcp socket
  - Allow tlshd write generic certificates
  - Allow thumbnailer connect to abrt over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.24-1
changelog:
  - Allow mdadm to use CAP_BPF during RAID monitoring
  - Allow rhsmcertd read anaconda run files
  - Allow rpc.mountd setuid and setgid capabilities
  - Use kernel_dgram_send() for systemd_notify_t
  - Allow lttng-sessiond to use sd_notify
  - Label /etc/aliases.cdb with etc_aliases_t
  - Add aliases.lmdb to mta_filetrans_named_content()
  - Update gpg_role() interface with unix_stream_socket permissions
  - Allow systemd-hostnamed to create its Varlink socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.25-1
changelog:
  - Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  - TLP uses ps aux to check for different services (bsc#1257527)
  - Introduce separate types for generic systemd generators.
  - Confine system generator nm-initrd-generator.sh (bsc#1257754)
  - Allow rtkit-daemon dbus chat with systemd-logind
  - ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  - Dontaudit tlshd write generic certificate dirs
  - Allow systemd-coredump the kill capability in the user namespace
  - Allow NetworkManager list bpf directories
  - Allow virtnodedevd the dac_read_search capability
  - Allow pkcsslotd read files in /proc and /sys
  - Allow pkcsslotd map its private tmpfs files
  - Allow dovecoth-auth to connect to systemd-logind over a unix socket
  - Allow tlshd write generic certificate dirs


author: Zdenek Pytela <zpytela@redhat.com> - 43.1-1
changelog:
  - Allow redis_t to create netlink_rdma_socket
  - Allow systemd create symlinks in /run/varlink/registry
  - Support hooks in /run/systemd/resolve.hook
  - Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  - Allow mdadm use modprobe (bsc#1257793)
  - Allow systemd-mountfsd the perfmon capability
  - Allow lttng tracing in default configuration
  - Allow rtkit-daemon write systemd inhibit pipes
  - Apply the systemd system generator template to the kdump-dep generator
  - Apply the systemd system generator template to the anaconda generator


author: Zdenek Pytela <zpytela@redhat.com> - 43.2-1
changelog:
  - Allow fedoratp_exec_t be an entrypoint of unconfined_t
  - Allow rasdaemon_t to list pstore (bsc#1259742)
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  - Allow virtqemud_t get priority of a svirt_t process
  - Allow sysadm user connect to lvm over a unix stream socket
  - Allow staff user delete thump_tmp_t files
  - Allow staff user connect to systemd-logind over a unix stream socket
  - Allow staff user mount /proc
  - Allow virtqemud map vhost net device
  - Dontaudit ps to read proc (bsc#1257527)
  - Allow dovecot_deliver_t map its private tmp files
  - Allow rpcbind get attributes of the pidfs filesystem
  - Fix names in mysql.if
  - Allow create kerberos files in mysql db home
  - Allow systemd-resolved connect to systemd-networkd over a unix stream socket


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-4
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-122982)
  - rescan-scsi-bus.sh: Replace 'which' with built in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix missing output fields in --export format (RHEL-119246)
  - sg_inq: re-add Unit serial number field (RHEL-119246)


author: Marcel Metz <me@marcel-metz.net> - 1.2-1
changelog:
  - Updated upstream: Project was moved to https://github.com/aklomp/shrinkpdf
  - New upstream release 1.2


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: Michel Lind <salimma@fedoraproject.org> - 2.5.2-4
changelog:
  - Fix FTBFS on releases with glibc >= 2.43; Resolves: rhbz#2435113
  - Drop compat conditionals for Fedora >= 42, 41 is EOL


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Drop upstreamed C23 patch
  - Add patch to properly detect the secure_getenv function
  - Figure the License fields out all over again
  - Rename swi-prolog-nox to swi-prolog-cli
  - Combine swi-prolog-x into swi-prolog-win


author: Jerry James <loganjerry@gmail.com> - 0-0.20.20230627gite6ac3af
changelog:
  - Switch to the cvc5 git branch
  - Drop all patches
  - Package is now header-only and therefore noarch


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Peter Czanik <peter@czanik.hu> - 4.10.2-1
changelog:
  - update to 4.10.2
  - disable SNMP support temporarily
  - remove patches made redundant by the version update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 259.4-1
changelog:
  - Version 259.4
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 3.4.2-2
changelog:
  - fix: regenerate with updated vendored crates (fixes rh#2438090,
    rh#2438156 rh#2444169, rh#2444179, rh#2444189)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.8.1-34
changelog:
  - Fix compilation with -Werror=incompatible-pointer-types
  - Switch wocky backend to gnutls which is already upstream default


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77598-3
changelog:
  - Update to svn77598
  - update tagpdf starray numspell moderncv latex-tagging-status latex-lab-dev jsonparse beamer-reveal amsaddr


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78352-4
changelog:
  - Update to svn78352
  - new packages: aliascnt, beamertheme-westlake, elegantbook, elegantnote,
                  elegantpaper, fixtounicode, fox-listings, memoize-ext,
                  metacapture, milestonetimeline, pyjupyter, realscripts,
                  simplex, spotxcolor, tokglobalstack, tokgroupmark, xstix2
  - lots of existing packages updated
  - fix Obsoletes on newcommand-doc (bz2447035)


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78824-5
changelog:
  - Update collection from svn78352 to svn78824
  - Add booktabstabular
  - Add clawxiv
  - Add cleveref-icelandic
  - Add dirtreex
  - Add infufrgs
  - Add ltmermaid
  - Add metaphor
  - Add simplesystemtex
  - Add smartnotes
  - Add styleitems
  - Add user-persona
  - Add zebra
  - Update 53 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78847-6
changelog:
  - Update collection from svn78824 to svn78847
  - Add lucide-admonitions
  - Update 24 components
  - Remove preview


author: Tom Callaway <spot@fedoraproject.org> - 12:20250308-99
changelog:
  - time to land this big bird in rawhide. hold on to your butts.
  - oh and we're also forcing -std=gnu++17. Thanks icu.

  - Historical notes from my TL2025 out-of-band changes are below
  - * Tue Oct 21 2025 Tom Callaway <spot@fedoraproject.org>
    - strip the scripts out of bibtexperllibs to avoid conflicts
  - * Fri Oct 17 2025 Tom Callaway <spot@fedoraproject.org>
    - fix typos in explicit perl module dependencies
  - * Tue Oct  7 2025 Tom Callaway <spot@fedoraproject.org>
    - update crossrefware to r76407 to fix typo which was causing invalid perl(IO::file) (should be IO::File) dependency
    - add Provides for texlive-xelatex-dev (we don't actually package this)
  - * Mon Sep 22 2025 Tom Callaway <spot@fedoraproject.org>
    - add more obsoletes, make the ms one more accurate
  - * Fri Sep 19 2025 Tom Callaway <spot@fedoraproject.org>
    - obsolete texlive-ms/ms-doc
  - * Thu Sep 18 2025 Tom Callaway <spot@fedoraproject.org>
    - bootstrap off
  - * Thu Sep 18 2025 Tom Callaway <spot@fedoraproject.org>
    - remove all Requires on old "tex-" names, we don't use those anymore
      and it was causing old packages to be pulled in
    - bootstrap still on
  - * Tue Sep 16 2025 Tom Callaway <spot@fedoraproject.org>
    - fix dep issue
  - * Wed Jun 11 2025 Tom Callaway <spot@fedoraproject.org>
    - TeXLive 2025


author: Tom Callaway <spot@fedoraproject.org> - 12:20250308-101
changelog:
  - update git-latexdiff to svn75878 (bz2435847)
  - fix texlive-git-latexdiff to be noarch package (it is just shell)


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Dominik Mierzejewski <dominik@greysector.net> 2.6.3-4
changelog:
  - enable long article number support
  - drop obsolete/redundant configure options
  - switch to package names in BuildRequires and sort alphabetically
  - use modern macros and drop __foo macro usage
  - more explicit file list to avoid duplicates
  - add missing files


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.5-2
changelog:
  - stop verifying PGP-2 source tarball signature, gnupg1 was retired
    and it is considered insecure anyway due to MD5 hash usage


author: Adam Williamson <awilliam@redhat.com> - 1:10.1.46-2
changelog:
  - Drop now-unnecessary version bounds in java requirements
  - Specify java-25-headless, not java-headless (#2398212)


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.6.0-4
changelog:
  - Modernize spec
  - Use libayatana-appindicator instead of libappindicator
  - Convert dependencies to pkgconfig syntax
  - Fix dependencies wrt git and pod2man
  - Convert license to SPDX
  - Implement desktop-file and appstream validations


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
      resolves: RHEL-79943
    - functions: make calc_isolated_cores return CPU ranges
      resolves: RHEL-75751
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
      resolves: RHEL-61801
    - realtime: Disable appropriate P-State drivers
      resolves: RHEL-85637
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
      resolves: RHEL-71304
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
      resolves: RHEL-101578
    - gui: fix the profile deleter script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.27.0-0.1.rc1
changelog:
  - new release
    - cpu-partitioning: autodetect dracut hook directory, systemd workaround
      resolves: RHEL-40619
    - openshift: optimize TCP settings for high throughput and low latency
    - profiles: Set boost=1 in *-performance profiles
    - sap-hana: force latency to 70 us, not to C-states
      resolves: RHEL-142285
    - man: fixed instance_acquire_devices example in tuned-adm man
      resolves: RHEL-90575
    - spec: use correct python interpreter for documentation installation
    - sysctl: add reapply_sysctl_exclude option
    - ppd: ask tuned recommend for base profile


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Remi Collet <remi@fedoraproject.org> - 8.1.4-1
changelog:
  - Valkey 8.1.4 - Released Fri 09 October 2025
  - Upgrade urgency SECURITY:
    CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689


author: Remi Collet <remi@remirepo.net> - 9.0.2-1
changelog:
  - Valkey 9.0.2 - February 3, 2026
  - Upgrade urgency HIGH: There are critical bugs that may affect a subset of users.


author: Martin Gansser <martinkg@fedoraproject.org> - 0.9.0-0.1.beta1
changelog:
  - Update to 0.9.0-0.1.beta1
  - Add python3dist(setuptools-gettext)
  - Fixed icon installation
  - Fixed desktop validation
  - Fixed setuptools discovery warnings


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Add vdr-2.7.9-remove-leftover-path.diff
  - Add vdr-2.7.9-last-replayed-per-folder-05.diff


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.18.0-1
changelog:
  - Update to 8.18.0
  - Resolves: rhbz#2423186
  - Build against LibRaw
  - Switch from spng to libpng (preferred upstream)
  - Disable new uhdr feature (lack of libuhdr)


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.0-1
changelog:
  - Toggle ADB secure mode by default
    + ADB will no longer auto-connect on session start
    + You may use the new waydroid adb connect command to connect ADB
    + To connect ADB, you will need to provide authorization on the Android side
  - Rotate and trim waydroid.log file at 5MB
  - Hide system apps from the desktop applications menu
    + To make a system app visible in your apps menu, switch NoDisplay=false in its desktop file
  - Do not hide the main Waydroid launcher after enabling multi-windows mode
  - Add desktop action to stop Waydroid session
    + Right-click the Waydroid entry in your desktop application launcher, then Stop Waydroid
  - Add desktop action to re-initialize Waydroid
    + Right-click the Waydroid entry in your desktop application launcher, then Initialize Waydroid
    + This allows switching between VANILLA and GAPPS
  - Make sure to stop waydroid session on user log-out
  - Add new waydroid command with no arguments, alias for waydroid show-full-ui
  - Add new waydroid bugreport command to gather logs for a bug report
  - Forward Android notifications to the desktop
    + Requires updating the Android system image to a compatible version


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.1-1
changelog:
  - Fix graphical initialization with Python 3.14 and newer (rhbz#2425593)
  - Allow using block device as pre-installed image files


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.2-1
changelog:
  - Attempt to further fix initialization with Python 3.14
  - Fix desktop file update logic for headless apps
  - Add Vulkan support for xe kernel driver
  - Allow passing arguments to "waydroid logcat"


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
    - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    (49699333+dependabot[bot]) - test: iot-qcow2-image does not support
    packages (bcl) - test: qcow2 renamed to server-qcow2 (bcl) - build(deps):
    bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 4 to
    5 (49699333+dependabot[bot]) - tests: Use current host arch in info and
    list tests (bcl)


author: Brian C. Lane <bcl@redhat.com> - 36.2-1
changelog:
  - * Tue Apr 28 2026 Brian C. Lane <bcl@redhat.com> - 36.2-1 - New release:
    36.2 (bcl) - maint: Ran ./tools/prepare-source.sh (bcl) - composer-cli:
    Use new FilterCompose helper for status command (bcl) - composer-cli: Use
    new FilterCompose helper for the list command (bcl) - weldr: Add
    FilterComposes helper function (bcl) - cloud: Add FilterComposes helper
    function (bcl) - workflows: Pin govulncheck at v1.1.4 for use with go
    1.24 (bcl) - Add missing Obsoletes and Provides (bcl) - Add codeowners as
    per security audit (mcorr) - Makefile: Update rpm building to use vendor
    archive (bcl) - spec: Update to use the go-vendor-tools and macros (bcl)
    - ci: modernize golanci-lint GHA (lzap+git) - deps: update to Go 1.24
    (lzap+git) - build(deps): bump github.com/BurntSushi/toml from 1.5.0 to
    1.6.0 (49699333+dependabot[bot]) - build(deps): bump
    github.com/spf13/cobra from 1.10.1 to 1.10.2 (49699333+dependabot[bot]) -
    build(deps): bump actions/checkout from 5 to 6 (49699333+dependabot[bot])


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 1:1.0.4-1
changelog:
  - Update to 1.0.4 release
  - Add Epoch because the 1.1 release from git was 1.0.1
  - Add Debian patch to port to GTK3


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-1
changelog:
  - update to xen 4.21.0
    rebase mini-os
    use .xz xen tarball instead of .gz
    fix quotes around sed command
    update libxenstore version
    package libxenmanage and xen-watchdog-sleep.sh files
    add a new package for test files
    renumber patches
    use json-c instead of yajl
  - fix bug in xen code when using json-c
  - fix code issues detected by gcc16


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-5
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.1-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
  	[XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.45-1
changelog:
  - xkeyboard-config 2.45
    xkeyboard-config changed from /usr/share/X11/xkb to /usr/share/xkeyboard-config-2/,
    with the same contents and the old location symlinked to the new one.
    Add a pretrans script to move the old location to the new one to stick with the
    upstream packaging approach.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Maxwell G <maxwell@gtmx.me> - 2025.12.08-2
changelog:
  - Exclude optional yt-dlp-ejs dependency. Users need to handle it manually.
  - https://github.com/yt-dlp/yt-dlp/wiki/EJS
  - Remove python -s shebang flag so users can install yt-dlp-ejs or other
    optional deps or plugins using pip


author: Maxwell G <maxwell@gtmx.me> - 2026.02.21-1
changelog:
  - Update to 2026.02.21. Fixes rhbz#2441709.
  - Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


