# changelog

author: Jos de Kloe <josdekloe@gmail.com> 2.38.1-1
changelog:
  - move to upstream release 2.38.1
    Note that upstream numbering scheme has changed so 1.7.1 jumped to 2.37.0


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.115.10-3
changelog:
  - Fix boostrapping
  - Break the circular dep. with python-sqlmodel
  - Don’t run test_fastapi_cli when bootstrapping


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.115.10-4
changelog:
  - Improve conditionalized build dependencies
  - Make sure they work as advertised, together or separately
  - Add conditionals for some things that are missing in EPEL10 so we can
    more easily see what would be required to branch there; however, nobody
    has yet requested this package in EPEL10, we have no concrete plans to
    branch it there, and we still lack some hard dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.8-2
changelog:
  - Drop manual BuildRequires on scikit-image
  - Remove the scikit_image_tests build conditional, as it no longer works
  - Re-enable some still-disabled scikit-image tests in Fedora 42


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Danny Colin <contact@dannycolin.com> - 0.32.0-1
changelog:
  - New upstream release (0.32.0)
  - Recommend python3-dbus-fast which replace python3-dbus-next
  - Add xterm as a build requirement for the test suite
  - Add python3-pywlroots as a build requirement for the Wayland package


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 1.0.7-3
changelog:
  - fix: ignore batchtools import
  - this requires packaging batchtk which netpyne upstream seems to have
    bundled into netpyne post release


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.18-3
changelog:
  - Revert "Fix automatic provides on Python extension due to SONAME"
  - The fix is in rust-1.81.0-4 and later, which is now in all stable
    branches, so this workaround is no longer necessary.


author: Packit <hello@packit.dev> - 0.50.2-1
changelog:
  - There is a new method for getting a single commit comment, supporting also retrieval and adding reactions in GitHub. (#865)
  - Resolves: rhbz#2321974


author: Packit <hello@packit.dev> - 0.50.3-1
changelog:
  - We have improved wrapping of the forge-specific exceptions, string representation of the original exception is now included. (#884)
  - The test suite for parsing git URLs has been extended and also the handling of GitHub repository with changed owner or name has been improved. (#874)


author: Packit <hello@packit.dev> - 0.54.0-1
changelog:
  - Support for Forgejo pull requests has been added. (#925)
  - We have added support for Forgejo methods related to permissions. (#918)
  - Resolves: rhbz#2365296


author: Packit <hello@packit.dev> - 0.56.0-1
changelog:
  - Tmt documentation has been extended. (#937)
  - Support for forgejo commit statuses has been added. (#936)
  - The package ogr/abstract has been split into multiple files. (#935)
  - Resolves: rhbz#2389723


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


author: Vojtech Trefny <vtrefny@redhat.com> - 0.25-1
changelog:
  - Remove unneeded IAstroidChecker (bcl)
  - Replace check_messages decorator with only_required_for_messages (bcl)
  - spec: Change license string to the SPDX format required by Fedora (vtrefny)


author: Michel Lind <salimma@fedoraproject.org> - 0.2.6-1
changelog:
  - Update to 0.2.6 upstream release
  - Drop unneeded extra sources and backported patches
  - Resolves: rhbz#2386020


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.10.4-2
changelog:
  - Add build conditionals for several extras
  - This allows branching to EPEL10 without some optional dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.8.1-3
changelog:
  - While testing, do not error on warnings
  - Backport fixes for deprecation warnings, etc. with Pydantic 2.11


author: Christian Krause <chkr@fedoraproject.org> - 3.6.9-1
changelog:
  - Update to 3.6.9 (#2267692)
  - Remove example client and server (upstream split the source package)
  - Remove according weak requirements for example tools


author: Christian Krause <chkr@fedoraproject.org> - 7.1.21-1
changelog:
  - Bump to latest upstream 7.1.21
  - Checked license and set to the official SPDX identifier
  - Convert license tag in pyproject.toml to old format in order
    to be compatible with flit_core


author: Peter Bieringer <pb@bieringer.de> - 3.5.2-1
changelog:
  - Add support for optional environment file /etc/sysconfig/radicale
  - Package template for /etc/sysconfig/radicale
  - Update to 3.5.2


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.1-13
changelog:
  - Simplify and reformat the spec file
  - Deconditionalize the tests
  - Stop using the “forge macros,” which don’t contribute much here


author: Ondřej Nosek <onosek@redhat.com> - 1.67-5
changelog:
  - Patch: `chain-build`: correct the info message
  - Patch: Fix regular expression for parsing Source lines
  - Patch: Add draft builds support


author: Ondřej Nosek <onosek@redhat.com> - 1.68-1
changelog:
  - Restrict Git index version to what GitPython supports (otto.liljalaakso)
  - `set-pagure-token`: config - more restrictive permissions (git)
  - `pre-push-check`: show spectool command output - #732 (onosek)
  - `prep`: added an argument to check dependencies - 585 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - Fix formatting for error when mockbuild sources fails (otto.liljalaakso)
  - `clog` is duplicating changelog lines - 581 (onosek)
  - Fixing unittests for py36 (onosek)
  - `chain-build`: correct the info message - 567 (onosek)
  - Fix regular expression for parsing Source lines - #721 (onosek)
  - Add draft builds support (onosek)
  - Fixing encoding of the url when checking lookaside (onosek)
  - Fix package in Pypi (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Nils Philippsen <nils@redhat.com> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Update license
  - Make using click, pygit2, rpm Python packages optional and enable
    fallbacks


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.1-1
changelog:
  - Update to version 0.6.1; Fixes RHBZ#2386831
  - Automate patching the path-based safetensors crate dependency
  - A patch fixing several failing tests has been merged upstream


author: Steve Traylen <steve.traylen@cern.ch> - 1.3.2-1
changelog:
  - Update to version 1.3.2
  - Run tests with tox
  - Use rpmautospec changelog
  - Use forgeurl to get tox.ini file
  - Use more conventional pypi_macro for name
  - Use pyproject_macros
  - Mark license file as license


author: Benjamin A. Beasley <code@musicinmybrain.net> - 7.1.0-13
changelog:
  - Temporarily disable “all” and “gcs” extras
  - Works around broken python-google-cloud-storage due to protobuf on Python
    3.14; fixes RHBZ#2372125


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Jerry James <loganjerry@gmail.com> - 2.3.4-1
changelog:
  - Version 2.3.4
  - Drop upstreamed format patch
  - Add patch to adapt to minisat using macros instead of variables
  - Add BuildRequires: gmp-devel


author: Jerry James <loganjerry@gmail.com> - 1.13.0-1
changelog:
  - Version 1.13.0
  - Drop unnecessary circuitplot patch
  - Drop upstreamed incompatible-pointer patch
  - Link duplicate documentation files
  - Run tests on all architectures


author: Jerry James <loganjerry@gmail.com> - 1.14.0-1
changelog:
  - Version 1.14.0
  - Drop upstreamed tempfile flush patch
  - Add patch to avoid intersphinx_registry
  - Drop workaround for buggy lark on ppc64le
  - Drop examples subpackage


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.15.4-4
changelog:
  - Remove Conflicts with erlang-dialyzer
  - Since erlang-26.2.5.13-2, python3-typer-cli no longer conflicts with
    erlang-dialyzer; we keep the Conflicts for older versions.


author: Jan Staněk <jstanek@redhat.com> - 2.5.3-4
changelog:
  - Modernize packaging
  - Use current %pyproject... macros
  - Utilize %generate_buildrequires
  - Do not rely on deprecated setup.py test command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.5.0-4
changelog:
  - Update to 3.5.0 (close RHBZ#2361673)
  - Report and skip brittle integration tests failing with current fonttools;
    fixes RHBZ#2372184


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.11-2
changelog:
  - Rebuilt with rust-tracing-subscriber-0.3.20
  - Fixes CVE-2025-58160: fixes RHBZ#2392055, fixes RHBZ#2392012, fixes
    RHBZ#2391975


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.11-4
changelog:
  - Rebuilt with astral-tokio-tar version 0.5.5
  - Security fix for path traversal CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Simone Caronni <negativo17@gmail.com> - 70-1
changelog:
  - Update to version 70.
  - Trim changelog.
  - Clean up SPEC file, switch to Python packaging guidelines for Python module.
  - Fix License tag.
  - Enable tests.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.4-5
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.8.2-1
changelog:
  - Update to version 5.8.2
  - Use reserved uid and gid 194 for the xrootd user
    - https://pagure.io/packaging-committee/issue/1444
    - https://src.fedoraproject.org/rpms/setup/pull-request/27


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.0~b3-1
changelog:
  - Update to Python 3.14.0b3
  - The .pyc magic number was bumped
  - python3.14-freethreading is no longer provisional


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.15-46
changelog:
  - Add RPM Provides for python3.6-libs, python3.6-devel, python3.6-idle, python3.6-tkinter, python3.6-test


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.22-2
changelog:
  - Add RPM Provides for python3.9-libs, python3.9-devel, python3.9-idle, python3.9-tkinter, python3.9-test


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 6.1.2-1
changelog:
  - qcint is API compatible but ABI incompatible with libcint; qcint is
    now the only library built on x86_64 and replaces libcint.
  - Update to 6.1.2.


author: Dmitri Smirnov <dmitri@smirnov.ee> - 4.6.0-2
changelog:
  - Move pre-downloaded files to patch to avoid issues when building 
  - Remove pqtch 1251 which is no longer needed


author: Germano Massullo <germano.massullo@gmail.com> - 4.7.0-1
changelog:
  - 4.7.0 release
  - Moved from tar.gz to tar.xz upstream file and updated Source0
  - Removed EL7 and EL8 leftovers
  - Moved from Qt5 to Qt6
  - Added cmake.patch


author: Stefan Becker <chemobejk@gmail.com> 2.0-1
changelog:
  - update to version 2.0
  - drop downstream patches
  - switch from qmake + make to cmake + ninja
  - disable fill form shortcuts as they don't work under Wayland anyway
  - add translations (de, pl)


author: Liu Yang <Yang.Liu.sn@gmail.com> - 5.15.13-2
changelog:
  - Add riscv64 to macro i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 mips mipsel mips64el riscv64.


author: Zephyr Lykos <fedora@mochaa.ws> - 0.11-1
changelog:
  - New version, switch upstream URL
  - Use CMake to build, remove unused BR
  - Add KDE theming support
  - Remove ExcludeArch s390x


author: Jakub Kadlcik <frostyx@email.cz> - 0.29.0-2
changelog:
  - Small fixes to the specfile formatting
  - Add some build dependencies for tests
  - Don't depend on deprecated python3-pytest7


author: Jakub Kadlcik <frostyx@email.cz> - 0.29.0-5
changelog:
  - Exclude one more test
  - Add todo about dynamic BuildRequires
  - Drop the python3-pytest-cov dependency


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-3
changelog:
  - Disable network and streaming
  - Enable tests and add extra dependencies
  - Tests expect Debian host with grub-editenv, called grub2-editenv on Fedora


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-4
changelog:
  - Disable 5 tests that does not work on F43/rawhide
  - Update files section with macros and add patch comments


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-5
changelog:
  - Add dbus-common dependency as xml is installed in dbus-1 directory
  - Cleanup patches into 3 logical changes and update upstream status
  - Add upstream status of RPM lint incorrect-fsf-address error


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-6
changelog:
  - Exclude some architectures that does not have grub2-tools-minimal package
  - Add upstream xml file license issue link


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-7
changelog:
  - Change dbus-common dependency from BuildRequires to Requires
  - Update upstream license issue and update license information
  - Generate docbook for yelp or khelpcenter


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-11
changelog:
  - Don't mark man page as doc
  - Update patches against upstream version
  - Yelp SVG image workaround: Convert SVG to PNG using thorvg
  - thorvg workaround due to command rename in F42/F43


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-12
changelog:
  - Update patch 4 with CC0-1.0.txt and include it in rauc LGPL-2.1-or-later AND CC0-1.0
  - Add COPYING to rauc-doc LGPL-2.1-or-later AND CC0-1.0
  - Fix license as LGPL-2.1-or-later not LGPL-2.1-only


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.3.2-1
changelog:
  - Update to 1.3.2 - Closes rhbz#2331229
  - Drop pod file as man page is now included
  - Drop build section as native extension was removed #1428
  - Add packit configuration
  - Enable tests by skipping three failing tests


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.68.2-2
changelog:
  - Update to 1.68.2
  - Move to bundling with gotmax23 tool
  - Bump golang.org/x/net/html to v0.33.0 to fix CVE-2024-45338
  - Bump golang.org/x/crypto/ssh to v0.31.0 to fix CVE-2024-45337
  - Bump github.com/quic-go/quic-go to 0.48.2 to fix CVE-2024-53259 and
    CVE-2024-22189
  - s390x is temporarly disable until a workaround to
    https://github.com/cronokirby/saferith/issues/52 is found


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Sumit Bose <sbose@redhat.com> - 0.17.1-11
changelog:
  - Update Systemd security settings as part of https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening


author: Sumit Bose <sbose@redhat.com> - 0.17.1-14
changelog:
  - Various fixes for issues found by static code scanners
  - Systemd security setting and CacheDirectory
  - use 'dnshostname' with net ads join
  - Install dbus policy in /usr/share, not /etc


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-5
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)
  - add a sshd helper to rescue, otherwise sshd does not start, PR 3510


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.7.20231006git8d00acdc
changelog:
  - Remove require of libpng12.so.0, lsb-desktop already require libpng
  - redhat-lsb now provides lsb_release, in future maybe we can remove the rest since LSB 5.0 is out of date
  - more cleanups
  - Report that is not LSB compliance, because various components are missing from Fedora, so compliance is not possible


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.10.20231006git8d00acdc
changelog:
  - The packages are architecture-specific, but do not contain any ELF
    binaries with debuginfo to extract, so we need disable debuginfo.


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.13.20231006git8d00acdc
changelog:
  - Remove sub-pacakges: redhat-lsb-core, redhat-lsb-cxx, redhat-lsb-desktop,
    redhat-lsb-languages and redhat-lsb-printing aren't useful for a long time
  - Switch to a noarch package


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.16.20231006git8d00acdc
changelog:
  - Require util-linux
  - Modification of sumamry and description to express that is not compliant with LSB


author: Charalampos Stratakis <cstratak@redhat.com> - 343-3
changelog:
  - Add -mbranch-protection=standard to extension builder flags
  - mbranch-protection=standard from the standard hardening flags on aarch64,
    enables BTI and PAC. PAC is ABI dependent and we want extensions to be
    compatible.


author: Pavel Raiskup <praiskup@redhat.com> 1.1-1
changelog:
  - Simplify the get_service() helper
  - list-deleting-volumes: new helper for customer case reporting
  - fix manpage contents
  - provide subnets ids directly to the tool via argument (j1.kyjovsky@gmail.com)
  - specify ibm cloud zone instead of hardcoded API url (j1.kyjovsky@gmail.com)
  - add option to use instance's private IP to connect to it (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.1-1
changelog:
  - The wait-for-ssh script was moved to resalloc-helpers
  - releng: release to all active Fedora releases


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.3-1
changelog:
  - Add functionality for tagging resource by its crn (j1.kyjovsky@gmail.com)
  - Add option for specifying resource group (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - Log the instance create request content
  - Allow specifying a list of Floating IPs
  - Drop executable bits from PYTHONPATH scripts


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.0-1
changelog:
  - Update to 6.4.0
  - Use version requires to pull in newer packages
  - Fix rpmlint warnings
  - Package is now noarch


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
  - Harden rsyslog service unit
  - Disable openssl engines support
    Resolves: rhbz#2320050


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-3
changelog:
  - Workaround for new gdk-pixbuf with glycin backend dependency (ref: bug
    2387002)
  - F-43: ignore test failure for now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-5
changelog:
  - Upstream fix for tests with glycin based gdk-pixbuf2 2.43.x
  - Exclude tests on glycin ppc64le for now (bug 2275913)
  - Exclude animation test on i686 on Fedora 43


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.1.0-24
changelog:
  - Use recent gem packaging style
  - Modify License tag
  - Use test-unit for testsuite
  - Upstream PR to suppress warnings for literal string


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.0.3-2
changelog:
  - Skip blockdiag integration test, python3-blockdiag now FTI
    because of loooong dependency chain breakage with python3.12


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.1.15-1
changelog:
  - Update to v1.1.15
  - It fixes a few issues with seccomp, leaked mounts, and system
    performance. See upstream change log.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.1-3
changelog:
  - Disable tests in EPEL
  - Avoid bringing in large dependency trees via the axum and tower-http dev-
    dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to verson 1.2.0; Fixes RHBZ#2393793
  - MSRV is now 1.87, edition is 2024
  - The dev-dependency on criterion is now removed via patch rather than
    tomcli


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.0-1
changelog:
  - Initial package (close RHBZ#2328487)
  - Re-generate with rust2rpm 27 for a slightly nicer spec file


author: Michel Lind <salimma@fedoraproject.org> - 2.2.1-1
changelog:
  - Update to 2.2.1; Fixes RHBZ#2277401
  - Temporarily remove tests/ because of unsatisfied color-eyre dependency


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.1-1
changelog:
  - Update to 0.4.1 (close RHBZ#2277955)
  - Reduce manual editing of the spec file after running rust2rpm
  - Reduce unnecessary (benchmark-only) build dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.23.1-1
changelog:
  - Update to 1.23.1 (close RHBZ#2349449)
  - Use rust2rpm.toml to exclude license file for unbundled libdeflate
  - Update .rpmlintrc file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.24.0-1
changelog:
  - Update to 1.24.0 (close RHBZ#2365609)
  - Now that we can easily re-apply Cargo.toml patches when updating, do not
    use tomcli to remove criterion


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.2.0-4
changelog:
  - Unretirement request: pagure.io/releng/issue/12761 Revert "unused leaf
    package for more than two release cycles"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-4
changelog:
  - Allow procfs 0.17, which 7, and roxmltree 0.20
  - https://github.com/nushell/nushell/pull/14489
  - https://github.com/nushell/nushell/pull/14513


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.22.0-2
changelog:
  - Update the rust-image-0.25 patch to match what was merged upstream
  - Fewer image formats are now supported.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.0-5
changelog:
  - Port to rust2rpm.toml
  - Actually hide features for testing particular hardware
  - Hide the crypto_nossl feature, which would require the x509-cert crate;
    fixes RHBZ#2310742


author: Benjamin A. Beasley <code@musicinmybrain.net> - 12.1.2-13
changelog:
  - Align rust2rpm.toml patch comments with the spec file
  - Re-generate the spec file with rust2rpm 27


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.10.4-2
changelog:
  - On i686, skip a test that is designed for 64-bit
  - Send a PR upstream to conditionalize the test by architecture.


author: Robby Callicotte <rcallicotte@fedoraproject.org> - 3007.4-1
changelog:
  - Update to 3007.4 RHBZ#2366381 - Resolves CVE-2024-38824 RHBZ#2372731 -
    Resolves CVE-2024-38824 RHBZ#2372733 - Resolves CVE-2025-22239
    RHBZ#2372732 - Resolves CVE-2025-22239 RHBZ#2372734 - Resolves
    CVE-2025-22236 RHBZ#2372774 - Resolves CVE-2025-22236 RHBZ#2372776 -
    Resolves CVE-2025-22242 RHBZ#2372741 - Resolves CVE-2025-22242
    RHBZ#2372745 - Resolves CVE-2025-22240 RHBZ#2372746 - Resolves
    CVE-2025-22241 RHBZ#2372748 - Resolves CVE-2025-22240 RHBZ#2372752 -
    Resolves CVE-2025-22241 RHBZ#2372753


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.73


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74
  - Remove /usr/bin/python3 from BuildRequires


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.75


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Christian Krause <chkr@fedoraproject.org> - 2.8.1-1
changelog:
  - Update to 2.8.1 (#2254942)
  - Fix FTBFS (#2261685)
  - Adjust filenames
  - Set StartupWMClass in desktop file in order to enable the window manager
    to reference the correct desktop file (e.g. needed for the
    task switcher to show the correct application icon)
  - Add upstreamed patch to fix compile issue with GCC 14
  - Update license tag
  - Add BR: libmikmod-devel, libvpx-devel and sonivox-devel


author: Christian Krause <chkr@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 (#2330987)
  - Fix FTBFS (#2341334)
  - Remove patch already included upstream
  - Add BR: pipewire-jack-audio-connection-kit (needed for fluidsynth)


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Zdenek Pytela <zpytela@redhat.com> - 42.1-1
changelog:
  - Update systemd-generators policy
  - Allow plymouthd_t read proc files of systemd_passwd_agent (bsc#1245470)
  - Allow insights-client file transition for files in /var/tmp
  - Allow tuned-ppd manage tuned log files
  - Allow systemd-coredump mount on tmpfs filesystems
  - Update sssd_dontaudit_read_public_files()
  - Allow zram-generator raw read fixed disk device


author: Zdenek Pytela <zpytela@redhat.com> - 42.2-1
changelog:
  - Allow virtqemud_t use its private tmpfs files (bsc#1242998)
  - Allow virtqemud_t setattr to /dev/userfaultfd (bsc#1242998)
  - Allow virtqemud_t read and write /dev/ptmx (bsc#1242998)
  - Extend virtqemud_t tcp_socket permissions (bsc#1242998)
  - Allow virtqemud_t to read and write generic pty (bsc#1242998)
  - Allow systemd-importd create and unlink init pid socket
  - Allow virtqemud handle virt_content_t chr files
  - Allow svirt read virtqemud fifo files
  - All sblim-sfcbd the dac_read_search capability
  - Allow sblim domain read systemd session files
  - Allow sblim-sfcbd execute dnsdomainname
  - Confine nfs-server generator
  - Allow systemd-timedated start/stop timemaster services
  - Allow "hostapd_cli ping" run as a systemd service
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  - Allow 'oomctl dump' to interact with systemd-oomd
  - Basic functionality for systemd-oomd
  - Basic enablement for systemd-oomd
  - Allow samba-bgqd send to smbd over a unix datagram socket
  - Update kernel_secretmem_use()
  - Add the file/watch_mountns permission


author: Zdenek Pytela <zpytela@redhat.com> - 42.3-1
changelog:
  - Allow virtqemud write to sysfs files
  - Allow irqbalance search sssd lib directories
  - Allow samba-dcerpcd send sigkills to passwd
  - Allow systemd-oomd watch dbus pid sock files
  - Allow some confined users read and map generic log files
  - Allow login_userdomain watch the /run/log/journal directory
  - Allow login_userdomain dbus chat with tuned-ppd
  - Allow login_userdomain dbus chat with switcheroo-control
  - Allow userdomain to connect to systemd-oomd over a unix socket
  - Add insights_client_delete_lib_dirs() interface


author: Zdenek Pytela <zpytela@redhat.com> - 42.4-1
changelog:
  - Allow unconfined user a file transition for creating sudo log directory
  - Allow virtqemud read/write inherited dri devices
  - Allow xdm_t create user namespaces
  - Update policy for login_userdomain
  - Add ppd_base_profile to file transition to get tuned_rw_etc_t type
  - Update policy for bootupd
  - Allow logwatch work with opensmtpd
  - Update dovecot policy for dovecot 2.4.1
  - Allow ras-mc-ctl write to sysfs files
  - Allow anaconda-generator get attributes of all filesystems
  - Add the rhcd_rw_fifo_files() interface
  - Allow systemd-coredump the sys_chroot capability
  - Allow hostapd write to socket files in /tmp
  - Recognize /var/home as an alternate path for /home
  - Label /var/lib/lastlog with lastlog_t


author: Zdenek Pytela <zpytela@redhat.com> - 42.5-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  - Support virtqemud handle hotplug hostdev devices
  - Allow virtstoraged create qemu /var/run files
  - Allow unconfined_domain_type cap2_userns capabilities
  - Label /usr/libexec/postfix/tlsproxy with postfix_smtp_exec_t
  - Remove the mysql module sources
  - dist/targeted/modules.conf: Enable kmscon module (bsc#1238137)
  - Update kmscon policy module to kmscon version 9 (bsc#1238137)
  - Allow login to getattr pidfs
  - Allow systemd to map files under /sys
  - systemd: drop duplicate init_nnp_daemon_domain lines
  - Fix typo
  - Allow logwatch stream connect to opensmtpd
  - Allow geoclue read NetworkManager pid files


author: Zdenek Pytela <zpytela@redhat.com> - 42.6-1
changelog:
  - Allow virtqemud start a vm which uses nbdkit
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  - Fix insights_client interfaces names
  - Add insights_core and insights_client interfaces
  - dist/targeted/modules.conf: enable slrnpull module
  - Allow bootupd delete symlinks in the /boot directory
  - Allow systemd-coredumpd capabilities in the user namespace
  - Allow openvswitch read virtqemud process state
  - Allow systemd-networkd to create leases directory


author: Zdenek Pytela <zpytela@redhat.com> - 42.7-1
changelog:
  - Label /usr/lib/systemd/systemd-ssh-issue with systemd_ssh_issue_exec_t
  - Allow stalld map sysfs files
  - Allow NetworkManager-dispatcher-winbind get pidfs attributes
  - Allow openvpn create and use generic netlink socket
  - policy_capabilities: remove estimated from released versions
  - policy_capabilities: add stub for userspace_initial_context
  - add netlink_xperm policy capability and nlmsg permission definitions
  - policy_capabilities: add ioctl_skip_cloexec
  - selinux-policy: add allow rule for tuned_ppd_t
  - selinux-policy: add allow rule for switcheroo_control_t
  - Label /run/audit with auditd_var_run_t


author: Zdenek Pytela <zpytela@redhat.com> - 42.8-1
changelog:
  - Allow gdm create /etc/.pwd.lock with a file transition
  - Allow gdm bind a socket in the /run/systemd/userdbd directory
  - Allow nsswitch_domain connect to xdm over a unix domain socket
  - Allow systemd homed getattr all tmpfs files (bsc#1240883)
  - Allow systemd (PID 1) create lastlog entries
  - Allow systemd_homework_t transition pid files to lvm_var_run_t (bsc#1240883)
  - Allow gnome-remote-desktop speak with tabrmd over dbus (bsc#1244573)
  - Allow nm-dispatcher iscsi and sendmail plugins get pidfs attributes
  - Allow systemd-oomd watch tmpfs dirs
  - Allow chronyc the setgid and setuid capabilities


author: Zdenek Pytela <zpytela@redhat.com> - 42.9-1
changelog:
  - Fix systemd_manage_unit_symlinks() interface definition
  - Support coreos installation methods
  - Add a new type for systemd-ssh-issue PID files
  - Allow gnome-remote-desktop connect to unreserved ports
  - Allow mdadm the CAP_SYS_PTRACE capability
  - Allow iptables manage its private fifo_files in /tmp
  - Allow auditd manage its private run dirs
  - Revert "Allow virt_domain write to virt_image_t files"
  - Exclude tabrmd.if from interfaces list


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-15
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-1
changelog:
  - Upgrade to SIMDe 0.8.2
    Resolves: rhbz#2251016
  - Use upstream ci.sh
  - Fix build on aarch64 and backport some upstream fixes


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-2
changelog:
  - use upstream PR to fix tests with clang on aarch64
  - switch to noarch for the devel subpackage (tests still run on all arches)


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f42-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68
   - FDE: add support for new and more extensible key format that is
     unified between TPM and FDE hook
   - FDE: add support for adding passphrases during installation
   - FDE: update secboot to 30317622bbbc
   - Snap components: make kernel components available on firstboot
     after either initramfs or ephemeral rootfs style install
   - Snap components: mount drivers tree from initramfs so kernel
     modules are available in early boot stages
   - Snap components: support remodeling to models that contain
     components
   - Snap components: support offline remodeling to models that contain
     components
   - Snap components: support creating new recovery systems with
     components
   - Snap components: support downloading components with 'snap
     download' command
   - Snap components: support sideloading asserted components
   - AppArmor Prompting(experimental): improve version checks and
     handling of listener notification protocol for communication with
     kernel AppArmor
   - AppArmor Prompting(experimental): make prompt replies idempotent,
     and have at most one rule for any given path pattern, with
     potentially mixed outcomes and lifespans
   - AppArmor Prompting(experimental): timeout unresolved prompts after
     a period of client inactivity
   - AppArmor Prompting(experimental): return an error if a patch
     request to the API would result in a rule without any permissions
   - AppArmor Prompting(experimental): warn if there is no prompting
     client present but prompting is enabled, or if a prompting-related
     error occurs during snapd startup
   - AppArmor Prompting(experimental): do not log error when converting
     empty permissions to AppArmor permissions
   - Confdb(experimental): rename registries to confdbs (including API
     /v2/registries => /v2/confdb)
   - Confdb(experimental): support marking confdb schemas as ephemeral
   - Confdb(experimental): add confdb-control assertion and feature
     flag
   - Refresh App Awareness(experimental): LP: #2089195 prevent
     possibility of incorrect notification that snap will quit and
     update
   - Confidential VMs: snap-bootstrap support for loading partition
     information from a manifest file for cloudimg-rootfs mode
   - Confidential VMs: snap-bootstrap support for setting up cloudimg-
     rootfs as an overlayfs with integrity protection
   - dm-verity for essential snaps: add support for snap-integrity
     assertion
   - Interfaces: modify AppArmor template to allow owner read on
     @{PROC}/@{pid}/fdinfo/*
   - Interfaces: LP: #2072987 modify AppArmor template to allow using
     setpriv to run daemon as non-root user
   - Interfaces: add configfiles backend that ensures the state of
     configuration files in the filesystem
   - Interfaces: add ldconfig backend that exposes libraries coming
     from snaps to either the rootfs or to other snaps
   - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when
     inside a container
   - Interfaces: add auditd-support interface that grants audit_control
     capability and required paths for auditd to function
   - Interfaces: add checkbox-support interface that allows
     unrestricted access to all devices
   - Interfaces: fwupd | allow access to dell bios recovery
   - Interfaces: fwupd | allow access to shim and fallback shim
   - Interfaces: mount-control | add mount option validator to detect
     mount option conflicts early
   - Interfaces: cpu-control | add read access to /sys/kernel/irq/
   - Interfaces: locale-control | changed to be implicit on Ubuntu Core
     Desktop
   - Interfaces: microstack-support | support for utilizing of AMD SEV
     capabilities
   - Interfaces: u2f | added missing OneSpan device product IDs
   - Interfaces: auditd-support | grant seccomp setpriority
   - Interfaces: opengl interface | enable parsing of nvidia driver
     information files
   - Allow mksquashfs 'xattrs' when packing snap types os, core, base
     and snapd as part of work to support non-root snap-confine
   - Upstream/downstream packaging changes and build updates
   - Improve error logs for malformed desktop files to also show which
     desktop file is at fault
   - Provide more precise error message when overriding channels with
     grade during seed creation
   - Expose 'snap prepare-image' validation parameter
   - Add snap-seccomp 'dump' command that dumps the filter rules from a
     compiled profile
   - Add fallback release info location /etc/initrd-release
   - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
     initramfs deb builds
   - Remove stale robust-mount-namespace-updates experimental feature
     flag
   - Remove snapd-snap experimental feature (rejected) and it's feature
     flag
   - Changed snap-bootstrap to mount base directly on /sysroot
   - Mount ubuntu-seed mounted as no-{suid,exec,dev}
   - Mapping volumes to disks: add support for volume-assignments in
     gadget
   - Fix silently broken binaries produced by distro patchelf 0.14.3 by
     using locally build patchelf 0.18
   - Fix mismatch between listed refresh candidates and actual refresh
     due to outdated validation sets
   - Fix 'snap get' to produce compact listing for tty
   - Fix missing store-url by keeping it as part of auxiliary store
     info
   - Fix snap-confine attempting to retrieve device cgroup setup inside
     container where it is not available
   - Fix 'snap set' and 'snap get' panic on empty strings with early
     error checking
   - Fix logger debug entries to show correct caller and file
     information
   - Fix issue preventing hybrid systems from being seeded on first
     boot
   - LP: #1966203 remove auto-import udev rules not required by deb
     package to avoid unwanted syslog errors
   - LP: #1886414 fix progress reporting when stdout is on a tty, but
     stdin is not


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.4
   - Snap components: LP: #2104933 workaround for classic 24.04/24.10
     models that incorrectly specify core22 instead of core24
   - Update build dependencies


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Martin Osvald <mosvald@redhat.com> - 1.8.0.3-1
changelog:
  - Update to 1.8.0.3 (rhbz#2307725)
  - Resolves: CVE-2024-54661 (rhbz#2330520)
  - Resolves: non-working ipv6-join-group option (rhbz#2352860)
  - Resolves: FTBFS in Fedora (rhbz#2385633)


author: Martin Gansser <martinkg@fedoraproject.org> - 1:2.4.1-1
changelog:
  - Update to 2.4.1
  - Add 9ae2b6cc83ce5cdaec58cb4d2aed2fb5ae60b7c8.patch to restore FindSOLID.cmake
    so that the FreeSOLID library can be found again


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Sandipan Roy <sandipan@redhat.com> - 2.2.0-3
changelog:
  - Update sslscan-disable-opensslpull.patch for sslscan 2.2.0
  - Updated patch to work with new Makefile structure in sslscan 2.2.0
  - Fixes build failure where patch was failing to apply
  - Maintains same functionality: removes opensslpull dependency from
    .openssl.is.fresh target


author: Sandipan Roy <sandipan@redhat.com> - 2.2.0-4
changelog:
  - Fix missing TODO file in spec file for sslscan 2.2.0
  - Remove TODO file reference that doesn't exist in sslscan 2.2.0
  - Add INSTALL file to documentation list
  - Fixes RPM build error: File not found TODO


author: Clark Williams <williams@redhat.com> - 1.19.7
changelog:
  - stalld.c: use a more reasonable size for reading /proc/stat
  - systemd/Makefile:  remove typo in uninstall line
  - Makefile:  change modes on throttled and stalld
  - throttlectl: clean up throttling script due to reported CVE-2024-54159


author: Clark Williams <williams@redhat.com> - 1.19.8
changelog:
  - Fix incorrect DAEMON_UMASK value
  - Add 'errexit' to throttlectl.sh
  - Added glibc41 fix to source tree, removed patch
  - stalld.h:  fix prototype mis-match with cleanup_regex()


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - Makefile:  update version to 1.20.1
  - scripts:  add a script for running a local build for debuggin
  - stalld: Automatically switch to log-only mode if DL-server present
  - bpf/stalld: Implement and use find_queued_task helper in dequeue_task
  - bpf/stalld: Introduce and use for_each_task_entry/for_each_queued_task macros
  - build/debug: Control optimization and debug levels via DEBUG variable
  - stalld: sched_attr: Do not define for glibc >= 2.41
  - stalld: Refactor verbose logging with dedicated macros
  - stalld/queue_track: Consolidate print_queued_tasks verbosity control
  - gitignore: Add common build and tag files
  - build/debug: Allow DEBUG_STALLD to be controlled by 'DEBUG' Makefile variable
  - build/bpf/stalld: Pave way for DEBUG_STALLD command-line override
  - bpf/stalld: Introduce generic 'log' macro for BPF debug prints
  - bpf/stalld: Unify and generalize debug macro to DEBUG_STALLD


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Jerry James <loganjerry@gmail.com> - 3.2.1-38
changelog:
  - Add patch to fix ambiguous references to StringTemplate
  - Add patch to avoid using deprecated "new Integer" and "new Boolean"
  - Change license to BSD-3-Clause


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Björn Esser <besser82@fedoraproject.org> - 1.9.17-1.p1
changelog:
  - Rebase to sudo 1.9.17p1
  - sudo-1_9_16p2 is available Resolves: rhbz#2309626
  - sudo: LPE via host option Resolves: CVE-2025-32462
  - Properly apply system buildflags
  - Use new build macros, drop unneeded %%defattr


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.6-1
changelog:
  - Version 257.6
  - Fix for local information disclosure in systemd-coredump (CVE-2025-4598)
  - Fixes for systemd itself, run0, systemd-networkd, "secure" pager, man
    pages, shell completions, sd-boot, sd-varlink
  - Hardware database update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.7-1
changelog:
  - Version 257.7
  - Fixes for systemd itself, systemd-repart, systemd-resolved, systemd-
    vmspawn, systemd-networkd, resolvectl, bootctl, the shared library code,
    man pages, shell completions, and tests.
  - Hardware database is updated.


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-2
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
          CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Rebuild (xorg-x11-server)
    Fixes: CVE-2025-49175 / CVE-2025-49176 / CVE-2025-49177
           CVE-2025-49178 / CVE-2025-49179 / CVE-2025-49180


author: Didier Fabert <didier.fabert@gmail.com> - 0.1-35.20171025gitab9bbbd
changelog:
  - Stop using deprecated py3_build/py3_install macros https://bugzilla.redhat.com/show_bug.cgi?id=2378474
  - migrated to last commit


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-12/13060
  - Security fixes: bz#2248564, bz#2281499, bz#2281500, bz#2281502, bz#2281503
  - switch to sysusers based user provisioning approach - fixes bz#2252618
  - Add legacy openssl build dependency from F41 on - fixes FTBS / bz#2301334
  - since we can now drop EL7 support we can also cleanup systemd handling


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-2
changelog:
  - Re-add systemd-devel as build dependency so the daemon knows how to notify systemd that it was started - fixes bz#2302910


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.13-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/new-tor-stable-release-0-4-8-13/15397 (bz#2211726)
  - reviewed and adjusted SPDX license format


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.14-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-14/17242 (bz#2211726)


author: Miro Hrončok <miro@hroncok.cz> - 4.26.0-1
changelog:
  - Update to 4.26.0
  - Requires virtualenv 20.29+
  - Supports freethreading Python
  - Fixes: rhbz#2365939


author: Jered Floyd <jered@redhat.com> 10.0.4-1
changelog:
  - Update to upstream 10.0.4
  - Resolves CVE-2024-38311, CVE-2024-56195, CVE-2024-56196, CVE-2024-56202


author: Orion Poplawski <orion@nwra.com> - 10.0.4-4
changelog:
  - Build with system yaml-cpp
  - Add Provides/Requires filtering to exclude internal libraries
  - Add missing bundled provides


author: Akira TAGOH <tagoh@redhat.com> - 1.9.0-1
changelog:
  - New upstream release.
    Resolves: rhbz#2347165
  - Disable OpenSSL support.
    OpenSSL plugin isn't packaged. should be no harm.


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Jens Petersen <petersen@redhat.com> - 17.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode17.0.0/
  - https://blog.unicode.org/2025/09/unicode-170-release-announcement.html


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Mark Wielaard <mjw@fedoraproject.org> - 3.24.0-5
changelog:
  - valgrind-devel now Recommends, instead of Requires, valgrind.
  - valgrind-gdb now Requires valgrind, instead of valgrind-devel.
  - valgrind-scripts now Recommends valgrind-gdb
  - valgrind-gdb now Recommends gdb


author: Mark Wielaard <mjw@fedoraproject.org> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.24.0-8
changelog:
  - Add new VALGRIND_3_24_BRANCH patches
    - 0019-filter_gdb.in-__syscall_cancel_arch-is-just-in-a-sys.patch
    - 0020-Bug-501893-Missing-suppression-for-__wcscat_avx2-str.patch
    - 0021-filter_gdb.in-filter-out-__libc_do_syscall.patch
    - 0022-Handle-top-__syscall_cancel-frames-when-getting-stac.patch
  - Remove valgrind-3.24.0-syscall-cancel.patch (replaced by 0022).


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.5.0-1
changelog:
  - New upstream release
  - Moved somethings around to make the diff from the upstream spec less
  - Upped some memory requirements in some of the tests. Necessary on aarch64 and ppc64le (and ppc32)
  - Reduced number of parallel jobs on s390x builders as builds tend to fail when stressed
  - Retired armv7hl


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.3-1
changelog:
  - Update to 2.7.3
  - Use recent dvbhddevice Source file 3473a7b939d7.zip
  - Add %{name}-2.7.3-remux-radio.patch


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.1706-2
changelog:
  - broken /usr/bin/ex symlink in vim-9.1.1706-1.fc42 (fedora#2392249)
  - vim-common has broken manpages (fedora#2392178)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


author: Christian Krause <chkr@fedoraproject.org> - 0.5.3^20241114.git11e15a1-2
changelog:
  - Fix issues with /usr/bin/ and /usr/sbin/ merge (#2363531)
  - Always use consolehelper, implicitly allowed for root,
    remove consoleuser sub-package
  - Remove pam_console.so from vpnc.pam (not available anymore)


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Alessandro Astone <alessandro.astone@canonical.com> - 1.4.3-1
changelog:
  - new version (rhbz#2303618)
  - fix python 3.12 error (rhbz#2258411)
  - make it clearer that OTA channels must be provided to `waydroid init`


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Michal Ruprich <mruprich@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Rename package from wget to wget1
  - Add wget1-wget subpackage to allow usage as wget


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 1.0.7-1
changelog:
  - feature added: fontname option, sans-serif would be default
  - feature added: add option to print utf8 hex sequence


author: Sudip Shil <sshil@redhat.com> - 1.0.8-1
changelog:
  - Handling non-printable charcaters
  - Print nicer names for all non-printable characters
  - code rendering


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-9
changelog:
  - Update architectures for asan/tsan/ubsan tests based on GCC 15
  - Adds riscv64 to supported architectures for all three kinds of tsts


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Sérgio Basto <sergio@serjux.com> - 0.9.16^20230801gita61f364-1
changelog:
  - Update to a61f364e385d98677c04070a994397b287385219 git snapshot from
    2023-08-01 (a support for acquiring a DRM framebuffer with a drm schema
    in -rawfb option)


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.1-6
changelog:
  - adjust file locations now /usr/sbin is a symlink to /usr/bin
  - remove debugedit fix as no longer needed


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.2-2
changelog:
  - update to xen-4.19.2
    remove patches now included or superceded upstream
    remove xen*.efi.elf files to avoid debuginfo failure


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-2
changelog:
  - update to xen-4.19.3
    remove patches now included or superceded upstream
    includes patches for
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
   	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-4
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
          CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
          CVE-2025-58145]


author: Simone Caronni <negativo17@gmail.com> - 23.0.0-6
changelog:
  - Clean up SPEC file.
  - Trim changelog.
  - Do not disable debug stripping (caught by rpminspect) tests.


author: Dominik Mierzejewski <dominik@greysector.net> - 25.0.0-1
changelog:
  - Update to 25.0.0 (resolves rhbz#2384262)
  - Download and validate GPG signature
  - Switch to meson build system


author: José Expósito <jexposit@redhat.com> - 21.1.14-2
changelog:
  - Fix build issues caused by Xorg.wrap
  - Restore quirks for Apple silicon
    Fixes: 422064e45a42 ("Update X11-server to 21.1.13 and ABI numbers of videodrv and xinput")
    Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2326701


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.6-1
changelog:
  - xwayland 24.1.6 (#2343992)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.2.6-1
changelog:
  - "Update to 1.2.6" * Fixed compass outline drawing * Exposed selected text
    to the windowing system Details on [release
    notes](https://github.com/xournalpp/xournalpp/releases/tag/v1.2.6)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.1.8-3
changelog:
  - Do not hardcode the build type
  - Use CMAKE_BUILD_TYPE RelWithDebInfo to avoid -Werror in compiler flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-7
changelog:
  - build stage 3 using zig build system
  - add user provided options to the end of the build and install options


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-8
changelog:
  - specify to build against local zig stdlib directory to ensure we are building against the newest stdlib
  - use release fast instead of release safe to fix aarch64 builds from running out of memory
  - enable position independent executable for the zig build


author: Jean-Baptiste Trystram <jbtrystram@redhat.com> - 0.0.30-3
changelog:
  - Backport patch to fix rollback not sticking from https://github.com/coreos/zincati/pull/1293
    See https://github.com/coreos/fedora-coreos-tracker/issues/1938


