# changelog

author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.9.1-1
changelog:
  - Update to 1.9.1 - Closes rhbz#2362077 rhbz#2354430 rhbz#2352319
    rhbz#2350839 rhbz#2348836 rhbz#2339349


author: Felix Kaechele <felix@kaechele.ca> - 8.0-1
changelog:
  - Update to 8.0
  - temporarily carry revision and MD5 info in repo pending
    https://github.com/OpenTTD/actions/issues/112
  - remove xwayland-run, no longer needed
  - cleanup spec file
  - align install path with upstream


author: Adam Williamson <awilliam@redhat.com> - 4.6^20241125gitb64e219-3
changelog:
  - Rebuild for opencv-4.11.0 (Sérgio Basto)
  - Disable tests on s390x to get build through (see #2345306)


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-1
changelog:
  - Update to latest git
  - Backport #2727 to fix multi-machine script on Fedora
  - Backport #2728 to fix tests without Inline::Lua


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-3
changelog:
  - Backport PR #2750 to allow slow typing with (assert_)script_run
  - Backport PR #2751 to fix tests with IPC::Run 20250809.0


author: Packit <hello@packit.dev> - 167-1
changelog:
  Changes with 167
  ----------------
    - Fix RHSM podman secrets and rhc configuration (HMS-9811 and HMS-9606) (#2265)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - GHA: update osbuild-ci* container images (#2286)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Move replace and rglob (#2267)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Solver: prepare for V2 API with per-transaction depsolve results (HMS-9062) (#2258)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2273)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2285)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Various fixes for --in-vm (#2271)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chroot: If we're unable to mount devtmpfs, bindmount host /dev (#2277)
      - Author: Alexander Larsson, Reviewers: Michael Vogt, Simon de Vlieger
    - osbuild/solver: replace request.RepositoryConfig with model.Repository (HMS-9062) (#2280)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild/util/rhsm: make Subscriptions.get_secrets() take list of URLs (HMS-9062) (#2278)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - ostree.config: Add some tests (#2268)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ostree.grub2: ostree requires leading / (#2272)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - runners: set up sequoia on RHEL (#2288)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - stages/ostree.{aleph,deploy.container}: support more imgref formats; make aleph stage more reliable (#2270)
      - Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    - stages/xorrisofs: allow setting more fields (#2269)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-17


author: Packit <hello@packit.dev> - 169-1
changelog:
  Changes with 169
  ----------------
    - Update images dependency ref to latest (#2299)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2305)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2296)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260101 (#2297)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260112 (#2306)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: introduce manifest guide (#2175)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - monitor: deep copy stage options in JSONSeqMonitor (#2293)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai, Simon Steinbeiß, Tomáš Hozza
    - stages/kickstart: support containers-storage transport (#2264)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/rpm: add option to ignore key import errors (HMS-9986) (#2301)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - stages/rpm: add support for setting the rpmkeys binary (#2303)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    - stages: add force option to org.osbuild.groups (#2304)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-14


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add V2 Solver API with complete package metadata, per-transaction results, and RHSM secrets discovery (HMS-10029) (#2287)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    - Add tests for PQC key handling in osbuild [HMS-10057] (#2310)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Makefile: new target: rpm-nocheck (#2309)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2308)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260118 (#2312)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Add RHEL10 x86 and ARM COPR builds (#2311)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - stages: fix org.osbuild.ostree.grub2 permissions (#2307)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Brian C. Lane
    - test: add a wait to mitigate race condition (#2314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: add one-block tolerance to fscache test (#2316)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: increase sendmsg test size (#2315)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 171-1
changelog:
  Changes with 171
  ----------------
    - Improve robustness of --in-vm support (#2292)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support running bootc-image-builder with --in-vm (#2328)
      - Author: Alexander Larsson, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc.install.config: add ostree.bls-append-except-default option (#2319)
      - Author: Joel Capitao, Reviewers: Brian C. Lane, Simon de Vlieger
    - grub2.iso: configurable entries (HMS-10018, HMS-10015) (#2317)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Ondřej Budai
    - mockbuild: fix PQC builds on RHEL 10 (#2327)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - monitor: Report if the runner is running in a vm (#2320)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-27


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - SPEC: initrd sub-package fixups and exclude i686 arch on el (#2334)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2333)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260201 (#2330)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild-mpp: Refactor to use osbuild.solver module (#2331)
      - Author: Mark Kemel, Reviewers: Nobody
    - test_objectstore: add time.sleep(0.1) to solve flaky tests (#2318)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-06


author: Packit <hello@packit.dev> - 173-1
changelog:
  Changes with 173
  ----------------
    - Revert "test_objectstore: add time.sleep(0.1) to solve flaky tests" (#2340)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: disable tests that tend to fail during rpmbuild in Koji (HMS-9796) (#2338)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2341)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260208 (#2335)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/module-config: postfix with `.module` (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 174-1
changelog:
  * Fix packaging conflict in initrd directory causing downgrade failures by @thozza in https://github.com/osbuild/osbuild/pull/2347
   * stages/bootc.install-to-fs: add bootupd-skip-boot-uuid option by @jbtrystram in https://github.com/osbuild/osbuild/pull/2345
   * qemu: Don't always pass -cpu host by @alexlarsson in https://github.com/osbuild/osbuild/pull/2356
   * spec: drop typer-slim dependency and use only python3-typer by @achilleas-k in https://github.com/osbuild/osbuild/pull/2358
   * qemu: Handle container storage.conf not listing graphroot by @alexlarsson in https://github.com/osbuild/osbuild/pull/2357
   * stages/erofs: quiet stdout by @supakeen in https://github.com/osbuild/osbuild/pull/2359
   * qemu: Default to 3GB vm instead of 4GB by @alexlarsson in https://github.com/osbuild/osbuild/pull/2361


   **Full Changelog**: https://github.com/osbuild/osbuild/compare/v173...v174


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - CI: run tests on 9.7+10.1 GA and 9.8+10.2 nightly (HMS-9794) (#2351)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Revert "schutzbot: update libsemanage before installing osbuild" (#2378)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Solver: fix `repo_ids` to restrict all dependency resolution, not just top-level packages (HMS-10314) (#2379)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Solver: implement per-transaction package excludes in the DNF5 solver (HMS-10318) (#2381)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2383)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - Update osbuild-ci container images (#2367)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - Update snapshots to 20260308 (#2382)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: shift manifest guide headings one level down (#2385)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - solver: add cost field to Repository model (#2380)
      - Author: Mark Kemel, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/rpm: add nodeps option for `rpm install --nodeps` (#2387)
      - Author: Dusty Mabe, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages: add coreos.bfb for NVIDIA BlueField DPUs (#2349)
      - Author: Sagi Zigmon, Reviewers: Nobody

  — Somewhere on the Internet, 2026-03-11


author: Packit <hello@packit.dev> - 177-1
changelog:
  Changes with 177
  ----------------
    - Add stages used for building s390x isos (HMS-9967) (#2390)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: default to using DNF5 depsolver on Fedora 45+ (current Rawhide) (HMS-10343) (#2389)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to support building ppc64le isos (HMS-9968) (#2377)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2394)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2392)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260315 (#2393)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260322 (#2397)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - buildroot: Use bwrap's --drop-cap ALL (#2395)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Alexander Larsson
    - chore: clean up team ssh keys (#2391)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Anna Vítová, Tomáš Hozza
    - cli: Print checkpoint cache status (#2388)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - stages/aleph: make path parametrizable (#2384)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - tools/osbuild-store: do stuff with sources and store (HMS-10238) (#2364)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-26


author: Packit <hello@packit.dev> - 178-1
changelog:
  Changes with 178
  ----------------
    - Packit: disable s390x builds in COPR (#2406)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Simon de Vlieger
    - Support uri encoded urls (#2405)
      - Author: Justin Sherrill, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild-ci container images (#2408)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260329 (#2403)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stage: flatpak.build-import-bundle.oci (HMS-10170) (#2400)
      - Author: Simon de Vlieger, Reviewers: Dusty Mabe, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-02


author: Packit <hello@packit.dev> - 153-1
changelog:
  Changes with 153
  ----------------
    - CloudAPI: fix `/compose/{id}/manifests` endpoint behavior on manifest generation errors (HMS-9501) (#4885)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    - Many: adjust code to unified rpmmd.Package struct (HMS-9504) (#4889)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test/api/gcp: set root partition size to at least 4 GiB (#4879)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20251001 (#4880)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - build(deps): bump actions/setup-go from 5 to 6 (#4853)
      - Author: dependabot[bot], Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore: bump dependencies via gobump (#4891)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add pxe-tar-xz image type (HMS-9472) (#4882)
      - Author: Lucas Garfield, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - executor: remove internet access entirely (HMS-9304) (#4884)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - go.mod: update osbuild/images to v0.202.0 (#4886)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - internal/cloudapi: rename OverrideSerializeManifestFunc for consistency (#4887)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    - internal/worker: delete unneeded compatibility layers (HMS-9455) (#4875)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 154-1
changelog:
  Changes with 154
  ----------------
    - CI: run testing on RHEL 9.8 and 10.2 nightly (HMS-9226) (#4893)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20251023 (#4905)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4895)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - cloudapi: add new dnf customizations [HMS-9335] (#4899)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - cloudapi: split out resolver job enqueueing into a separate function (#4894)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - fix worker AMI builds by not running mock as root (#4902)
      - Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers
    - gitlab: only update github status at the end of the pipeline(s) (#4900)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane, Sanne Raymaekers
    - go.mod: update images to v0.209.0 (#4901)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: update osbuild/images to v0.208.0 (#4898)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Ondřej Budai
    - test/cases/usbi-wsl: delete azure resources in order (#4896)
      - Author: Sanne Raymaekers, Reviewers: Simon de Vlieger, Tomáš Hozza
    - worker: support partial results (HMS-9343) (#4897)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - build(deps): bump actions/upload-artifact from 5 to 6 (#4961)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - chore(deps): update konflux references (#5023)
      - Author: {}, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-18


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Packit <hello@packit.dev> - 168-1
changelog:
  Changes with 168
  ----------------
    - Add DequeueAnyChannel to enable multi-tenant BootcPreManifest processing (HMS-10445) (#5084)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Ondřej Budai
    - Fail bootc composes on composer build version mismatch (HMS-10378) (#5082)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Ondřej Budai
    - Make bootc container source type configurable (HMS-10262) (#5087)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Replace monolithic bootc-manifest worker job with multi-stage server-orchestrated job graph (HMS-10378) (#5069)
      - Author: Tomáš Hozza, Reviewers: Nobody
    - Update snapshots to 20260405 (#5080)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5070)
      - Author: {}, Reviewers: Anna Vítová, Lukáš Zapletal
    - chore(deps): update konflux references (#5089)
      - Author: {}, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - chore: add .gitattributes file (#5078)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Simon de Vlieger, Tomáš Hozza
    - cloudapi: Add fedora names for network-installer (#5079)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - cmd/osbuild-worker: cleanup jobimpl-osbuild.go (#5083)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Tomáš Hozza
    - templates/packer: add container registries init script (#5086)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - worker: use slices.EqualFunc to compare dependency modules (#5085)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-15


author: Numan Siddique <numans@ovn.org> - 24.09.2-04
changelog:
  - Update the OVN sources to upstream release v24.09.2
    with the base OVN commit df4f80a60d4cd712870aa73d32d5677448c11c78
    and OVS commit 9e07a69bbb2a7d3eb35f9b487161c50cfa5bd65e
    The below commits are also synced:

  - Prepare for 24.09.3.
  [Upstream: 0a899586b9ec222b335a956021971de1c2dd2312]

  - ic: Fix NULL ptr deref on log of duplicate routes.
  [Upstream: 5a19ae8fa2965e4bf6864f84dfd1adef85ba4b13]

  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes.
  [Upstream 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]

  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-1
changelog:
  - Updated the OVN sources to the upstream release v25.09.2 with the
    commit e3e0587865d8f02d0a8f72de53b82e464c5029d8.


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-82
changelog:
  - Updated the OVN sources to pick up the commits from v25.09.2 till the
    tip of branch-25.09 (c7066edbc3985f06c6bfa45e3724088baa97c4bd).
  - Updated the OVS sources to the branch-25.09 OVS submodule
    commit da6b84d691593e57951bcc5f2f916336c6e0d5cc.


author: Dumitru Ceara <dceara@redhat.com> - 26.03.3-10
changelog:
  - Updated the OVN sources to upstream release v26.03.1 with the
    commit 0cc1ea5bb71d29b91244f5368ecbbda8837bc542 and picked up
    the commits from v26.03.1 till the tip of branch-26.03
    a1482006410f09dfe471c6aec76de3902327f1ad (2 commits) in
    ovn.patch.
  - Updated the OVS sources to the branch-26.03 ovs submodule
    commit bdb95cc1920d4ab66fe062a9470eeb33a51d33e2


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.9-1
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.9,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.9


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.1.rc1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc1
  - syncing with upstream spec-file (removed nagios)


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.2.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc2
  - disable docs for now as koji build shows issues with python requirements
    for inkscape


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.4.rc3
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc3,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc3
  - synced dropping inkscape build-requirement with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-5
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0
  - Regarding noteworthy changes coming with the bump of the major version see
    https://projects.clusterlabs.org/w/projects/pacemaker/pacemaker_3.0_changes/
  - add patch to when resetting scheduler as well reset error and warning flags
    lacking pcmk_reset_scheduler in 3.0.0 branch pcmk__set_scheduler_defaults
    seems to be the most reasonable alternative for now


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-11
changelog:
  - Convert STI tests to TMT (rhbz#2383013)
  - Update for new upstream release tarball: Pacemaker-3.0.1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1
  - now you can add a new revision
    rpmdev-bumpspec -c "test" pacemaker.spec
  - or run tests locally
    tmt run discover provision prepare execute --how tmt --verbose -v -v --debug


author: Packit <hello@packit.dev> - 1.12.0-1
changelog:
  - Packit now automatically invokes an rpm build in mock when no rpm test is passed using `--rpm_paths` before running local tests with `packit test`. (#2636)
  - Fixed an issue where the upstream spec file was synchronized without applying packit's patches. (#2637)
    This happened when syncing a folder that contains the specfile, e.g.:
  ```yaml
  files_to_sync:
    - src: distro/
      dest: ./
  specfile_path: distro/my_pkg.spec
  ```
  - `packit init` now automatically adds a packit-specific pre-commit hook to user's pre-commit configuration file if present. Two new flags were added, which modify this behavior. (#2641)
  - Resolves: rhbz#2396659


author: Packit <hello@packit.dev> - 1.13.0-1
changelog:
  - `packit init` now automatically retrieves the latest version of the pre-commit hook to be added to the user's pre-commit configuration file. (#2651)
  - Resolves: rhbz#2420553


author: Packit <hello@packit.dev> - 1.14.0-1
changelog:
  - We have added the `--preserve-spec` flag to the `prepare-sources` and `srpm` commands. When used, Packit will not change the spec file in any way (e.g., release is not bumped, Source0 is not changed). When enabled, it implies `--no-update-release`. (#2653)
  - Resolves: rhbz#2427944


author: Packit <hello@packit.dev> - 1.15.0-1
changelog:
  - The `version_suffix` configuration option is now supported in Packit. This option is meant for appending information to the Version field in RPM spec files. This is useful for post-release snapshots following RPM versioning conventions. The `version_suffix` behaves similarly to the already existing `release_suffix` and also supports expansion of environment variables. (#2664)
  - Packit now supports `bodhi_extra_params` configuration option to customize creating Bodhi updates. (#2682)
  - Resolves: rhbz#2439424


author: Packit <hello@packit.dev> - 1.15.1-1
changelog:
  - We have fixed a bug that prevented running `sync_release()` on a `PackitAPI` instance initialized with `non_git_upstream=True` repeatedly due to an improper clean-up. (#2691)
  - Resolves: rhbz#2445195


author: Packit <hello@packit.dev> - 1.15.2-1
changelog:
  - Packit now uses the specfile library's sanitization when parsing spec files.
  - Resolves: rhbz#2450841


author: Packit <hello@packit.dev> - 1.15.3-1
changelog:
  - We've fixed the formatting of the strings Packit appends to the changelog. Now there will be at most one blank line before or after the Packit comment. (#2707)
  - Resolves: rhbz#2453842


author: Packit <hello@packit.dev> - 1.16.0-1
changelog:
  - Packit CLI has a new option `--[no-]update-release` that, by default, follows the value of the option set in the config, and also allows you to override manually, if necessary. (#2713)
  - In addition to `version_update_mask`, users can now use a new `version_update_specifiers` configuration option to control the upstream versions allowed to be release-synced. The option accepts [PEP440 version specifier sets](https://packaging.pypa.io/en/stable/specifiers.html), for example `version_update_specifiers: >=1.0,~=1.0`. (#2710)
  - Resolves: rhbz#2461103


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.0-1
changelog:
  - Created the initial release of the project
  - Added support for transferring repositories files from projects on Pagure to GitLab
  - Added support for transferring issue tickets from projects on Pagure to GitLab
  - Added support for inbuilt logging library for better compatibility with journalling
  - Added options for filtering by branch names when transferring repository files
  - Added options for filtering by issue ticket status when transferring issue tickets
  - Added options for filtering by issue ticket identity selection when transferring issue tickets
  - Added options for filtering by issue ticket identity ranges when transferring issue tickets
  - Added options for migrating current states when transferring issue tickets
  - Added options for migrating tagged labels when transferring issue tickets
  - Added options for migrating created comments when transferring issue tickets
  - Ensured excellent quality of the codebase with 100% coverage of functional code
  - Included support for continuous integration using GitHub Actions and Pre-Commit CI


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.1-1
changelog:
  - Reworked the documentation sections with proper updates
  - Initialized packaging workflow with RPM specfile for the project codebase
  - Stepped down version of the runtime dependency requests from ^2.31.0 to ^2.28.0
  - Stepped down version of the runtime dependency GitPython from ^3.1.37 to ^3.1.0
  - Removed unnecessary runtime dependency tqdm from the list


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.2-1
changelog:
  - Expanded the documentation to explain branch protection
  - Censor the sensitive information from STDOUT
  - Add support for automatic dependency updates using Renovate
  - Circumvent the rate limits on the GitLab API requests
  - Added support for migrating issue ticket confidentiality
  - Added advanced HTTP requests testing support using VCR.py
  - Added configuration to avoid false security flagging


author: Packit <hello@packit.dev> - 0.1.3-1
changelog:
  - Add some installability checks (Akashdeep Dhar)
  - Update Packit configuration (Akashdeep Dhar)
  - Step down the version requirement for python-gitlab (Akashdeep Dhar)
  - Bump version from v0.1.2 to v0.1.3 (fedohide-origin)
  - Automated dependency updates (renovate[bot])
  - add fedora-rawhide & fedora-40 aliases to packit jobs config (Shubham Karande)
  - Change the recordings after the GitLab Runners tokens were purged (Akashdeep Dhar)
  - Remove stray GitLab Runners token when detected (Akashdeep Dhar)
  - Remove stray IntelliJ files (Akashdeep Dhar)
  - Rework the testcases to address cleaning of repositories (Akashdeep Dhar)
  - Add refreshed recordings for the newly added functionalities (Akashdeep Dhar)
  - Include view and work code for retaining issue ticket order (Akashdeep Dhar)
  - Add options and variables to track the new feature (Akashdeep Dhar)
  - Update dependency ruff to ^0.0.285 || ^0.1.0 || ^0.2.0 || ^0.3.0 (renovate[bot])
  - Rework the recordings to address the changed tests (Akashdeep Dhar)
  - Clean statutory rate limit addressing functions (Akashdeep Dhar)
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Update recordings to speed up the testing process (Akashdeep Dhar)
  - Change the testcases to accommodate the shift (Akashdeep Dhar)
  - Modify the condition config for the test environment (Akashdeep Dhar)
  - Replace scoped client object in favor for contextualized client object (Akashdeep Dhar)
  - Introduce two shared variables to contextualize GitLab client and project objects (Akashdeep Dhar)
  - Move repository checking code from requests to python-gitlab (Akashdeep Dhar)
  - update_doc_use_venv_instead_of_virtualenv (ooooo)
  - Complete first run of refactoring (Akashdeep Dhar)
  - Add python-gitlab in dependencies (Akashdeep Dhar)
  - Automated dependency updates (renovate[bot])
  - Update dependency ruff to ^0.0.285 || ^0.1.0 || ^0.2.0 (renovate[bot])
  - Update dependency black to v24 (renovate[bot])
  - Update dependency pytest to v8 (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Resolves rhbz#2269273


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.0-1
changelog:
  - Rebase to release 1.7.0 (#2321512)
  - Rebase to pam-redhat-1.2.0
  - build: update to meson build system
  - doc: disable build for i686


author: Aaron Merey <amerey@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi-7.2.0.
  - Remove upstreamed patches
    papi-python3.patch
    papi-libsde.patch
    papi-gcc15.patch
  - Add papi-revert-arm-test.patch.
  - Add papi-revert-event-depr.patch.


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.8-1
changelog:
  - update to 1.3.8 (resolves rhbz#2314222)
  - switch to GitHub source URL
  - correct License tag after license review
  - switch to autosetup macro


author: Nathan Scott <nathans@redhat.com> - 6.3.7-1
changelog:
  - Update PCP selinux policy (BZs 2354510, 2333727, 2333726, 2333725)
  - Update to latest upstream PCP version.


author: Nathan Scott <nathans@redhat.com> - 6.3.7-7
changelog:
  - Fix python PMDA wrapper handling of list objects (BZ 2371769)
  - Improve tmpfiles.d handling of empty directories (BZ 2372945)
  - Backport some more fixes to the OpenMetrics PMDA (BZ 2373868)
  - Make pcp-zeroconf start enabled services once again
  - Fix a multilib regression in PCP header files


author: Paul Wouters <paul.wouters@aiven.io> - 2.10.0-1
changelog:
  - Initial vendor version of pebble
  - Resolves: rhbz#2453110 Review Request: pebble - A miniature version of
    Boulder, a small RFC 8555 ACME test


author: Xavier Bachelot <xavier@bachelot.org> - 1.3.14-1
changelog:
  - Update to 1.3.14
    - Restrict mysql_enable_utf8 to DBD::mysql
    - PgJSON: Fix GKFAS when called with a column list


author: Paul Howarth <paul@city-fan.org> - 1.3.15-1
changelog:
  - Update to 1.3.15
    - Improve Redis driver performance
    - Implement searchOn/deleteIfLowerThan into Redis
    - Prefer Redis::Fast


author: Paul Howarth <paul@city-fan.org> - 0.001-3
changelog:
  - Incorporate package review feedback (rhbz#2277753)
    - Tweak %description
    - BR: perl(VERSION) >= 5.6


author: Paul Howarth <paul@city-fan.org> - 4.38-1
changelog:
  - Update to 4.38
    - Encode real core booleans as boolean notation (GH#224)
    - Minor test fixes
    - Fix docs typo (GH#225)


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 3.04-13
changelog:
  - Fix decryption of ciphertext created with 'header' => 'randomiv'
    https://bugzilla.redhat.com/show_bug.cgi?id=2235322
    https://github.com/lstein/Lib-Crypt-CBC/issues/6
    https://github.com/lstein/Lib-Crypt-CBC/pull/7


author: Paul Howarth <paul@city-fan.org> - 3.07-1
changelog:
  - Update to 3.07 (rhbz#2383870)
    - New upstream maintainer
    - Fix CVE-2025-2814 by using Crypt::URandom
    - Fix decryption of ciphertext created with 'header' => 'randomiv'
    - Fixed bug in which manually-specified key and -pkdf=>"none" was not having
      any effect
    - Converted build process to Dist::Zilla
    - Miscellaneous minor Dist::Zilla related changes
  - Switch upstream source URL from cpan.metacpan.org to www.cpan.org to skip a
    redirect
  - Package new LICENSE, SECURITY.md and vulnerabilities.txt files


author: Packit <hello@packit.dev> - 6.95-1
changelog:
  - Release: v6.95 (Sullivan Beck)
  - Checkpoint: v6.95 (Sullivan Beck)
  - Added POSIX handling (Sullivan Beck)
  - Initial checkin of next release cycle: 6.95 (Sullivan Beck)
  - Resolves rhbz#2267329


author: Charles R. Anderson <cra@alum.wpi.edu> 0.020-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(Config)
  - Remove duplicate explicit Requires:
    perl(Exporter)
    perl(ExtUtils::Builder::Planner)
    perl(ExtUtils::Helpers)
    perl(Getopt::Long)
    perl(List::Util)
  - Add missing Requires:
    perl(CPAN::Meta::Merge)
    perl(Perl::OSType)
    perl(Pod::Man)
    perl(TAP::Harness::Env)
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.017-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(blib) instead of perl-blib
  - Remove duplicate explicit Requires:
    perl(Exporter)
    perl(ExtUtils::MakeMaker)
    perl(List::Util)
  - Add missing Requires:
    perl(Data::Dumper)
    perl(Perl::OSType)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.031-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(Config)
  - Remove duplicate explicit Requires:
    perl(ExtUtils::Config)
    perl(ExtUtils::Helpers)
  - Add missing Requires: perl(DynaLoader)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.001-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(blib) instead of perl-blib
  - Remove explicit Requires: perl(Exporter)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Paul Howarth <paul@city-fan.org> - 1.6300-1
changelog:
  - Update to 1.63
    - Fixed TesouroDireto.pm - using different source URL (GH#424)
    - Added FinanceAPI.pm - requires API key from https://financeapi.net/
      - US and other exchange data available
    - Fixed BVB.pm (GH#409)
    - Fixed BSEIndia.pm (GH#410); removed Unzip as quotes file is now a CSV file
    - Fixed NSEIndia.pm (GH#410)
    - Fixed NZX.pm (GH#401)


author: Paul Howarth <paul@city-fan.org> - 1.6400-1
changelog:
  - Update to 1.64
    - Update AlphaVantage.pm (GH#447)
    - Fix to Stooq.pm (GH#445)
    - Updated ASX.pm (GH#404)
    - Added more fields to CSE.pm and exposed all labels
    - Changed parsing in Comdirect.pm (GH#413)
    - Complete rewrite of OnVista.pm (GH#414)
    - Minor fix to FinanceAPI decoding JSON (GH#434)
    - Modified YahooJSON to deal with "nan" as dividend yield in JSON
    - New CurrencyRates module, CurrencyRates/FinanceAPI (GH#427)
    - Fixed Bourso.pm (GH#417)
    - Allowed Currency Rates modules Fixer.pm and OpenExchange.pm to read their
      API keys from environment variables (GH#426)
    - Removed references to IEXCloud (IEX ended support for all products at the
      end of August 2024)
  - Switch source URL from cpan.metacpan.org to www.cpan.org
  - Add build conditional for author tests, disabled by default


author: Paul Howarth <paul@city-fan.org> - 1.6500-1
changelog:
  - Update to 1.65
    - Added EXCHANGE feature to Sinvestor.pm and some fixes (GH#481)
    - Added EXCHANGE feature to OnVista.pm (GH#480)
    - Added EXCHANGE feature to Consorsbank.pm and some fixes (GH#479)
    - Enabled usage count in Quote.pm
    - Removed DWS.pm
    - Improved check that dividend yield is a number in YahooJSON.pm by adding
      regex anchors
    - Added ssl_opts to user agent in Union.pm to account for bad certificate
      chain (GH#482)
    - Added ETFs search, more labels and EXCHANGE feature to Comdirect.pm (GH#478)
    - GoogleWeb: Add support for Hong Kong Exchange (GH#476)
    - YahooJSON: Adjust other currency fields when data is returned in GBp, ZAc,
      or ILA
    - Added labels wkn, ìsin, close, ask, bid, p_change, time to OnVista.pm
    - Modified OnVista.pm to enable search by ISIN and WKN and search for ETFs
    - Added methodinfo hash to Tradegate.pm (GH#465)
    - Added labels isin, open, ask, bid, time to Tradegate.pm (GH#465)
    - Fixed Tradegate.pm - Search for ETFs (GH#465)
    - Removed MorningstarAU (GH#405)
    - Fixed malformed character in YahooWeb.pm (GH#468)
    - Changed useragent in YahooJSON.pm (GH#467)
    - Added methodinfo hash to AEX.pm (GH#466)
    - Added labels exchange, close, time to AEX.pm (GH#466)
    - Fixed XETRA.pm (GH#460)
    - Added methodinfo hash to Fool.pm
    - Fixed MorningstarJP.pm (GH#443, GH#451)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.6600-1
changelog:
  - Update to 1.66
    - Modified CurrencyRates/CurrencyFreaks.pm to return from and to values
      instead of calculated rate
    - Removed Bloomberg.pm, Tiaacref.pm, Troweprice.pm
    - AlphaVantage: Return 'symbol not found' when no price data is returned
    - ASX: Changed error message when symbol isn't found (GH#497)
    - Added a new module to fetch the fund NAV from CMBChina (GH#494)
    - Added Cookie Jar to Comdirect user agent (GH#491)
    - Removed HU.pm, Oslobors.pm, and SEB.pm (GH#490)


author: Paul Howarth <paul@city-fan.org> - 1.6700-1
changelog:
  - Update to 1.67
    - Fixed ASEGR.pm; web site redesigned, URL used for data was no longer
      working (GH#509)
    - Fixed TesouroDireto.pm using Tesouro Transparente as data source (GH#527)
    - Added a new module to fetch data from SwissFundData (GH#515)
    - Handle no trade date in BorsaItaliana.pm (GH#528)
    - Added methodinfo() to MarketWatch.pm and BorsaItaliana.pm
    - Fixed MorningstarCH.pm
    - Fixed MorningstarUK.pm
  - Package new CONTRIBUTING.md file


author: Paul Howarth <paul@city-fan.org> - 1.6800-1
changelog:
  - Update to 1.68
    - Changes to AlphaVantage.pm and CurrencyRates/AlphaVantage.pm to throttle
      queries (GH#546)
    - YahooJSON.pm: Add additional fields/labels (GH#544)
    - New module USBonds.pm
    - MarketWatch.pm: Added headers to fix 401 code (GH#542)
    - Modified AEX.pm to return no data available if currency indicator is '%'
      (bonds return percentage of par/facevalue) (GH#539)
    - Fixed YahooWeb.pm (GH#533, GH#538)
    - Removed CMBChina.pm - no longer working (GH#534)
    - Rewrote Union.pm for URL that returns JSON (GH#516)
    - Modified parsing in BVB.pm (GH#513)


author: Paul Howarth <paul@city-fan.org> - 1.6900-1
changelog:
  - Update to 1.69
    - Sinvestor.pm: Trim whitespace before parsing date and price
    - XETRA.pm: Trim whitespace from date-time before extracting the actual date
      value (GH#557)
    - Modified Stooq.pm to send cookies
      - Stooq requires European visitors to their website to accept cookies
      - Cookies are set using JavaScript
      - Current version of module hard codes these cookies gleaned from a browser
        session
      - Added CurrencyRates/TwelveData.pm


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.22-1
changelog:
  - Update to 0.22
    - Improve several error messages
    - Allow unabbreviated IPv6 addresses
  - Use %{make_build} and %{make_install} where appropriate


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26 (rhbz#2374271)
    - cidrvalidate() should accept IPv6 addresses with one uncompressed 0


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Security: Fix IPv4 mapped IPv6 packed length (CVE-2026-40199)
    - Security: Reject invalid uncompressed IPv6 (CVE-2026-40198)


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.98.0-1
changelog:
  - 2.098 bump (rhbz#2335323)
  - PDL::Graphics2D removed - use PDL::Graphics::Simple or PDL::Graphics::TriD
  - move PDL::Graphics::State to PGPLOT distro
  - split PDL::Complex out to separate distro
  - split PDL::Graphics::Limits out to separate distro
  - split PDL::Graphics::TriD out to separate distro
  - split PDL::IO::Browser out to separate distro
  - split PDL::IO::Dicom out to separate distro
  - split PDL::IO::ENVI out to separate distro
  - split PDL::IO::GD out to separate distro
  - split PDL::IO::HDF out to separate distro
  - split PDL::IO::IDL out to separate distro
  - split PDL::Perldl2 out to separate distro
  - split PDL::Transform::Proj4 out to separate distro


author: Petr Pisar <ppisar@redhat.com> - 6.93-14
changelog:
  - Fix webirc check in connection configuration (CPAN RT#157738)
  - Remove non-free IETF documents from the package


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-3
changelog:
  - Add BR: gcc
  - Add ExcludeArch: %{ix86} for 44+, where valkey is missing for i686
  - Unset test envars


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-5
changelog:
  - Drop conditional around ExcludeArch, no i686 valkey build anywhere
  - Directly BR: valkey rather than valkey-compat-redis
  - Drop duplicate BR:


author: Petr Pisar <ppisar@redhat.com> - 0.15-36
changelog:
  - Correct a license to "(GPL-1.0-or-later OR Artistic-1.0-Perl) AND
    BSD-3-Clause"
  - Quallify bundled(mt19937ar) RPM provide with a release date
  - Package the tests


author: Paul Howarth <paul@city-fan.org> - 1.205-1
changelog:
  - Update to 1.205 (rhbz#2356679)
    - Add "use v5.12" to Test::Deep, just for clarity
    - Fix a test so that if an "A" module is in @INC, the tests still pass
  - Use %{make_build} and %{make_install}


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.006000-1
changelog:
  - Update to 2.006000.
  - Reflect perl(Reply::Plugin) having been added to Fedora.
  - Remove references to perl-Type-Tie.


author: Paul Howarth <paul@city-fan.org> - 1.33-1
changelog:
  - Update to 1.33
    - Replace the discouraged File::Slurp::Tiny with File::Slurper
    - Add a security policy file SECURITY.md
    - Update Makefile.PL to include both ExtUtils::MakeMaker and perl
  - Use %{make_build} and %{make_install}


author: Chris Adams <linux@cmadams.net> 0.22-2
changelog:
  - filter 'perl(DB)' from provides (just an internal debugger override)
  - tests don't actually use Test::Simple


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-10
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 8.4.15-2
changelog:
  - Fix GH-20528 regression breaks mysql connexion using an IPv6 address enclosed
    in square brackets (upstream patch)


author: Remi Collet <remi@remirepo.net> - 7.1.4-3
changelog:
  - update bundled bartlett/php-compatinfo-db to 6.12.0
  - update bundled dependencies
  - optional support build with composer-generators


author: Remi Collet <remi@remirepo.net> - 7.2.3-1
changelog:
  - update to 7.2.3
  - re-license spec file to CECILL-2.1
  - always build with composer-generators
  - update bundled bartlett/php-compatinfo-db to 6.16.0


author: Remi Collet <remi@remirepo.net> - 2.11.0-1
changelog:
  - update to 2.11.0
  - re-license spec file to CECILL-2.1
  - raise dependency on php-mock/php-mock-integration 3.0


author: Remi Collet <remi@remirepo.net> - 1.21.0-1
changelog:
  - update to 1.21.0
  - re-license spec file to CECILL-2.1
  - raise dependency on mongodb extension version 1.21


author: Remi Collet <remi@fedoraproject.org> - 3.7.0-14
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/Imagick/imagick/pull/690


author: Remi Collet <remi@fedoraproject.org> - 1.0.7-1
changelog:
  - update to 1.0.7
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - fix build with PHP 8.4 using patch from
    https://github.com/php/pecl-encryption-mcrypt/pull/19


author: Remi Collet <remi@fedoraproject.org> - 1.0.9-1
changelog:
  - update to 1.0.9
  - re-license spec file to CECILL-2.1
  - modernize the spec file
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.19.4-1
changelog:
  - update to 1.19.4
  - raise dependency on libbson and libmongc 1.27.6
  - raise dependency on libmongocrypt 1.10.1


author: Remi Collet <remi@remirepo.net> - 1.20.0-1
changelog:
  - update to 1.20.0
  - raise dependency on libbson and libmongc 1.28.0
  - raise dependency on libmongocrypt 1.11.0


author: Remi Collet <remi@remirepo.net> - 1.21.0-1
changelog:
  - update to 1.21.0
  - raise dependency on PHP 8.1
  - raise dependency on libbson and libmongc 1.30
  - raise dependency on libmongocrypt 1.12
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.0.0-1
changelog:
  - initial package for version 1.0.0 (PHP 8.4)
  - open https://github.com/php/pecl-text-pspell/pull/2 tests and version


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 5.6.1-1
changelog:
  - update to 5.6.1
  - re-license spec file to CECILL-2.1
  - raise dependency on PHP 7.4
  - raise dependency on phpdocumentor/type-resolver 1.7
  - add dependency on phpstan/phpdoc-parser
  - add dependency on doctrine/deprecations


author: Remi Collet <remi@remirepo.net> - 1.10.0-1
changelog:
  - update to 1.10.0
  - add dependency on phpstan/phpdoc-parser
  - add dependency on doctrine/deprecations


author: Remi Collet <remi@remirepo.net> - 11.0.7-1
changelog:
  - update to 11.0.7
  - raise dependency on nikic/php-parser 5.3.1
  - raise dependency on phpunit/php-file-iterator 5.1.0
  - raise dependency on sebastian/version 5.0.2


author: Remi Collet <remi@remirepo.net> - 11.0.12-1
changelog:
  - update to 11.0.12
  - raise dependency on nikic/php-parser 5.7.0
  - raise dependency on sebastian/environment 7.2.1
  - raise dependency on theseer/tokenizer 1.3.1


author: Remi Collet <remi@remirepo.net> - 12.5.0-1
changelog:
  - update to 12.5.0
  - raise dependency on nikic/php-parser 5.6.1
  - raise dependency on theseer/tokenizer 1.3.1


author: Remi Collet <remi@remirepo.net> - 12.5.1-1
changelog:
  - update to 12.5.1
  - raise dependency on nikic/php-parser 5.7.0
  - raise dependency on theseer/tokenizer 2.0.1
  - add upstream patch for theseer/tokenizer 2.x


author: Remi Collet <remi@remirepo.net> - 5.0.0-1
changelog:
  - update to 5.0.0
  - raise dependency on PHP 8.2
  - rename to php-phpunit-php-file-iterator5
  - move to /usr/share/php/SebastianBergmann/FileIterator5


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.3
  - rename to php-phpunit-php-file-iterator6
  - move to /usr/share/php/SebastianBergmann/FileIterator6


author: Remi Collet <remi@remirepo.net> - 3.0.0-1
changelog:
  - update to 3.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-cli-parser3
  - move to /usr/share/php/SebastianBergmann/CliParser3


author: Remi Collet <remi@remirepo.net> - 4.0.0-1
changelog:
  - update to 4.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-cli-parser4
  - move to /usr/share/php/SebastianBergmann/CliParser4


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - raise dependency on sebastian/diff 7
  - raise dependency on sebastian/exporter 7
  - rename to php-sebastian-comparator7
  - move to /usr/share/php/SebastianBergmann/Comparator7


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-environment7
  - move to /usr/share/php/SebastianBergmann/Environment7


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-environment8
  - move to /usr/share/php/SebastianBergmann/Environment8


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.2
  - raise dependency on sebastian/recursion-context 6
  - rename to php-sebastian-exporter6
  - move to /usr/share/php/SebastianBergmann/Exporter6


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - raise dependency on sebastian/recursion-context 7
  - rename to php-sebastian-exporter7
  - move to /usr/share/php/SebastianBergmann/Exporter7


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.2
  - raise dependency on sebastian/object-reflector 4
  - raise dependency on sebastian/recursion-context 6
  - rename to php-sebastian-global-state7
  - move to /usr/share/php/SebastianBergmann/GlobalState7


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.3
  - raise dependency on sebastian/object-reflector 5
  - raise dependency on sebastian/recursion-context 7
  - rename to php-sebastian-global-state8
  - move to /usr/share/php/SebastianBergmann/GlobalState8


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-recursion-context6
  - move to /usr/share/php/SebastianBergmann/RecursionContext6


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-recursion-context7
  - move to /usr/share/php/SebastianBergmann/RecursionContext7


author: Remi Collet <remi@remirepo.net> - 5.0.0-1
changelog:
  - update to 5.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-type5
  - move to /usr/share/php/SebastianBergmann/Type5


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-type6
  - move to /usr/share/php/SebastianBergmann/Type6


author: Remi Collet <remi@remirepo.net> - 2.0.1-1
changelog:
  - update to 2.0.1
  - rename to php-theseer-tokenizer2
  - install /usr/share/php/TheSeer/Tokenizer2
  - raise dependency on PHP 8.1


author: Remi Collet <remi@remirepo.net> - 3.2.2-1
changelog:
  - update to 3.2.2
  - re-license spec file to CECILL-2.1
  - raise dependency on php 7.2
  - switch to phpunit11


author: Remi Collet <remi@remirepo.net> - 5.2.3-1
changelog:
  - update to 5.2.3 (2025-10-08, bugfix release)
  - fix patch to system CA certificates
  - always build with composer-generators


author: Remi Collet <remi@remirepo.net> - 11.5.51-1
changelog:
  - update to 11.5.51
  - raise dependency on phpunit/php-file-iterator 5.1.1
  - re-add dependency on sebastian/recursion-context 6.0.3


author: Remi Collet <remi@remirepo.net> - 12.5.19-1
changelog:
  - update to 12.5.19
  - raise dependency on phpunit/php-code-coverage 12.5.5
  - raise dependency on sebastian/comparator 7.1.5


author: Remi Collet <remi@remirepo.net> - 12.5.21-1
changelog:
  - update to 12.5.21
  - raise dependency on phpunit/php-code-coverage 12.5.6
  - raise dependency on sebastian/environment 8.1.0


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Hans de Goede <hdegoede@redhat.com> - 24.004.60-17
changelog:
  - Fix Dvorak layout icon not showing when the evdev keyboard driver is used
    (rhbz#2341810)
  - Fix label plugin not finding fonts
  - Add UseSimpledrm setting support to configfile (rhbz#2346150)


author: Hans de Goede <hdegoede@redhat.com> - 24.004.60-18
changelog:
  - Update simpledrm hiDPI scaling heuristics (rhbz#2347519)
  - Ignore simpledrm when EFI fb is running at 1024x768/800x600
    (rhbz#2347519)
  - Update spinner theme to match latest libadwaita spinner (rhbz#2325399)


author: Hans de Goede <hansg@kernel.org> - 24.004.60-19
changelog:
  - Don't use simpledrm together with LUKS (rhbz#2359283, rhbz#2339072)
  - Fix crash when using 2 GPUs with displays attached (rhbz#2368186)
  - Fix crash caused by calling ply_event_loop_watch_fd () with a -1 fd
    (rhbz#2370979)
  - Fix /usr/lib64/plymouth/tribar dir not being owned (rhbz#2279776)
  - Fix keymap and capslock icons not shown on monitor on second GPU
    (rhbz#2375854)
  - Make the prompt on the diskunlock screen look a bit better (rhbz#2356893)
  - Add patches from upstream to fix messages being logged twice on serial
    consoles


author: Sérgio Basto <sergio@serjux.com> - 0.71-3
changelog:
  - Disable tests again, randomly they fail with Charset "CHARSET" is not a
    portable encoding name. Message conversion to user's charset might not work.


author: Jan Pazdziora <adelton@fedoraproject.org> - 1.5.0-1.1
changelog:
  - Workaround configuration error: `project.license` must be valid exactly by one definition (2 matches found)


author: Jan Rybar <jrybar@redhat.com> - 124-4
changelog:
  - pkla-compat is now recommends: pkla is obsolete and binaries are run every time
  - polkitbackend watches only session changes to reduce cpu usage
  - PolkitPermission: only sessions that really changed state send CheckAuthorization


author: Jerry James <loganjerry@gmail.com> - 5.9.1-1
changelog:
  - Version 5.9.1
  - Drop upstreamed patch to fix segfault in the bytecode interpreter
  - Stop building for 32-bit x86


author: Marek Kasik <mkasik@redhat.com> - 25.02.0-2
changelog:
  - Move isOk() check inside JBIG2Bitmap::combine
  - PSStack::roll: Protect against doing int = -INT_MIN
  - Resolves: #2357815, #2357819


author: Marek Kasik <mkasik@redhat.com> - 25.02.0-3
changelog:
  - Fix timeToStringWithFormat buffer length
  - See these links for details:
  -   https://bugzilla.redhat.com/show_bug.cgi?id=2386218#c8
  -   https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1824/diffs


author: Filip Janus <fjanus@redhat.com> - 16.9-2
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
  - Add tmpfiles.d configuration file definition


author: Julio Faracco <jfaracco@redhat.com> - 3.3.0-1
changelog:
  - Adds improvements related to containerized workflows (3.3)
  - Adds mmap/munmap to resource tracking (3.2)
  - Adds ability to specify multiple comma separated signals (3.1)
  - Adds the new -mc switch which controls what type of memory is included in the core dumps (3.1)
  - Adds resource tracking and reporting feature (3.0)
  - Adds Azure Linux package (2.2)
  - Fixes memory leaks (2.2)


author: Julio Faracco <jfaracco@redhat.com> - 3.4.1-1
changelog:
  - Removes the ':' separator for the date/time section of the generated core dump filename, aligning across operating systems
  - Monitor: remove useless variables


author: Julio Faracco <jfaracco@redhat.com> - 3.5.0-1
changelog:
  - Add logging for missing symbols in restrack callstacks
  - Fix dotnet socket PID matching to prevent conflicts between processes
  - Updating trigger docs and removing unused condition in Monitor
  - Add manual trigger support for restrack snapshots
  - Use prctl syscall to enable ptrace + replace stress-ng with custom stress cpu/mem code


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.0-2
changelog:
  - Address https://github.com/prusa3d/PrusaSlicer/issues/13694 and
    https://github.com/prusa3d/PrusaSlicer/issues/13805 with
    https://github.com/prusa3d/PrusaSlicer/pull/13896.


author: Dominik Mierzejewski <rpm@greysector.net> - 2.4.6-20
changelog:
  - fix some new SELinux AVC denials
  - drop old Obsoletes
  - limit build dependency on systemd to macro subpackage


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.0-1
changelog:
  - buildinstall: Add support for rootfs-type lorax option (lsedlar)
  - scm: Stop trying to download src arch (lsedlar)
  - extra_isos: Provide arch to extra files getter (lsedlar)
  - Move temporary buildinstall download to work/ (lsedlar)
  - Download extra files from container registry (lsedlar)
  - Remove python 2.7 dependencies from setup.py (lsedlar)
  - util: Drop dead code (lsedlar)
  - Directly import mock from unittest (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.1-1
changelog:
  - util: Fix typo in regex for container digests (lsedlar)
  - Resolve container tags to digests (lsedlar)
  - kojiwrapper: Remove unused code (lsedlar)
  - Add basic telemetry support (lsedlar)
  - Reorder ostree and ostree_installer phases (hlin)
  - Fix test data generation script (lsedlar)
  - extra_isos: Mention all extra files in the manifest (lsedlar)
  - scm: Add retries to container-image download (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.2-1
changelog:
  - Drop compatibility with Koji < 1.32 (lsedlar)
  - kiwibuild: Add support for use_buildroot_repo option (lsedlar)
  - gather: Resolve symlinks before linking packages (lsedlar)
  - Make requests instrumentation optional (lsedlar)
  - Fix incorrect log line (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.3-1
changelog:
  - Recognize wsl2 images produced by koji (lsedlar)
  - Specify data_files with relative paths (lsedlar)
  - Crossreference `koji_cache` from the Koji cache page (ahills)
  - Add documentation for `koji_cache` configuration (ahills)
  - Record exceptions for top level OTel span (lsedlar)
  - Update spec to match current python packaging guidelines


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.0-1
changelog:
  - Add more tracing to kojiwrapper (lsedlar)
  - phases: implement image-builder (supakeen)
  - Add a tracing span around call to skopeo inspect (lsedlar)
  - Add retries to skopeo inspect calls (lsedlar)
  - otel: Explicitly initialize telemetry provider and tracer (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.1-1
changelog:
  - osbuild: Handle wsl2 images (lsedlar)
  - repoclosure: Clean up cache for dnf5 (lsedlar)
  - Ignore errors for rmtree after archive extraction (dhodovsk)
  - imagebuilder: accept `manifest_type` (supakeen)
  - Add a telemetry span over image building threads (lsedlar)
  - Add specific exception for skopeo copy (lsedlar)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> - 8.10.0-1
changelog:
  - Update to 8.10.0 (fixes rhbz#2291351)
  - Ruby 3.3 regexp incompability bugfix (fixes rhbz#2280109)
  - Ruby 3.4 closedir bugfix (fixes rhbz#2349352)


author: Michael J Gruber <mjg@fedoraproject.org> - 3.57-1
changelog:
  - Upgrade to version 3.57 (rhbz#2271663)
  - fmt: fix newer black
  - backlight module: add brightnessctl support
  - conky module: workaround upstream issues/1479
  - volume_status module: fix for default source with pamixer


author: Michael J Gruber <mjg@fedoraproject.org> - 3.58-1
changelog:
  - Upgrade to version 3.58 (rhbz#2284194)
  - conky module: skip invalid conky errors
  - weather_owm module: switch to 3.0 API endpoint as 2.5 is deprecated


author: Michael J Gruber <mjg@fedoraproject.org> - 3.59-1
changelog:
  - Upgrade to version 3.59 (rhbz#2302675)
  - core: strip whitespaces from OUTPUT, OUTPUT_PART events
  - external_script module: fix clicking on parts of message
  - mpris module: fix kdeconnect interaction


author: Michael J Gruber <mjg@fedoraproject.org> - 3.60-1
changelog:
  - Upgrade to version 3.60 (rhbz#2321559)
  - external_script module: add composite placeholder
  - playerctl module: hide non-can-play players and use chrome and chromium
    as default value


author: Michael J Gruber <mjg@fedoraproject.org> - 3.61-1
changelog:
  - Upgrade to version 3.61 (rhbz#2330535)
  - argparsers: pgrep i3 with shmlog
  - modules: fix SyntaxWarning for python 3.12+
  - conky module: fix tempfile and ignore new output
  - mpris module: hide all non can_play players
  - playerctl module: gi.require_version notification fix


author: Michael J Gruber <mjg@fedoraproject.org> - 3.62-1
changelog:
  - Upgrade to version 3.62 (rhbz#2368349)
  - py3: add new helper: get_replacements_list
  - conky module: add fallback delete parameter for py3.11 or less
  - external_script module: adjust how urgent is specified
  - external_script module: allow scripts to specify urgent
  - mpris module: implement track number support
  - mpris module: use new helper: get_replacements_list
  - various fixes


author: Adam Williamson <awilliam@redhat.com> - 1.0.3-16
changelog:
  - Backport #1964 (partial) and #2361 (rebased) to fix build with Python 3.14
  - Rebuilt for Python 3.14


author: Adam Williamson <awilliam@redhat.com> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - Drop patches merged upstream
  - Backport more patches to fix build/tests and a FICS bug with Python 3.13+


author: José Matos <jamatos@fedoraproject.org> - 2.4.0-2
changelog:
  - All the changes below come from Jerry James <loganjerry@gmail.com> (from Fri Feb 23 2024)
  - Use virtual Provides instead of empty packages
  - Link with flexiblas instead of gslcblas
  - Move documentation into a doc subpackage
  - Various minor spec file cleanups
  - Add patch to fix FTBFS on big endian systems


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Jerry James <loganjerry@gmail.com> - 2.6.4-1
changelog:
  - Version 2.6.4
  - Drop upstreamed remove-redundant-ref patch
  - Drop upstreamed workaround for swig 4.3
  - Add patch for incompatible pointer types
  - Add patch for incompatible format specifiers


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 1.19.0-1
changelog:
  - Add -d option for %pyproject_buildrequires and %pyproject_wheel to specify a working directory
  - Fixes: rhbz#2371389


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-2
changelog:
  - Security fixes for CVE-2025-47273, CVE-2024-47081 and CVE-2025-50181
  - Fixes: rhbz#2367430, rhbz#2372476, rhbz#2373817


author: Miro Hrončok <miro@hroncok.cz> - 7.3.19-1
changelog:
  - Fork pypy3.11 from pypy3.10
  - Make this the main pypy3 on Fedora 42+
  - Obsolete the removed pypy3.9 packages


author: Michael J Gruber <mjg@fedoraproject.org> - 1.25.1-1
changelog:
  - Update to new upstream release 1.25.1 (rhbz#2300000)
  - Various accumulated fixes
  - adjust to tesseract package split
  - remove now optional fonttools dependency


author: Michael J Gruber <mjg@fedoraproject.org> - 1.25.3-1
changelog:
  - Update to new upstream release 1.25.3 (rhbz#2338636)
  - various bugfixes
  - annotations: support rich text
  - add miter_limit arg to insert_text*()
  - sdd Widget Support to `Document.insert_pdf()`


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.3-1
changelog:
  - Update to new upstream release 1.26.3 (rhbz#2352615)
  - Compatibility with mupdf 1.26.3.
  - Various bugfixes.
  - Support image stamp annotations.
  - Support recoloring pages.
  - Support table cell markdown.


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.0.6-1
changelog:
  - Update to latest upstream release (closes rhbz#2338907)
  - Fix CVE-2025-24359 (closes rhbz#2341976)


author: Sandro <devel@penguinpee.nl> - 1.6.2-8
changelog:
  - Apply patches for Python 3.13 (RHBZ#2276611)
  - Drop dependency on future
  - Fix indentation in docstring


author: Sandro <devel@penguinpee.nl> - 1.7.0-1
changelog:
  - Update to 1.7.0 (RHBZ#2307372)
  - Drop patches (merged upstream)
  - Use tag instead of commit (releases are tagged now)


author: Sandro <devel@penguinpee.nl> - 1.8.0-1
changelog:
  - Update to 1.8.0 (RHBZ#2364087)
  - Add 'scipy' extra
  - Read dependencies from defined extras
  - Add tutorial to docs


author: Cleber Rosa <crosa@redhat.com> - 92.3-1
changelog:
  - Updated to 92.3
  - Support building and running under Python 3.13 for F42
  - Removed patch from 92.1 as its present in 92.3


author: Cleber Rosa <crosa@redhat.com> - 112.0-1
changelog:
  - Sync with upstream release 112.0
  - Removed python3-elementpath build requirement
  - Made the remote spawner a proper sub package
  - Packaged JSON schema files
  - Introduced new sub package for mail plugin
  - Removed the pinning of markupsafe on Fedora 42 and later
  - Packaged avocado-runner-pip
  - Packaged avocado-runner-vmimage
  - Provide requirements for running the functional test
    nrunner.py:TaskRunStatusService.test_task_status_service_lost
  - Require gcc, gdb and gdb-gdbserver for tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.10-1
changelog:
  - Update to 0.1.10 (close RHBZ#2435502)
  - Starting in Fedora 44, drop the PDF manual and the -doc subpackage


author: Scott K Logan <logans@cottsay.net> - 1.1.0-1
changelog:
  - Update to 1.1.0 (rhbz#2394423)
  - Replace macro use in URL/Source0 fields for spec legibility
  - Move doc subpackage after python3 so %{summary} resolves correctly


author: Jakub Kadlcik <frostyx@email.cz> 1.132-1
changelog:
  - Discourage from deleting objects while paginating over them
  - Suggest pagination only when a GET request timeouts


author: Jakub Kadlcik <frostyx@email.cz> 2.2-1
changelog:
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove rhel7 conditions and remove python2 support


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Use correct used HTTP methods for delete and update requests
  - Introduce v3.requests.DELETE method


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Don't traceback new-api-token for default config
  - Bypass anubis challenge by setting copr user agent
  - Use Tito to generate component.__version__


author: Michel Lind <salimma@fedoraproject.org> - 4.2.14-1
changelog:
  - Update to 4.2.14 to address multiple CVEs
  - resolves CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, CVE-2024-39614


author: Michel Lind <salimma@fedoraproject.org> - 4.2.20-1
changelog:
  - Update to version 4.2.20; Fixes: RHBZ#2350882
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 4.2.22-1
changelog:
  - Update to version 4.2.22
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path
  - Revert setuptools bump; we don't need it and don't have the needed
    version
  - Rebase Python 3.13 patch


author: Michel Lind <salimma@fedoraproject.org> - 4.2.27-1
changelog:
  - Update to version 4.2.27
  - Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column
    aliases on PostgreSQL
  - Fixes CVE-2025-64460: Potential denial-of-service vulnerability in XML
    Deserializer
  - Fixes CVE-2025-64459: Potential SQL injection via _connector keyword
    argument (4.2.26)
  - Fixes CVE-2025-59681: Potential SQL injection in QuerySet.annotate(),
    alias(), aggregate(), and extra() on MySQL and MariaDB (4.2.25)
  - Fixes CVE-2025-59682: Potential partial directory-traversal via
    archive.extract() (4.2.25)
  - Fixes CVE-2025-57833: Potential SQL injection in FilteredRelation column
    aliases (4.2.24)


author: Michel Lind <salimma@fedoraproject.org> - 4.2.28-1
changelog:
  - Update to version 4.2.28
  - Fixes CVE-2025-13473: Username enumeration through timing difference in
    mod_wsgi authentication handler
  - Fixes CVE-2025-14550: Potential denial-of-service vulnerability via
    repeated headers when using ASGI
  - Fixes CVE-2026-1207: Potential SQL injection via raster lookups on
    PostGIS
  - Fixes CVE-2026-1285: Potential denial-of-service vulnerability in
    django.utils.text.Truncator HTML methods
  - Fixes CVE-2026-1287: Potential SQL injection in column aliases via
    control characters
  - Fixes CVE-2026-1312: Potential SQL injection via QuerySet.order_by and
    FilteredRelation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.3.1-33
changelog:
  - F41+: Use the provisional pyproject declarative buildsystem
  - Since this is only for F41+, drop EPEL conditionals
  - Always run an import-only smoke test; add a bcond vtk_dep for optionally
    including VTK integration modules in this


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.2-5
changelog:
  - Drop unused test dependency on deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Jerry James <loganjerry@gmail.com> - 1.17.2-3
changelog:
  - Change ExcludeArch to ExclusiveArch
  - Limits the build to arches with working binary builders
  - Allows installation on any arch


author: Jerry James <loganjerry@gmail.com> - 3.0.1-1
changelog:
  - Version 3.0.1
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patch for python 3.13 support


author: Jerry James <loganjerry@gmail.com> - 4.0.3-1
changelog:
  - Version 4.0.3
  - Add patch to avoid incompatible version of @types/d3-dispatch
  - Add patch to work around a typescript error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.4.5-1
changelog:
  - Starting with Fedora 43, do not build PDF documentation
  - Drop the -doc subpackage (again, starting with Fedora 43)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.26-2
changelog:
  - Add a weak dependency on python3-jsonschema
  - Remove testing workaround for formerly-missing JSON schema file


author: Jerry James <loganjerry@gmail.com> - 4.9.1-1
changelog:
  - Version 4.9.1
  - Fixes CVE-2024-21506 (rhbz#2273860)
  - Fixes CVE-2024-5629 (rhbz#2290587)
  - Modernize the spec file
  - Fix up the license information
  - Add check script
  - Package the ocsp, snappy, and zstd extras
  - Build docs for Fedora only
  - Permit use of pytest-asyncio 0.23 until Fedora can catch up


author: Miro Hrončok <miro@hroncok.cz> - 74.1.0-1
changelog:
  - Update to 74.1.0
  - The `setup.py test` command no longer works
  - The License now includes LGPL-3.0 (bundled python3dist(autocommand))


author: Miro Hrončok <miro@hroncok.cz> - 1:0.44.0-2
changelog:
  - CI: Update the list of tests
  - Remove retired Pythons
  - Add Python 3.14
  - Remove virtualenv test for 3.6 as virtualenv in F42+ no longer supports
    3.6


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.1-2
changelog:
  - Use pytest instead of deprecated pytest-runner
  - Actually run the tests
  - Port to pyproject-rpm-macros and add extras metapackages
  - Omit unwanted coverage-analysis dependencies


author: Sandro <devel@penguinpee.nl> - 1.4.0-1
changelog:
  - Update to 1.4.0 (RHBZ#2348983)
  - Remove conditionals for EOL release
  - Review and update versions of bundled fonts
  - Drop dependency on `fontawesome4-fonts-web`


author: Adam Williamson <awilliam@redhat.com> - 2.4.0-2
changelog:
  - Backport PR #1377 to fix tests with Python 3.13
  - Run tests with -n auto to avoid hang (GH #1369)
  - Rebuilt for Python 3.13


author: Paul Wouters <paul.wouters@aiven.io> - 2:1.38.0-1
changelog:
  - Update to 1.38.0 to address CVE-2026-21226
  - Resolves: rhbz#2404058 - python-azure-core-1.38.0 is available


author: Michel Lind <salimma@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 upstream release
  - Resolves: rhbz#2229363
  - Resolves: CVE-2026-31899
  - Enable Packit
  - Drop unneeded test shenanigans
  - Enforce that license is preinstalled, stop installing by hand


author: Mattia Verga <mattia.verga@proton.me> - 4.0.0-1
changelog:
  - Update to 4.0.0 (fedora#2276851)
  - Removed documentation subpackage due to missing required build tools
  - Drop i686 build


author: Miro Hrončok <miro@hroncok.cz> - 2024.08.30-4
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337319


author: Scott K Logan <logans@cottsay.net> - 0.18.1-1
changelog:
  - Update to 0.18.1 (rhbz#2300129)
  - Drop RHEL 7 spec support
  - Use boolean operators for backwards compatibility package dependencies


author: Karolina Surma <ksurma@redhat.com> - 1.3.0-2
changelog:
  - Read the runtime depedencies from pyproject.toml
  - w gets the dependencies by building the wheel which is time- and
    resource-consuming, and done twice during one package build (again in the
    %build phase). Instead, -p reads the dependencies from the [project]
    table in pyproject.toml which is a part of the sdist.


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Specify reason for running createrepo
  - Improve robustness and cooperation between backend and rpmbuild
  - Remove license classifier
  - Modernize specfile using pyproject macro


author: Jakub Kadlcik <frostyx@email.cz> 1.6-1
changelog:
  - Do not traceback in SafeRequest if log= is not set
  - Use SafeRequest.timeout only as a timeout per request
  - use Tito to generate component.__version__


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 2.8-1
changelog:
  - Update python-crc32c package to version 2.8
  - Bump version from 2.7.1 to 2.8
  - Remove bcond tests conditional compilation flag
  - Remove build requirement wheel and pytest which is already provided
    dynamically
  - Simplify buildrequires generation with -g test flag
  - Add manual page generation using help2man
  - Remove conditional test execution (always run tests now)
  - Update file list in the %files section
  - Clean up spec file formatting and remove unnecessary blank lines


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.0.11-4
changelog:
  - On 32-bit (ix86), reduce debuginfo level in %check
  - Fixes RHBZ#2339845 by avoiding memory exhaustion in test_many_expressions


author: Miro Hrončok <miro@hroncok.cz> - 3.0.11-5
changelog:
  - Avoid accidentally including bogus *.txt files as documentation
  - Include README.rst and CHANGES.rst instead


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - templates: Add gsd-rfkill (thanks Guido Günther)
  - Allow adding objects derived from DBusMockObject (thanks Sebastian Wick)
  - Drop Python <= 3.7 support (thanks Tomasz Kłoczko)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - modemmanager: Add operator code (thanks Guido Günther)
  - modemmanager: Allow to set CellBroadcast channel list (thanks Guido Günther)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - mockobject: Fix _wrap_in_dbus_variant for Struct and Dict types (thanks Sebastian Wick)
  - Drop setup.{cfg,py} and RHEL 9 support, move to pybuild (rhbz#2377609)
  - Drop iio-sensor-proxy tests, the template is broken (see #241)


author: Packit <hello@packit.dev> - 0.37.0-1
changelog:
  - templates: Drop iio-sensors-proxy (See #241)
  - DBusTestCase: Drop obsolete {start,stop}_dbus() methods
  - Fix dbus-daemon startup race condition (Debian#1109272)


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - polkitd: Add RegisterAuthenticationAgentWithOptions
  - logind: Add SetWallMessage
  - README: Update outdated and broken examples, move to addCleanup()
  - Move all license comments to SPDX-License-Identifier


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Michel Lind <salimma@fedoraproject.org> - 5.1.7-1
changelog:
  - Update to version 5.1.7; Fixes: RHBZ#2350881
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 5.1.8-1
changelog:
  - Update to 5.1.8
  - On Windows, this fixes CVE-2025-27556. Mentioning for compleness
  - Fixes a regression in Django 5.1.7 affecting
    LogEntryManager.log_actions() - #36234
  - Remove legacy symlinks


author: Michel Lind <salimma@fedoraproject.org> - 5.2.2-1
changelog:
  - Update to 5.2.2
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path


author: Michel Lind <salimma@fedoraproject.org> - 5.2.4-1
changelog:
  - Update to version 5.2.4
  - Skip test_strip_tags and test_parsing_errors on Python 3.14; Fixes:
    RHBZ#2374042


author: Michel Lind <salimma@fedoraproject.org> - 5.2.9-1
changelog:
  - Update to version 5.2.9
  - Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column
    aliases on PostgreSQL
  - Fixes CVE-2025-64460: Potential denial-of-service vulnerability in XML
    Deserializer
  - Fixes CVE-2025-64459: Potential SQL injection via _connector keyword
    argument (5.2.8)
  - Fixes CVE-2025-59681: Potential SQL injection in QuerySet.annotate(),
    alias(), aggregate(), and extra() on MySQL and MariaDB (5.2.7)
  - Fixes CVE-2025-59682: Potential partial directory-traversal via
    archive.extract() (5.2.7)
  - Fixes CVE-2025-57833: Potential SQL injection in FilteredRelation column
    aliases (5.2.6)


author: Michel Lind <salimma@fedoraproject.org> - 5.2.11-1
changelog:
  - Update to version 5.2.11; Resolves: RHBZ#2427483
  - `python-django5` is now the alternate `python3-django5` on Fedora 44+,
    `python3-django` is now Django 6.x
  - Fixes CVE-2025-13473: Username enumeration through timing difference in
    mod_wsgi authentication handler
  - Fixes CVE-2025-14550: Potential denial-of-service vulnerability via
    repeated headers when using ASGI
  - Fixes CVE-2026-1207: Potential SQL injection via raster lookups on
    PostGIS
  - Fixes CVE-2026-1285: Potential denial-of-service vulnerability in
    django.utils.text.Truncator HTML methods
  - Fixes CVE-2026-1287: Potential SQL injection in column aliases via
    control characters
  - Fixes CVE-2026-1312: Potential SQL injection via QuerySet.order_by and
    FilteredRelation
  - Fixed a bug in Django 5.2 where data exceeding max_length was silently
    truncated by QuerySet.bulk_create() on PostgreSQL
  - Fixed a bug where management command colorized help (introduced in Python
    3.14) ignored the --no-color option and the DJANGO_COLORS setting


author: Michel Lind <salimma@fedoraproject.org> - 1.0.6-1
changelog:
  - Update to version 1.0.6
  - Audited licensing; LicenseRef-Callaway-BSD -> BSD-2-Clause AND CC-BY-4.0
    AND CC0-1.0
  - Stop using deprecated Python macros; Fixes: RHBZ#2377641


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.2.0-7
changelog:
  - Completely modernize (and greatly simplify) the packaging
  - Use pyproject-rpm-macros (fix RHBZ#2377674)
  - Package from the GitHub archive instead of the PyPI sdist
  - Run the tests
  - Use the provisional pyproject declarative buildsystem


author: Jos de Kloe <josdekloe@gmail.com> 2.45.0-1
changelog:
  - move to upstream release 2.45.0
   (skipped version 2.44.0 due to bug https://github.com/ecmwf/eccodes-python/issues/145)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.115.10-3
changelog:
  - Fix boostrapping
  - Break the circular dep. with python-sqlmodel
  - Don’t run test_fastapi_cli when bootstrapping


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.115.10-4
changelog:
  - Improve conditionalized build dependencies
  - Make sure they work as advertised, together or separately
  - Add conditionals for some things that are missing in EPEL10 so we can
    more easily see what would be required to branch there; however, nobody
    has yet requested this package in EPEL10, we have no concrete plans to
    branch it there, and we still lack some hard dependencies


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Fix Source URL (frostyx@email.cz)
  - Unify descriptions and mention querying bodhi (frostyx@email.cz)
  - Link fedfind project (frostyx@email.cz)
  - make repository REUSE compliant (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Drop bodhi-client dependency (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - Show how to get only version numbers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.3-1
changelog:
  - Make sure everything behaves correctly during the branching window
    (frostyx@email.cz)
  - Add releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.5-1
changelog:
  - Implement a caching mechanism (frostyx@email.cz)
  - Return bodhi releases as simple dicts (frostyx@email.cz)
  - Add CLI (mfocko@redhat.com)
  - Use pagination for bodhi's API (carlwgeorge@gmail.com)
  - Combine HTTP calls in bodhi_active_releases (carlwgeorge@gmail.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.7-1
changelog:
  - Exclude archived releases (nforro@redhat.com)
  - Generate aliases for minor versions of EPEL (nforro@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.8-1
changelog:
  - Implement a filter_distro helper function (frostyx@email.cz)
  - Test EPEL minor version aliases after 10.1 branching (nforro@redhat.com)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.8-2
changelog:
  - Drop manual BuildRequires on scikit-image
  - Remove the scikit_image_tests build conditional, as it no longer works
  - Re-enable some still-disabled scikit-image tests in Fedora 42


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:2.41.1-2
changelog:
  - Migrate to pyproject-rpm-macros (fix RHBZ#2377753)
  - Add missing extras metapackages
  - Run the tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.0-1
changelog:
  - Update to 4.0.0 (close RHBZ#2341728)
  - Remove conditionals for Fedora 40, since this version will never ship
    there
  - Print reasons for skipped tests


author: Georg Sauthoff <mail@gms.tf> - 1.0.3-2
changelog:
  - update to version 1.0.3 which introduces Internetmarke REST API support
    to Fedora (fixes fedora#2401093)
  - migrate to modern set of python build macros (fixes fedora#2377798)


author: Jerry James <loganjerry@gmail.com> - 0.9-37.20231204.a6987c8
changelog:
  - Rebuild for polymake 4.15
  - Add patch to fix polymake shell usage
  - Add patches to fix compiler warnings
  - Use the pyproject declarative buildsystem


author: Jerry James <loganjerry@gmail.com> - 0.16-31.20180129.7049940
changelog:
  - Rebuild for polymake 4.15
  - Add patch with unreleased changes from upstream
  - Add Provides to reflect bundled three.js
  - Use the pyproject declarative buildsystem


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: rhbz#2414551
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: rhbz#2414553


author: Danny Colin <contact@dannycolin.com> - 0.32.0-1
changelog:
  - New upstream release (0.32.0)
  - Recommend python3-dbus-fast which replace python3-dbus-next
  - Add xterm as a build requirement for the test suite
  - Add python3-pywlroots as a build requirement for the Wayland package


author: Michel Lind <salimma@fedoraproject.org> - 1.4.3-1
changelog:
  - Update to 1.4.3 upstream release
  - Resolves: rhbz#2337263
  - Exclude tests that require griffe
  - Deselect one failed test


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 1.0.7-3
changelog:
  - fix: ignore batchtools import
  - this requires packaging batchtk which netpyne upstream seems to have
    bundled into netpyne post release


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.18-3
changelog:
  - Revert "Fix automatic provides on Python extension due to SONAME"
  - The fix is in rust-1.81.0-4 and later, which is now in all stable
    branches, so this workaround is no longer necessary.


author: Packit <hello@packit.dev> - 0.56.0-1
changelog:
  - Tmt documentation has been extended. (#937)
  - Support for forgejo commit statuses has been added. (#936)
  - The package ogr/abstract has been split into multiple files. (#935)
  - Resolves: rhbz#2389723


author: Packit <hello@packit.dev> - 0.56.1-1
changelog:
  - We now use httpx when making requests from our Forgejo implementation. (#941)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.57.0-1
changelog:
  - We have fixed an issue with the new Forgejo version preventing ogr from working. (#949)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.58.0-1
changelog:
  - `PagureService` now accepts an optional `user_agent` argument to set a custom User-Agent header. (#953)
  - It is now possible to pass a `headers` argument in `PagureProject.get_file_content`. The default header is set to `Accept: text/plain`. (#954)
  - Resolves: rhbz#2420049


author: Packit <hello@packit.dev> - 0.59.0-1
changelog:
  - Improved handling of retries after errors to avoid hitting rate limits if possible. (#958)
  - `GithubPullRequest.labels` property is now cached for better performance and to be consistent with other services. (#960, #961)
  - Resolves: rhbz#2422233


author: Packit <hello@packit.dev> - 0.60.0-1
changelog:
  - A new method `get_rate_limit_remaining()` to check rate limit thresholds has been added to the service API. (#970)
  - Resolves: rhbz#2430818


author: Packit <hello@packit.dev> - 0.60.1-1
changelog:
  - The method `get_rate_limit_remaining()` now also supports repository-specific checks for GitHub. (#972)
  - Resolves: rhbz#2435481


author: Packit <hello@packit.dev> - 0.61.1-1
changelog:
  - Force downstream synchronization of upstream configuration to enable side tagging in EPEL 10.
  - Resolves: rhbz#2437993


author: Adam Williamson <awilliam@redhat.com> - 2.0.2-13
changelog:
  - Backport PR #47 to drop use of (and undeclared dep on) six
  - Backport PR #49 to drop unused footgun pam.py


author: Sandro <devel@penguinpee.nl> - 2.3.3-2
changelog:
  - limit number of tests
  - patch tests accomodating changes in dependencies
  - drop pytz and xarray as BRs (both optional)
  - Close RHBZ#2332196


author: Vojtech Trefny <vtrefny@redhat.com> - 0.25-1
changelog:
  - Remove unneeded IAstroidChecker (bcl)
  - Replace check_messages decorator with only_required_for_messages (bcl)
  - spec: Change license string to the SPDX format required by Fedora (vtrefny)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.9.0-23
changelog:
  - “Fake” the PULP_CBC_CMD solver using coin-or-Cbc
  - Work around a regression with coin-or-HiGHS 1.12


author: Michel Lind <salimma@fedoraproject.org> - 0.2.6-1
changelog:
  - Update to 0.2.6 upstream release
  - Drop unneeded extra sources and backported patches
  - Resolves: rhbz#2386020


author: Michel Lind <salimma@fedoraproject.org> - 0.3.2-2
changelog:
  - Disable update_readme_test, brings in additional dependency
  - Ship license text; update doc filenames


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.8.1-3
changelog:
  - While testing, do not error on warnings
  - Backport fixes for deprecation warnings, etc. with Pydantic 2.11


author: Jos de Kloe <josdekloe@gmail.com> 2.1.7-2
changelog:
  - Fall back to py3_build/py3_install macros since the pyproject
    are not compatible with the "setuptools>=77" condition set by upstream.


author: Jos de Kloe <josdekloe@gmail.com> 2.1.8-1
changelog:
  - Update to 2.1.8 (#2406074)
  - Update license following discussion on https://github.com/jswhit/pygrib/issues/275


author: Christian Krause <chkr@fedoraproject.org> - 3.6.9-1
changelog:
  - Update to 3.6.9 (#2267692)
  - Remove example client and server (upstream split the source package)
  - Remove according weak requirements for example tools


author: Christian Krause <chkr@fedoraproject.org> - 7.1.21-1
changelog:
  - Bump to latest upstream 7.1.21
  - Checked license and set to the official SPDX identifier
  - Convert license tag in pyproject.toml to old format in order
    to be compatible with flit_core


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.10.0-9
changelog:
  - Modernize spec file and use pyproject macros
  - Replace %py3_check_import with %pyproject_check_import
  - Simplify package naming by using direct names instead of macros (i.e.
    srcname, slugname)
  - Remove manual file listings that are now handled by %pyproject_files
  - Add comment to specify the version for the existing patch to be deleted
  - Remove explicit runtime pytest dependency which is already handled via
    %pyproject_buildrequires macro


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0.8-10
changelog:
  - Compile as C++14 instead of C++11, for compatibility with eigen3 5.0
  - Use the original upstream for fcl, rather than the ambi-robotics fork


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.2-4
changelog:
  - Support rebuilding YAML test data from original sources
  - Don’t do it for now since it brings in extra Perl dependencies, and
    there’s no obvious benefit.


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.1-13
changelog:
  - Simplify and reformat the spec file
  - Deconditionalize the tests
  - Stop using the “forge macros,” which don’t contribute much here


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.7.0-15
changelog:
  - Modernize packaging
  - Update License to reflect the presence of public-domain code
  - Add a man page


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Ondřej Nosek <onosek@redhat.com> - 1.69-1
changelog:
  - Only update the progress bar when meaningfully changed (code)
  - Don’t set up upload progress when stdout isn’t a tty (code)
  - Fix unittests for Python 3.14 (onosek)
  - `sources`: set "Accept-Encoding: identity" header on HTTP requests
    (decathorpe)
  - Accept auto-generated sources in pre-push checks (fweimer)
  - Add mock configuration option to build and srpm commands for use along with
    the srpm mock option, same as in mockbuild command. (abobrov)
  - `srpm`: man page generation fixed (onosek)
  - `install`: add rpmbuild arguments `--with` and `--without` - 541 (gleiro)
  - type: fix typo in requirements README. (gleiro)
  - `patch`: Execute subprocess in text mode (ferdnyc)
  - Fix mockbuild --srpm-mock specfile_path (wngtk)
  - `pre-push-check`: bogus error - file wasn't listed - #747 (onosek)
  - Switch to %pyproject_* macros (onosek)
  - Use the spec name to assemble src.rpm name (sergio)
  - Jenkinsfile: use local declaration instead the global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji - 600 (onosek)
  - `mockbuild`: -r argument as shortcut of --root (sergio)
  - `rhpkg mockbuild` won't show a hint with '--target' (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.69-3
changelog:
  - Patch: Check the correct sorting of imports from now on
  - Patch: `update`: interactive editor is broken


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.1-1
changelog:
  - Update to version 0.6.1; Fixes RHBZ#2386831
  - Automate patching the path-based safetensors crate dependency
  - A patch fixing several failing tests has been merged upstream


author: Adam Williamson <awilliam@redhat.com> - 0.23.2-2
changelog:
  - Backport PR #7448 to fix docstring generation for Python 3.13
  - Add a missing image to the data cache tarball to fix a couple of tests
  - Rebuilt for Python 3.13


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.0-1
changelog:
  - Create simple CLI tool to examine keycache in Python and refresh all entries in keycache
  - Verify Thread-safe + Unwritable Cache + Negative Cache
  - Revamp Sphinx documentation
  - Patch Enforcer to validate against multiple issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.6-1
changelog:
  - Fix SQL injection risk in KeyCache by using parameterized SQLite queries
  - Prevent sibling-path authorization bypass in Enforcer scope checks


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.7-1
changelog:
  - Remove legacy parent SciToken chaining behavior from token initialization and claim handling
  - Harden Enforcer scope path traversal validation (including encoded traversal checks)
  - Clean up documentation references to parent/chained SciTokens


author: Steve Traylen <steve.traylen@cern.ch> - 1.3.2-1
changelog:
  - Update to version 1.3.2
  - Run tests with tox
  - Use rpmautospec changelog
  - Use forgeurl to get tox.ini file
  - Use more conventional pypi_macro for name
  - Use pyproject_macros
  - Mark license file as license


author: Benjamin A. Beasley <code@musicinmybrain.net> - 7.1.0-13
changelog:
  - Temporarily disable “all” and “gcs” extras
  - Works around broken python-google-cloud-storage due to protobuf on Python
    3.14; fixes RHBZ#2372125


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Carl George <carlwgeorge@fedoraproject.org> - 0.4.2-14
changelog:
  - Switch to correct SPDX license
  - Enable tests
  - Backport patch to fix CVE-2023-30608
  - Backport patch to fix CVE-2024-4340


author: Jerry James <loganjerry@gmail.com> - 2.3.4-1
changelog:
  - Version 2.3.4
  - Drop upstreamed format patch
  - Add patch to adapt to minisat using macros instead of variables
  - Add BuildRequires: gmp-devel


author: Jerry James <loganjerry@gmail.com> - 1.13.0-1
changelog:
  - Version 1.13.0
  - Drop unnecessary circuitplot patch
  - Drop upstreamed incompatible-pointer patch
  - Link duplicate documentation files
  - Run tests on all architectures


author: Jerry James <loganjerry@gmail.com> - 1.14.0-1
changelog:
  - Version 1.14.0
  - Drop upstreamed tempfile flush patch
  - Add patch to avoid intersphinx_registry
  - Drop workaround for buggy lark on ppc64le
  - Drop examples subpackage


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Permit dnf4 to check for reboot with non-root user (riehecky@fnal.gov)
  - Add --reboot-only filter (riehecky@fnal.gov)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.15.4-4
changelog:
  - Remove Conflicts with erlang-dialyzer
  - Since erlang-26.2.5.13-2, python3-typer-cli no longer conflicts with
    erlang-dialyzer; we keep the Conflicts for older versions.


author: Jan Staněk <jstanek@redhat.com> - 2.5.3-4
changelog:
  - Modernize packaging
  - Use current %pyproject... macros
  - Utilize %generate_buildrequires
  - Do not rely on deprecated setup.py test command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.5.0-4
changelog:
  - Update to 3.5.0 (close RHBZ#2361673)
  - Report and skip brittle integration tests failing with current fonttools;
    fixes RHBZ#2372184


author: Simone Caronni <negativo17@gmail.com> - 70-1
changelog:
  - Update to version 70.
  - Trim changelog.
  - Clean up SPEC file, switch to Python packaging guidelines for Python module.
  - Fix License tag.
  - Enable tests.


author: Miro Hrončok <miro@hroncok.cz> - 20.26.6-1
changelog:
  - Update to 20.26.6
  - Fixes: rhbz#2188155
  - Removes support for Python 2.7 virtual environments
  - Removes support for Python 3.6 virtual environments


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.4-5
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Brad Bell <bradbell at seanet dot com> - 2025.0.2-3
changelog:
  - Change import toml -> import tomli; see
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251114git6c77b6b-1
changelog:
  - Update to 0^20251114git6c77b6b
  - `PyConfig_Get()` is also available on Python 3.8
  - Add `PyUnstable_Unicode_GET_CACHED_HASH()` function
  - Add `PyTuple_FromArray()` function


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251015.e510a7b-1
changelog:
  - Update to 0^20251015.e510a7b
  - Add an Epoch since the previous update had the wrong date
  - Switch snapshot info from <date><scm><revision> to <date>.<revision>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251108.11cb80f-1
changelog:
  - Update to 0^20251108.11cb80f
  - Don’t include structmember.h in pythoncapi_compat.h; avoids conflicts due
    to names without "Py" prefixes.


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0
  - Add numactl-devel as a dependency since it is required by qatlib 24.09.0


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0
  - Add autoconf-archive as a dependency
  - Remove fix-systemd-path.patch as fix is present on the upstream project
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 6.1.2-1
changelog:
  - qcint is API compatible but ABI incompatible with libcint; qcint is
    now the only library built on x86_64 and replaces libcint.
  - Update to 6.1.2.


author: Dmitri Smirnov <dmitri@smirnov.ee> - 4.6.0-2
changelog:
  - Move pre-downloaded files to patch to avoid issues when building 
  - Remove pqtch 1251 which is no longer needed


author: Germano Massullo <germano.massullo@gmail.com> - 4.7.0-1
changelog:
  - 4.7.0 release
  - Moved from tar.gz to tar.xz upstream file and updated Source0
  - Removed EL7 and EL8 leftovers
  - Moved from Qt5 to Qt6
  - Added cmake.patch


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: Stefan Becker <chemobejk@gmail.com> 2.0-1
changelog:
  - update to version 2.0
  - drop downstream patches
  - switch from qmake + make to cmake + ninja
  - disable fill form shortcuts as they don't work under Wayland anyway
  - add translations (de, pl)


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Liu Yang <Yang.Liu.sn@gmail.com> - 5.15.13-2
changelog:
  - Add riscv64 to macro i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 mips mipsel mips64el riscv64.


author: Jakub Kadlcik <frostyx@email.cz> - 0.29.0-2
changelog:
  - Small fixes to the specfile formatting
  - Add some build dependencies for tests
  - Don't depend on deprecated python3-pytest7


author: Jakub Kadlcik <frostyx@email.cz> - 0.29.0-5
changelog:
  - Exclude one more test
  - Add todo about dynamic BuildRequires
  - Drop the python3-pytest-cov dependency


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.0.20-2
changelog:
  - Switched to autotools build system (upstream preferred)
  - Dropped useless subpackages
  - Fixed requirement
    Resolves: rhbz#2355068


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-3
changelog:
  - Disable network and streaming
  - Enable tests and add extra dependencies
  - Tests expect Debian host with grub-editenv, called grub2-editenv on Fedora


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-4
changelog:
  - Disable 5 tests that does not work on F43/rawhide
  - Update files section with macros and add patch comments


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-5
changelog:
  - Add dbus-common dependency as xml is installed in dbus-1 directory
  - Cleanup patches into 3 logical changes and update upstream status
  - Add upstream status of RPM lint incorrect-fsf-address error


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-6
changelog:
  - Exclude some architectures that does not have grub2-tools-minimal package
  - Add upstream xml file license issue link


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-7
changelog:
  - Change dbus-common dependency from BuildRequires to Requires
  - Update upstream license issue and update license information
  - Generate docbook for yelp or khelpcenter


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-11
changelog:
  - Don't mark man page as doc
  - Update patches against upstream version
  - Yelp SVG image workaround: Convert SVG to PNG using thorvg
  - thorvg workaround due to command rename in F42/F43


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-12
changelog:
  - Update patch 4 with CC0-1.0.txt and include it in rauc LGPL-2.1-or-later AND CC0-1.0
  - Add COPYING to rauc-doc LGPL-2.1-or-later AND CC0-1.0
  - Fix license as LGPL-2.1-or-later not LGPL-2.1-only


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.3.2-1
changelog:
  - Update to 1.3.2 - Closes rhbz#2331229
  - Drop pod file as man page is now included
  - Drop build section as native extension was removed #1428
  - Add packit configuration
  - Enable tests by skipping three failing tests


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Sumit Bose <sbose@redhat.com> - 0.17.1-11
changelog:
  - Update Systemd security settings as part of https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening


author: Sumit Bose <sbose@redhat.com> - 0.17.1-14
changelog:
  - Various fixes for issues found by static code scanners
  - Systemd security setting and CacheDirectory
  - use 'dnshostname' with net ads join
  - Install dbus policy in /usr/share, not /etc


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-5
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)
  - add a sshd helper to rescue, otherwise sshd does not start, PR 3510


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.7.20231006git8d00acdc
changelog:
  - Remove require of libpng12.so.0, lsb-desktop already require libpng
  - redhat-lsb now provides lsb_release, in future maybe we can remove the rest since LSB 5.0 is out of date
  - more cleanups
  - Report that is not LSB compliance, because various components are missing from Fedora, so compliance is not possible


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.10.20231006git8d00acdc
changelog:
  - The packages are architecture-specific, but do not contain any ELF
    binaries with debuginfo to extract, so we need disable debuginfo.


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.13.20231006git8d00acdc
changelog:
  - Remove sub-pacakges: redhat-lsb-core, redhat-lsb-cxx, redhat-lsb-desktop,
    redhat-lsb-languages and redhat-lsb-printing aren't useful for a long time
  - Switch to a noarch package


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.16.20231006git8d00acdc
changelog:
  - Require util-linux
  - Modification of sumamry and description to express that is not compliant with LSB


author: Charalampos Stratakis <cstratak@redhat.com> - 343-3
changelog:
  - Add -mbranch-protection=standard to extension builder flags
  - mbranch-protection=standard from the standard hardening flags on aarch64,
    enables BTI and PAC. PAC is ABI dependent and we want extensions to be
    compatible.


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Pavel Raiskup <praiskup@redhat.com> 1.7-1
changelog:
  - resalloc-aws-new: run playbook with stdin=/dev/null
  - resalloc-aws-list: no need to double-kill "shutting-down" instances


author: Pavel Raiskup <praiskup@redhat.com> 2.1-1
changelog:
  - The wait-for-ssh script was moved to resalloc-helpers
  - releng: release to all active Fedora releases


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.3-1
changelog:
  - Add functionality for tagging resource by its crn (j1.kyjovsky@gmail.com)
  - Add option for specifying resource group (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - Log the instance create request content
  - Allow specifying a list of Floating IPs
  - Drop executable bits from PYTHONPATH scripts


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: mhorky <mhorky@redhat.com> - 0.3.5-2
changelog:
  - Simplify packaging
  - Disable bcond 'check' by default, reflecting RHEL spec file
  - Drop unnecessary 'BuildRequires' statements, ignore insights-client
  - Set ownership for /etc/rhc/


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-31
changelog:
  - Add patch to find systemd-journald config and avoid warning. Fixes rhbz#2361203
  - Add patch to fix false positive on Li0n from bin/sbin merge. Fixes rhbz#2382304


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.0-1
changelog:
  - Update to 6.4.0
  - Use version requires to pull in newer packages
  - Fix rpmlint warnings
  - Package is now noarch


author: Tom Callaway <spot@fedoraproject.org> - 2.8.0-1
changelog:
  - update to 2.8.0
  - filter out the "alternative-link-missing" and "alternative-generic-name-not-symlink" checks
    these reflect the OpenSUSE packaging guidelines, but NOT the Fedora ones (bz2208474)


author: Miro Hrončok <mhroncok@redhat.com> - 2.8.0-2
changelog:
  - Filter out cross-directory-hard-link
  - https://fedoraproject.org/wiki/Changes/Hardlink_identical_files_in_packages_by_default
  - Fixes: rhbz#2400621


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
  - Harden rsyslog service unit
  - Disable openssl engines support
    Resolves: rhbz#2320050


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-26
changelog:
  - Upgrade to Ruby 3.4.7.
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: rhbz#2396204
    Resolves: CVE-2025-58767


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-3
changelog:
  - Workaround for new gdk-pixbuf with glycin backend dependency (ref: bug
    2387002)
  - F-43: ignore test failure for now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-5
changelog:
  - Upstream fix for tests with glycin based gdk-pixbuf2 2.43.x
  - Exclude tests on glycin ppc64le for now (bug 2275913)
  - Exclude animation test on i686 on Fedora 43


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.1.0-24
changelog:
  - Use recent gem packaging style
  - Modify License tag
  - Use test-unit for testsuite
  - Upstream PR to suppress warnings for literal string


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.0.3-2
changelog:
  - Skip blockdiag integration test, python3-blockdiag now FTI
    because of loooong dependency chain breakage with python3.12


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:2.2.4-8
changelog:
  - Backport upstream patch for ruby34 hash formatting change
  - Add dependency for rubygem(base64) explicitly


author: Vít Ondruch <vondruch@redhat.com> - 1:2.2.21-1
changelog:
  - Update to Rack 2.2.21
  - CVE-2024-25126: Denial of Service Vulnerability in Rack Content-Type Parsing
    Resolves: rhbz#2265596
  - CVE-2024-26141: Possible DoS Vulnerability with Range Header in Rack
    Resolves: rhbz#2265597
  - CVE-2024-26146: Possible Denial of Service Vulnerability in Rack Header
    Parsing
    Resolves: rhbz#2265598
  - CVE-2025-61780: Improper handling of headers in `Rack::Sendfile` may allow
    proxy bypass
    Resolves: rhbz#2403530
  - CVE-2025-61919: Unbounded read in `Rack::Request` form parsing can lead to
    memory exhaustion
    Resolves: rhbz#2403525
  - CVE-2025-59830: Rack QueryParser has an unsafe default allowing params_limit
    bypass via semicolon-separated parameters
    Resolves: rhbz#2402988
  - CVE-2025-32441: Rack Session Reuse Vulnerability
    Resolves: rhbz#2365053
  - CVE-2025-46727: Unbounded-Parameter DoS in Rack::QueryParser
    Resolves: rhbz#2365000


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-2
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.1-3
changelog:
  - Disable tests in EPEL
  - Avoid bringing in large dependency trees via the axum and tower-http dev-
    dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to verson 1.2.0; Fixes RHBZ#2393793
  - MSRV is now 1.87, edition is 2024
  - The dev-dependency on criterion is now removed via patch rather than
    tomcli


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Michel Lind <salimma@fedoraproject.org> - 0.20.0-5
changelog:
  - Bump termion dependency from 1 to 4 - Change default backend to crossterm
    - Drop ncurses and pancurses backends, ncurses-rs is archived


author: Michel Lind <salimma@fedoraproject.org> - 0.10.0-1
changelog:
  - Update to version 0.10.0; Fixes RHBZ#2303607
  - No longer uses proc-macro-error; Fixes RHBZ#2329702


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Michel Lind <salimma@fedoraproject.org> - 2.2.1-1
changelog:
  - Update to 2.2.1; Fixes RHBZ#2277401
  - Temporarily remove tests/ because of unsatisfied color-eyre dependency


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.1-1
changelog:
  - Update to 0.4.1 (close RHBZ#2277955)
  - Reduce manual editing of the spec file after running rust2rpm
  - Reduce unnecessary (benchmark-only) build dependencies


author: Michel Lind <salimma@fedoraproject.org> - 0.24.4-2
changelog:
  - Incorporate ueno's changes into rust2rpm.toml and regenerate spec
  - Disable probe tests on ppc64le and s390x


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.23.1-1
changelog:
  - Update to 1.23.1 (close RHBZ#2349449)
  - Use rust2rpm.toml to exclude license file for unbundled libdeflate
  - Update .rpmlintrc file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.24.0-1
changelog:
  - Update to 1.24.0 (close RHBZ#2365609)
  - Now that we can easily re-apply Cargo.toml patches when updating, do not
    use tomcli to remove criterion


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.2.0-4
changelog:
  - Unretirement request: pagure.io/releng/issue/12761 Revert "unused leaf
    package for more than two release cycles"


author: Michel Lind <salimma@fedoraproject.org> - 0.5.2-4
changelog:
  - Unretire rust-outref as base64-simd needs it; Resolves: rhbz#2426767
  - Spec clean-up; use rust2rpm.toml and a diff file instead of modifying the
    spec directly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-1
changelog:
  - Update to version 0.17.0; Fixes RHBZ#2316899
  - Re-enable all tests except test_procinfo, and a couple we had to skip


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-2
changelog:
  - Report and skip failing tests on non-x86_64 architectures
  - Fix tests failing to compile on 32-bit architectures


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Robby Callicotte <rcallicotte@fedoraproject.org> - 3007.4-1
changelog:
  - Update to 3007.4 RHBZ#2366381 - Resolves CVE-2024-38824 RHBZ#2372731 -
    Resolves CVE-2024-38824 RHBZ#2372733 - Resolves CVE-2025-22239
    RHBZ#2372732 - Resolves CVE-2025-22239 RHBZ#2372734 - Resolves
    CVE-2025-22236 RHBZ#2372774 - Resolves CVE-2025-22236 RHBZ#2372776 -
    Resolves CVE-2025-22242 RHBZ#2372741 - Resolves CVE-2025-22242
    RHBZ#2372745 - Resolves CVE-2025-22240 RHBZ#2372746 - Resolves
    CVE-2025-22241 RHBZ#2372748 - Resolves CVE-2025-22240 RHBZ#2372752 -
    Resolves CVE-2025-22241 RHBZ#2372753


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.73


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74
  - Remove /usr/bin/python3 from BuildRequires


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.75


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Christian Krause <chkr@fedoraproject.org> - 2.8.1-1
changelog:
  - Update to 2.8.1 (#2254942)
  - Fix FTBFS (#2261685)
  - Adjust filenames
  - Set StartupWMClass in desktop file in order to enable the window manager
    to reference the correct desktop file (e.g. needed for the
    task switcher to show the correct application icon)
  - Add upstreamed patch to fix compile issue with GCC 14
  - Update license tag
  - Add BR: libmikmod-devel, libvpx-devel and sonivox-devel


author: Christian Krause <chkr@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 (#2330987)
  - Fix FTBFS (#2341334)
  - Remove patch already included upstream
  - Add BR: pipewire-jack-audio-connection-kit (needed for fluidsynth)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Zdenek Pytela <zpytela@redhat.com> - 42.15-1
changelog:
  - Allow insights-client manage /etc symlinks
  - Allow insights-client get attributes of the rpm executable
  - Allow nfsidmapd search virt lib directories
  - Allow iotop stream connect to systemd-userdbd
  - Allow gnome-remote-desktop read sssd public files
  - Allow thumb_t stream connect to systemd-userdbd
  - Allow bluez dbus API passing unix domain sockets
  - Allow bluez dbus api pass sockets over dbus
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  - Allow init watch/watch_reads systemd-machined user ptys
  - Fix syntax error in userdomain.if
  - Allow ras-mc-ctl get attributes of the kmod executable


author: Zdenek Pytela <zpytela@redhat.com> - 42.16-1
changelog:
  - Allow systemd-ssh-issue read kernel sysctls
  - fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  - Allow create kerberos files in postgresql db home
  - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  - Allow shell comamnds in locate systemd service (bsc#1246559)
  - Introduce initrc_nnp_daemon_domain interface
  - Label /var/lib/cosmic-greeter with xdm_var_lib_t
  - Allow setroubleshoot-fixit get attributes of xattr fs


author: Zdenek Pytela <zpytela@redhat.com> - 42.17-1
changelog:
  - Allow sshd-net read and write to sshd vsock socket
  - Update ktls policy
  - Add comprehensive SELinux policy module for bwrap thumbnail generation
  - Revert "Allow thumb_t create permission in the user namespace"
  - Allow systemd-machined read svirt process state
  - Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  - Allow sysadm access to TPM
  - Allow tlp get the attributes of the pidfs filesystem
  - Allow kmscon to read netlink_kobject_uevent_socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.18-1
changelog:
  - Allow KDE Plasma Login Manager to function as a display manager
  - Allow mdadm search filesystem_type directories
  - Update policy for dhcpc_hook_t
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  - Allow staff role read/write cockpit-session unix stream sockets
  - Allow stap server read virtual memory sysctls
  - Allow system_mail_t read apache system content conditionally
  - Allow login_userdomain read lastlog


author: Zdenek Pytela <zpytela@redhat.com> - 42.19-1
changelog:
  - Allow passwd read and write a sshd-session unnamed pipes
  - Allow sshd-auth capabilities
  - Allow sshd-auth read network sysctls
  - Label /run/insights-client.ppid with insights_client_run_t
  - fix: unbreak thumbnailing for Thunar/tumblerd
  - Add files_mounton_generic_tmp_dirs() interface
  - Add the rpm_signal() interface
  - Allow session_bus_type get the attributes of the pidfs filesystem
  - Allow pcscd get the attributes of the pidfs filesystem
  - Allow sssd get the attributes of the pidfs filesystem


author: Zdenek Pytela <zpytela@redhat.com> - 42.20-1
changelog:
  - Support cockpit privileged access for the staff user
  - Update su_domain_type policy for kerberized su
  - Allow sshd-session inherit limits from its parent process
  - Allow systemd-machined read virtd process state
  - Allow kl2tpd create and use netlink_generic_socket
  - Update policy for redfish-finder
  - Label the greetd login manager framework as a display manager
  - Allow sshd-auth get attributes of sshd vsock socket
  - Confine redfish_finder - host api discovery service
  - Allow iptables read firewalld process state
  - Allow tuned_t use its private tmpfs files
  - The commit addresses the following AVC denials:


author: Zdenek Pytela <zpytela@redhat.com> - 42.21-1
changelog:
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  - Allow sshd-session read, write, and map ica tmpfs files
  - Allow aide get attributes of a filesystem with extended attributes
  - Set correct label for glycin fontconfig (bsc#1253682)
  - Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  - Logwatch zz-runtime uses uptime (bsc#1255862)
  - Add auth_login_pgm_signull interface (bsc#1255862)
  - Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  - Allow l2tpd_t access to netlink and sysfs
  - Label miscellaneous /dev/papr-* devices
  - Allow qemu-ga to skip authentication
  - Revert "Allow systemd-coredump signull containers"
  - Allow systemd-coredump signull containers
  - Allow virtqemud setattr dri devices
  - Allow irqbalance create and use netlink generic socket
  - Allow thumb_t connect to XDM over a unix domain stream socket
  - Allow systemd-homework to remove ~/.identity-blob
  - Revert "Allow kl2tpd create and use netlink_generic_socket"


author: Zdenek Pytela <zpytela@redhat.com> - 42.22-1
changelog:
  - Allow thumb_t stream connect to systemd-machined
  - Allow thumb_t stream connect to systemd-homed
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  - Allow sshd noatsecure on sshd-session execution
  - Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  - Allow kernel_t to read/write all domains' pipes
  - Allow domain read sysfs files
  - allow abrt_dump_oops to write to init sockets
  - Add insights_client service interfaces
  - Allow plasma login manager stop login services
  - Allow NM nvme dispatcher script start systemd services


author: Zdenek Pytela <zpytela@redhat.com> - 42.23-1
changelog:
  - Allow thumbnailer mount on fonts cache directories
  - Support confined users usage of bubblewrap
  - Allow vdagent get attributes of the pidfs filesystem
  - Allow sshd-session inherit limits from its parent sshd process
  - Revert "Allow sshd-session inherit limits from its parent process"
  - Allow sshd-session read network sysctls
  - Add the fs_write_tmpfs_files() interface
  - Update gpg policy for interactions with rhc-playbook-verifier
  - Allow rhc_playbook_verifier_t stream connect to itself
  - Update policy for rhc-worker-playbook
  - Allow sudodomain connect to gkeyringd over a unix stream socket
  - Allow tlshd communication to unconfined_t over a tcp socket
  - Allow tlshd write generic certificates
  - Allow thumbnailer connect to abrt over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.24-1
changelog:
  - Allow mdadm to use CAP_BPF during RAID monitoring
  - Allow rhsmcertd read anaconda run files
  - Allow rpc.mountd setuid and setgid capabilities
  - Use kernel_dgram_send() for systemd_notify_t
  - Allow lttng-sessiond to use sd_notify
  - Label /etc/aliases.cdb with etc_aliases_t
  - Add aliases.lmdb to mta_filetrans_named_content()
  - Update gpg_role() interface with unix_stream_socket permissions
  - Allow systemd-hostnamed to create its Varlink socket


author: Jerry James <loganjerry@gmail.com> - 3.4.0-1
changelog:
  - Pre-release 3.4.0 RC1
  - Remove unused dependency on coin-or-lemon
  - Convert License field to SPDX
  - Note that the devel package bundles zipstream and bzip2stream
  - Note that the devel package needs zlib-devel and bzip2-devel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.36-1
changelog:
  - audit_data: include syslog when needed
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-15
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Mikhail Medvedev 1.1.1-1
changelog:
  - Added mutltiplatform translation path
  - I2C driver has been changed
  - Added the option to switch Qt versions
  - Fixed UDEV and LIBUSB pathes, used PKGCONFIG


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-1
changelog:
  - Upgrade to SIMDe 0.8.2
    Resolves: rhbz#2251016
  - Use upstream ci.sh
  - Fix build on aarch64 and backport some upstream fixes


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-2
changelog:
  - use upstream PR to fix tests with clang on aarch64
  - switch to noarch for the devel subpackage (tests still run on all arches)


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f42-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Martin Osvald <mosvald@redhat.com> - 1.8.0.3-1
changelog:
  - Update to 1.8.0.3 (rhbz#2307725)
  - Resolves: CVE-2024-54661 (rhbz#2330520)
  - Resolves: non-working ipv6-join-group option (rhbz#2352860)
  - Resolves: FTBFS in Fedora (rhbz#2385633)


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.16-1
changelog:
  - update to 1.1.16 (resolves rhbz#2405379)
  - drop obsolete patches
  - apply upstream patch to fix appstream data


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.18-1
changelog:
  - update to 1.1.18 (resolves rhbz#2420854)
  - drop obsolete patch
  - add missing cairo-1.0 and xlib-2.0 typelib dependencies for tests
  - add new icons to file list
  - run GTK3 tests under Xvfb


author: Martin Gansser <martinkg@fedoraproject.org> - 1:2.4.1-1
changelog:
  - Update to 2.4.1
  - Add 9ae2b6cc83ce5cdaec58cb4d2aed2fb5ae60b7c8.patch to restore FindSOLID.cmake
    so that the FreeSOLID library can be found again


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.12-2
changelog:
  - Disable ESI support since ESI support has been also removed from squid 7
  - Resolves: CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20260313git904aa67-2
changelog:
  - Fix access/use of uninitialized memory in stb_image
  - This was undefined behavior, and could leak security-relevant information
    from other data structures. See
    https://github.com/nothings/stb/issues/1929.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Jerry James <loganjerry@gmail.com> - 3.2.1-38
changelog:
  - Add patch to fix ambiguous references to StringTemplate
  - Add patch to avoid using deprecated "new Integer" and "new Boolean"
  - Change license to BSD-3-Clause


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Björn Esser <besser82@fedoraproject.org> - 1.9.17-1.p1
changelog:
  - Rebase to sudo 1.9.17p1
  - sudo-1_9_16p2 is available Resolves: rhbz#2309626
  - sudo: LPE via host option Resolves: CVE-2025-32462
  - Properly apply system buildflags
  - Use new build macros, drop unneeded %%defattr


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.6-1
changelog:
  - Version 257.6
  - Fix for local information disclosure in systemd-coredump (CVE-2025-4598)
  - Fixes for systemd itself, run0, systemd-networkd, "secure" pager, man
    pages, shell completions, sd-boot, sd-varlink
  - Hardware database update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.7-1
changelog:
  - Version 257.7
  - Fixes for systemd itself, systemd-repart, systemd-resolved, systemd-
    vmspawn, systemd-networkd, resolvectl, bootctl, the shared library code,
    man pages, shell completions, and tests.
  - Hardware database is updated.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 257.13-1
changelog:
  - Version 257.13
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Dominik Mierzejewski <dominik@greysector.net> 2.6.3-4
changelog:
  - enable long article number support
  - drop obsolete/redundant configure options
  - switch to package names in BuildRequires and sort alphabetically
  - use modern macros and drop __foo macro usage
  - more explicit file list to avoid duplicates
  - add missing files


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Didier Fabert <didier.fabert@gmail.com> - 0.1-35.20171025gitab9bbbd
changelog:
  - Stop using deprecated py3_build/py3_install macros https://bugzilla.redhat.com/show_bug.cgi?id=2378474
  - migrated to last commit


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Patsy Griffin <patsy@redhat.com> - 2024a-8
changelog:
  - zic now defaults to "-b slim" to control data bloat.
    For now, build with ZFLAGS="-b fat" for backward compatibitliy.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


author: Akira TAGOH <tagoh@redhat.com> - 1.9.0-1
changelog:
  - New upstream release.
    Resolves: rhbz#2347165
  - Disable OpenSSL support.
    OpenSSL plugin isn't packaged. should be no harm.


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Jens Petersen <petersen@redhat.com> - 17.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode17.0.0/
  - https://blog.unicode.org/2025/09/unicode-170-release-announcement.html


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Mark Wielaard <mjw@fedoraproject.org> - 3.25.1-3
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Remi Collet <remi@fedoraproject.org> - 8.0.6-1
changelog:
  - update to 8.0.6
    fixes CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 and CVE-2025-46819
  - update documentation to 8.0.5


author: Remi Collet <remi@fedoraproject.org> - 8.0.7-1
changelog:
  - Valkey 8.0.7 - Released Mon 23 February 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.5.0-1
changelog:
  - New upstream release
  - Moved somethings around to make the diff from the upstream spec less
  - Upped some memory requirements in some of the tests. Necessary on aarch64 and ppc64le (and ppc32)
  - Reduced number of parallel jobs on s390x builders as builds tend to fail when stressed
  - Retired armv7hl


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Pavel Raiskup <praiskup@redhat.com> - 5-1
changelog:
  - support for fast "ruff" analyser
  - --linter-tag option added
  - subproject detection by .vcs-diff-lint.yml


author: Pavel Raiskup <praiskup@redhat.com> 6-1
changelog:
  - bugfix: correctly honor file renames
  - bugfix: fix subproject detection for git worktree
  - ruff: do full project scans (since Ruff is fast enough)
  - check the new (changed) code in a side-directory


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - drop unnecessary newline in the output
  - ruff: don't prefix the error locations with absolute path
  - ruff: don't optimize out the full Ruff run
  - print the git sha1 being analyzed
  - bugfix: correct matching filenames with endswith()


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - don't require all the linters, just recommend them
  - use requested linters only if they are available
  - nicer info/debug output


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - Handle (no traceback) "invalid-syntax" code from Ruff
  - log.debug() all git commands
  - do not let "git apply" pollute stderr with whitespace errors


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.3-1
changelog:
  - Update to 2.7.3
  - Use recent dvbhddevice Source file 3473a7b939d7.zip
  - Add %{name}-2.7.3-remux-radio.patch


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.17.1-1
changelog:
  - Update to 8.17.1
  - Resolves: rhbz#2351373
  - Migrate API documentation to gi-docgen
  - Drop dependency on python3-cairo (due to vipsprofile removal)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


author: Christian Krause <chkr@fedoraproject.org> - 0.5.3^20241114.git11e15a1-2
changelog:
  - Fix issues with /usr/bin/ and /usr/sbin/ merge (#2363531)
  - Always use consolehelper, implicitly allowed for root,
    remove consoleuser sub-package
  - Remove pam_console.so from vpnc.pam (not available anymore)


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.0-1
changelog:
  - Toggle ADB secure mode by default
    + ADB will no longer auto-connect on session start
    + You may use the new waydroid adb connect command to connect ADB
    + To connect ADB, you will need to provide authorization on the Android side
  - Rotate and trim waydroid.log file at 5MB
  - Hide system apps from the desktop applications menu
    + To make a system app visible in your apps menu, switch NoDisplay=false in its desktop file
  - Do not hide the main Waydroid launcher after enabling multi-windows mode
  - Add desktop action to stop Waydroid session
    + Right-click the Waydroid entry in your desktop application launcher, then Stop Waydroid
  - Add desktop action to re-initialize Waydroid
    + Right-click the Waydroid entry in your desktop application launcher, then Initialize Waydroid
    + This allows switching between VANILLA and GAPPS
  - Make sure to stop waydroid session on user log-out
  - Add new waydroid command with no arguments, alias for waydroid show-full-ui
  - Add new waydroid bugreport command to gather logs for a bug report
  - Forward Android notifications to the desktop
    + Requires updating the Android system image to a compatible version


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.1-1
changelog:
  - Fix graphical initialization with Python 3.14 and newer (rhbz#2425593)
  - Allow using block device as pre-installed image files


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.2-1
changelog:
  - Attempt to further fix initialization with Python 3.14
  - Fix desktop file update logic for headless apps
  - Add Vulkan support for xe kernel driver
  - Allow passing arguments to "waydroid logcat"


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Michal Ruprich <mruprich@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Rename package from wget to wget1
  - Add wget1-wget subpackage to allow usage as wget


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-9
changelog:
  - Update architectures for asan/tsan/ubsan tests based on GCC 15
  - Adds riscv64 to supported architectures for all three kinds of tsts


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Sérgio Basto <sergio@serjux.com> - 0.9.16^20230801gita61f364-1
changelog:
  - Update to a61f364e385d98677c04070a994397b287385219 git snapshot from
    2023-08-01 (a support for acquiring a DRM framebuffer with a drm schema
    in -rawfb option)


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.2-2
changelog:
  - update to xen-4.19.2
    remove patches now included or superceded upstream
    remove xen*.efi.elf files to avoid debuginfo failure


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-2
changelog:
  - update to xen-4.19.3
    remove patches now included or superceded upstream
    includes patches for
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
   	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-4
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
          CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
          CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-6
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
          CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.4-2
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434045)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434047)


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.4-3
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Simone Caronni <negativo17@gmail.com> - 23.0.0-6
changelog:
  - Clean up SPEC file.
  - Trim changelog.
  - Do not disable debug stripping (caught by rpminspect) tests.


author: Dominik Mierzejewski <dominik@greysector.net> - 25.0.0-1
changelog:
  - Update to 25.0.0 (resolves rhbz#2384262)
  - Download and validate GPG signature
  - Switch to meson build system


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.6-1
changelog:
  - xwayland 24.1.6 (#2343992)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Maxwell G <maxwell@gtmx.me> - 2025.12.08-2
changelog:
  - Exclude optional yt-dlp-ejs dependency. Users need to handle it manually.
  - https://github.com/yt-dlp/yt-dlp/wiki/EJS
  - Remove python -s shebang flag so users can install yt-dlp-ejs or other
    optional deps or plugins using pip


author: Maxwell G <maxwell@gtmx.me> - 2026.02.21-1
changelog:
  - Update to 2026.02.21. Fixes rhbz#2441709.
  - Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-7
changelog:
  - build stage 3 using zig build system
  - add user provided options to the end of the build and install options


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-8
changelog:
  - specify to build against local zig stdlib directory to ensure we are building against the newest stdlib
  - use release fast instead of release safe to fix aarch64 builds from running out of memory
  - enable position independent executable for the zig build


author: Jean-Baptiste Trystram <jbtrystram@redhat.com> - 0.0.30-3
changelog:
  - Backport patch to fix rollback not sticking from https://github.com/coreos/zincati/pull/1293
    See https://github.com/coreos/fedora-coreos-tracker/issues/1938


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


