# changelog

author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2024.11.21.0-2
changelog:
  - Add an AppStream metainfo file
  - Include full license text in the packages
  - Include documentation in the package


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Paul Howarth <paul@city-fan.org> - 2.2.16-1
changelog:
  - Update to 2.2.16 (rhbz#2314037)
    - Bluefish 2.2.16 is mostly a maintenance release
    - New feature: Bookmarks can now be generated from external commands such as
      ctags
    - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
    - The old built-in javascript beautifier has been removed; Bluefish now uses
      the jsbeautify from your system (if available)
    - The word-wrap function has been fixed
  - Add fix for type issue causing FTBFS with gcc 14
    (https://sourceforge.net/p/bluefish/tickets/95/)
  - Drop support for EL-7 and Fedora releases of a similar vintage


author: Paul Howarth <paul@city-fan.org> - 2.2.17-1
changelog:
  - Update to 2.2.17 (rhbz#2356356)
    - Bluefish 2.2.17 is a maintenance release that has only code clean-up fixes
      to comply better with modern compiler standards
    - It furthermore has fixes for a 64-bit Windows build of Bluefish with Msys2
  - Use %{make_build} and %{make_install}
  - Assume %{_pkgdocdir} macro always available


author: Paul Howarth <paul@city-fan.org> - 2.2.18-1
changelog:
  - Update to 2.2.18 (rhbz#2407559)
    - Much better CSS language support
    - The color editor now also supports hsl() and rgb() style colors
    - Show colors by just hovering the mouse over a color code
    - Reinstate feature to dynamically change a shortcut key by hovering the
      mouse over a menu item and pressing a new shortcut key again; this feature
      was present in all gtk2 applications and has not been working for bluefish
      gtk3 builds until now
    - Remove the infobrowser from the build since it no longer compiles with new
      libxml versions; this plugin was already deprecated and disabled by default
      for years


author: Paul Howarth <paul@city-fan.org> - 2.2.19-1
changelog:
  - Update to 2.2.19 (rhbz#2416526)
    - Fix a regression in 2.2.18 that could cause a crash when right clicking in
      a document of type Text
    - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
      main menu is now also working in the snippets menu


author: Than Ngo <than@redhat.com> - 142.0.6^chromium142.0.7444.59-1
changelog:
  - Update to 142.0.7444.59
  - * Update to cef-142.0.6+ga56110d (Asahi Lina) (beta)
  - * Refreshed ppc64le patches
  - * Refreshed system-brotli patch
  - * Refreshed clang++-unknown-argument patch
  - * Refreshed split-threshold-for-reg-with-hint patch
  - * Fixed some FTBFS caused by missing header files
  - * Fixed FTBFS caused by old rust compiler
  - * Fixed FTBFS caused by new glibc-2.42 in Rawhide
  - * Fixed FTBFS caused by old python-3.9.x in EL8/9
  - * Dropped obsoleted chromium-141-el9-ffmpeg-5.x-duration.patch for old
    ffmpeg on EL9


author: Than Ngo <than@redhat.com> - 142.0.6^chromium142.0.7444.59-5
changelog:
  - Add CVEs in changelog
  - * High CVE-2025-12428: Type Confusion in V8
  - * High CVE-2025-12429: Inappropriate implementation in V8
  - * High CVE-2025-12430: Object lifecycle issue in Media
  - * High CVE-2025-12431: Inappropriate implementation in Extensions
  - * High CVE-2025-12432: Race in V8
  - * High CVE-2025-12433: Inappropriate implementation in V8
  - * High CVE-2025-12036: Inappropriate implementation in V8
  - * Medium CVE-2025-12434: Race in Storage
  - * Medium CVE-2025-12435: Incorrect security UI in Omnibox
  - * Medium CVE-2025-12436: Policy bypass in Extensions
  - * Medium CVE-2025-12437: Use after free in PageInfo
  - * Medium CVE-2025-12438: Use after free in Ozone
  - * Medium CVE-2025-12439: Inappropriate implementation in App-Bound
    Encryption
  - * Low CVE-2025-12440: Inappropriate implementation in Autofill
  - * Medium CVE-2025-12441: Out of bounds read in V8
  - * Medium CVE-2025-12443: Out of bounds read in WebXR
  - * Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
  - * Low CVE-2025-12445: Policy bypass in Extensions
  - * Low CVE-2025-12446: Incorrect security UI in SplitView
  - * Low CVE-2025-12447: Incorrect security UI in Omnibox


author: Than Ngo <than@redhat.com> - 142.0.6^chromium142.0.7444.134-1
changelog:
  - Update to 142.0.7444.134 (rhbz#2413621)
  - * High CVE-2025-12725: Out of bounds write in WebGPU
  - * High CVE-2025-12726: Inappropriate implementation in Views
  - * High CVE-2025-12727: Inappropriate implementation in V8
  - * Medium CVE-2025-12728: Inappropriate implementation in Omnibox
  - * Medium CVE-2025-12729: Inappropriate implementation in Omnibox


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Packit <hello@packit.dev> - 73-1
changelog:
  Changes with 73
  ----------------
    * ESLint: Set `no-unused-vars` rule to error (HMS-8923) (#3463)
      * Author: Klara Simickova, Reviewers: Gianluca Zuccarelli, Michal Gold
    * Move prettier config to ESLint config (HMS-8997) (#3495)
      * Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    * Refactor oscap (#3299)
      * Author: Anna Vítová, Reviewers: Gianluca Zuccarelli
    * Revert "playwright: Add duration to test account creation request (HMS-8958)" (#3489)
      * Author: Klara Simickova, Reviewers: Michal Gold
    * Update API (HMS-8938) (#3472)
      * Author: Klara Simickova, Reviewers: Gianluca Zuccarelli, Michal Gold
    * Wizard: Add FIPS state management infrastructure (HMS-8992) (#3490)
      * Author: Michal Gold, Reviewers: Klara Simickova
    * Wizard: Add fetch and error state for target environments (HMS-8941) (#3474)
      * Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    * Wizard: Fix registration validation for Satellite on edit (HMS-8998) (#3498)
      * Author: Klara Simickova, Reviewers: Gianluca Zuccarelli, Michal Gold
    * Wizard: disable adding empty user tabs (HMS-8652) (#3300)
      * Author: Katarína Sieklová, Reviewers: Klara Simickova
    * api: remove pull command (#3454)
      * Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    * build(deps): bump @patternfly/react-code-editor from 6.1.0 to 6.3.0 (#3458)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @patternfly/react-core from 6.1.0 to 6.3.0 (#3473)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @patternfly/react-table from 6.3.0 to 6.3.1 (#3500)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @redhat-cloud-services/frontend-components from 6.1.0 to 6.1.1 (#3464)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @redhat-cloud-services/frontend-components-notifications from 6.1.0 to 6.1.1 (#3470)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @redhat-cloud-services/frontend-components-notifications from 6.1.1 to 6.1.3 (#3497)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @redhat-cloud-services/frontend-components-utilities from 6.1.0 to 6.1.1 (#3478)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @sentry/webpack-plugin from 3.6.1 to 4.0.0 (#3453)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @sentry/webpack-plugin from 4.0.0 to 4.0.1 (#3465)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @sentry/webpack-plugin from 4.0.1 to 4.0.2 (#3482)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump @unleash/proxy-client-react from 5.0.0 to 5.0.1 (#3471)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps): bump axios from 1.10.0 to 1.11.0 (#3457)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump @currents/playwright from 1.15.2 to 1.15.3 (#3492)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump @eslint/js from 9.31.0 to 9.32.0 (#3496)
      * Author: dependabot[bot], Reviewers: Gianluca Zuccarelli
    * build(deps-dev): bump @patternfly/react-icons from 6.1.0 to 6.3.0 (#3461)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump @testing-library/dom from 10.4.0 to 10.4.1 (#3476)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump @types/node from 24.0.13 to 24.1.0 (#3460)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump eslint from 9.30.1 to 9.32.0 (#3484)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump eslint-plugin-playwright from 2.2.0 to 2.2.1 (#3466)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump eslint-plugin-playwright from 2.2.1 to 2.2.2 (#3491)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump eslint-plugin-testing-library from 7.6.0 to 7.6.3 (#3483)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * build(deps-dev): bump stylelint from 16.22.0 to 16.23.0 (#3493)
      * Author: dependabot[bot], Reviewers: Klara Simickova
    * on-prem: enable building & uploading AWS images (HMS-5823) (#3055)
      * Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers
    * playwright: Add duration to test account creation request (HMS-8958) (#3485)
      * Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    * playwright: Update required Oscap packages (#3488)
      * Author: Klara Simickova, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2025-08-06


author: Packit <hello@packit.dev> - 75-1
changelog:
  Changes with 75
  ----------------
    - BlueprintCard: fix name truncation (HMS-9079) (#3556)
      - Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers
    - Launch: implement guidance for Azure (HMS-9003) (#3549)
      - Author: Anna Vítová, Reviewers: Gianluca Zuccarelli
    - Wizard: on-prem aws region in edit (HMS-9096) (#3564)
      - Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers
    - build(deps-dev): bump @types/node from 24.1.0 to 24.3.0 (#3553)
      - Author: dependabot[bot], Reviewers: Gianluca Zuccarelli
    - devDeps: Bump msw from 2.10.4 to 2.10.5 (HMS-9088) (#3559)
      - Author: Gianluca Zuccarelli, Reviewers: Michal Gold
    - plans: add gating tests (#3531)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2025-08-21


author: Packit <hello@packit.dev> - 76-1
changelog:
  Changes with 76
  ----------------
    - Hooks: extract auth.getUser to its own hook (HMS-9085) (#3557)
      - Author: Gianluca Zuccarelli, Reviewers: Michal Gold, Sanne Raymaekers
    - Remove MSW browser (HMS-9225) (#3590)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard: Fix tenant/subscription ID population after source clear (HMS-9167) (#3570)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - Wizard: Show package recommendations for RHEL 10 (#3566)
      - Author: Klara Simickova, Reviewers: Lukáš Zapletal
    - Wizard: add support for shared EPEL repos (HMS-5986) (#3548)
      - Author: Bryttanie, Reviewers: Klara Simickova
    - Wizard: give language and timezone default values (HMS-9182) (#3571)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova, Michal Gold
    - Wizard: hide azure sources integration (HMS-9092) (#3579)
      - Author: Anna Vítová, Reviewers: Klara Simickova
    - build(deps): bump @redhat-cloud-services/frontend-components-utilities from 7.0.3 to 7.0.4 (#3586)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps): bump @redhat-cloud-services/types from 3.0.1 to 3.1.0 (#3600)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps): bump @sentry/webpack-plugin from 4.1.1 to 4.2.0 (#3597)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @babel/core from 7.28.0 to 7.28.3 (#3583)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @babel/preset-env from 7.28.0 to 7.28.3 (#3581)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @currents/playwright from 1.15.3 to 1.16.0 (#3561)
      - Author: dependabot[bot], Reviewers: Gianluca Zuccarelli
    - build(deps-dev): bump @testing-library/jest-dom from 6.6.4 to 6.8.0 (#3588)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @vitejs/plugin-react from 4.7.0 to 5.0.1 (#3560)
      - Author: dependabot[bot], Reviewers: Gianluca Zuccarelli
    - build(deps-dev): bump copy-webpack-plugin from 13.0.0 to 13.0.1 (#3601)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump mini-css-extract-plugin from 2.9.2 to 2.9.4 (#3576)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump msw from 2.10.5 to 2.11.1 (#3606)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump sass from 1.90.0 to 1.91.0 (#3585)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - chore(deps): update build-tools digest to 967d954 (#3603)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - chore(deps): update konflux references (#3594)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - schutzbot/playwright_tests: halve workers on schutzbot (#3569)
      - Author: Sanne Raymaekers, Reviewers: Klara Simickova
    - tests/playwright: Add nightly action for Boot tests with Slack notification (#3582)
      - Author: Tomáš Koscielniak, Reviewers: Katarína Sieklová, Klara Simickova
    - tests/playwright: qcow2 boot test (HMS-8985) (#3525)
      - Author: Tomáš Koscielniak, Reviewers: Gianluca Zuccarelli, Sanne Raymaekers
    - tsconfig: Enable strict mode (HMS-9075) (#3546)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová

  — Somewhere on the Internet, 2025-09-03


author: Packit <hello@packit.dev> - 77-1
changelog:
  Changes with 77
  ----------------
    - Fix filesystem and languages errors not renderring properly (#3623)
      - Author: Anna Vítová, Reviewers: Michal Gold
    - Wizard: clean up analytics to track image creation failure or success (HMS-9219) (#3604)
      - Author: Katarína Sieklová, Reviewers: Gianluca Zuccarelli, Sanne Raymaekers
    - build(deps): bump @redhat-cloud-services/frontend-components-utilities from 7.0.4 to 7.0.6 (#3645)
      - Author: dependabot[bot], Reviewers: Klara Simickova, Michal Gold
    - build(deps): bump @sentry/webpack-plugin from 4.2.0 to 4.3.0 (#3625)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @eslint/js from 9.32.0 to 9.35.0 (#3644)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @types/node from 24.3.0 to 24.5.0 (#3648)
      - Author: dependabot[bot], Reviewers: Gianluca Zuccarelli
    - build(deps-dev): bump globals from 16.3.0 to 16.4.0 (#3643)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - chore(deps): update konflux references (#3642)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - npm: check for vulnerable packages on each PR (#3639)
      - Author: Florian Schüller, Reviewers: Klara Simickova
    - src: Advanced partitioning scaffolding, import, edit (HMS-8963) (#3580)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová

  — Somewhere on the Internet, 2025-09-17


author: Packit <hello@packit.dev> - 78-1
changelog:
  Changes with 78
  ----------------
    - Notifications: fix mutations with notifications hook (HMS-9449) (#3683)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Klara Simickova, Tomáš Koscielniak
    - Remove frontend components dependencies of Launch (#3657)
      - Author: Anna Vítová, Reviewers: Gianluca Zuccarelli
    - Update Konflux references (#3660)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - Update the list of known vulnerable packages (#3653)
      - Author: Florian Schüller, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - Wizard: Increase limit for Compliance policies in selector to 50 (#3679)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova
    - Wizard: Update Satellite registration based on mocks (HMS-9414) (#3423)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli, Katarína Sieklová
    - Wizard: don't clear first boot systemd service (HMS-9306) (#3690)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Wizard: fix root not removable when duplicate (#3614)
      - Author: Anna Vítová, Reviewers: Michal Gold, Tomáš Koscielniak
    - Wizard: remove deprecated satellite flag (#3664)
      - Author: Anna Vítová, Reviewers: Gianluca Zuccarelli, Klara Simickova
    - build(deps): bump @redhat-cloud-services/frontend-components-notifications from 6.1.8 to 6.1.11 (#3686)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps): bump @redhat-cloud-services/frontend-components-utilities from 7.0.6 to 7.0.8 (#3685)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @types/node from 24.5.0 to 24.5.2 (#3678)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @types/uuid from 10.0.0 to 11.0.0 (#3671)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @vitejs/plugin-react from 5.0.2 to 5.0.3 (#3667)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump eslint from 9.34.0 to 9.36.0 (#3661)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump stylelint-config-recommended-scss from 16.0.0 to 16.0.1 (#3681)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - check-vulnerable-packages: show packages we have installed (#3654)
      - Author: Florian Schüller, Reviewers: Gianluca Zuccarelli
    - devDeps: Remove unused @types/uuid dependency (HMS-9431) (#3674)
      - Author: Klara Simickova, Reviewers: Anna Vítová
    - npm/deps-dev: Add fec dev-proxy to npm run start:stage (#3689)
      - Author: Tomáš Koscielniak, Reviewers: Gianluca Zuccarelli, Klara Simickova
    - src: Update API and remove Azure source ID from imagesTable (HMS-9424) (#3669)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - test: Clean up mocked flags (#3663)
      - Author: Klara Simickova, Reviewers: Anna Vítová, Gianluca Zuccarelli
    - tests: Add integration test for Compliance - CIS policy (HMS-5964) (#3676)
      - Author: Tomáš Koscielniak, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 79-1
changelog:
  Changes with 79
  ----------------
    - README.md: use xhtml syntax for docusaurus (#3711)
      - Author: Florian Schüller, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - Users UI revamp (HMS-9400) (#3696)
      - Author: Anna Vítová, Reviewers: Gianluca Zuccarelli
    - Wizard: reintroduce registration step for cockpit (HMS-9195) (#3695)
      - Author: Gianluca Zuccarelli, Reviewers: Anna Vítová
    - build(deps): bump @redhat-cloud-services/frontend-components-notifications from 6.1.11 to 6.1.13 (#3707)
      - Author: dependabot[bot], Reviewers: Tomáš Koscielniak
    - build(deps): bump @redhat-cloud-services/types from 3.3.0 to 3.3.1 (#3709)
      - Author: dependabot[bot], Reviewers: Tomáš Koscielniak
    - build(deps): bump @scalprum/react-core from 0.9.5 to 0.10.0 (#3710)
      - Author: dependabot[bot], Reviewers: Tomáš Koscielniak
    - build(deps-dev): bump @redhat-cloud-services/frontend-components-config from 6.7.1 to 6.7.4 (#3722)
      - Author: dependabot[bot], Reviewers: Tomáš Koscielniak
    - build(deps-dev): bump stylelint from 16.24.0 to 16.25.0 (#3715)
      - Author: dependabot[bot], Reviewers: Tomáš Koscielniak
    - build(deps-dev): bump typescript from 5.9.2 to 5.9.3 (#3697)
      - Author: dependabot[bot], Reviewers: Gianluca Zuccarelli, Klara Simickova
    - chore(deps): update konflux references (#3702)
      - Author: red-hat-konflux[bot], Reviewers: Gianluca Zuccarelli, Sanne Raymaekers
    - playwright: Fix missing expect import in imageBuilding.ts (#3694)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova, Sanne Raymaekers, Simon Steinbeiß
    - src: Remove import flag from code base (HMS-9468) (#3699)
      - Author: Klara Simickova, Reviewers: Anna Vítová, Gianluca Zuccarelli
    - workflow: add issues.opened trigger to pr_best_practices (HMS-9464) (#3691)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova, Sanne Raymaekers, Simon Steinbeiß

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 80-1
changelog:
  Changes with 80
  ----------------
    - CI/Playwright: Run boot tests on PR when changed and increase global timeout (HMS-9465) (#3718)
      - Author: Tomáš Koscielniak, Reviewers: Gianluca Zuccarelli, Sanne Raymaekers
    - LandingPage: Add "service unavailable" alert (HMS-9582) (#3739)
      - Author: Klara Simickova, Reviewers: Sanne Raymaekers
    - Playwright: Change AAP tests file extension, remove redundant timeout (#3725)
      - Author: Tomáš Koscielniak, Reviewers: Anna Vítová
    - Wizard: Add status polling for pending repositories (HMS-9591) (#3749)
      - Author: Tomáš Koscielniak, Reviewers: Gianluca Zuccarelli
    - Wizard: Firewall revamp (HMS-9399) (#3675)
      - Author: Katarína Sieklová, Reviewers: Gianluca Zuccarelli
    - Wizard: address Google Cloud Platform renaming (HMS-9577) (#3727)
      - Author: Anna Vítová, Reviewers: Tomáš Koscielniak
    - build(deps): bump @patternfly/react-code-editor from 6.3.1 to 6.4.0 (#3746)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @redhat-cloud-services/tsc-transform-imports from 1.0.25 to 1.0.26 (#3726)
      - Author: dependabot[bot], Reviewers: Anna Vítová
    - build(deps-dev): bump msw from 2.11.3 to 2.11.6 (#3745)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - chore(deps): replace dependency npm-run-all with npm-run-all2 5.0.0 (#3736)
      - Author: red-hat-konflux[bot], Reviewers: Michal Gold
    - chore(deps): update build-tools digest to 4eea3e7 (#3737)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - ci: update typescript-eslint packages to 8.46.1 (HMS-9579) (#3733)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - devDeps: Bump playwright and @playwright/test (HMS-9583) (#3743)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - devDeps: Bump typescript deps (HMS-9581) (#3742)
      - Author: Klara Simickova, Reviewers: Tomáš Koscielniak
    - playwright: Registration step tests (#3721)
      - Author: Anna Vítová, Reviewers: Gianluca Zuccarelli
    - src/constants: add support for fedora 43 and 44 (#3754)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Klara Simickova

  — Somewhere on the Internet, 2025-10-24


author: Packit <hello@packit.dev> - 81-1
changelog:
  Changes with 81
  ----------------
    - Wizard: add custom EPEL repo warning (#3757)
      - Author: Bryttanie, Reviewers: Klara Simickova
    - build(deps): bump @patternfly/react-table from 6.3.1 to 6.4.0 (#3759)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps): bump @redhat-cloud-services/frontend-components from 7.0.6 to 7.0.12 (#3774)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps): bump @scalprum/react-core from 0.10.0 to 0.11.0 (#3772)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump @eslint/js from 9.36.0 to 9.38.0 (#3760)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - chore(deps): update babel monorepo to v7.28.5 (#3762)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - chore(deps): update dependency chart.js to v4.5.1 (#3764)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - chore(deps): update dependency sass-loader to v16.0.6 (#3765)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - package.json: replace @ltd/j-toml with smol-toml (RHEL-123840) (#3770)
      - Author: Sanne Raymaekers, Reviewers: Klara Simickova
    - schutzbot/terraform: bump terraform sha (#3769)
      - Author: Sanne Raymaekers, Reviewers: Klara Simickova

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 82-1
changelog:
  Changes with 82
  ----------------
    - Playwright: Add non-repeatable build integration test (HMS-9497) (#3724)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova, Michal Gold
    - Update latest API (HMS-9637) (#3784)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - Update latest API (HMS-9685) (#3808)
      - Author: Michal Gold, Reviewers: Gianluca Zuccarelli, Klara Simickova
    - Wizard: Compliance revamp (HMS-9396) (#3732)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - build(deps-dev): bump @vitejs/plugin-react from 5.0.3 to 5.1.0 (#3782)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - chore(deps): lock file maintenance (#3728)
      - Author: red-hat-konflux[bot], Reviewers: Gianluca Zuccarelli, Klara Simickova
    - chore(deps): lock file maintenance (#3812)
      - Author: red-hat-konflux[bot], Reviewers: Michal Gold
    - chore(deps): update build-tools digest to 098cc75 (#3793)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - chore(deps): update build-tools digest to f15b565 (#3814)
      - Author: red-hat-konflux[bot], Reviewers: Michal Gold
    - chore(deps): update konflux references (#3789)
      - Author: red-hat-konflux[bot], Reviewers: Michal Gold
    - chore(deps): update react monorepo (#3797)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - chore(deps): update typescript-eslint monorepo to v8.46.3 (#3815)
      - Author: red-hat-konflux[bot], Reviewers: Tomáš Koscielniak
    - cockpit-image-builder: export blueprints (RHEL-123840) (#3779)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    - dependabot: Switch from daily to weekly updates (HMS-9650) (#3787)
      - Author: Klara Simickova, Reviewers: Michal Gold
    - devDeps: Bump eslint-plugin-playwright from 2.2.2 to 2.3.0 (HMS-9654) (#3795)
      - Author: Klara Simickova, Reviewers: Tomáš Koscielniak
    - fix(deps): update dependency @redhat-cloud-services/frontend-components to v7.0.13 (#3816)
      - Author: red-hat-konflux[bot], Reviewers: Tomáš Koscielniak
    - packit.yaml: Release into fedora-all (HMS-9619) (#3778)
      - Author: Klara Simickova, Reviewers: Sanne Raymaekers

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 83-1
changelog:
  Changes with 83
  ----------------
    - Wizard: Disk customization (HMS-8945) (#3692)
      - Author: Klara Simickova, Reviewers: Nobody
    - Wizard: fix repeatable build behavior in pkg and repo steps (#3731)
      - Author: Dominik Vágner, Reviewers: Klara Simickova
    - Wizard: remove add and clear buttons from the LabelInput (HMS-9576) (#3818)
      - Author: Katarína Sieklová, Reviewers: Gianluca Zuccarelli, Klara Simickova
    - api: stop updating provisioning (HMS-5862) (#3829)
      - Author: Sanne Raymaekers, Reviewers: Klara Simickova
    - onPrem: Hide blueprint version warning (HMS-9782) (#3842)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Add "node" to tsconfig types (HMS-9772) (#3834)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Add Satellite boot tests (HMS-6024) (#3810)
      - Author: Klara Simickova, Reviewers: Nobody
    - store/cockpit: correct users customization (#3847)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    - store/cockpit: simplify customization conversion (HMS-9786) (#3846)
      - Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers

  — Somewhere on the Internet, 2025-11-21


author: Richard W.M. Jones <rjones@redhat.com> - 3.8.3-5
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.0-1
changelog:
  - Update to release v0.25.0
  - Resolves: rhbz#2399354, rhbz#2399081, rhbz#2398678, rhbz#2398424
  - Upstream feature additions and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.1-3
changelog:
  - Switch to docker-distribution package for 'registry'
  - Switch to docker-distribution as a BuildRequires for registry which
    removes dependency on unsupported golang- packages
  - Adopt gocheck2 and simplify %check


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.2-1
changelog:
  - Update to v0.25.2
  - CVE-2025-58183; Resolves: rhbz#2412529
  - CVE-2025-58188; Resolves: rhbz#2412380, rhbz#2411476, rhbz#2410945
  - CVE-2025-58185; Resolves: rhbz#2410578, rhbz#2410299, rhbz#2410013
  - CVE-2025-61723; Resolves: rhbz#2409627, rhbz#2409349, rhbz#2409065
  - CVE-2025-58189; Resolves: rhbz#2408157, rhbz#2407880, rhbz#2407612
  - Upstream updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.0-1
changelog:
  - Update to release v0.26.0
  - Resolves: rhbz#2412681, rhbz#2412761
  - Upstream new features and fixes
  - dependency override for moby/policy-helper needed for license (default
    version does not a a license file)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.27.0-1
changelog:
  - Update to release v0.27.0
  - Resolves: rhvz#2388453, rhbz#2384137, rhbz#2384154
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.29.0-1
changelog:
  - Update to release v0.29.0
  - Resolves: rhbz#2397747, rhbz#2398425, rhbz#2398679, rhbz#2399082,
    rhbz#2399355
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves: rhbz#2413270
  - Resolves: rhbz#2407614, rhbz#2407881, rhbz#2408158, rhbz#2409066
  - Resolves: rhbz#2409350, rhbz#2409628, rhbz#2410014, rhbz#2410300
  - Resolves: rhbz#2410579, rhbz#2410946, rhbz#2411477, rhbz#2412381
  - Resolves: rhbz#2412530, rhbz#2412682, rhbz#2412762
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.5.1-1
changelog:
  - Update to release v28.5.1
  - Resolves: rhbz#2401164, rhbz#2384164, rhbz#2384149
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.5.2-1
changelog:
  - Update to release v28.5.2
  - Resolves: rhbz#2412743
  - Incorporates runc v1.3.3
  - Upstream bug fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-1
changelog:
  - Update to release v29.0.0
  - Upstream note: "This release includes several breaking changes and
    deprecations. Review the release notes carefully before upgrading."


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-2
changelog:
  - Amend tests in %check
  - Expand tests found in submodules using -F parameter to gocheck2
  - v29.0.0 changes  Co-authored-by: Maxwell G <maxwell@gtmx.me>


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.2-2
changelog:
  - Remove flaky tests from %check
  - TestSCTP6Proxy is flaky on x86_64 arch - usually working but sometimes
    not
  - TestSCTP6ProxyNoListener often fails on ppc64le (rawhide)


author: Shawn Iwinski <shawn.iwinski@gmail.com> - 7.103-1
changelog:
  - Update to 7.103 (RHBZ #2253220)
  - SA-CORE-2024-005 / CVE-2024-55635
  - SA-CORE-2024-008 / CVE-2024-55638


author: Mike FABIAN <mfabian@redhat.com> - 2.28.0-1
changelog:
  - Update to 2.28.0
  - Add setup UI for the chat with ollama or ramalama
  - Add a ibus-setup-tb.desktop file (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/807)
  - Suggest suffixed word forms as well (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/799)
  - Update emoji annotations from CLDR
  - itb_ollama.py: better error handling when getting model list
  - itb_ollama.py: Add support for ramalama
  - Support OLLAMA_HOST environment variable
  - Translation update from Weblate (de 100%, fr 95.4%, ja 100%, ka 100%,
    kab 74.8%, ko 100%, ru 100%, sv 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Ignore “Enable suggestions by key” and “Minimum number of chars for
    completion“ options when OSK is used Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/813 Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/814
  - Translation update from Weblate (es 100%, tr 100%, zh_CN 73.1%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.3-1
changelog:
  - Update 2.28.3
  - Fix [Install missing dictionaries] feature in the setup tool (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/821)
  - Prefer hunspell over aspell


author: Mike FABIAN <mfabian@redhat.com> - 2.28.4-1
changelog:
  - Update to 2.28.4
  - Make it possible to download missing dictionaries and update existing
    ones from upstream (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/822)
  - Show in a tooltip from which path a hunspell dictionary and a cldr
    annotation have been loaded
  - Translation update from Weblate (de 100%, es 100%, fi 100%, ja 100%,
    ka 100%, ko 100%, sv 100%, tr 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.5-1
changelog:
  - Update to 2.28.5
  - Set short process names on Linux (prctl PR_SET_NAME) or BSD
    (setproctitle) (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/833)
  - Show the direct input mode menu always
  - Workaround for LibreOffice autocorrection (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/834)
  - Show in a tooltip from which path an m17n input method has been loaded
  - Translation update from Weblate (fr 95%, it 100%, pl 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.6-1
changelog:
  - Update to 2.28.6
  - Improve workaround for LibreOffice autocorrection (Related:
    https://github.com/mike-fabian/ibus-typing-booster/issues/834)
  - Refactor: Add a ClientInfo class to store the client id (improve
    readability and speed)
  - Code cleanup in setup/main.py
  - Translation update from Weblate (de 100%, es 100%, ja 100%, pl 100%,
    ru 100%, tr 100%, uk 100%)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Jens Petersen <petersen@redhat.com> - 1.6.2-26
changelog:
  - 'diff': use git diff's builtin filtering
  - 'fetch': add --lenient to skip non dist-git directories
  - 'local': --detached-head
  - 'parallel': do not waitrepo for final layer
  - 'parallel': koji-tool tail of failed builds and end with task url
  - 'parallel': only print "parallel layer" is more than one pkg in layer
  - 'request-branches': wait 30s before checking for package added to tag
  - 'sidetags': --tagged lists tagged builds
  - 'unautospec': new command to remove autochangelog and/or autorelease
  - 'update-sources': now takes optional version, replacing 'update-version'
  - new fedora-krb lib replaces Krb module: handles different FAS userid (#67)
  - rename --allow-head to --detached-head
  - targetMaybeSidetag: warn/prompt if target does not match branch


author: Jens Petersen <petersen@redhat.com> - 1.7-28
changelog:
  - support epel10.x minors with fedora-releases-0.3.0
  - 'merge': now done from origin for consistency
  - targetMaybeSidetag: prompts to choose which sidetag
  - 'autospec': no duplicate %changelog line
  - 'branches': add --only-dead option
  - 'branches': improve the prefixing for multiple packages
  - 'build': update latest tagged check to include epel-testing; print all
  - 'build': use target branch to determine nvr
  - 'bump': complete rework of logic (--strict replaces --local)
  - 'clone': add --dryrun
  - 'clone': now supports globbing of packages
  - 'copr': order chroots by branch (release): so epel10 > epel9
  - 'copr': rename i686 to i386
  - 'fetch': fix --lenient was no-op
  - 'import': now also waits for package to be setup in koji
  - 'install': add --yes
  - 'install': perform also if given a rpm subpackage selection
  - 'install': select-rpms-0.3.0 adds --error-existing
  - 'install': skip ":" separator
  - 'list': refactor with countListPackages
  - 'mock': add experimental --install mode (for single package)
  - 'parallel': better sidetag setup with warnings
  - 'parallel': offer to retry failures or continue with waitrepo for layer
  - 'parallel': print nvr earlier and only latest commits
  - 'parallel': reduce default delay to 1s between triggering builds
  - 'parallel': always show task url for fail
  - 'pull': drop stash pop to avoid making conflicts
  - 'push': check local branch exists
  - 'request-branches': now also checks for commit access via group membership
  - 'request-branches': request all branches/pkgs before waiting for koji pkgs
  - 'review-package': defaults to interactive, use --full for fedora-review
  - 'scratch': do not create a new sidetag!
  - 'sidetags': listings are now sorted
  - 'switch': add --lenient option to avoid error for non-existent branch
  - 'uninstall': new experimental command to remove a package NVR
  - 'update-sources': partition sources by isArchiveFile
  - 'waitrepo': add --no-nvr option for generic wait-repo
  - Branches gitCurrentBranchWarn: offer to rename master to rawhide
  - Branches listOfBranches: print branch EOL warning when < 7 days left
  - Branches systemBranch: support CPE_NAME
  - Package isArchiveFile: ".sig" files are ascii
  - RpmBuild getSources: fix to use exists for uncompressed file
  - RpmBuild: check/install compression tool before downloading tarball
  - buildRPMs: backup build.log's with cp -p
  - new 'tag-build-to-sidetag': tags branch's nvr into a sidetag
  - recognize .crate as archive file (#70)
  - refPrompt: accept "origin" and require ref to over 3 chars
  - withPackagesByBranches: git fetch earlier to get any new branches
  - withPackagesByBranches: switch back branch before unstash


author: Jens Petersen <petersen@redhat.com> - 1.7.1-29
changelog:
  - merging now prompts even with --merge (--no-prompt) when branch unmergeable
  - parallel: restore package header output for merge
  - parallel: fix error for -F/-E when run outside dist-git
  - createKojiSidetag: needs krbTicket


author: Jens Petersen <petersen@redhat.com> - 1.7.1-34
changelog:
  - rebuild for haxr xmlrpc to Accept: application/xml
  - use rpmbuild-order 0.4.13
  - [epel] recommends epel-rpm-macros


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-32.20240820git81f07ce
changelog:
  - Updated to last upstream commits
  - Focus fan graph on reported range
  - Add option to rotate chart labels
  - Adjust URL accordingly to the switch to the forked github sources repository


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-33.20240904git9491649
changelog:
  - Updated to last upstream commits
  - Drop unused compat.js
  - Use Cogl.Color instead of Clutter.Color
  - Add 47 to supported shell versions
  - Drop debug log


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-35.20250207gitd7f330d
changelog:
  - Updated to last upstream commits
  - Add log level to sm_log
  - schema: Indent
  - util: Move sm_log to util
  - Improve non-existent sensors handling
  - Schema rename - migrating gnome settings as well
  - metadata.json: Update description
  - Make "System Monitor" action customizable
  - Makefile: Add zip-install target
  - Makefile: Clean up the extension reloading stuff
  - Rename schema definition files to match schema IDs
  - metadata.json: Update extension URL
  - Fixed Bug when detecting NVIDIA GPUs
  - Add fallback logic for locale
  - Drop "no migration" message
  - metadata.json: Note about prereqs
  - metadata.json: Tone down the rhetoric regarding update errors
  - Rename archive from git new repository name: gnome-shell-system-monitor-next-applet


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-36.20250319git184bc34
changelog:
  - Updated to last upstream commits
  - Add left-display feature and dynamic settings toggle
  - extension: Add support for max CPU freq
  - extension: More accurate disk usage calculation
  - metadata.json: Add gnome-shell 48 support


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-38.20250916git278b27e
changelog:
  - Updated to last upstream commits
  - extension: Add setting for graph scale reset cooldown period
  - metadata.json: Add gnome-shell 49 support - RHBZ#2395840
  - Makefile: Don't use git rev for version
  - Makefile: Allow user override of VERSION
  - Makefile: Drop gschemas.{clean,uninstall}
  - Makefile: Simplify and clean up
  - Makefile: Don't remove when installing
  - Makefile: Drop all use of sudo
  - Makefile: Add gschemas-install target
  - Makefile: Make build explicitly depend on gschemas
  - Makefile: Add some messages about where build output is going
  - Makefile: Rename the extension rule
  - extension: Drop the old schema file and migration code - RHBZ#2268400
  - Adapt SPEC file to new Makefile


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-40.20251120gitc4969d9
changelog:
  - Updated to last upstream commits
  - Makefile, README: Add gschemas compile target for local installs
  - extension: Add polling logic for battery proxy initialization
  - extension: Add short name for battery label


author: Alexey Kurov <nucleo@fedoraproject.org> - 2.2.53-3
changelog:
  - sysusers.d config file for F42+
  - https://fedoraproject.org/wiki/Changes/RPMSuportForSystemdSysusers


author: Alexey Kurov <nucleo@fedoraproject.org> - 2.2.53-4
changelog:
  - depend on async-timeout only for Python releases older than 3.11
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonAsyncTimeout


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Germano Massullo <germano.massullo@gmail.com> - 3.17.1-1
changelog:
  - 3.17.1 release
  - Replaced Add-zlib-header.patch and Increase_version_control.patch with minizip.patch
  - Removed CONTRIBUTING.md in the spec file


author: Remi Collet <remi@remirepo.net> - 0.18.1-1
changelog:
  - update to 0.18.1 for CVE-2025-13402
  - disable gpg check reported as https://github.com/rnpgp/rnp/issues/2375


author: Jerry James <loganjerry@gmail.com> - 3.6.2-1
changelog:
  - Version 3.6.2
  - Use zlib-ng directly instead of via the compatibility interface
  - Temporarily disable one failing test on ppc64le


author: Jerry James <loganjerry@gmail.com> - 3.6.2-2
changelog:
  - Work around a test failure
  - The failure appears to be due to changes in bsearch behavior in newer
    glibc builds


author: Carlos O'Donell <carlos@redhat.com> - 6.9.1-5
changelog:
  - Break up man-pages-additional-20140218.tar.xz
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1:1.4.2-2
changelog:
  - Upgrade to the latest upstream release 1.4.2
  - Add patch #2227 (inherit environment when executing remediations)


author: Adam Williamson <awilliam@redhat.com> - 4.6^20241125gitb64e219-3
changelog:
  - Rebuild for opencv-4.11.0 (Sérgio Basto)
  - Disable tests on s390x to get build through (see #2345306)


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-1
changelog:
  - Update to latest git
  - Backport #2727 to fix multi-machine script on Fedora
  - Backport #2728 to fix tests without Inline::Lua


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-3
changelog:
  - Backport PR #2750 to allow slow typing with (assert_)script_run
  - Backport PR #2751 to fix tests with IPC::Run 20250809.0


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-10
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 8.4.15-2
changelog:
  - Fix GH-20528 regression breaks mysql connexion using an IPv6 address enclosed
    in square brackets (upstream patch)


author: Remi Collet <remi@remirepo.net> - 5.6.1-1
changelog:
  - update to 5.6.1
  - re-license spec file to CECILL-2.1
  - raise dependency on PHP 7.4
  - raise dependency on phpdocumentor/type-resolver 1.7
  - add dependency on phpstan/phpdoc-parser
  - add dependency on doctrine/deprecations


author: Remi Collet <remi@remirepo.net> - 1.10.0-1
changelog:
  - update to 1.10.0
  - add dependency on phpstan/phpdoc-parser
  - add dependency on doctrine/deprecations


author: Remi Collet <remi@remirepo.net> - 12.3.14-1
changelog:
  - update to 12.3.14 (no change)
  - raise dependency on sebastian/exporter 7.0.2
  - raise dependency on phpunit/php-code-coverage 12.3.8
  - raise dependency on sebastian/cli-parser 4.2.0


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: rhbz#2414551
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: rhbz#2414553


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.8.2-1
changelog:
  - Update to version 5.8.2
  - Use reserved uid and gid 194 for the xrootd user
    - https://pagure.io/packaging-committee/issue/1444
    - https://src.fedoraproject.org/rpms/setup/pull-request/27


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Dmitri Smirnov <dmitri@smirnov.ee> - 4.6.0-2
changelog:
  - Move pre-downloaded files to patch to avoid issues when building 
  - Remove pqtch 1251 which is no longer needed


author: Germano Massullo <germano.massullo@gmail.com> - 4.7.0-1
changelog:
  - 4.7.0 release
  - Moved from tar.gz to tar.xz upstream file and updated Source0
  - Removed EL7 and EL8 leftovers
  - Moved from Qt5 to Qt6
  - Added cmake.patch


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Zdenek Pytela <zpytela@redhat.com> - 42.7-1
changelog:
  - Label /usr/lib/systemd/systemd-ssh-issue with systemd_ssh_issue_exec_t
  - Allow stalld map sysfs files
  - Allow NetworkManager-dispatcher-winbind get pidfs attributes
  - Allow openvpn create and use generic netlink socket
  - policy_capabilities: remove estimated from released versions
  - policy_capabilities: add stub for userspace_initial_context
  - add netlink_xperm policy capability and nlmsg permission definitions
  - policy_capabilities: add ioctl_skip_cloexec
  - selinux-policy: add allow rule for tuned_ppd_t
  - selinux-policy: add allow rule for switcheroo_control_t
  - Label /run/audit with auditd_var_run_t


author: Zdenek Pytela <zpytela@redhat.com> - 42.8-1
changelog:
  - Allow gdm create /etc/.pwd.lock with a file transition
  - Allow gdm bind a socket in the /run/systemd/userdbd directory
  - Allow nsswitch_domain connect to xdm over a unix domain socket
  - Allow systemd homed getattr all tmpfs files (bsc#1240883)
  - Allow systemd (PID 1) create lastlog entries
  - Allow systemd_homework_t transition pid files to lvm_var_run_t (bsc#1240883)
  - Allow gnome-remote-desktop speak with tabrmd over dbus (bsc#1244573)
  - Allow nm-dispatcher iscsi and sendmail plugins get pidfs attributes
  - Allow systemd-oomd watch tmpfs dirs
  - Allow chronyc the setgid and setuid capabilities


author: Zdenek Pytela <zpytela@redhat.com> - 42.9-1
changelog:
  - Fix systemd_manage_unit_symlinks() interface definition
  - Support coreos installation methods
  - Add a new type for systemd-ssh-issue PID files
  - Allow gnome-remote-desktop connect to unreserved ports
  - Allow mdadm the CAP_SYS_PTRACE capability
  - Allow iptables manage its private fifo_files in /tmp
  - Allow auditd manage its private run dirs
  - Revert "Allow virt_domain write to virt_image_t files"
  - Exclude tabrmd.if from interfaces list


author: Zdenek Pytela <zpytela@redhat.com> - 42.11-1
changelog:
  - Allow nfs generator create and use netlink sockets
  - Conditionally allow virt guests to read certificates in user home directories
  - xenstored_t needs CAP_SYS_ADMIN for XENSTORETYPE=domain (bsc#1247875)
  - Allow nfs-generator create and use udp sockets
  - Allow kdump search kdumpctl_tmp_t directories
  - Allow init open and read user tmp files
  - Fix the systemd_logind_stream_connect() interface
  - Allow staff and sysadm execute iotop using sudo
  - Allow sudodomains connect to systemd-logind over a unix socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.12-1
changelog:
  - Adjust guest and xguest users policy for sshd-session
  - Allow valkey-server create and use netlink_rdma_socket
  - Allow blueman get attributes of filesystems with extended attributes
  - Update files_search_base_file_types()
  - Allow geoclue get attributes of the /dev/shm filesystem
  - Allow apcupsd get attributes of the /dev/shm filesystem
  - Allow sshd-session read cockpit pid files


author: Zdenek Pytela <zpytela@redhat.com> - 42.13-1
changelog:
  - Allow sshd-auth read generic proc files
  - Allow sshd-auth read and write user domain ptys
  - Allow logwatch read and write sendmail unix stream sockets
  - Allow logwatch domain transition on rpm execution
  - Allow thumb_t mounton its private tmpfs files
  - Allow thumb_t create permission in the user namespace
  - Allow corenet_unconfined_type name_bind to icmp_socket
  - Allow systemd-networkd to manage systemd_networkd_var_lib_t files
  - Allow sshd-session get attributes of sshd vsock socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.14-1
changelog:
  - Define file equivalency for /var/opt
  - Allow virtnodedev_t the perfmon capability
  - Allow nut_upsdrvctl_t the sys_ptrace capability
  - Label /usr/lib/systemd/user/graphical-session-pre.target with xdm_unit_file_t
  - systemd-sysctl: allow rw on binfm_misc_fs_t to set binfmt_misc status
  - Allow cupsd to manage cupsd_rw_etc_t lnk_files
  - Set temporary no-stub resolv.conf file from NetworkManager as net_conf_t
  - Allow spamc read aliases file
  - Mark configfs_t as mountpoint (bsc#1246080)
  - Allow systemd-machined watch cgroup files


author: Zdenek Pytela <zpytela@redhat.com> - 42.15-1
changelog:
  - Allow insights-client manage /etc symlinks
  - Allow insights-client get attributes of the rpm executable
  - Allow nfsidmapd search virt lib directories
  - Allow iotop stream connect to systemd-userdbd
  - Allow gnome-remote-desktop read sssd public files
  - Allow thumb_t stream connect to systemd-userdbd
  - Allow bluez dbus API passing unix domain sockets
  - Allow bluez dbus api pass sockets over dbus
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  - Allow init watch/watch_reads systemd-machined user ptys
  - Fix syntax error in userdomain.if
  - Allow ras-mc-ctl get attributes of the kmod executable


author: Zdenek Pytela <zpytela@redhat.com> - 42.16-1
changelog:
  - Allow systemd-ssh-issue read kernel sysctls
  - fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  - Allow create kerberos files in postgresql db home
  - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  - Allow shell comamnds in locate systemd service (bsc#1246559)
  - Introduce initrc_nnp_daemon_domain interface
  - Label /var/lib/cosmic-greeter with xdm_var_lib_t
  - Allow setroubleshoot-fixit get attributes of xattr fs


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.4
   - Snap components: LP: #2104933 workaround for classic 24.04/24.10
     models that incorrectly specify core22 instead of core24
   - Update build dependencies


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Dominik Mierzejewski <dominik@greysector.net> - 140.3.0-2
changelog:
  - Drop unused yasm from build dependencies
    See: https://fedoraproject.org/wiki/Changes/DeprecateYASM
    Resolves: rhbz#2390538


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-2
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
          CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Rebuild (xorg-x11-server)
    Fixes: CVE-2025-49175 / CVE-2025-49176 / CVE-2025-49177
           CVE-2025-49178 / CVE-2025-49179 / CVE-2025-49180


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.13-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/new-tor-stable-release-0-4-8-13/15397 (bz#2211726)
  - reviewed and adjusted SPDX license format


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.14-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-14/17242 (bz#2211726)


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


