# changelog

author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.35-2
changelog:
  - Backport support for OpenSSL provider required for PKCS11 labels
  - Deactivate jemalloc default linking


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Stop excessive memory allocation when copying corrupt files.  (#2379837)
  - Stop illegal memory access when parsing corrupt files.  (#2379844)


author: Nick Clifton <nickc@redhat.com> - 2.44-6
changelog:
  - Stop a potential null pointer dereference when examining corrupt DWARF debug information.  (#2383860)  (#2383873)


author: Nick Clifton <nickc@redhat.com> - 2.44-12
changelog:
  - Stop a potential call to abort when display the debug information of a corrupt input file.  (#2404504)


author: Than Ngo <than@redhat.com> - 142.0.6^chromium142.0.7444.59-1
changelog:
  - Update to 142.0.7444.59
  - * Update to cef-142.0.6+ga56110d (Asahi Lina) (beta)
  - * Refreshed ppc64le patches
  - * Refreshed system-brotli patch
  - * Refreshed clang++-unknown-argument patch
  - * Refreshed split-threshold-for-reg-with-hint patch
  - * Fixed some FTBFS caused by missing header files
  - * Fixed FTBFS caused by old rust compiler
  - * Fixed FTBFS caused by new glibc-2.42 in Rawhide
  - * Fixed FTBFS caused by old python-3.9.x in EL8/9
  - * Dropped obsoleted chromium-141-el9-ffmpeg-5.x-duration.patch for old
    ffmpeg on EL9


author: Than Ngo <than@redhat.com> - 142.0.6^chromium142.0.7444.59-5
changelog:
  - Add CVEs in changelog
  - * High CVE-2025-12428: Type Confusion in V8
  - * High CVE-2025-12429: Inappropriate implementation in V8
  - * High CVE-2025-12430: Object lifecycle issue in Media
  - * High CVE-2025-12431: Inappropriate implementation in Extensions
  - * High CVE-2025-12432: Race in V8
  - * High CVE-2025-12433: Inappropriate implementation in V8
  - * High CVE-2025-12036: Inappropriate implementation in V8
  - * Medium CVE-2025-12434: Race in Storage
  - * Medium CVE-2025-12435: Incorrect security UI in Omnibox
  - * Medium CVE-2025-12436: Policy bypass in Extensions
  - * Medium CVE-2025-12437: Use after free in PageInfo
  - * Medium CVE-2025-12438: Use after free in Ozone
  - * Medium CVE-2025-12439: Inappropriate implementation in App-Bound
    Encryption
  - * Low CVE-2025-12440: Inappropriate implementation in Autofill
  - * Medium CVE-2025-12441: Out of bounds read in V8
  - * Medium CVE-2025-12443: Out of bounds read in WebXR
  - * Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
  - * Low CVE-2025-12445: Policy bypass in Extensions
  - * Low CVE-2025-12446: Incorrect security UI in SplitView
  - * Low CVE-2025-12447: Incorrect security UI in Omnibox


author: Than Ngo <than@redhat.com> - 142.0.6^chromium142.0.7444.134-1
changelog:
  - Update to 142.0.7444.134 (rhbz#2413621)
  - * High CVE-2025-12725: Out of bounds write in WebGPU
  - * High CVE-2025-12726: Inappropriate implementation in Views
  - * High CVE-2025-12727: Inappropriate implementation in V8
  - * Medium CVE-2025-12728: Inappropriate implementation in Omnibox
  - * Medium CVE-2025-12729: Inappropriate implementation in Omnibox


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-1
changelog:
  - Update to release 1.32.9
  - Resolves: rhbz#2333357, rhbz#2398407, rhbz#2398662, rhbz#2399064,
    rhbz#2399338
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
changelog:
  - Update to release v1.32.10
  - Resolves: rhbz#2407593, rhbz#2407864, rhbz#2408140, rhbz#2408571
  - Resolves: rhbz#2408638, rhbz#2408701, rhbz#2409048, rhbz#2409331
  - Resolves: rhbz#2409610, rhbz#2409996, rhbz#2410283, rhbz#2410561
  - Resolves: rhbz#2410928, rhbz#2411196, rhbz#2411459, rhbz#2412524
  - Resolves: rhbz#2412676, rhbz#2412756


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.1-1
changelog:
  - Update to release v1.34.1
  - Resolves: rhbz#2333357, rhbz#2398409, rhbz#2398664, rhbz#2399066,
    rhbz#2399340
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1
changelog:
  - Update to release 1.34.2
  - Resolves: rhbz#2407595, rhbz#2407866, rhbz#2408142, rhbz#2408577
  - Resolves: rhbz#2408640, rhbz#2408703, rhbz#2409050, rhbz#2409333
  - Resolves: rhbz#2409612, rhbz#2409998, rhbz#2410285, rhbz#2410563
  - Resolves: rhbz#2410930, rhbz#2411198, rhbz#2411461, rhbz#2412526
  - Resolves: rhbz#2412678, rhbz#2412758


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Miroslav Suchý <msuchy@redhat.com> 1.115-1
changelog:
  - update copr keys
  - Update for openSUSE 16 keys
  - Update changelog
  - Microsoft: add 2025 & open tech keys
  - alpine-linux: Add loongarch64 key
  - fedora: Update rawhide symlink


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.0-1
changelog:
  - Update to release v0.25.0
  - Resolves: rhbz#2399354, rhbz#2399081, rhbz#2398678, rhbz#2398424
  - Upstream feature additions and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.1-3
changelog:
  - Switch to docker-distribution package for 'registry'
  - Switch to docker-distribution as a BuildRequires for registry which
    removes dependency on unsupported golang- packages
  - Adopt gocheck2 and simplify %check


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.2-1
changelog:
  - Update to v0.25.2
  - CVE-2025-58183; Resolves: rhbz#2412529
  - CVE-2025-58188; Resolves: rhbz#2412380, rhbz#2411476, rhbz#2410945
  - CVE-2025-58185; Resolves: rhbz#2410578, rhbz#2410299, rhbz#2410013
  - CVE-2025-61723; Resolves: rhbz#2409627, rhbz#2409349, rhbz#2409065
  - CVE-2025-58189; Resolves: rhbz#2408157, rhbz#2407880, rhbz#2407612
  - Upstream updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.0-1
changelog:
  - Update to release v0.26.0
  - Resolves: rhbz#2412681, rhbz#2412761
  - Upstream new features and fixes
  - dependency override for moby/policy-helper needed for license (default
    version does not a a license file)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.27.0-1
changelog:
  - Update to release v0.27.0
  - Resolves: rhvz#2388453, rhbz#2384137, rhbz#2384154
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.29.0-1
changelog:
  - Update to release v0.29.0
  - Resolves: rhbz#2397747, rhbz#2398425, rhbz#2398679, rhbz#2399082,
    rhbz#2399355
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves: rhbz#2413270
  - Resolves: rhbz#2407614, rhbz#2407881, rhbz#2408158, rhbz#2409066
  - Resolves: rhbz#2409350, rhbz#2409628, rhbz#2410014, rhbz#2410300
  - Resolves: rhbz#2410579, rhbz#2410946, rhbz#2411477, rhbz#2412381
  - Resolves: rhbz#2412530, rhbz#2412682, rhbz#2412762
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-1
changelog:
  - Update to release v2.40.2
  - Resolves: rhbz#2405876
  - Upstream fixes
  - Adopt gocheck2 macro for %check


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-2
changelog:
  - Resolve CVE-2025-62725
  - v2.40.2 resolves CVE-2025-62725.
  - Associated release-specific rhbz will be manually closed: F41 - #2406691
    and F42 - #2406693


author: Omair Majid <omajid@redhat.com> - 10.0.100~preview.2.25164.1-0.2
changelog:
  - Update to .NET SDK 10.0.100-preview.2.25164.1 and Runtime 10.0.0-preview.2.25163.2
    10.0.0-preview.2.25163.2


author: Shawn Iwinski <shawn.iwinski@gmail.com> - 7.103-1
changelog:
  - Update to 7.103 (RHBZ #2253220)
  - SA-CORE-2024-005 / CVE-2024-55635
  - SA-CORE-2024-008 / CVE-2024-55638


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Alexey Kurov <nucleo@fedoraproject.org> - 2.2.53-3
changelog:
  - sysusers.d config file for F42+
  - https://fedoraproject.org/wiki/Changes/RPMSuportForSystemdSysusers


author: Alexey Kurov <nucleo@fedoraproject.org> - 2.2.53-4
changelog:
  - depend on async-timeout only for Python releases older than 3.11
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonAsyncTimeout


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Packit <hello@packit.dev> - 31-1
changelog:
  Changes with 31
  ----------------
    - build(deps): bump actions/checkout from 3 to 5 (#278)
      - Author: dependabot[bot], Reviewers: Brian C. Lane, Simon de Vlieger
    - build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#270)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - image-builder: use manifest.{Build,Payload}Pipelines (#279)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - main: fix --extra-repos support when cross building (#281)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - setup: Fix a typo carried over from bib (#277)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Michael Vogt

  — Somewhere on the Internet, 2025-08-19


author: Packit <hello@packit.dev> - 33-1
changelog:
  Changes with 33
  ----------------
    - deps: images 0.182.0 (#288)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Michael Vogt

  — Somewhere on the Internet, 2025-08-28


author: Packit <hello@packit.dev> - 34-1
changelog:
  Changes with 34
  ----------------
    - Install openssl in cli container (#292)
      - Author: Justin Sherrill, Reviewers: Brian C. Lane, Michael Vogt
    - build(deps): bump actions/setup-python from 5 to 6 (#296)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update to images 0.191.0 (#302)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - github: add CODEOWNERS (#291)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update osbuild/images to 0.190.0 (dnfjson -> depsolvednf rename) (HMS-9366) (#301)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: update to images v0.186.0 (#294)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Tomáš Hozza
    - image-builder: use `manifesttest` from `images` (#293)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Ondřej Budai
    - main: add support disk based bootc images via --bootc-ref  (HMS-8845) (#245)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Ondřej Budai, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-16


author: Packit <hello@packit.dev> - 35-1
changelog:
  Changes with 35
  ----------------
    - cmd/upload: add fedora ami to aws upload (HMS-9388) (#307)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Michael Vogt
    - deps: update to images 0.193.0 (#308)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: update to latest images API changes in imgfilter (#295)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2025-09-19


author: Packit <hello@packit.dev> - 36-1
changelog:
  Changes with 36
  ----------------
    - deps: update to images 0.195.0 (#318)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: upgrade images to v0.194 (#314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gitignore: add common image formats (#312)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: split progress.go into command.go (#313)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-24


author: Packit <hello@packit.dev> - 37-1
changelog:
  Changes with 37
  ----------------
    - Support uploading to libvirt (#300)
      - Author: Jakub Kadlčík, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - blueprintload: improve error message in Load (#333)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger, Tomáš Hozza
    - doc: mention CentOS (#336)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update to v0.197.0 (#326)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - main: add `--bootc-build-ref` option to set build container (#325)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: add missing test container cleanups (#330)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: check that we get the expected image types (HMS-9426) (#320)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 38-1
changelog:
  Changes with 38
  ----------------
    - deps: bump images to 0.202.0 (#339)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt

  — Somewhere on the Internet, 2025-10-06


author: Packit <hello@packit.dev> - 39-1
changelog:
  Changes with 39
  ----------------
    - ci: consistent triggers for spec check (#346)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - ci: split apart test cases (#331)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - cmd/image-builder: adjust code to unified rpmmd.Package struct (HMS-9457) (#334)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: update images and blueprint (#345)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Tomáš Hozza
    - main: add osbuild version to version command (#332)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.9-1
changelog:
  - Update to release v1.31.9
  - Resolves rhbz#2366642
  - Upstream fixes
  - Add fedpkg mockbuild artifacts to .gitignore
  - Update template to vendored archive version


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.12-1
changelog:
  - Update to release v1.31.12
  - Resolves: rhbz#2388412
  - Resolves: CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.14-1
changelog:
  - Update to release v1.31.14
  - Resolves: rhbz#2398586, rhbz#2398847, rhbz#2399248, rhbz#2399521
  - Resolves: rhbz#2399702, rhbz#2399720, rhbz#2407787, rhbz#2408057
  - Resolves: rhbz#2408314, rhbz#2408608, rhbz#2408671, rhbz#2408729
  - Resolves: rhbz#2409236, rhbz#2409526, rhbz#2409787, rhbz#2410201
  - Resolves: rhbz#2410476, rhbz#2410737, rhbz#2411116, rhbz#2411375
  - Resolves: rhbz#2411633, rhbz#2412568, rhbz#2412587, rhbz#2412802
  - Upstream fixes.
  - Likely last release of Kubernetes 1.31


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.6-1
changelog:
  - Update to release v1.32.6
  - Resolves: rhbz#2373848,rhbz#2373847
  - Resolves: CVE-2025-4563
  - Upstream fixes and cleanups


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.8-1
changelog:
  - Update to release v1.32.7
  - Resolves: rhbz#2388412
  - Resolves: CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-2
changelog:
  - Revise template
  - Remove transition artifacts - from non-versioned kubernetes
  - Remove unneeded network rpms
  - Remove duplicate requires


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
changelog:
  - Update to release v1.32.10
  - Resolves: rhbz#2414539
  - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
  - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
  - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
  - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
  - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
  - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.4-1
changelog:
  - Update to release v1.33.4
  - Resolves: rhbz#2388412
  - Fixes CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-2
changelog:
  - Drop conntrack requirement
  - Resolves: rhbz#2392421
  - Drops conntrack dependency
  - Corrects README version


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-3
changelog:
  - Remove iproute, iproute-tc, ethtool dependencies
  - Resolves: rhbz#2396543
  - Consistent with changes to upstream
  - See also https://github.com/kubernetes/release/pull/4106
  - Update .gitignore to include src rpm.
  - Add kubernetes-cni requirement to kubelet consistent with upstream
  - Change containernetworking-plugins name to kubernetes-cni. There can be
    multiple kubernetes-cni providers


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
changelog:
  - Update to release v1.33.6
  - Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
  - Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
  - Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
  - Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
  - Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
  - Resolves: rhbz#2412804
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.0-1
changelog:
  - Release v1.34.0
  - Resolves: rhbz#2391352
  - Urgent Upgrade Notice at https://github.com/kubernetes/kubernetes/blob/ma
    ster/CHANGELOG/CHANGELOG-1.34.md#urgent-upgrade-notes
  - Significant fixes and new features
  - Spec file clean up over v1.33 removing obsolete references
  - gocheck still a work in progress


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.1-4
changelog:
  - Reorder CRI Recommends
  - Update cri-o recommend with correct version information
  - Reorder CRI as (for example): Recommends:  (cri-o1.34 or containerd)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1
changelog:
  - Update to release v1.34.2
  - Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
  - Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
  - Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
  - Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
  - Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
  - Resolves: rhbz#2412805
  - Upstream fixes


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 6.4.91-1
changelog:
  - 6.4.91 (6.5 Beta 2)
  - BuildRequires: cmake(KNightTime)
  - Add kconf_update_bin/kwin-6.5-showpaint-changes-x11 to file list


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.4-1
changelog:
  - Update to v3.4
  - Drop Patch2 (qt6pas build failure - backport from this release)
  - Drop Patch3 (segfault in GTK2 widgetset - backport from this release)
  - Move GTK+ widgetset support to separate subpackage


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.0-1
changelog:
  - Update to v4.0
  - Drop Patch1 (crash in lazbuild) - issue fixed upstream
  - Drop Patch2 (Qt5 segfault) - backport from this release
  - Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -> "LGPL-2.0-only WITH Independent-modules-exception")


author: Maxwell G <maxwell@gtmx.me> - 2.4-7
changelog:
  - Remove python3-mock dependency
  - Apply patch 0003-Replace-deprecated-mock-with-unittest.mock.patch


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch 
    0003-Replace-deprecated-mock-with-unittest.mock.patch
  - Package libabigail.so.4 rather than the previous libabigail.so.3.
  - Add abidb to the package
    Added BuildRequires: python3-GitPython, python3-libarchive-c
  - Better handle error handling when tests fails.


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Add xxhash-devel as BuildRequires
  - Update library to libabigail.so.5.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Do not build with by default XXH_INLINE_ALL anymore
  - Drop xxhash-static dependency
  - Add xz-devel >= 5.2.0 dependency to support reading xz-compressed binaries
  - Support new libabigail.so.6.0.0 SONAME


author: Dodji Seketeli <dodji@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Support new libabigail.so.8.0.0 SONAME
  - Run 'make check check-self-compare' instead of two separate make invocations.


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-5
changelog:
  - fix CVE-2025-8177: buffer oveflow in thumbnail setrow when processing malformed TIFF (rhbz#2383827)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
changelog:
  - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
  - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20250509-1
changelog:
  - Update to 20250509
  - Amphion: Update vpu firmware
  - amd_pmf: Update AMD PMF TA Firmware to v3.1
  - amdgpu: update dcn 4.01 firmware to 0.1.8.0
  - qcom: Add link for SM8350 GPU firmware
  - cirrus: cs35l56: Add/update firmware for Cirrus Amps for some ASUS/Lenovo laptops
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250425073330
  - rtw89: 8852c: add tables for dynamic antenna TXPWR
  - rtw89: 8922a: update fw to v0.35.71.0
  - brcm: Add NVRAM file for Radxa Rock Pi X mini PC
  - i915: Update Xe3LPD DMC to v2.23
  - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - qcom: vpu: update video firmware binary for SA8775p
  - iwlwifi: add/update firmwares to core95-82 release
  - iwlwifi: add Bz-hr FW for core93-123 release
  - qcom: add QUPv3 firmware for QCS9100 platform
  - ASoC: tas2781: Swap channel for SPI projects.
  - bmi260: Add BMI260 IMU initial configuration data file
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
  - rtw89: 8922a: update element RF TXPWR to R40
  - rtw89: 8852c: update element RF TXPWR to R78
  - rtw89: 8852c: add fw v0.27.125.0 with format version 2
  - Revert "rtw89: 8852c: update fw to v0.27.125.0"
  - qcom: vpu: add video firmware binary for qcm6490
  - amdgpu: many firmware updates
  - intel: ish: Update license file for ISH
  - intel: avs: Update topology file for I2S for many codecs
  - intel: avs: Update topology file for HDMI/HDAudio codecs
  - intel: avs: Update topology file for Digital Microphone Array
  - xe: Update GUC to v70.44.1 for BMG and LNL
  - i915: Update GUC to v70.44.1 for i915 platforms


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20250613-1
changelog:
  - Update to 20250613
  - Upgrade path for nvidia firmware changes (thanks Denys Vlasenko)
  - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
  - rtl_nic: update firmware of RTL8153A
  - qcom: sc8280xp: Updated power FW for X13s
  - update firmware for MT7986/MT7981/MT7916
  - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
  - Revert "iwlwifi: add Bz/gl FW for core96-76 release"
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7922: update bluetooth firmware to 20250523103438
  - mediatek MT7921: update bluetooth firmware to 20250523111333
  - update firmware for MT7921/MT7922 WiFi device
  - xe: Update GUC to v70.45.2 for BMG, LNL
  - i915: Update GUC to v70.45.2 for DG2
  - xe: Update LNL GSC to v104.0.5.1429
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS8300 platform
  - Intel IPU7: Add firmware binary files
  - ice: update wireless_edge package to 1.3.23.0
  - ice: update comms package to 1.3.55.0
  - ice: update package to 1.3.43.0
  - Update firmware for Intel Pulsar/BlazarI/Quasar/Solar/Magnetar/BlazarU core
  - iwlwifi: add Bz/gl/ty/So/Ma/cc/Qu/QuZ FW for core96-76 release
  - iwlwifi: update firmwares for 8000 series
  - iwlwifi: update 7265D firmware
  - mediatek MT7925: update bluetooth firmware to 20250526153203
  - update firmware for MT7925 WiFi device
  - qcom: sc8280xp: FW blob updates for X13s
  - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - cirrus: cs35l41: Fix firmware links for several ASUS laptops
  - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  - Adjust QUPv3 driver name
  - cnm: Add Chips&Media wave633c firmware for NXP i.MX9
  - qcom: add QUPv3 firmware for QCM6490 platform
  - mediatek: Add mt8196 VCP firmware
  - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
  - nvidia: add GSP-RM version 570.144 firmware images
  - amdgpu: DMCUB updates for various ASICs
  - powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
  - brcmfmac: Add a couple of NanoPi devices
  - rtl_nic: add firmware rtl8127a-1
  - cnm: update chips&media wave521c firmware.
  - intel_vpu: Update NPU firmware
  - intel: avs: Update topology file for Digital Microphone Array
  - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20250627-1
changelog:
  - Update to 20250627
  - amdgpu: A metric ton of fixes for their GPU firmware
  - WHENCE: various updates
  - qcom: update firmware binary for SM8550
  - qcom: venus-5.4: add the firmware binary for qcs615
  - brcm: Fix symlinks for Khadas VIM SDIO wifi config
  - mediatek: Update mt8186 SCP firmware
  - qcom: add gpu firmwares for X1P42100 chipset


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20250708-1
changelog:
  - Update to 20250708
  - Drop incorrect nvidia ghost entries
  - xe: Add fan_control v203.0.0.0 for BMG
  - Update AMD cpu microcode
  - amdgpu: Add DCN 3.6/PSP 14.0.5/SDMA 6.1.3/GC 11.5.3
  - mediatek MT7921: update bluetooth firmware to 20250625154126
  - qcom/adreno: document firmware revisions
  - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - Revert "Update firmware file for Intel Pulsar core"
  - xe: First GuC/HuC release for Pantherlake
  - update firmware for MT7921 WiFi device
  - rtw89: 8922a: update fw to v0.35.80.0
  - rtw89: 8852c: update fw to v0.27.129.1
  - rtw89: 8852c: update fw to v0.27.128.0


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20250808-1
changelog:
  - Update to 20250808
  - Split out QCom Datacenter/Open-vRAN accelerator firmware
  - Split out QCom 4G/5G WWan Adapters
  - qcom: Add QDSP firmware file for Qualcomm QDU100 device.
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: Update xbl_config firmware file.
  - qcom: Add QDU100 firmware image files required for booting.
  - Add firmware for airoha-npu driver
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250721233113
  - qcom: Update DSP firmware for qcm6490 platform
  - qcom: update Venus firmware file for v6.0
  - i915: Xe3LPD DMC v2.29
  - Update AMD cpu microcode
  - qcom: Add QCS6490 symlink for QUPv3 firmware
  - qcom: Add firmware binary for SM8750.
  - amdgpu: various firmware updates
  - cirrus: cs35l41/cs35l56: Update Firmwares for Dell/ASUS laptops
  - qcom: Add Audio topology for QCS6490 RB3Gen2
  - intel_vpu: Update NPU firmware
  - rtw89: Updated firmware for 8852b/8852bt/8922a/8852c/8922a
  - qcom: Update gpu firmwares of QCS615 chipset
  - Update firmware file for Intel WiFi Solar/BlazarU/BlazarI core


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20250917-1
changelog:
  - Update to 20250917
  - first phase split out newer iwlwifi firmware for newer driver
  - handle move of iwlwifi firmware to subdir (FINALLY!!)
  - amdgpu: lots of firmware (131!) updates
  - update firmware for en8811h 2.5G ethernet phy
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - mediatek MT7922: update bluetooth firmware to 20250903123504
  - update firmware for MT7922 WiFi device
  - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
  - qcom: Add Audio topology for MONACO-EVK
  - qcom: add CDSP firmware for qcs615 platform
  - qcom: Add Audio topology for LEMANS-EVK
  - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250825220109
  - qcom: vpu: update firmware binaries to fix encoder drain handling
  - xe: Update GUC to v70.49.4 for BMG, LNL, PTL
  - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
  - qcom: add ADSP firmware for qcs615 platform
  - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
  - iwlwifi: add Bz-HR FW for core90-93 release
  - Fix link entry for qat_895xcc.bin
  - Move QAT firmware to intel/ subdirectory
  - Move all iwlwifi top level files to intel/ directory
  - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
  - ath11k: Support WCN6855 hw2.1 with NFA firmware variant
  - intel_vpu: Update NPU firmware
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - qcom: Add firmware binary for SM8650.
  - Link rtl8723b_config.bin to rtl8723bs
  - rtw89: 8922a: update fw to v0.35.80.3
  - rtw89: 8852c: update fw to v0.27.129.4
  - rtw89: 8852c: update fw to v0.27.129.3
  - qcom: add CDSP firmware for x1e80100 platform
  - iwlwifi: add Bz/gl FW for core97-84 release
  - iwlwifi: update ty/So/Ma firmwares for core97-84 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
  - realtek: rt1321: Add patch firmware of MCU
  - mediatek: Add MT8189 SCP firmware
  - panthor: Add firmware for more Mali GPUs
  - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251011-1
changelog:
  - Update to 20251011
  - qcom: add CDSP firmware for kaanapali platform
  - qcom: add version for A650 GMU firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
  - qcom: Add firmwares for Kaanapali GPU
  - qcom: Update A623 GMU fw
  - qcom: Fix QCS615 chipset's GPU secure fw
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - WHENCE: remove link for Kaanapali video firmware
  - intel_vpu: Update NPU firmware
  - Add Dell ISH firmware for Intel Lunar Lake systems
  - Update VCN for Navi1x, Green Sardine and Renoir
  - qcom: vpu: update video firmware binary for SM8550
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
  - qcom: vpu: add video firmware for Kaanapali
  - qcom: Update DSP firmware for qcs8300 platform.
  - qcom: Add Audio topology for HAMOA-EVK
  - intel/ish:Add ISH firmware file for Intel Lunar Lake platform
  - mediatek: update firmware version info for MT7986/81/16
  - ql2500_fw: update ISP25xx Firmware
  - qcom: Update aic100 firmware files
  - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
  - mediatek: mtk_wed: drop links for mt7988
  - qcom: Update DSP firmware for qcs8300 platform.
  - powervr: update firmware for Imagination Technologies BXS-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform.
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - qcom: move LEMANS EVK firmware to correct location


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251021-1
changelog:
  - Update to 20251021
  - Revert "update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: DMC Xe2LPD v2.29 / Xe3LPD v2.32 / Xe3LPD_3002 v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - Add ISH firmware file for Intel Pather Lake platform
  - Update firmware file for Intel Magnetar/BlazarU/BlazarI core


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251111-1
changelog:
  - Update to 20251111
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - Update firmware file for Intel BlazarI/BlazarU core
  - Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - Update AMD cpu microcode
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - update firmware for MT7920/MT7922/MT7925 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443


author: Michel Lind <salimma@fedoraproject.org> - 3.3.8-8
changelog:
  - Fix FTBFS due to deprecated `python setup.py develop` not being able to find flufl.lock v8
  - Fixes: rhbz#2300935


author: Carlos O'Donell <carlos@redhat.com> - 6.9.1-5
changelog:
  - Break up man-pages-additional-20140218.tar.xz
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Pavel Raiskup <praiskup@redhat.com> 41.3-1
changelog:
  - move anolis-7 to eol directory (msuchy@redhat.com)
  - move opensuse-leap-15.4 to eol directory (msuchy@redhat.com)
  - configs: the stream9 image is "ready" for Mock bootstrap
  - enable bootstrap container for CentOS Stream 10 (carlwgeorge@gmail.com)
  - configs: replace `powerpc64le` with `ppc64le` in the `%_host_cpu` macro
  - fix EOL template locations for CentOS7/EPEL7 (thomas.mendorf@ebf.com)


author: Pavel Raiskup <praiskup@redhat.com> 41.5-1
changelog:
  - Fedora 39 EOL
  - fix openSUSE-tumbleweed update failure during the second build (duli4868@gmail.com)
  - use non development bootstrap image for CentOS Stream 10 (romain.geissler@amadeus.com)
  - remove ELN ResilientStorage repos (yselkowi@redhat.com)
  - update ELN bootstrap image (yselkowi@redhat.com)
  - Add epel and epel-testing repos to the EPEL 10 config (carlwgeorge@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 42.2-1
changelog:
  - fix: expand Oracle Linux distro_id from ol to oraclelinux
    (avi.miller@oracle.com)
  - Navy Linux 8 configuration fixes (adil@linux.com)
  - EuroLinux end-of-life (praiskup@redhat.com)
  - bugfix: upgrade openeuler chroots to latest release and fix gpg check failed
    in 20.03 (pkwarcraft@gmail.com)
  - Add Azure Linux 3 configuration (negativo17@gmail.com)
  - Add Azure Linux 2 configuration (negativo17@gmail.com)
  - Add Kylin 10 configuration files (negativo17@gmail.com)
  - Add AlmaLinux Kitten 10 + EPEL 10 configs (ngompa@almalinux.org)
  - Add AlmaLinux Kitten 10 configs (ngompa@almalinux.org)
  - Add openSUSE Leap 15.6, move openSUSE Leap 15.5 to eol (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Gabriel Somlo <gsomlo@gmail.com> - 1-51.20250211gite4115e8
changelog:
  - remove cmake reference to tests submodule (to avoid having to pull it in)
  - update to newer snapshot


author: Adam Williamson <awilliam@redhat.com> - 4.6^20241125gitb64e219-3
changelog:
  - Rebuild for opencv-4.11.0 (Sérgio Basto)
  - Disable tests on s390x to get build through (see #2345306)


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-1
changelog:
  - Update to latest git
  - Backport #2727 to fix multi-machine script on Fedora
  - Backport #2728 to fix tests without Inline::Lua


author: Adam Williamson <awilliam@redhat.com> - 5^20250707gitd55ec72-3
changelog:
  - Backport PR #2750 to allow slow typing with (assert_)script_run
  - Backport PR #2751 to fix tests with IPC::Run 20250809.0


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-10
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 5.6.1-1
changelog:
  - update to 5.6.1
  - re-license spec file to CECILL-2.1
  - raise dependency on PHP 7.4
  - raise dependency on phpdocumentor/type-resolver 1.7
  - add dependency on phpstan/phpdoc-parser
  - add dependency on doctrine/deprecations


author: Remi Collet <remi@remirepo.net> - 1.10.0-1
changelog:
  - update to 1.10.0
  - add dependency on phpstan/phpdoc-parser
  - add dependency on doctrine/deprecations


author: Remi Collet <remi@remirepo.net> - 12.3.8-1
changelog:
  - update to 12.3.8
  - raise dependency on phpunit/php-code-coverage 12.3.6
  - raise dependency on sebastian/global-state 8.0.2


author: Remi Collet <remi@remirepo.net> - 12.3.14-1
changelog:
  - update to 12.3.14 (no change)
  - raise dependency on sebastian/exporter 7.0.2
  - raise dependency on phpunit/php-code-coverage 12.3.8
  - raise dependency on sebastian/cli-parser 4.2.0


author: Timothée Ravier <tim@siosm.fr> - 6.4.5-2
changelog:
  - Move dependency on fedora-third-party, fedora-flathub-remote &
    fedora-workstation-repositories to comps groups.


author: Marek Kasik <mkasik@redhat.com> - 25.02.0-2
changelog:
  - Move isOk() check inside JBIG2Bitmap::combine
  - PSStack::roll: Protect against doing int = -INT_MIN
  - Resolves: #2357815, #2357819


author: Marek Kasik <mkasik@redhat.com> - 25.02.0-3
changelog:
  - Fix timeToStringWithFormat buffer length
  - See these links for details:
  -   https://bugzilla.redhat.com/show_bug.cgi?id=2386218#c8
  -   https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1824/diffs


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:2.41.1-2
changelog:
  - Migrate to pyproject-rpm-macros (fix RHBZ#2377753)
  - Add missing extras metapackages
  - Run the tests


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: rhbz#2414551
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: rhbz#2414553


author: Michel Lind <salimma@fedoraproject.org> - 0.2.6-1
changelog:
  - Update to 0.2.6 upstream release
  - Drop unneeded extra sources and backported patches
  - Resolves: rhbz#2386020


author: Michel Lind <salimma@fedoraproject.org> - 0.3.2-2
changelog:
  - Disable update_readme_test, brings in additional dependency
  - Ship license text; update doc filenames


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.8.1-3
changelog:
  - While testing, do not error on warnings
  - Backport fixes for deprecation warnings, etc. with Pydantic 2.11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: Zdenek Pytela <zpytela@redhat.com> - 42.6-1
changelog:
  - Allow virtqemud start a vm which uses nbdkit
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  - Fix insights_client interfaces names
  - Add insights_core and insights_client interfaces
  - dist/targeted/modules.conf: enable slrnpull module
  - Allow bootupd delete symlinks in the /boot directory
  - Allow systemd-coredumpd capabilities in the user namespace
  - Allow openvswitch read virtqemud process state
  - Allow systemd-networkd to create leases directory


author: Zdenek Pytela <zpytela@redhat.com> - 42.7-1
changelog:
  - Label /usr/lib/systemd/systemd-ssh-issue with systemd_ssh_issue_exec_t
  - Allow stalld map sysfs files
  - Allow NetworkManager-dispatcher-winbind get pidfs attributes
  - Allow openvpn create and use generic netlink socket
  - policy_capabilities: remove estimated from released versions
  - policy_capabilities: add stub for userspace_initial_context
  - add netlink_xperm policy capability and nlmsg permission definitions
  - policy_capabilities: add ioctl_skip_cloexec
  - selinux-policy: add allow rule for tuned_ppd_t
  - selinux-policy: add allow rule for switcheroo_control_t
  - Label /run/audit with auditd_var_run_t


author: Zdenek Pytela <zpytela@redhat.com> - 42.8-1
changelog:
  - Allow gdm create /etc/.pwd.lock with a file transition
  - Allow gdm bind a socket in the /run/systemd/userdbd directory
  - Allow nsswitch_domain connect to xdm over a unix domain socket
  - Allow systemd homed getattr all tmpfs files (bsc#1240883)
  - Allow systemd (PID 1) create lastlog entries
  - Allow systemd_homework_t transition pid files to lvm_var_run_t (bsc#1240883)
  - Allow gnome-remote-desktop speak with tabrmd over dbus (bsc#1244573)
  - Allow nm-dispatcher iscsi and sendmail plugins get pidfs attributes
  - Allow systemd-oomd watch tmpfs dirs
  - Allow chronyc the setgid and setuid capabilities


author: Zdenek Pytela <zpytela@redhat.com> - 42.9-1
changelog:
  - Fix systemd_manage_unit_symlinks() interface definition
  - Support coreos installation methods
  - Add a new type for systemd-ssh-issue PID files
  - Allow gnome-remote-desktop connect to unreserved ports
  - Allow mdadm the CAP_SYS_PTRACE capability
  - Allow iptables manage its private fifo_files in /tmp
  - Allow auditd manage its private run dirs
  - Revert "Allow virt_domain write to virt_image_t files"
  - Exclude tabrmd.if from interfaces list


author: Zdenek Pytela <zpytela@redhat.com> - 42.11-1
changelog:
  - Allow nfs generator create and use netlink sockets
  - Conditionally allow virt guests to read certificates in user home directories
  - xenstored_t needs CAP_SYS_ADMIN for XENSTORETYPE=domain (bsc#1247875)
  - Allow nfs-generator create and use udp sockets
  - Allow kdump search kdumpctl_tmp_t directories
  - Allow init open and read user tmp files
  - Fix the systemd_logind_stream_connect() interface
  - Allow staff and sysadm execute iotop using sudo
  - Allow sudodomains connect to systemd-logind over a unix socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.12-1
changelog:
  - Adjust guest and xguest users policy for sshd-session
  - Allow valkey-server create and use netlink_rdma_socket
  - Allow blueman get attributes of filesystems with extended attributes
  - Update files_search_base_file_types()
  - Allow geoclue get attributes of the /dev/shm filesystem
  - Allow apcupsd get attributes of the /dev/shm filesystem
  - Allow sshd-session read cockpit pid files


author: Zdenek Pytela <zpytela@redhat.com> - 42.13-1
changelog:
  - Allow sshd-auth read generic proc files
  - Allow sshd-auth read and write user domain ptys
  - Allow logwatch read and write sendmail unix stream sockets
  - Allow logwatch domain transition on rpm execution
  - Allow thumb_t mounton its private tmpfs files
  - Allow thumb_t create permission in the user namespace
  - Allow corenet_unconfined_type name_bind to icmp_socket
  - Allow systemd-networkd to manage systemd_networkd_var_lib_t files
  - Allow sshd-session get attributes of sshd vsock socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.14-1
changelog:
  - Define file equivalency for /var/opt
  - Allow virtnodedev_t the perfmon capability
  - Allow nut_upsdrvctl_t the sys_ptrace capability
  - Label /usr/lib/systemd/user/graphical-session-pre.target with xdm_unit_file_t
  - systemd-sysctl: allow rw on binfm_misc_fs_t to set binfmt_misc status
  - Allow cupsd to manage cupsd_rw_etc_t lnk_files
  - Set temporary no-stub resolv.conf file from NetworkManager as net_conf_t
  - Allow spamc read aliases file
  - Mark configfs_t as mountpoint (bsc#1246080)
  - Allow systemd-machined watch cgroup files


author: Zdenek Pytela <zpytela@redhat.com> - 42.15-1
changelog:
  - Allow insights-client manage /etc symlinks
  - Allow insights-client get attributes of the rpm executable
  - Allow nfsidmapd search virt lib directories
  - Allow iotop stream connect to systemd-userdbd
  - Allow gnome-remote-desktop read sssd public files
  - Allow thumb_t stream connect to systemd-userdbd
  - Allow bluez dbus API passing unix domain sockets
  - Allow bluez dbus api pass sockets over dbus
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  - Allow init watch/watch_reads systemd-machined user ptys
  - Fix syntax error in userdomain.if
  - Allow ras-mc-ctl get attributes of the kmod executable


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.4
   - Snap components: LP: #2104933 workaround for classic 24.04/24.10
     models that incorrectly specify core22 instead of core24
   - Update build dependencies


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.13-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/new-tor-stable-release-0-4-8-13/15397 (bz#2211726)
  - reviewed and adjusted SPDX license format


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.14-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-14/17242 (bz#2211726)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.1706-2
changelog:
  - broken /usr/bin/ex symlink in vim-9.1.1706-1.fc42 (fedora#2392249)
  - vim-common has broken manpages (fedora#2392178)


