# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Shlomi Fish <shlomif@shlomifish.org> 3.4.0-2
changelog:
  - Remove unused / unavailable deps ( eg - python3-random2 )
  - Use pyprojectize/etc. to modernize the .spec
  - rhbz#2379434
  - rhbz#2377406


author: Björn Persson <Bjorn@Rombobjörn.se> - 2.9-1
changelog:
  - Upgraded to 2.9.
  - Set_Up and Tear_Down procedures are now called for testsuites derived from
    Ahven.Framework.Test_Suite.


author: Jerry James <loganjerry@gmail.com> - 2.3.3-23
changelog:
  - OCaml 5.3.0 rebuild for Fedora 42
  - Correct License fields from Apache-2.0 to CECILL-C
  - Do configuration steps in %conf


author: Packit <hello@packit.dev> - 43.33-1
changelog:
  - Revert "Default to GTK UI when available, fallback to Web UI otherwise"
    (k.koukiou)
  - Rename DNF strings to Flatpak in installation.py (jkonecny)
  - Remove unused Flatpak manager code (jkonecny)


author: Packit <hello@packit.dev> - 43.36-1
changelog:
  - packit: drive jobs from supported_releases per branch; dedupe and group
    targets (k.koukiou)
  - Fix pylint warnings caused by dynamic kickstart command imports (k.koukiou)
  - core: kickstart: implement OS-release based version detection (k.koukiou)
  - build: decouple BASE_CONTAINER from branch configuration (k.koukiou)
  - workflows: remove hardcoded CONTAINER_TAG="lorax" usage (k.koukiou)
  - dracut module requires generic initramfs (jstodola)


author: Packit <hello@packit.dev> - 43.37-1
changelog:
  - Log correct boot option for iSCSI boot without iBFT (jstodola)
  - Get full nevra string from dnf instead of composing it (pkratoch)
  - Add release notes for RDP kickstart support (adamkankovsky)
  - test: Enable kickstart RDP command in Anaconda (adamkankovsky)
  - Enable kickstart RDP command in Anaconda (adamkankovsky)
  - storage: devicetree: read VERSION or VERSION_CODENAME for identifying OS from
    os-release (k.koukiou)


author: Packit <hello@packit.dev> - 43.39-1
changelog:
  - Fix setting of kernel console logging level for anaconda (rvykydal)
  - Use new more suitable API for Gtk UI required space check (rvykydal)
  - Add GetFreeSpaceForSystem API (rvykydal)
  - docs: update CONTRIBUTING.rst with new branching approach (k.koukiou)


author: Packit <hello@packit.dev> - 43.41-1
changelog:
  - data: profiles: enable geolocation on Fedora Workstation live image
    (matiwari)
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
  - pyanaconda: dnf: clarify is_ready boolean return (k.koukiou)
  - tui: make SoftwareSpoke ready once installation source succeeds or fails
    (k.koukiou)
  - spec: enable live in ELN (yselkowi)
  - Mark unused variables with a leading underscore (a.badger)


author: Packit <hello@packit.dev> - 43.44-1
changelog:
  - flatpak: enable installation with CDROM source type (bciconel)
  - storage: Improve NotEnoughFreeSpaceError message with specific request
    details (k.koukiou)
  - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)


author: Katerina Koukiou <kkoukiou@redhat.com> - 48-2
changelog:
  - Fix: users: disallow proceeding from users page when neither root or user is configured (rhbz#2379957, rhbz#2392205, rhbz#2392203)
  - Fix: prevent installations with not enough space on partitions used for system (rhbz#2351824)


author: Packit <hello@packit.dev> - 50-1
changelog:
  - fix(timezone): correctly parse timezones with multiple slashes
  - fix(timezone): when reading timezone from backend read value from dbus object
  - datetime:: dissallow proceeding custom NTP modal with empty values
  - storage: Add mountpoints size check to storage review screen
  - storage: Make size check on review screen a blocking error


author: Packit <hello@packit.dev> - 51-1
changelog:
  - storage: detect locked LUKS on selected disks including whole-disk LUKS (rhbz#2396646)
  - Consume branding for Fedora from cockpit/static/branding.css
  - webui-desktop: fix env variables scope for firefox to fix displayed icon


author: Packit <hello@packit.dev> - 53-1
changelog:
  - keyboard: in Gnome spawn Gnome keyboard settings in storage configurationscreen
  - storage: installation-method: the screen id is
    'anaconda-screen-method' (Fixes notification for missing space for /boot)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 53.1-1
changelog:
  - components/localization: Only offer ASCII-capable keyboard layouts (rhbz#2402430)
  - localization: dissallow layouts which do not support ASCII input in gnome
  - storage: normalize locale decimals for PatternFly slider input (rhbz#2403028)
  - review: storage: don't use action-description from blivet in conditions as it's translated
  - storage: stop using inputValue from slider as it cannot parse localized floats
  - storage: encryption: show warning when the compositor layout differs from target system default
  - localization: set virtual console keymap explicity when choosing keyboards


author: Simone Caronni <negativo17@gmail.com> - 011.3-5
changelog:
  - Remove all EL7 / Python 2 conditionals.
  - Trim changelog.
  - Format SPEC file and sort all Requires/BuildRequires.


author: Mattia Verga <mattia.verga@protonmail.com> - 0.94-10
changelog:
  - Disable build on i686 (fix Fedora#2300567)
  - Switch Tycho index files to upstream provided
  - Switch 42xx index files to 52xx


author: Mattia Verga <mattia.verga@proton.me> - 0.96-2
changelog:
  - Rename binaries names conflicting with cfitsio binaries
  - Remove fitsverify binary which is now provided by own package


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.5-2
changelog:
  - obsolete -freeworld package, since it's been a meta-package only
    and currently doesn't pull it any extra packages anymore
  - cleanup: drop old Obs/Conf for -freeworld-mms package


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.43.1-1
changelog:
  - Update to binutils 2.43.1-1
  - Add: binutils-fix-ar-test.patch
  - Update: binutils-riscv-testsuite-fixes.patch
  - Update: binutils-testsuite-fixes.patch
  - Retire: binutils-special-sections-in-groups.patch
  - Retire: binutils-gold-powerpc.patch
  - Retire: binutils-handle-corrupt-version-info.patch
  - Retire: binutils-execstack-error.patch
  - Retire: binutils-BPF-reloc-4.patch
  - Retire: binutils-x86-64-v3.patch
  - Retire: binutils-big-merge.patch
  - Retire: binutils-aarch64-urcbig-bti-programs.patch
  - Retire: i686-AVX10.1-part-1.patch
  - Retire: i686-AVX10.1-part-2.patch
  - Retire: i686-AVX10.1-part-3.patch
  - Retire: i686-AVX10.1-part-4.patch
  - Retire: i686-AVX10.1-part-5.patch
  - Retire: i686-AVX10.1-part-6.patch
  - Retire: binutils-riscv-SUB_ULEB128.patch
  - Retire: binutils-ppc-dt_relr-relocs.patch
  - Retire: binutils-demangler-updates.patch
  - Retire: binutils-Intel-APX-part-1.patch
  - Retire: binutils-power-11.patch
  - Retire: binutils-Intel-APX-part-1-fixes.patch
  - Retire: binutils-multilib.am.patch
  - Retire: binutils-Intel-APX-CODE_6_GOTTPOFF.patch
  - Retire: binutils-archive-DT_SYMTAB.patch


author: Paul Howarth <paul@city-fan.org> - 2.2.16-1
changelog:
  - Update to 2.2.16 (rhbz#2314037)
    - Bluefish 2.2.16 is mostly a maintenance release
    - New feature: Bookmarks can now be generated from external commands such as
      ctags
    - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
    - The old built-in javascript beautifier has been removed; Bluefish now uses
      the jsbeautify from your system (if available)
    - The word-wrap function has been fixed
  - Add fix for type issue causing FTBFS with gcc 14
    (https://sourceforge.net/p/bluefish/tickets/95/)
  - Drop support for EL-7 and Fedora releases of a similar vintage


author: Paul Howarth <paul@city-fan.org> - 2.2.17-1
changelog:
  - Update to 2.2.17 (rhbz#2356356)
    - Bluefish 2.2.17 is a maintenance release that has only code clean-up fixes
      to comply better with modern compiler standards
    - It furthermore has fixes for a 64-bit Windows build of Bluefish with Msys2
  - Use %{make_build} and %{make_install}
  - Assume %{_pkgdocdir} macro always available


author: Bryn M. Reeves <bmr@redhat.com> - 1.6.6-1
changelog:
  - tests: drop remaining Python2 compat handling
  - boom.config: drop Python2 compat handling for ConfigParser
  - dist: update example boom.conf
  - boom: use correct option names in BoomConfig.__str__()
  - boom: use write_boom_config() in boom.command.create_config()
  - config: add missing [cache] section to boom.config.__make_config()
  - config: add missing [cache] section handling to boom.config._sync_config()
  - config: treat {boom,boot}_root and {boom,boot}_path as synonyms
  - dist: enable check in boom-boot.spec
  - dist: replace license classifier with SPDX expressions
  - boom: replace __make_map_key() function with dictionary comprehension
  - dist: clean up copyright statements and convert to SPDX license headers
  - dist: update GPLv2 text in COPYING
  - boom: use lazy printf formatting when logging
  - boom: fix report argument formatting
  - tests: drop separate coverage runs and split out reporting step
  - tests: switch Fedora tests to fedora:latest
  - tests: bracket test cases with log messages
  - tests: fix duplicate log handlers in test suite
  - report: strip trailing whitespace from report output
  - legacy: use 'is' instead of explicit type comparison
  - boom: clean up new OsProfile if setting uname_pattern fails
  - boom: add CentOS Stream to uname heuristics table
  - boom: fix license headers across tree
  - dist: update spec file changelog and release
  - dist: drop unused systemd-rpm-macros BuildRequires
  - dist: fix Source URL and autosetup invocation


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.9-2
changelog:
  - Fix setuptools-gettext 0.1.14 compatibility
  - Only work around wrong locale installation path if it happens


author: Kate Hsuan <hpa@redhat.com> - 1.4.0-2
changelog:
  - tuned is the default power profile management daemon in Fedora
  - https://pagure.io/fesco/issue/3222


author: Jerry James <loganjerry@gmail.com> - 10.9.2-9
changelog:
  - Stop building for 32-bit x86
  - Convert the License field to SPDX
  - Add additional licenses found on review of the code


author: Joshua Strobl <me@joshuastrobl.com> - 0.5.1-7
changelog:
  - Remove budgie-backgrounds and slick-greeter as required packages, keep it to being part of comp instead


author: Joshua Strobl <joshua@buddiesofbudgie.org> - 0.5.3-1
changelog:
  - Turn off GNOME donation in gnome-settings-daemon housekeeping plugin as no desktop check is performed in gsd-housekeeping


author: Timothée Ravier <tim@siosm.fr> - 2.26.0-4
changelog:
  - F44+: Ship OpenSSH config file specifying AuthorizedKeysFile
  - Have ignition-edge require the matching main ignition package


author: Steven Presti <spresti@redhat.com> - 2.27.0-1
changelog:
  - New Release
  - Butane config transpiler merged into Ignition repository
  - Butane now follows Ignition version numbering
  - Drop Patch0 (fix merged upstream)
  - Drop legacy fcct/fedora-coreos-config-transpiler provides


author: Than Ngo <than@redhat.com> - 150.0.7871.186-1
changelog:
  - Update to 150.0.7871.186
    * CVE-2026-16807: Out of bounds write in Codecs
    * CVE-2026-16806: Use after free in WebMCP
    * CVE-2026-16805: Use after free in Blink
    * CVE-2026-16804: Use after free in Input


author: Than Ngo <than@redhat.com> - 151.0.7922.71-1
changelog:
  - Update to 151.0.7922.71
    * CVE-2026-17650: Use after free in Compositing
    * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
    * CVE-2026-17652: Use after free in Views
    * CVE-2026-17653: Use after free in Skia
    * CVE-2026-17654: Race in Updater
    * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17656: Use after free in Ozone
    * CVE-2026-17657: Use after free in Navigation
    * CVE-2026-17658: Use after free in V8
    * CVE-2026-17659: Inappropriate implementation in SiteIsolation
    * CVE-2026-17660: Insufficient validation of untrusted input in Network
    * CVE-2026-17661: Use after free in Loader
    * CVE-2026-17662: Insufficient policy enforcement in Prefetch
    * CVE-2026-17663: Insufficient validation of untrusted input in GPU
    * CVE-2026-17664: Insufficient validation of untrusted input in Loader
    * CVE-2026-17665: Use after free in V8
    * CVE-2026-17666: Cryptographic Flaw in Enterprise
    * CVE-2026-17667: Uninitialized Use in ANGLE
    * CVE-2026-17668: Uninitialized Use in ANGLE
    * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17670: Use after free in Views
    * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-17673: Integer overflow in QUIC
    * CVE-2026-17674: Inappropriate implementation in HTML
    * CVE-2026-17675: Out of bounds write in ANGLE
    * CVE-2026-17676: Inappropriate implementation in ANGLE
    * CVE-2026-17677: Inappropriate implementation in ANGLE
    * CVE-2026-17678: Out of bounds read in ANGLE
    * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
    * CVE-2026-17680: Heap buffer overflow in Color
    * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
    * CVE-2026-17682: Integer overflow in ANGLE
    * CVE-2026-17683: Inappropriate implementation in ANGLE
    * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17685: Use after free in Autofill
    * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17687: Type Confusion in ANGLE
    * CVE-2026-17688: Use after free in Input
    * CVE-2026-17689: Uninitialized Use in ANGLE
    * CVE-2026-17690: Insufficient validation of untrusted input in PDF
    * CVE-2026-17691: Out of bounds write in ANGLE
    * CVE-2026-17692: Use after free in DataTransfer
    * CVE-2026-17693: Inappropriate implementation in FileSystem
    * CVE-2026-17694: Use after free in DOM
    * CVE-2026-17695: Inappropriate implementation in ANGLE
    * CVE-2026-17696: Side-channel information leakage in Media
    * CVE-2026-17697: Type Confusion in ANGLE
    * CVE-2026-17698: Insufficient validation of untrusted input in UI
    * CVE-2026-17699: Use after free in Views
    * CVE-2026-17700: Insufficient validation of untrusted input in Actor
    * CVE-2026-17701: Out of bounds read in ANGLE
    * CVE-2026-17702: Inappropriate implementation in Skia
    * CVE-2026-17703: Policy bypass in Chrome for iOS
    * CVE-2026-17704: Use after free in ANGLE
    * CVE-2026-17705: Integer overflow in libxml
    * CVE-2026-17706: Insufficient validation of untrusted input in Media
    * CVE-2026-17707: Uninitialized Use in Media
    * CVE-2026-17708: Use after free in Audio
    * CVE-2026-17709: Race in Downloads
    * CVE-2026-17710: Inappropriate implementation in MHTML
    * CVE-2026-17711: Race in Downloads
    * CVE-2026-17712: Race in Skia
    * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
    * CVE-2026-17714: Uninitialized Use in ANGLE
    * CVE-2026-17715: Inappropriate implementation in Passwords
    * CVE-2026-17716: Use after free in Updater
    * CVE-2026-17717: Integer overflow in ANGLE
    * CVE-2026-17718: Use after free in ANGLE
    * CVE-2026-17719: Use after free in Input
    * CVE-2026-17720: Insufficient policy enforcement in Passwords
    * CVE-2026-17721: Out of bounds write in ANGLE
    * CVE-2026-17722: Object lifecycle issue in WebView
    * CVE-2026-17723: Use after free in Media
    * CVE-2026-17724: Race in Chrome for iOS
    * CVE-2026-17725: Type Confusion in V8
    * CVE-2026-17726: Integer overflow in WebGL
    * CVE-2026-17727: Out of bounds write in WebGL
    * CVE-2026-17728: Inappropriate implementation in Extensions
    * CVE-2026-17758: Heap buffer overflow in Dawn
    * CVE-2026-17732: Inappropriate implementation in SVG
    * CVE-2026-17729: Use after free in V8
    * CVE-2026-17730: Side-channel information leakage in Autofill
    * CVE-2026-17731: Inappropriate implementation in Autofill
    * CVE-2026-17733: Inappropriate implementation in QUIC
    * CVE-2026-17734: Inappropriate implementation in Autofill
    * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
    * CVE-2026-17736: Insufficient validation of untrusted input in WebView
    * CVE-2026-17737: Use after free in Bluetooth
    * CVE-2026-17738: Insufficient validation of untrusted input in Payments
    * CVE-2026-17739: Insufficient policy enforcement in Extensions
    * CVE-2026-17740: Uninitialized Use in ANGLE
    * CVE-2026-17741: Insufficient validation of untrusted input in WebView
    * CVE-2026-17742: Insufficient policy enforcement in Payments
    * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
    * CVE-2026-17744: Inappropriate implementation in File Input
    * CVE-2026-17745: Out of bounds read in Skia
    * CVE-2026-17746: Use after free in GPU
    * CVE-2026-17747: Insufficient validation of untrusted input in Payments
    * CVE-2026-17748: Inappropriate implementation in Extensions
    * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17750: Use after free in ANGLE
    * CVE-2026-17751: Inappropriate implementation in AdFilter
    * CVE-2026-17752: Use after free in Views
    * CVE-2026-17753: Inappropriate implementation in Autofill
    * CVE-2026-17754: Inappropriate implementation in Blink
    * CVE-2026-17755: Incorrect security UI in Extensions
    * CVE-2026-17756: Insufficient policy enforcement in Presentation
    * CVE-2026-17757: Uninitialized Use in Skia
    * CVE-2026-17759: Uninitialized Use in Codecs
    * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
    * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17763: Inappropriate implementation in GPU
    * CVE-2026-17764: Inappropriate implementation in FedCM
    * CVE-2026-17765: Inappropriate implementation in WebProtect
    * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
    * CVE-2026-17767: Insufficient validation of untrusted input in WebView
    * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
    * CVE-2026-17769: Insufficient validation of untrusted input in Cast
    * CVE-2026-17770: Out of bounds read in Media
    * CVE-2026-17771: Uninitialized Use in Skia
    * CVE-2026-17772: Out of bounds read in WebGL
    * CVE-2026-17773: Insufficient validation of untrusted input in Cast
    * CVE-2026-17774: Insufficient validation of untrusted input in Variations
    * CVE-2026-17775: Inappropriate implementation in PresentationAPI
    * CVE-2026-17776: Policy bypass in Receiver
    * CVE-2026-17777: Inappropriate implementation in Autofill
    * CVE-2026-17778: Use after free in Extensions
    * CVE-2026-17779: Inappropriate implementation in Site Isolation
    * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-17781: Inappropriate implementation in Extensions
    * CVE-2026-17782: Incorrect security UI in Chrome for iOS
    * CVE-2026-17783: Inappropriate implementation in Loader
    * CVE-2026-17784: Use after free in Audio
    * CVE-2026-17785: Uninitialized Use in ANGLE
    * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17787: Inappropriate implementation in DevTools
    * CVE-2026-17788: Inappropriate implementation in Blink
    * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17790: Uninitialized Use in ANGLE
    * CVE-2026-17791: Insufficient validation of untrusted input in Payments
    * CVE-2026-17792: Inappropriate implementation in Credential Management
    * CVE-2026-17793: Inappropriate implementation in Messages
    * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
    * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
    * CVE-2026-17796: Side-channel information leakage in WebXR
    * CVE-2026-17797: Inappropriate implementation in CSS
    * CVE-2026-17798: Inappropriate implementation in Cast
    * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
    * CVE-2026-17800: Side-channel information leakage in MediaRecording
    * CVE-2026-17801: Out of bounds memory access in ANGLE
    * CVE-2026-17802: Side-channel information leakage in GPU
    * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
    * CVE-2026-17804: Use after free in Media
    * CVE-2026-17805: Insufficient policy enforcement in Glic
    * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17807: Use after free in V8
    * CVE-2026-17808: Uninitialized Use in WebGL
    * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17810: Uninitialized Use in Dawn
    * CVE-2026-17811: Use after free in ANGLE
    * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
    * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17815: Insufficient policy enforcement in GuestView
    * CVE-2026-17816: Inappropriate implementation in Speech
    * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
    * CVE-2026-17818: Inappropriate implementation in Network
    * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
    * CVE-2026-17820: Insufficient policy enforcement in Autofill
    * CVE-2026-17821: Insufficient policy enforcement in Extensions
    * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17823: Insufficient policy enforcement in WebXR
    * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-17825: Insufficient policy enforcement in Passwords
    * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17827: Inappropriate implementation in CSS
    * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17829: Insufficient policy enforcement in Passwords
    * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17832: Use after free in ANGLE
    * CVE-2026-17833: Inappropriate implementation in Passwords
    * CVE-2026-17834: Inappropriate implementation in Passwords
    * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17836: Use after free in V8
    * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17838: Incorrect security UI in Chrome for iOS
    * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17840: Incorrect security UI in Passwords
    * CVE-2026-17841: Race in Chrome for iOS
    * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17843: Inappropriate implementation in CSS
    * CVE-2026-17844: Insufficient validation of untrusted input in Cast
    * CVE-2026-17845: Inappropriate implementation in CSS
    * CVE-2026-17846: Inappropriate implementation in Media
    * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
    * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17850: Inappropriate implementation in Permissions
    * CVE-2026-17851: Side-channel information leakage in Autofill
    * CVE-2026-17852: Inappropriate implementation in Media Router
    * CVE-2026-17853: Inappropriate implementation in DevTools
    * CVE-2026-17854: Insufficient policy enforcement in WebMCP
    * CVE-2026-17855: Race in DevTools
    * CVE-2026-17856: Inappropriate implementation in Network
    * CVE-2026-17857: Inappropriate implementation in Network
    * CVE-2026-17858: Uninitialized Use in WebNN
    * CVE-2026-17859: Side-channel information leakage in Favicons
    * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
    * CVE-2026-17861: Insufficient validation of untrusted input in Updater
    * CVE-2026-17862: Use after free in Tracing
    * CVE-2026-17863: Inappropriate implementation in Browser
    * CVE-2026-17864: Inappropriate implementation in Updater
    * CVE-2026-17865: Inappropriate implementation in Crypto
    * CVE-2026-17866: Type Confusion in Tab
    * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
    * CVE-2026-17868: Insufficient policy enforcement in USB
    * CVE-2026-17869: Out of bounds read in WebXR
    * CVE-2026-17870: Insufficient validation of untrusted input in Cast
    * CVE-2026-17871: Inappropriate implementation in Passwords
    * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
    * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17875: Use after free in PDFium
    * CVE-2026-17876: Inappropriate implementation in Payments
    * CVE-2026-17877: Inappropriate implementation in Chromoting
    * CVE-2026-17878: Inappropriate implementation in CSS
    * CVE-2026-17879: Inappropriate implementation in Autofill
    * CVE-2026-17880: Inappropriate implementation in Autofill
    * CVE-2026-17881: Use after free in WebXR
    * CVE-2026-17882: Policy bypass in Extensions
    * CVE-2026-17883: Inappropriate implementation in Headless
    * CVE-2026-17884: Object lifecycle issue in WebRTC
    * CVE-2026-17885: Inappropriate implementation in Paint
    * CVE-2026-17886: Use after free in Enterprise
    * CVE-2026-17887: Use after free in TabStrip
    * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
    * CVE-2026-17889: Uninitialized Use in WebXR
    * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17891: Use after free in ANGLE
    * CVE-2026-17892: Inappropriate implementation in WebXR
    * CVE-2026-17893: Insufficient validation of untrusted input in Updater
    * CVE-2026-17894: Use after free in Views
    * CVE-2026-17895: Inappropriate implementation in DataTransfer
    * CVE-2026-17896: Use after free in DevTools
    * CVE-2026-17897: Inappropriate implementation in ORB
    * CVE-2026-17898: Use after free in DevTools
    * CVE-2026-17899: Insufficient policy enforcement in DevTools
    * CVE-2026-17900: Inappropriate implementation in Enterprise
    * CVE-2026-17901: Inappropriate implementation in Sharing
    * CVE-2026-17902: Inappropriate implementation in Editing
    * CVE-2026-17903: Insufficient policy enforcement in Chromecast
    * CVE-2026-17904: Insufficient policy enforcement in NFC
    * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
    * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
    * CVE-2026-17907: Side-channel information leakage in Network
    * CVE-2026-17908: Insufficient validation of untrusted input in Printing
    * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
    * CVE-2026-17910: Insufficient policy enforcement in NFC
    * CVE-2026-17911: Insufficient policy enforcement in SVG
    * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17914: Side-channel information leakage in Skia
    * CVE-2026-17915: Inappropriate implementation in WebView
    * CVE-2026-17916: Insufficient policy enforcement in Settings
    * CVE-2026-17917: Policy bypass in Chrome for iOS
    * CVE-2026-17918: Use after free in Sync
    * CVE-2026-17919: Insufficient policy enforcement in Enterprise
    * CVE-2026-17920: Use after free in V8
    * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
    * CVE-2026-17922: Inappropriate implementation in Enterprise
    * CVE-2026-17923: Policy bypass in Enterprise
    * CVE-2026-17924: Use after free in DNS
    * CVE-2026-17925: Inappropriate implementation in Cast
    * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17927: Insufficient policy enforcement in DevTools
    * CVE-2026-17928: Inappropriate implementation in DataTransfer
    * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17931: Inappropriate implementation in DevTools
    * CVE-2026-17932: Use after free in DataTransfer
    * CVE-2026-17933: Inappropriate implementation in DOMStorage
    * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17935: Heap buffer overflow in Codecs
    * CVE-2026-17936: Inappropriate implementation in DevTools
    * CVE-2026-17937: Inappropriate implementation in DevTools
    * CVE-2026-17938: Inappropriate implementation in FullScreen
    * CVE-2026-17939: Inappropriate implementation in Passwords
    * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
    * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17942: Side-channel information leakage in SVG
    * CVE-2026-17943: Inappropriate implementation in Parser
    * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17945: Inappropriate implementation in Navigation
    * CVE-2026-17946: Uninitialized Use in Dawn
    * CVE-2026-17947: Use after free in WebSockets
    * CVE-2026-17948: Type Confusion in V8
    * CVE-2026-17949: Uninitialized Use in GPU
    * CVE-2026-17950: Policy bypass in Safebrowsing
    * CVE-2026-17951: Heap buffer overflow in WebRTC
    * CVE-2026-17952: Inappropriate implementation in V8
    * CVE-2026-17953: Insufficient policy enforcement in WebView
    * CVE-2026-17954: Policy bypass in MHTML
    * CVE-2026-17955: Insufficient validation of untrusted input in Payments
    * CVE-2026-17956: Inappropriate implementation in Scheduling
    * CVE-2026-17957: Inappropriate implementation in CORS
    * CVE-2026-17958: Inappropriate implementation in Views
    * CVE-2026-17959: Inappropriate implementation in Network
    * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17961: Inappropriate implementation in Session
    * CVE-2026-17962: Inappropriate implementation in Blink
    * CVE-2026-17963: Inappropriate implementation in SVG
    * CVE-2026-17964: Incorrect security UI in UI
    * CVE-2026-17965: Incorrect security UI in Chrome for iOS
    * CVE-2026-17966: Inappropriate implementation in Views
    * CVE-2026-17967: Use after free in Chrome for iOS
    * CVE-2026-17968: Uninitialized Use in WebXR
    * CVE-2026-17969: Inappropriate implementation in Passwords
    * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17971: Inappropriate implementation in Frame
    * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17973: Inappropriate implementation in Views
    * CVE-2026-17974: Insufficient policy enforcement in DevTools
    * CVE-2026-17975: Inappropriate implementation in IME
    * CVE-2026-17976: Policy bypass in Extensions
    * CVE-2026-17977: Policy bypass in CSS
    * CVE-2026-17978: Side-channel information leakage in WebCodecs
    * CVE-2026-17979: Race in V8
    * CVE-2026-17980: Inappropriate implementation in UI
    * CVE-2026-17981: Inappropriate implementation in Blink
    * CVE-2026-17982: Insufficient validation of untrusted input in Cast
    * CVE-2026-17983: Incorrect security UI in Global Media Controls
    * CVE-2026-17984: Inappropriate implementation in Browser
    * CVE-2026-17985: Insufficient policy enforcement in Speech
    * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
    * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
    * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
    * CVE-2026-17989: Type Confusion in V8
    * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
    * CVE-2026-17991: Insufficient validation of untrusted input in AI
    * CVE-2026-17992: Uninitialized Use in Skia
    * CVE-2026-17993: Race in Updater
    * CVE-2026-17994: Inappropriate implementation in Media
    * CVE-2026-17995: Out of bounds read in Dawn
    * CVE-2026-17996: Inappropriate implementation in Browser
    * CVE-2026-17997: Inappropriate implementation in Passwords
    * CVE-2026-17998: Incorrect security UI in Extensions
    * CVE-2026-17999: Incorrect security UI in PictureInPicture
    * CVE-2026-18000: Insufficient policy enforcement in USB
    * CVE-2026-18001: Inappropriate implementation in WebGL
    * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
    * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18004: Insufficient policy enforcement in Speech
    * CVE-2026-18005: Inappropriate implementation in WebXR
    * CVE-2026-18006: Inappropriate implementation in Google Lens
    * CVE-2026-18007: Inappropriate implementation in Input
    * CVE-2026-18008: Inappropriate implementation in Settings
    * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
    * CVE-2026-18010: Inappropriate implementation in Passwords
    * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18012: Use after free in PDFium
    * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
    * CVE-2026-18015: Inappropriate implementation in Tint
    * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-18017: Use after free in Dawn
    * CVE-2026-18018: Inappropriate implementation in Updater
    * CVE-2026-18019: Side-channel information leakage in Media


author: Than Ngo <than@redhat.com> - 151.0.7922.108-1
changelog:
  - Update to 151.0.7922.108
    * CVE-2026-19137: Use after free in WebGL
    * CVE-2026-19138: Heap buffer overflow in CrashReporting
    * CVE-2026-19139: Race in CredentialProvider
    * CVE-2026-19140: Use after free in GPU
    * CVE-2026-19141: Use after free in Resources
    * CVE-2026-19142: Use after free in Views
    * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
    * CVE-2026-19144: Use after free in HTML
    * CVE-2026-19145: Use after free in Translate
    * CVE-2026-19146: Uninitialized Use in GPU
    * CVE-2026-19147: Use after free in Aura
    * CVE-2026-19148: Out of bounds write in GPU
    * CVE-2026-19149: Use after free in Aura
    * CVE-2026-19150: Inappropriate implementation in V8
    * CVE-2026-19151: Use after free in V8
    * CVE-2026-19152: Inappropriate implementation in Navigation
    * CVE-2026-19153: Insufficient validation of untrusted input in Workers
    * CVE-2026-19154: Use after free in Skia
    * CVE-2026-19155: Use after free in Payments
    * CVE-2026-19156: Heap buffer overflow in Base
    * CVE-2026-19157: Out of bounds write in ANGLE
    * CVE-2026-19158: Use after free in Views
    * CVE-2026-19159: Use after free in Views
    * CVE-2026-19160: Uninitialized Use in Skia
    * CVE-2026-19161: Uninitialized Use in Skia
    * CVE-2026-19162: Out of bounds write in V8
    * CVE-2026-19163: Use after free in Media
    * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
    * CVE-2026-19165: Use after free in Extensions
    * CVE-2026-19166: Use after free in Web Authentication
    * CVE-2026-19167: Integer overflow in GPU
    * CVE-2026-19168: Inappropriate implementation in V8
    * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
    * CVE-2026-19170: Use after free in WebGL
    * CVE-2026-19171: Use after free in Media
    * CVE-2026-19172: Use after free in Views
    * CVE-2026-19173: Out of bounds write in Skia
    * CVE-2026-19174: Integer overflow in V8
    * CVE-2026-19175: Use after free in Payments
    * CVE-2026-19176: Use after free in Skia
    * CVE-2026-19177: Insufficient validation of untrusted input in UI


author: Than Ngo <than@redhat.com> - 151.0.7922.137-1
changelog:
  - Update to 151.0.7922.137
    * CVE-2026-19556: Use after free in V8
    * CVE-2026-19557: Use after free in TabStrip
    * CVE-2026-19558: Use after free in Extensions
    * CVE-2026-19559: Use after free in HTML
    * CVE-2026-19560: Use after free in Blink


author: Than Ngo <than@redhat.com> - 151.0.7922.169-1
changelog:
  - Update to 151.0.7922.169
    * CVE-2026-76034: Buffer overflow in WebGL
    * CVE-2026-76036: Buffer overflow in Dawn
    * CVE-2026-76033: Inappropriate implementation in CORS
    * CVE-2026-76037: Link following in CredentialProvider
    * CVE-2026-76044: Race condition in USB
    * CVE-2026-76039: Incorrect reference resolution in Core
    * CVE-2026-76040: Use after free in Browser
    * CVE-2026-76035: Inappropriate implementation in Media
    * CVE-2026-76042: Use of uninitialized resource in GPU
    * CVE-2026-76046: Buffer overflow in ANGLE
    * CVE-2026-76043: Incorrect calculation in V8
    * CVE-2026-76041: Information leak in Skia
    * CVE-2026-76047: Type confusion in V8
    * CVE-2026-76038: Type confusion in V8
    * CVE-2026-76045: Use after free in WebGL


author: Than Ngo <than@redhat.com> - 151.0.7922.173-1
changelog:
  - Update to 151.0.7922.173
    * CVE-2026-76017: Use after free in Chromoting
    * CVE-2026-76018: Privilege elevation in Import
    * CVE-2026-76019: Incorrect authorization in Workers
    * CVE-2026-76020: Race condition in V8
    * CVE-2026-76021: Use after free in DOM
    * CVE-2026-76022: Buffer overflow in Network
    * CVE-2026-76023: Improper resource control in Linux Toolkit Theming


author: Than Ngo <than@redhat.com> - 152.0.7977.64-1
changelog:
  - Update to 152.0.7977.64 
    * CVE-2026-79282: Use after free in ANGLE
    * CVE-2026-79290: Use after free in Aura
    * CVE-2026-79054: Use after free in Chromecast
    * CVE-2026-79121: Improper input validation in Chromecast
    * CVE-2026-79224: Use after free in Chromecast
    * CVE-2026-79052: Use after free in Aura
    * CVE-2026-79150: Use after free in Views
    * CVE-2026-78935: Use of uninitialized variable in Mobile
    * CVE-2026-79012: Use after free in Safebrowsing
    * CVE-2026-79200: Use after free in Aura
    * CVE-2026-78989: Out of bounds read in ANGLE
    * CVE-2026-79069: Memory corruption in Tint
    * CVE-2026-79175: Type confusion in Accessibility
    * CVE-2026-79218: Incorrect authorization in Sandbox
    * CVE-2026-79195: Use after free in Script
    * CVE-2026-78939: Use after free in Chromecast
    * CVE-2026-79194: Use after free in Chromoting
    * CVE-2026-79247: Use after free in Chromoting
    * CVE-2026-79219: Use after free in Bluetooth
    * CVE-2026-79047: Use after free in Views
    * CVE-2026-79292: Integer overflow in Chromecast
    * CVE-2026-78986: Uninitialized resource in GPU
    * CVE-2026-79039: Use after free in Mobile
    * CVE-2026-78934: Race condition in ReadAloud
    * CVE-2026-79011: UI misrepresentation in Browser
    * CVE-2026-78911: Incorrect authorization in USB
    * CVE-2026-79257: Use after free in Views
    * CVE-2026-79202: Use after free in Chromecast
    * CVE-2026-79212: Missing authorization in Passwords
    * CVE-2026-79183: Use after free in Accessibility
    * CVE-2026-79155: Race condition in FileSystem
    * CVE-2026-79093: Incorrect authorization in Paint
    * CVE-2026-79019: Out of bounds write in ANGLE
    * CVE-2026-79187: Use after free in WebRTC
    * CVE-2026-79288: Improper input validation in Autofill
    * CVE-2026-79130: Buffer overflow in ANGLE
    * CVE-2026-78965: Uninitialized resource in ANGLE
    * CVE-2026-79117: Race condition in WebAppInstalls
    * CVE-2026-79082: Incorrect authorization in Transactions Platform
    * CVE-2026-79111: Improper input validation in Dawn
    * CVE-2026-79072: Improper state validation in Performance
    * CVE-2026-79142: Buffer overflow in ANGLE
    * CVE-2026-78948: Buffer overflow in WebGL
    * CVE-2026-78908: Information leak in Canvas
    * CVE-2026-78895: Information leak in Paint
    * CVE-2026-79043: Out of bounds write in ANGLE
    * CVE-2026-79235: Use after free in WebGL
    * CVE-2026-79232: Use after free in Aura
    * CVE-2026-79118: Uninitialized resource in ANGLE
    * CVE-2026-79174: Incorrect authorization in Extensions
    * CVE-2026-78900: Improper input validation in Media
    * CVE-2026-79188: Out of bounds write in ANGLE
    * CVE-2026-79189: Out of bounds write in ANGLE
    * CVE-2026-79048: Out of bounds write in ANGLE
    * CVE-2026-79240: Out of bounds write in ANGLE
    * CVE-2026-79014: Race condition in Autofill
    * CVE-2026-79198: Use after free in Platform
    * CVE-2026-79131: Out of bounds write in ANGLE
    * CVE-2026-79149: Use after free in ANGLE
    * CVE-2026-79275: Use after free in ANGLE
    * CVE-2026-79138: Out of bounds write in ANGLE
    * CVE-2026-79026: Use after free in Extensions
    * CVE-2026-79027: Use after free in WebRTC
    * CVE-2026-78904: Type confusion in ANGLE
    * CVE-2026-78899: Use after free in V8
    * CVE-2026-78954: Incorrect authorization in Extensions
    * CVE-2026-79274: Information leak in GPU
    * CVE-2026-78938: Type confusion in V8
    * CVE-2026-78952: Out of bounds write in Crashpad
    * CVE-2026-79236: Type confusion in V8
    * CVE-2026-79078: Use after free in FedCM
    * CVE-2026-79209: Type confusion in Animation
    * CVE-2026-79030: Observable discrepancy in Autofill
    * CVE-2026-79216: Buffer overflow in Blink
    * CVE-2026-79007: Uninitialized resource in GPU
    * CVE-2026-78893: Information leak in QUIC
    * CVE-2026-79222: Incorrect authorization in CustomTabs
    * CVE-2026-79071: Race condition in GPU
    * CVE-2026-79076: Improper input validation in Sync
    * CVE-2026-79088: Incorrect authorization in FileSystem
    * CVE-2026-79104: Missing authorization in Sensor
    * CVE-2026-79044: Missing authorization in WebAppInstalls
    * CVE-2026-78958: Uninitialized resource in Skia
    * CVE-2026-78961: Incorrect authorization in Core
    * CVE-2026-79262: Incorrect authorization in Network
    * CVE-2026-79106: Improper input validation in Input
    * CVE-2026-79176: UI misrepresentation in Extensions
    * CVE-2026-78966: Externally controlled reference in QUIC
    * CVE-2026-79186: Incorrect authorization in Network
    * CVE-2026-79267: Race condition in Workers
    * CVE-2026-79016: Observable discrepancy in SVG
    * CVE-2026-79010: Operation on a resource after expiration or release in Network
    * CVE-2026-79286: Missing authorization in CustomTabs
    * CVE-2026-78945: Use after free in Views
    * CVE-2026-78999: Improper privilege management in Navigation
    * CVE-2026-78941: Information leak in Core
    * CVE-2026-79032: Improper input validation in Network
    * CVE-2026-79109: Improper input validation in Printing
    * CVE-2026-79256: Externally controlled reference in WebView
    * CVE-2026-79237: Incorrect authorization in Navigation
    * CVE-2026-78898: Incorrect authorization in Downloads
    * CVE-2026-78985: Incorrect reference resolution in FileSystem
    * CVE-2026-79028: Observable discrepancy in Network
    * CVE-2026-79210: Use after free in Audio
    * CVE-2026-79046: Race condition in Permissions
    * CVE-2026-79129: Use after free in Sessions
    * CVE-2026-78937: Use after free in Search
    * CVE-2026-78987: Information leak in Canvas
    * CVE-2026-78990: Use after free in Compositing
    * CVE-2026-78909: Use after free in Views
    * CVE-2026-79271: Information leak in DOM
    * CVE-2026-79144: Information leak in Skia
    * CVE-2026-79065: Improper input validation in Network
    * CVE-2026-79192: Improper input validation in Variations
    * CVE-2026-79140: Use after free in Views
    * CVE-2026-79128: Use after free in Views
    * CVE-2026-78942: Incorrect reference resolution in Loader
    * CVE-2026-79116: Missing authorization in Viz
    * CVE-2026-79006: Protection mechanism failure in HttpsUpgrades
    * CVE-2026-79095: Information leak in Payments
    * CVE-2026-79084: Inadequate encryption strength in Notifications
    * CVE-2026-78991: Race condition in WebProtect
    * CVE-2026-79248: Incorrect authorization in Input
    * CVE-2026-78891: Buffer overflow in WebRTC
    * CVE-2026-79031: Improper resource exposure in Preload
    * CVE-2026-79110: Missing authorization in Preload
    * CVE-2026-79136: Incorrect authorization in ServiceWorker
    * CVE-2026-78907: Incorrect authorization in WebProtect
    * CVE-2026-79087: Injection in Chrome Tabs
    * CVE-2026-79231: Buffer overflow in Media
    * CVE-2026-78969: Uninitialized resource in Video
    * CVE-2026-79137: Incorrect authorization in Extensions
    * CVE-2026-79057: Race condition in Start
    * CVE-2026-78894: Race condition in Payments
    * CVE-2026-79264: Incorrect reference resolution in Preload
    * CVE-2026-78910: Buffer overflow in V8
    * CVE-2026-79066: Improper input validation in Navigation
    * CVE-2026-79255: Improper input validation in WebRTC
    * CVE-2026-79086: Missing authorization in CustomTabs
    * CVE-2026-79038: Incorrect authorization in WebProtect
    * CVE-2026-78940: Improper initialization in Network
    * CVE-2026-79107: Incorrect authorization in TabGroups
    * CVE-2026-79120: Uninitialized resource in ANGLE
    * CVE-2026-79270: Uninitialized resource in ANGLE
    * CVE-2026-79067: Missing authorization in Network
    * CVE-2026-79213: Incorrect authorization in WebAppInstalls
    * CVE-2026-78943: Improper input validation in Editing
    * CVE-2026-79259: Improper input validation in Safebrowsing
    * CVE-2026-79208: Missing authorization in HTTP2
    * CVE-2026-79251: Improper input validation in Network
    * CVE-2026-79226: Improper privilege management in Regional Capabilities
    * CVE-2026-79042: Missing authorization in Payments
    * CVE-2026-79122: Information leak in SignIn
    * CVE-2026-79199: Incorrect authorization in Network
    * CVE-2026-79013: Improper input validation in Sync
    * CVE-2026-79074: Information leak in Network
    * CVE-2026-79215: Integer overflow in WebGL
    * CVE-2026-79049: Incorrect reference resolution in Passwords
    * CVE-2026-79132: Improper input validation in Input
    * CVE-2026-79201: Improper access control in Workers
    * CVE-2026-79051: Incorrect authorization in Loader
    * CVE-2026-79053: Missing authorization in Lighthouse
    * CVE-2026-79285: Uninitialized resource in ANGLE
    * CVE-2026-78906: Race condition in ANGLE
    * CVE-2026-79250: UI misrepresentation in Navigation
    * CVE-2026-79020: Out of bounds read in Skia
    * CVE-2026-79217: Incorrect authorization in Mobile
    * CVE-2026-79204: UI misrepresentation in Input
    * CVE-2026-78912: UI misrepresentation in Browser
    * CVE-2026-78955: Observable discrepancy in PerformanceAPIs
    * CVE-2026-79143: Incorrect authorization in FileSystem
    * CVE-2026-79241: Out of bounds read in GPU
    * CVE-2026-78967: Missing authorization in BFCache
    * CVE-2026-79214: Improper input validation in Preload
    * CVE-2026-79228: Incorrect authorization in SiteIsolation
    * CVE-2026-78953: Missing authorization in SiteIsolation
    * CVE-2026-79229: Uninitialized resource in ANGLE
    * CVE-2026-79002: Incorrect authorization in SiteIsolation
    * CVE-2026-79272: Improper input validation in FindInPage
    * CVE-2026-79127: Out of bounds write in ANGLE
    * CVE-2026-79151: Improper input validation in Safebrowsing
    * CVE-2026-78936: Observable discrepancy in CustomTabs
    * CVE-2026-78905: Type confusion in ANGLE
    * CVE-2026-79050: Incorrect authorization in Network
    * CVE-2026-79008: Improper input validation in GPU
    * CVE-2026-78975: Incorrect authorization in DOM
    * CVE-2026-79287: Observable discrepancy in Forms
    * CVE-2026-79094: Race condition in Workers
    * CVE-2026-79173: UI misrepresentation in WebAppInstalls
    * CVE-2026-78976: Improper input validation in StorageAccessAPI
    * CVE-2026-79276: Improper privilege management in FileSystem
    * CVE-2026-79191: Incorrect authorization in SiteIsolation
    * CVE-2026-79099: Missing authorization in Network
    * CVE-2026-79024: Information leak in ServiceWorker
    * CVE-2026-79193: Information leak in Canvas
    * CVE-2026-79242: Observable discrepancy in HTML
    * CVE-2026-79180: UI misrepresentation in CustomTabs
    * CVE-2026-79293: Information leak in Animation
    * CVE-2026-79023: Incorrect authorization in Editing
    * CVE-2026-79146: Information leak in CustomTabs
    * CVE-2026-79238: Incorrect authorization in ServiceWorker
    * CVE-2026-78949: Observable discrepancy in CustomTabs
    * CVE-2026-79291: Information leak in CSS
    * CVE-2026-79283: UI misrepresentation in Geometry
    * CVE-2026-78892: Incorrect authorization in Chromoting
    * CVE-2026-79070: Incorrect reference resolution in Cache
    * CVE-2026-79205: Incorrect authorization in Network
    * CVE-2026-78903: Incomplete cleanup in SiteIsolation
    * CVE-2026-78959: Improper handling of case sensitivity in FileSystem
    * CVE-2026-79234: Injection in CSS
    * CVE-2026-78983: Use after free in Views
    * CVE-2026-79083: Improper enforcement of behavioral workflow in Media
    * CVE-2026-78944: Use after free in DevTools
    * CVE-2026-79178: Incorrect authorization in Web Authentication (Passkeys & Security Keys)
    * CVE-2026-79059: Information leak in BFCache
    * CVE-2026-79245: Use after free in UI
    * CVE-2026-78978: Out of bounds read in ANGLE
    * CVE-2026-79103: Incorrect reference resolution in Speech
    * CVE-2026-79154: Missing authorization in DevTools
    * CVE-2026-79230: Improper input validation in ANGLE
    * CVE-2026-79068: Improper resource exposure in StreamsAPI
    * CVE-2026-79269: Uninitialized resource in ANGLE
    * CVE-2026-79085: Missing authorization in Network
    * CVE-2026-79134: Incorrect authorization in GetUserMedia
    * CVE-2026-79064: Use after free in Network
    * CVE-2026-79003: Incorrect authorization in Device
    * CVE-2026-79220: Information leak in Network
    * CVE-2026-78951: Use after free in ServiceWorker
    * CVE-2026-79249: Code injection in Bisection
    * CVE-2026-79091: Use after free in Bluetooth
    * CVE-2026-79265: Incomplete cleanup in GetUserMedia
    * CVE-2026-78913: Use after free in Chromoting
    * CVE-2026-79258: Incorrect authorization in WebXR
    * CVE-2026-79211: Incorrect authorization in USB
    * CVE-2026-79252: Information leak in ServiceWorker
    * CVE-2026-78962: Uninitialized resource in WebXR
    * CVE-2026-78901: Race condition in V8
    * CVE-2026-79097: Use after free in V8
    * CVE-2026-79227: Type confusion in DevTools
    * CVE-2026-79203: Improper input validation in DevTools
    * CVE-2026-79033: Insufficient control flow management in DevTools
    * CVE-2026-79139: Improper input validation in Media
    * CVE-2026-79221: Uninitialized resource in Dawn
    * CVE-2026-79034: Information leak in CORS
    * CVE-2026-79075: Information leak in Geolocation
    * CVE-2026-78960: Information leak in Extensions
    * CVE-2026-78984: Uninitialized resource in GPU
    * CVE-2026-78963: Improper input validation in Media
    * CVE-2026-79004: Out of bounds read in Media
    * CVE-2026-79182: Improper input validation in Media
    * CVE-2026-79185: Information leak in DOM
    * CVE-2026-79073: Improper state validation in Parser
    * CVE-2026-79266: Use after free in DevTools
    * CVE-2026-79025: Improper input validation in Workers
    * CVE-2026-79141: Incorrect authorization in Browser
    * CVE-2026-78974: UI misrepresentation in Linux Toolkit Theming
    * CVE-2026-79055: Information leak in Sharing
    * CVE-2026-79263: Race condition in Extensions
    * CVE-2026-79124: Information leak in Intents
    * CVE-2026-79184: Missing authorization in Preload
    * CVE-2026-79289: Improper control of a resource through its lifetime in Workers
    * CVE-2026-79001: Information leak in Bluetooth
    * CVE-2026-79077: Incorrect authorization in WebProtect
    * CVE-2026-78950: Integer overflow in WebRTC
    * CVE-2026-79196: Race condition in Editing
    * CVE-2026-79000: Improper input validation in DeviceBoundSessionCredentials
    * CVE-2026-78979: Race condition in Core
    * CVE-2026-79181: Observable discrepancy in Glic
    * CVE-2026-79190: Incorrect authorization in Extensions
    * CVE-2026-79206: Out of bounds read in FileSystem
    * CVE-2026-78897: Missing authorization in BrowserTag
    * CVE-2026-79119: Use after free in PDF
    * CVE-2026-79089: Race condition in Transactions Platform
    * CVE-2026-79147: Information leak in Skia
    * CVE-2026-79098: UI misrepresentation in PermissionElement
    * CVE-2026-79022: UI misrepresentation in Transactions Platform
    * CVE-2026-79233: UI misrepresentation in CustomTabs
    * CVE-2026-79261: Incorrect authorization in Controls
    * CVE-2026-78977: Uninitialized resource in GPU
    * CVE-2026-79040: Uninitialized resource in GPU
    * CVE-2026-79273: Incorrect reference resolution in WebView
    * CVE-2026-79243: Improper input validation in ReadingList
    * CVE-2026-79123: Improper input validation in NTP Footer
    * CVE-2026-79005: Incorrect authorization in StorageAccessAPI
    * CVE-2026-79090: Improper privilege management in Actor
    * CVE-2026-78946: Incorrect authorization in Select
    * CVE-2026-78968: Missing authorization in Core
    * CVE-2026-79041: Missing authorization in Browser
    * CVE-2026-79284: UI misrepresentation in Core
    * CVE-2026-78896: Information leak in StorageAccessAPI
    * CVE-2026-79058: Missing authorization in Passwords
    * CVE-2026-79009: UI misrepresentation in UI
    * CVE-2026-79060: Incorrect authorization in StorageAccessAPI
    * CVE-2026-79177: Incorrect authorization in Media
    * CVE-2026-78956: Type confusion in V8
    * CVE-2026-79239: Out of bounds read in Tint
    * CVE-2026-79015: Improper input validation in ServiceWorker
    * CVE-2026-79108: UI misrepresentation in Web Authentication (Passkeys & Security Keys)
    * CVE-2026-79056: Use after free in ServiceWorker
    * CVE-2026-79018: Information leak in FoldableAPIs
    * CVE-2026-78980: Improper input validation in ReaderMode
    * CVE-2026-78947: Incomplete cleanup in Chromium
    * CVE-2026-79244: Use after free in Animation
    * CVE-2026-79112: Out of bounds read in Skia
    * CVE-2026-79246: Information leak in DataTransfer
    * CVE-2026-79223: Integer overflow in Chromium
    * CVE-2026-79045: Type confusion in V8
    * CVE-2026-79197: Use after free in V8
    * CVE-2026-79148: Off-by-one error in DevTools
    * CVE-2026-79125: Information leak in XR
    * CVE-2026-79207: Information leak in Passwords
    * CVE-2026-79017: Race condition in Extensions
    * CVE-2026-79105: Improper input validation in Mobile
    * CVE-2026-79225: Incorrect authorization in Browser
    * CVE-2026-79021: Missing authorization in InterestGroups
    * CVE-2026-79133: Incorrect authorization in Forms
    * CVE-2026-79179: Incorrect authorization in DOM
    * CVE-2026-79152: Incorrect authorization in CustomTabs
    * CVE-2026-78981: Information leak in Mobile
    * CVE-2026-78957: Information leak in Mobile
    * CVE-2026-79126: Incorrect provision of specified functionality in Proxy
    * CVE-2026-78915: Race condition in Enterprise
    * CVE-2026-79253: Improper input validation in Network
    * CVE-2026-79260: Improper input validation in Cookies
    * CVE-2026-79254: Incorrect reference resolution in CustomTabs
    * CVE-2026-78914: Uninitialized resource in Skia
    * CVE-2026-78964: Use after free in Sync


author: Than Ngo <than@redhat.com> - 152.0.7977.75-1
changelog:
  - Update to 152.0.7977.75
    * CVE-2026-84353: Use after free in Shared Tab Groups
    * CVE-2026-84352: Use after free in WebGL
    * CVE-2026-84354: Incorrect authorization in FileSystem
    * CVE-2026-84359: Information leak in Skia
    * CVE-2026-84357: Improper input validation in Omnibox
    * CVE-2026-84324: Use after free in Proxy
    * CVE-2026-84349: Use after free in Browser
    * CVE-2026-84326: Uninitialized resource in V8
    * CVE-2026-84333: Use after free in Dawn
    * CVE-2026-84351: Buffer overflow in GPU
    * CVE-2026-84325: Improper input validation in DataTransfer
    * CVE-2026-84328: Missing authorization in FileSystem
    * CVE-2026-84347: Use after free in WebRTC
    * CVE-2026-84323: Missing authorization in FileSystem
    * CVE-2026-84355: Incorrect authorization in Navigation
    * CVE-2026-84358: Improper privilege management in Downloads
    * CVE-2026-84332: Incorrect authorization in SiteSettings
    * CVE-2026-84330: UI misrepresentation in FullScreen
    * CVE-2026-84334: Incorrect authorization in Chromoting
    * CVE-2026-84348: Information leak in MediaCapture
    * CVE-2026-84335: Incorrect authorization in TabStrip
    * CVE-2026-84327: Incorrect authorization in Autofill
    * CVE-2026-84329: Confused deputy in CredentialProvider
    * CVE-2026-84356: UI misrepresentation in FullScreen
    * CVE-2026-84350: Use after free in TabStrip
    * CVE-2026-84331: Incorrect authorization in Actor


author: Than Ngo <than@redhat.com> - 152.0.7977.82-1
changelog:
  - Update to 152.0.7977.82
    * CVE-2026-85046: Type confusion in V8
    * CVE-2026-85052: Out of bounds read in CrashReporting
    * CVE-2026-85043: Incomplete cleanup in Network
    * CVE-2026-85048: Use after free in Compositing
    * CVE-2026-85045: Race condition in V8
    * CVE-2026-85050: Out of bounds write in WebGL
    * CVE-2026-85053: Improper resource exposure in CacheStorage
    * CVE-2026-85042: Use after free in DevTools
    * CVE-2026-85049: Use after free in Skia
    * CVE-2026-85051: Type confusion in Compositing
    * CVE-2026-85047: Improper input validation in Transactions Platform
    * CVE-2026-85044: Use of released resource in Mobile


author: Miroslav Lichvar <mlichvar@redhat.com> 4.7-2
changelog:
  - let systemd create /var/lib/chrony and /var/log/chrony (#2372944)
  - drop workaround for broken build on aarch64
  - drop old conflict with NetworkManager


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - totemsrp: Return error if sanity check fails
    (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity
    (fixes CVE-2026-35092)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-3
changelog:
  - totemsrp: Fix int overflow in commit_token_sanity
    (fixes CVE-2026-81666)
  - totempg: Replace assert with check in deliver_fn
    (fixes CVE-2026-81665)


author: Petr Pisar <ppisar@redhat.com> - 1.2.1-1
changelog:
  - 1.2.1 bump
  - Fix building against rpm-5.99.91 (bug #2382611)
  - Fix lzma link argument in pkg-config file
  - Fix building with CMake 4 (bug #2380521)
  - Fix defining STDOUT_FILENO
  - Fix building with cmake and ninja (bug #2380983)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.11-1
changelog:
  - Update to release v1.34.11
  - Resolves: rhbz#2510870
  - Resolves CVE-2026-34986: rhbz#2455652
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.13-1
changelog:
  - Update to release v1.34.13
  - Resolves: rhbz#2527294
  - Upstream fixes
  - Likely the last v1.34 release


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250402-1.git86c0178
changelog:
  - policies, alg_lists, openssl: remove KYBER from allowed values
  - sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250602-1.git9a48d06
changelog:
  - NO-PQ, cryptopolicies: add experimental value suppression
  - openssl: fix mistakes in integrity-only cipher definitions
  - FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  - openssl, policies: implement group_key_share option


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250620-1.git9496ef7
changelog:
  - sequoia: Add PQC algorithms
  - sequoia: Do not include EdDSA in FIPS policy
  - sequoia: Generate AEAD policy
  - FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl
  - openssl: send one PQ and one classic key_share; prioritize PQ groups
  - TEST-PQ: be more careful with the ordering


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250714-1.gitcd6043a
changelog:
  - FIPS: disable MLKEM768-X25519 for openssh (no-op)
  - python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  - gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert


author: Richard W.M. Jones <rjones@redhat.com> - 6.0.0-7
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Günther Deschner <gd@samba.org> - 2:4.23.8-1
changelog:
  - Update to Samba 4.23.8
  - resolves: rhbz#2481447 - Security fix for CVE-2026-4480
  - resolves: rhbz#2481875 - Security fix for CVE-2026-2340
  - resolves: rhbz#2481857 - Security fix for CVE-2026-3012
  - resolves: rhbz#2481876 - Security fix for CVE-2026-1933
  - Security fix for CVE-2026-4408
  - Security fix for CVE-2026-3238


author: Günther Deschner <gd@samba.org> - 2:4.23.10-1
changelog:
  - Update to Samba 4.23.10
  - resolves: rhbz#2509257 - Security fix for CVE-2026-6949
  - resolves: rhbz#2509266 - Security fix for CVE-2026-58218
  - resolves: rhbz#2509280 - Security fix for CVE-2026-58221
  - resolves: rhbz#2509502 - Security fix for CVE-2026-58222
  - resolves: Security fix for CVE-2026-58216
  - resolves: Security fix for CVE-2026-58224


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.1.0-2
changelog:
  - Support re-generating C++ sources before building them
  - Enable C++ source re-generation by default.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 27.2.0-1
changelog:
  - Update to 27.2.0 (close RHBZ#2343202)
  - Upstream added a Python implementation, packaged as python3-cucumber-
    messages


author: Paul Howarth <paul@city-fan.org> - 1.7.2-1
changelog:
  - Update to 1.7.2 (rhbz#2391098)
    - Add support for libneon 34, 35
    - Increase buf read size to 64 (fixes read issue on linux 6.16)
    - Allow setting a mount password via DAVFS_PASSWORD
    - Introduce sync_on_lookup option (off by default)
    - Don't compress man pages


author: Sérgio Basto <sergio@serjux.com> - 1.5.87-2
changelog:
  - Drop debconf-gnome on epel 10 because we don't have perl-GTK3 package
    and I don't know if we'll ever have or want have it (perl-GTK3 on epel 10)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.5.87-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix sbin merge for all releases


author: Mark Wielaard <mjw@fedoraproject.org> - 5.2-3
changelog:
  - Add 0001-Add-debugedit-classify-ar-and-use-it-before-running-.patch
  - Install debugedit-classify-ar and man page


author: Petr Pisar <ppisar@redhat.com> - 4.22.0-5
changelog:
  - Fix reporting a reboot failure by dnf-automatic
  - Fix a documentation of --disableexcludes option
  - Provide dnf4 by python3-dnf package (bug #2328463)


author: Pavel Raiskup <praiskup@redhat.com> - 2.0-1
changelog:
  - new upstream release, with DNF5 support
    https://github.com/praiskup/dnf-plugin-diff/releases/tag/v2.0


author: Evan Goode <egoode@redhat.com> - 4.9.0-1
changelog:
  - Enable leaves and show-leaves plugins for RHEL
  - expired-pgp-keys: New plugin for detecting expired PGP keys
  - reposync: Respect --norepopath with --metadata-path
  - doc: copr plugin does not respect IP family preference
  - expired-pgp-keys: Fix calling the hook at resolved time


author: Evan Goode <egoode@redhat.com> - 4.10.0-1
changelog:
  - CMakeLists.txt: Allow overriding PYTHON_INSTALL_DIR
  - Add Amazon Linux to copr chroots
  - needs-restarting: Add --exclude-services
  - needs-restarting: Add --exclude-services to man page
  - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp
  - needs-restarting: "Regular files" are often on 00:xx devices
  - needs-restarting tests: Can't discriminate block devices any more


author: Evan Goode <egoode@redhat.com> - 4.10.1-1
changelog:
  - reposync: Avoid multiple downloads of duplicate packages
  - doc: needs-restarting uses UnitsLoadStartTimestamp boot time
  - debuginfo-install: Fix missing dnf.cli import
  - copr Fix missing dnf.cli import
  - tests: Fix missing dnf.cli imports


author: Sander Hoentjen <shoentjen@antagonist.nl> - 2.0.3-1
changelog:
  - Update to new upstream
  - Fixes #2453419 (CVE-2026-27854)
  - Fixes #2453421 (CVE-2026-27853)
  - Fixes #2453426 (CVE-2026-24030)
  - Fixes #2453427 (CVE-2026-0397)
  - Fixes #2453429 (CVE-2026-24029)
  - Fixes #2453430 (CVE-2026-0396)
  - Fixes #2453431 (CVE-2026-24028)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0-1
changelog:
  - Update to release v0.31.0
  - Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.2-1
changelog:
  - Update to release v0.31.2
  - Upstream security fixes (including ones in v0.31.1)
  - GHSA-hw3h-2gp9-cxpv
  - GHSA-qx3x-mv6r-52p6
  - GHSA-32pv-7hq5-qhwq
  - GHSA-g2h8-426c-7976
  - GHSA-388v-wmr2-g2v2
  - GHSA-7236-3392-c5c6
  - GHSA-72x6-4j93-7w86
  - Additional fixes`


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.32.0-1
changelog:
  - Update to release v0.32.0
  - Upstream new features and fixes
  - Resolves CVE-2026-47262 - rhbz#2496456
  - Resolves CVE-2026-53492 - rhbz#2496552


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.35.0-1
changelog:
  - Update to release v0.35.0
  - Resolves: rhbz#2487819
  - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
  - Upstream enhancements, new features, and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.36.0-1
changelog:
  - Update to release v0.36.0
  - Resolves: rhbz#2506339
  - Upstream new features and fixes
  - Resolves CVE-2026-53492 - rhbz#2496553
  - Resolves CVE-2026-47262 - rhbz#2496436


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.1.3-1
changelog:
  - Update to release v5.1.3
  - Resolves rhbz#2458697
  - Resolves CVE-2026-33747: rhbz#2452188, rhbz#2452199
  - Resolves CVE-2026-33748: rhbz#2453089
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.2.0-1
changelog:
  - Update to release v5.2.0
  - Resolves: rhbz#2491751
  - Important upstream note: This version introduces a new reconciliation
    algorithm between the observed state and the expected state. If you
    experience any issues with a Compose workload that was previously
    working, please open an issue with upsteam.
  - Additional upstream enhancements and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.3.0-1
changelog:
  - Update to release v5.3.0
  - Resolves: rhbz#2496535
  - Resolves CVE-2026-53492: rhbz#2496550
  - Resolves CVE-2026-47262: rhbz#2496433
  - Upstream note: This release introduces native support for init
    containers.
  - Additional upstream fixes and new features


author: François Kooman <fkooman@tuxed.net> - 20250606-3
changelog:
  - update `dumpasn1.cfg`
  - use manpage directly from official repository
  - confirmed with author upstream moved to GitHub


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.18.22-1
changelog:
  - Update to 1.18.22.
  - Remove all EL7-related conditionals and parts.
  - Update for current Python packaging guidelines (rhbz#2377253).
  - Add support for DNF5 (rhbz#2326283).


author: Carl George <carlwgeorge@fedoraproject.org> - 1.1.0-4
changelog:
  - Fix FTBFS
  - Allow building with bravado 12
  - Allow building with cryptography 45
  - Avoid installing support files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.30.5618.102^gitc0ed34e-1
changelog:
  - Put the snapshot info in the version field instead of release
  - Fix forge macros creating a massive release tag including snapshot info
    for secondary/bundled sources


author: Vincent Mihalkovic <vmihalko@redhat.com> - 5.48-2
changelog:
  - Allow external decompressors to execute under Landlock
    Resolves: rhbz#2513643
    Resolves: rhbz#2427330


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.3-1
changelog:
  - Project moved from GitLab to GitHub (gridhead/firmitas to fedora-infra/firmitas)
  - Add CI workflow for the project
  - Automated dependency update - Bump requests from 2.31.0 to 2.32.2
  - Automated dependency update - Bump urllib3 from 1.26.18 to 1.26.19
  - Automated dependency update - Bump cryptography from 41.0.7 to 42.0.4


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.4-1
changelog:
  - Attempt fixing the FTBFS RHBZ#2307964
  - More information on https://github.com/fedora-infra/firmitas/releases/tag/v0.1.4


author: Michel Lind <salimma@fedoraproject.org> - 3.10.1-1
changelog:
  - Update to 3.10.1, fixes rhbz#2323329
  - This release is compatible with Python 3.14, resolves rhbz#2326226


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.3-1
changelog:
  - Upstream release 4.13.3
  - Resolves: CVE-2026-11861, CVE-2026-13097, CVE-2026-19550, CVE-2026-73199, CVE-2026-73198, CVE-2026-73197, CVE-2026-73196


author: Ondrej Holy <oholy@redhat.com> - 2:3.27.1-1
changelog:
  - Update to 3.27.1 (CVE-2026-55191, CVE-2026-55192, CVE-2026-55193,
    CVE-2026-55194, CVE-2026-55648, CVE-2026-55827)
    Resolves: rhbz#2488900


author: Ondrej Holy <oholy@redhat.com> - 2.11.7-16
changelog:
  - Backport several CVE fixes (CVE-2026-22852, CVE-2026-22854, CVE-2026-22855,
    CVE-2026-22856, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530,
    CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534,
    CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-23948,
    CVE-2026-24491, CVE-2026-24675, CVE-2026-24676, CVE-2026-24679,
    CVE-2026-24681, CVE-2026-24683, CVE-2026-24684, CVE-2026-25952,
    CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27951,
    CVE-2026-29775, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884,
    CVE-2026-31885, CVE-2026-33983, CVE-2026-33984, CVE-2026-33985,
    CVE-2026-45700, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299 and
    CVE-2026-68580)
    Resolves: rhbz#2430919, rhbz#2430908, rhbz#2430898, rhbz#2430914, rhbz#2430903
    Resolves: rhbz#2430924, rhbz#2430933, rhbz#2429808, rhbz#2429823, rhbz#2429794
    Resolves: rhbz#2443146, rhbz#2442975, rhbz#2429799, rhbz#2429814, rhbz#2429821
    Resolves: rhbz#2438309, rhbz#2438321, rhbz#2438308, rhbz#2438328, rhbz#2438324
    Resolves: rhbz#2438302, rhbz#2438310, rhbz#2438300, rhbz#2447394, rhbz#2453243
    Resolves: rhbz#2453240, rhbz#2442837, rhbz#2442810, rhbz#2447426, rhbz#2447422
    Resolves: rhbz#2447413, rhbz#2447416, rhbz#2453247, rhbz#2442857, rhbz#2491683
    Resolves: rhbz#2510295, rhbz#2510643, rhbz#2503646, rhbz#2510448


author: Alexey Kurov <nucleo@fedoraproject.org> - 10.2.1-4
changelog:
  - Removed unrecognized options enable-systemd and disable-exampledir
  - Fixed sysconfdir option warning
  - Added option for support of PCRE2
  - Own local state file dir
  - Minimum libyang version 2.1.128


author: Terje Rosten <terjeros@gmail.com> - 3.7.2-54
changelog:
  - Various fixes to improve Python 3 support
  - Add back regex support on Fedora (patch from Debian, thanks!)


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Jerry James <loganjerry@gmail.com> - 1.2.7-1
changelog:
  - Version 1.2.7
  - Setting LC_ALL is no longer necessary
  - Build documentation with AutoDoc
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 2.8.2-1
changelog:
  - Version 2.8.2
  - Predownloaded ATLAS data is no longer needed for the tests
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude


author: Jerry James <loganjerry@gmail.com> - 1.0.5-1
changelog:
  - Version 1.0.5
  - Drop upstreamed set_unexpected patch
  - Setting LC_ALL is no longer necessary
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 1.6.9-1
changelog:
  - Version 1.6.9
  - gap-pkg-io is now an optional dependency instead of required
  - avoid use of %exclude


author: Jerry James <loganjerry@gmail.com> - 1.76-1
changelog:
  - Version 1.76
  - Fix loading of the package for generating documentation
  - Setting LC_ALL is no longer required
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 1.3.7-1
changelog:
  - Version 1.3.7
  - Change from C++11 to C++14 has been upstreamed
  - Setting LC_ALL is no longer necessary


author: Jerry James <loganjerry@gmail.com> - 2-1
changelog:
  - Several refinements and improvements
  - Rename gap_pkg_name to gap_pkgname
  - Rename gap_upstream_name to gap_upname
  - Remove gap_install_list
  - Add gap_skip_docs boolean conditional
  - Add gap_skip_check boolean conditional


author: Benjamin Gilbert <bgilbert@backtick.net> - 2.43.5-1
changelog:
  - Update to 2.43.5
  - Drop BMP, ICO, PNM, and TGA loaders; these are now supported via Glycin
  - Drop thumbnailer config, since gdk-pixbuf dropped the thumbnailer


author: Dan Streetman <ddstreet@ieee.org> - 43-0.2
changelog:
  - Change dbus-daemon.service to dbus-broker.service in preset files (rhbz#2373032)
  - I see you, Tom. I see you.


author: Jens Petersen <petersen@redhat.com> - 9.10.1-3
changelog:
  - new packages: ghc-experimental, ghc-platform, ghc-toolchain, os-string
  - note prof subpackages currently have incomplete deps
    due to metadata generation issue


author: Jens Petersen <petersen@redhat.com> - 9.10.1-7
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.5.11-1
changelog:
  - Update to 0.5.11
  - Fix compatibility with Mercurial 6.4 (rhbz#2259038)
  - Fix access to ssh remotes with absolute path in no-mercurial mode
  - Fix missing `distutils` error messages with Python 3.12


author: Dominik Mierzejewski <dominik@greysector.net> - 45~20250512gitf7501bc-1
changelog:
  - update to 20250512 git snapshot
  - remove rpaths with a patch
  - make file lists more explicit
  - filter out private plugin Provides:
  - bytecompile Python code and use appropriate macro in file list
  - correct License: tag
  - fix version
  - drop unused dependency


author: Luya Tshimbalanga <luya@fedoraproject.org> - 24-3
changelog:
  - Switch to [gnome-shell-rpm-generators](https://fedoraproject.org/wiki/Cha
    nges/GnomeShellExtensionDependencyGenerator) for build requirement


author: Akira TAGOH <tagoh@redhat.com> - 20250701-2
changelog:
  - Add fallback config of monospace for following languages. See
    https://fedoraproject.org/wiki/Changes/SetDefaultMonospaceFallbackFont
    - Arabic
    - Bengali
    - Devanagari
    - Ethiopic
    - Georgian
    - Gujarati
    - Hebrew
    - Kannada
    - Khmer
    - Oriya
    - Sinhala
    - Tamil
    - Telugu
    - Thai


author: Marcin Dulak <marcindulak@fedoraproject.org> - 25.7.0-1
changelog:
  - New upstream release
  - Move away from deprecated setup.py build/install
  - Remove temporary python3 top level dir


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.48.4-45
changelog:
  - Skip test_service_config, which times out
  - This appears to be due to an unsafe combination of death tests and
    threads


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.26.2-2
changelog:
  - Move aom, curl, openal, openjpeg to main package
  - Move lv2 to separate subpackage (rhbz#1731750)
  - Enable dvdspu, faad, qsv (x86_64 only)
  - Enable dc1394 and zxing in extras subpackage


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.25-1
changelog:
  - Update to 1.9.25
  - Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
  - Add haveged-initramfs.service for use inside the initramfs


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.29.5111.102-7
changelog:
  - Don’t link the top-level absl_flags library; it is not required in
    absl-cpp-20230802, and not present in absl-cpp-20240116
  - Add #include directives for compatibility with absl-cpp-20240116


author: Mike FABIAN <mfabian@redhat.com> - 1.17.14-1
changelog:
  - Release 1.17.14
  - Make it possible to configure which menu entries are shown in the desktop
    panel menu and in the floating panel (Resolves: https://github.com/mike-
    fabian/ibus-table/pull/189)
  - Translation update from Weblate (ca 99.3%, de 100%, es 99.3%, fr
    100%, ka 60.7%, kab 35.5%, pt_BR 99.3%, pt_PT 74.5%, ru 98.6%, tr
    99.3%, ua 100%, zh_CN 90.1%, zh_TW 99.3%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.15-1
changelog:
  - Release 1.17.15
  - Log all unhandled exceptions, makes debugging a lot easier When Python
    code runs in an environment like IBus, unhandled exceptions inside
    callbacks are usually caught and swallowed by the framework, often with
    no logging. That’s why one sees “silent” failures: the event handler
    stops executing at the exception, but IBus continues running, and you get
    no clue unless you manually log something.
  - Stop calling IBus.init(), Python code no longer needs to call that
  - Don't take index of the string returned by get_goucima() if it is too
    short (Resolves: https://github.com/mike-fabian/ibus-table/pull/201)
  - Translation update from Weblate (el 22.2%, es 100%, ka 61.4%, pt_BR
    100%


author: Mike FABIAN <mfabian@redhat.com> - 1.17.17-1
changelog:
  - Release 1.17.17
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py for
    Unicode 17.0.0 release
  - Translation update from Weblate (ca 100%, cz 97.3%, el 28.7%, fa
    15.0%, hu 22.8%, ja 49.6%, ka 69.3%, kab 37.2%, pt_PT 75.8%, ro
    100%, si 11.1%, zh_HK 20.9%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.18-1
changelog:
  - Release 1.17.18
  - Enhance TabEngine key handling cancelling logic when suggestion mode is
    active. (Resolves: https://github.com/mike-fabian/ibus-table/pull/215)
  - Translation update from Weblate (cz 100%, el 39.8%, ka 100%, pt_PT
    100%, zh_TW 100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0
  - Require Python 3.9+ from now on
  - [Optimization] Drop the ESCAPE clause when unneeded and add a tabkeys
    index (Resolves: https://github.com/mike-fabian/ibus-table/pull/235)
  - Stop rewriting the phrases cache every 30s while idle (Resolves:
    https://github.com/mike-fabian/ibus-table/pull/234)
  - Fill the lookup table completely instead of one page at a time (Resolves:
    https://github.com/mike-fabian/ibus-table/pull/232)
  - Translation update from Weblate (de 100%, es 100%, el 40.5%, hu
    50.9%, ja 54.9%, ka 69.9%, kab 41.1%, ko 100%, ru 100%, si 15.0%,
    zh_HK 21.5%)


author: Packit <hello@packit.dev> - 68-1
changelog:
  Changes with 68
  ----------------
    - Containerfile*: correct base image reference in tag (#531)
      - Author: Zephyr Lykos, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#533)
      - Author: SchutzBot, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: bump osbuild/images dependency (#538)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: mention additional requirements (#530)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: `--force-defs-dir` (#534)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: `bootc inspect` (#529)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - pr-best-practices: Update authentication scheme for Jira Cloud (HMS-10749) (#535)
      - Author: Florian Schüller, Reviewers: Lukáš Zapletal, Simon de Vlieger

  osbuild/images changes (v0.267.0 -> v0.270.0):

    - Break down imgtestlib module and  use log sections (#2383)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - CI: run tests on Fedora 44 (#2343)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Make EFIPartitionTable function public, move it into disk (#2354)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Repos: Add/update AlmaLinux repository definitions (#2376)
      - Author: Eduard Abdullin, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update dependencies 2026-05-25 (#2368)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc: assert non-nil kernel info (#2370)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - cicd: run gobump per commit (#2352)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - container: guess at mime type (#2372)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - depsolver: catch all errors from the child process (#2365)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - distro/loader: expand installerConfig template by copying (HMS-10718) (#2373)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal
    - distro: Make isoCustomizations usable by bootcImageType (#2360)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - fedora: drop no_timer_check leftover (#2282)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - gitlab: exit with error code when manifests fail to validate (#2374)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal
    - install-dependencies: Add a note about it being used by image-builder-cli workflows (#2353)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - loader: allow custom path (#2378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - many: fix non-determistic manifest generation (#2381)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - pr-best-practices: Update authentication scheme for Jira Cloud (HMS-10749) (#2386)
      - Author: Florian Schüller, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stage/grub2: allow VFAT for boot fs (#2371)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-06-04


author: Packit <hello@packit.dev> - 69-1
changelog:
  Changes with 69
  ----------------
    - deps: bump osbuild/images dependency (#548)
      - Author: SchutzBot, Reviewers: Nobody
    - deps: bump osbuild/images dependency (#551)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: bump osbuild/images dependency (#552)
      - Author: SchutzBot, Reviewers: Simon de Vlieger
    - deps: images 0.273.0 (#549)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lucas Garfield
    - main: `system` subcommand (#537)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane

  osbuild/images changes (v0.270.0 -> v0.274.0):

    - Add BootcRootFS pipeline and use it for bootc pxe-tar-xz (#2361)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Add Custom menus to X86 and PPC64 ISO bootloaders (#2394)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test: stop testing EOL RHEL releases (#2415)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Update dependencies 2026-05-31 (#2391)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - Update dependencies 2026-06-07 (#2402)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - config-list: narrow down the matrix (#2366)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - data/repositories: add PQC keys to rolling distros (#2411)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: drop `golang.org/x/exp/slices` (#2399)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - distro/eln: clean up part 1 (HMS-10764) (#2384)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/eln: installers use erofs (HMS-10634) (#2398)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - fedora-42: eol (#2385)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - imgtestlib: support bootc-foundry image types (#2393)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - manifest: use boot root for fix bls (#2412)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    - many: copy boot files from build (#2410)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - many: initial `systemd-boot` support (#2392)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - oscap: drop dead code (#2409)
      - Author: Simon de Vlieger, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - test/imgtestlib: boot test network installer on RHEL 10.2 (#2387)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2026-06-17


author: Packit <hello@packit.dev> - 73.0.0-1
changelog:
  Changes with 73.0.0
  ----------------
    - Update dependencies 2026-06-21 (#2451)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Update osbuild dependency commit ID (#2450)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - disk: check all partitions for boot partition requirement (#2459)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - github: drop the reverse dependency check with image-builder-cli (#2454)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - imgtestlib: handle missing sources key in tests (#2447)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - osbuild: ddi mount (#2457)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - rhel-10: reintroduce minimal-raw-xz (#2465)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-06-29


author: Packit <hello@packit.dev> - 74.0.0-1
changelog:
  Changes with 74.0.0
  ----------------
    - Test depsolvednf with dnf5 [HMS-10324] (#2475)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update dependencies 2026-06-28 (#2472)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update dependencies 2026-07-05 (#2490)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - depsolvednf: don't require solver.json in test (#2479)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - distro/eln: use dnf5 and update package lists (#2482)
      - Author: Yaakov Selkowitz, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gen-manifest: optimize checksum calculation (#2382)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - generic/bootc: allow disk.yaml to provide root filesystem type (#2405)
      - Author: Joel Capitao, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - github: remove osbuild-composer reverse dependency test (#2477)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - image-builder/build: add json format option (#2484)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - manifest: add firstboot support (HMS-9187) (#1913)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - many: plumb sdboot options (#2456)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: use `image-builder upload` in tests (HMS-10856) (#2476)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - partition_table: Make AlignUp clearer (#2419)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - pkg/rhsm: match subscription baseurls with wildcards (RHEL-36789) (#2460)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal
    - progress: lock around sub progress (#2487)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - workflows: Add a link to the osbuild-composer API unit test results (#2469)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - workflows: Update old images urls to image-builder (#2468)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-07-08


author: Packit <hello@packit.dev> - 75.0.0-1
changelog:
  Changes with 75.0.0
  ----------------
    - Add hidden pkgsearch subcommand for querying available packages (HMS-11011) (#2515)
      - Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Always use seed argument directly (#2516)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Enable basic bootc-image-builder tests [HMS-10851] (#2467)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Tomáš Koscielniak
    - Enable image-builder container builds [HMS-10851] (#2497)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Simon de Vlieger
    - Fedora ISO Modernization (HMS-9965) (#2533)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Sanne Raymaekers
    - Improve error message for pkgsearch with no packages (#2526)
      - Author: Gianluca Zuccarelli, Reviewers: Brian C. Lane, Lucas Garfield
    - README: update deprecated information in docs (#2498)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Run more bootc-image-builder tests in gitlab [HMS-10854] (#2520)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - Update dependencies 2026-07-12 (#2513)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild dependency commit ID (#2512)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260705 (#2488)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - bootc: support grub2 serial console customization (#2403)
      - Author: Jean-Baptiste Trystram, Reviewers: Brian C. Lane, Joel Capitao, Tomáš Hozza
    - build(deps): bump actions/checkout from 6 to 7 (#2452)
      - Author: dependabot, Reviewers: Anna Vítová, Simon de Vlieger
    - ci: enable allow-unsafe-pr-checkout in checkout/7 (#2523)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - cmd/image-builder: mock simple integration tests (HMS-10857) (#2473)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - disk: systemd-repart compatibility (#2510)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - fedora: drop slirp4netns from the IoT image (#2478)
      - Author: Peter Robinson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - image-builder: add hidden `--with-upload-result` option (#2521)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - pkg/disk: add XFS agcount option in `disk.yaml` (#2496)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: add file progress (HMS-10977) (#2493)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - test: fix build info cache path creation to use correct runner_distro (#2495)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - test: fix vm.py import error [HMS-11012] (#2522)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: go 1.27 compatibility (#2504)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - test: mock cache dir (#2519)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-07-21


author: Packit <hello@packit.dev> - 76.0.0-1
changelog:
  Changes with 76.0.0
  ----------------
    - Restore anaconda-iso/iso type to bootc-image-builder (#2527)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update osbuild dependency commit ID (#2531)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda: enable shell shenanigans for anaconda (#2544)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - build(deps): bump actions/setup-go from 6 to 7 (#2532)
      - Author: dependabot, Reviewers: Achilleas Koutsou, Anna Vítová
    - eln: set runner to eln11 (#2535)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - image-builder: distro detection for `build` and `manifest` (#2542)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Ondřej Budai

  — Somewhere on the Internet, 2026-07-22


author: Packit <hello@packit.dev> - 77.0.0-1
changelog:
  Changes with 77.0.0
  ----------------
    - Generate bootc-image-builder test jobs dynamically and enable all tests [HMS-11073] (#2539)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - Refactor CLI setup (#2503)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update osbuild dependency commit ID (#2555)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda: rectify comment (#2548)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová, Lukáš Zapletal
    - bib: Replace logrus usage with olog (#2543)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - bib_legacy: Use functions from bootc (#2540)
      - Author: Brian C. Lane, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/setup-python from 6 to 7 (#2556)
      - Author: dependabot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - eln: enable `aarch64` for `gce` (HMS-11095) (#2558)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - github: enable building the bootc-image-builder container [HMS-11005] (#2549)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - gitlab: remove setup-show option for pytest (#2551)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - manifest/raw_bootc: support subscription registration on first boot (HMS-10897) (#2528)
      - Author: Lucas Garfield, Reviewers: Brian C. Lane, Simon de Vlieger
    - pkg/koji/upload: session credentials to headers (#2550)
      - Author: Anna Vítová, Reviewers: Florian Schüller, Sanne Raymaekers

  — Somewhere on the Internet, 2026-07-28


author: Packit <hello@packit.dev> - 78.0.0-1
changelog:
  Changes with 78.0.0
  ----------------
    - Simplify early manifest generation code and enable custom seeds for bootc-based images (#2565)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update RHEL 9, 10 OCI image defs to add Oracle as cloud init datasource (#2559)
      - Author: src-up, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update osbuild dependency commit ID (#2576)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260719 (#2530)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - ci: tag containers (#2575)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - cmd/image-builder: drop `images` from version (#2573)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - container: add SetAuthFilePath method to Resolver (#2580)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - disk: align footer to grain by default (#2562)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - disk: take the ESP size from the image type's partition table (RHEL-214147) (#2552)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - distro/generic: pass subscription options to pxe-tar-xz images (HMS-11108) (#2564)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Brian C. Lane
    - fedora: create 46 (#2546)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Florian Schüller
    - imgtestlib: configure setuptools package discovery (#2563)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test/imgtestlib: revert boot.py to old behaviour (#2579)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: remove iot-bootable-container image type (#2569)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-08-10


author: Packit <hello@packit.dev> - 79.0.0-1
changelog:
  Changes with 79.0.0
  ----------------
    - Fix the container resolver tests (#2602)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Sanne Raymaekers
    - Run privileged unit tests on gitlab (#2603)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Start container with repos support for legacy ISO only [HMS-11156] (#2582)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update osbuild dependency commit ID (#2600)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260816 (#2599)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda_installer: platform build packages (#2589)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Sanne Raymaekers
    - distrodefs: Add aliases to Fedora for GCP (HMS-11182) (#2583)
      - Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - fedora: drop explicit `anaconda-widgets` (#2597)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Katerina Koukiou, Lukáš Zapletal
    - image-builder: reuse progress bars for upload (#2592)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - manifest: accept human-readable image sizes (#2571)
      - Author: tomatotomata, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - osbuild/rpm: implement generic env   (#2586)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - ova: set os type and virtual hardware version (HMS-3248) (#2480)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - packit: enable riscv64 (#2595)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - pkg/disk.yaml: add an option to not grow root (#2524)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: add GPG keys to Fedora 44 test repos (#2585)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - test: mock host arch for package search (#2594)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-08-20


author: Packit <hello@packit.dev> - 82.0.0-1
changelog:
  Changes with 82.0.0
  ----------------
    - Enable bootc-image-builder ISO tests on aarch64 [HMS-11073] (#2637)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Lucas Garfield
    - Implement rootless container introspection (#2617)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - Rewrite container handling internals to drop graphdriver and gpgme dependencies [RHEL-56367] (#2607)
      - Author: Achilleas Koutsou, Reviewers: Lucas Garfield, Simon de Vlieger
    - Update osbuild dependency commit ID (#2631)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260830 (#2630)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - client: Respect CONTAINERS_GRAPHROOT and CONTAINERS_RUNROOT (#2645)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cmd/image-builder: only run findDistro once (#2651)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cmd/image-builder: upload messages progress bar (#2654)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Sanne Raymaekers
    - el9/10: parity bits (#2659)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - gce: ensure disk images are GiB-aligned (#2655)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - osbuild: compare Go against JSON (#2529)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - osinfo: never fall back if new prefix exists (#2649)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - osinfo: warn on old-prefix usage (#2648)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Sanne Raymaekers
    - pkg/crypt: add support for yescrypt hashed passwords (#2650)
      - Author: Loris Fauster, Reviewers: Lucas Garfield, Simon de Vlieger
    - pkg/rhsm: use Katello CA as default on Satellite hosts (#2613)
      - Author: Lukáš Zapletal, Reviewers: Lucas Garfield, Simon de Vlieger
    - rm SECURITY.md: fall back to org-wide policy (#2633)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - rootless: Don't disallow --in-vm in rootless non-container (#2626)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-09-04


author: Adam Williamson <awilliam@redhat.com> - 1.1.16-10
changelog:
  - Backport PR #458 to go with backport of oz PR #310 (image size units)
  - Backport PR #459 to hopefully fix Python 3.12 compatibility


author: Martin Kolman <mkolman@redhat.com> - 0.3.99-1
changelog:
  - Default initial-setup-gui GDK to X11 for all display servers (ales.astone)
  - Configure a seat session for running wayland compositors (ales.astone)
  - Add support for generic Wayland support through Weston (neal)
  - Allow running the graphical setup in graphic servers other than Xorg (ales.astone)
  - windowmanager: Remove kwin (ales.astone)


author: Martin Kolman <mkolman@redhat.com> - 0.3.100-1
changelog:
  - spec: Disable shipping the X11 backend for all but RHEL < 10 (neal)
  - spec: Restructure and modernize (neal)


author: Neal Gompa <ngompa@fedoraproject.org> - 24.09-3
changelog:
  - Add SDDM and initial-setup-gui configuration packages
  - Split desktop session file into its own subpackage


author: Neal Gompa <ngompa@fedoraproject.org> - 43.0-1
changelog:
  - Bump for F43 backgrounds
  - ShellCheck fixes for gpg-agent startup script
  - Fixes for prelink handling logic in profile.d shell scripts


author: Peter Bieringer <pb@bieringer.de> - 4.2.2-1
changelog:
  - include databases/registries/lisp/site-db as no longer reachable for download
  - add additional Perl requirements


author: Peter Bieringer <pb@bieringer.de> - 4.3.0-1
changelog:
  - Final release 4.3.0
  - Update recommend IP2Location >= 8.6.0
  - Remove ipv6calc.sgml from doc
  - Use now only releases from GitHub


author: Ben Boeckel <fedora@me.benboeckel.net> - 0.19.1-7
changelog:
  - Modernize RPM macros (rhbz#2377298)
  - Remove atomicwrites dependency (https://github.com/lucc/khard/pull/343)


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Packit <hello@packit.dev> - 12-1
changelog:
  Changes with 12
  ----------------
    * Actions: add workflow for marking and closing stale issues and PRs (#124)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * build(deps): bump ludeeus/action-shellcheck from 1.1.0 to 2.0.0 (#115)
      * Author: dependabot[bot], Reviewers: Ondřej Budai
    * ci: add Fedora 37 (#111)
      * Author: Ondřej Budai, Reviewers: Tomáš Hozza
    * docs: Update architecture diagram (#114)
      * Author: Simon Steinbeiß, Reviewers: Tomáš Hozza
    * hub: mark baseurl as required in repo schema (#112)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai
    * koji-osbuild.spec: migrate the license field to SPDX (#113)
      * Author: Ondřej Budai, Reviewers: Tomáš Hozza
    * plugin/builder: increase retries for requests to composer (#128)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2024-11-14


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.6-1
changelog:
  - Update to release v1.31.6
  - Resolves rhbz#2345513
  - Resolves CVE-2025-0426
  - Upstream security and other fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.9-1
changelog:
  - Update to release v1.31.9
  - Resolves rhbz#2366642
  - Upstream fixes
  - Add fedpkg mockbuild artifacts to .gitignore
  - Update template to vendored archive version


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.12-1
changelog:
  - Update to release v1.31.12
  - Resolves: rhbz#2388412
  - Resolves: CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.37.0-1
changelog:
  - Add initial Kubernetes 1.37.0 release
  - Initial release for Fedora
  - Urgent (must read) upgrade notes at: https://github.com/kubernetes/kubern
    etes/blob/master/CHANGELOG/CHANGELOG-1.37.md#urgent-upgrade-notes
  - New features, enhancements, and fixes


author: Xavier Bachelot <xavier@bachelot.org> - 2.8.2-16
changelog:
  - Drop EL7/python2 support
  - Set min_hash_algo to sha256 for f42+
  - Fix conditional around JAVA_HOME export
  - Add patch to fix build with gcc15


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 0.10.11-1
changelog:
  - update to 0.10.11 (resolves rhbz#2348998)
  - fix FTBFS due to missing tox.ini (resolves rhbz#2354084)


author: Adam Williamson <awilliam@redhat.com> - 0.3.4-1
changelog:
  - Update to 0.3.4, drop merged and no-longer-needed patches
  - Fix Python build/install so Python subpackage works
  - Fix build on EPEL 8 and 9
  - Include latest database from upstream


author: Evan Goode <egoode@redhat.com> - 0.74.0-1
changelog:
  - Update to 0.74.0
  - Update ko.po
  - Split $releasever to $releasever_major and $releasever_minor in the C API
  - Merge `bootc` branch to master
  - ConfigParser: make splitReleasever public
  - C API: Detect releasever_major, releasever_minor from provides
  - C API: support shell-style variable substitution
  - module: Warn if module config file is inaccessible
  - Enable automatic PR reviews


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Ales Nezbeda <anezbeda@redhat.com> - 16.3-5
changelog:
  - Disable openssl ENGINE_API
  - Fedora change: https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - BZ: 2300910


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.15-1
changelog:
  - Release version 2.17.15 (Michal Srb)
  - reporter-bugzilla: Make the supplementary bugs easily identifiable (Michal Srb)
  - reporter-bugzilla: Fix formatting in the supplementary bugs (Michal Srb)
  - reporter-bugzilla: Fix code comment (Michal Srb)


author: Milan Crha <mcrha@redhat.com> - 3.6.6-2
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2020.12.R1-18
changelog:
  - Make it build with the latest Python
    Fixes: RHBZ#2259655, RHBZ#2242706, RHBZ#2242709
  - Update summary and description
  - Drop deprecated macros


author: Michal Schmidt <mschmidt@redhat.com> - 9.8.60-3
changelog:
  - Remove redundant %setup invocation.
  - Replace custom patch files with "git format-patch" from upstream git.


author: Miro Hrončok <miro@hroncok.cz> - 10.4.0-2
changelog:
  - Adjust tests for recently (Python 3.13, 3.12.4+) added text/markdown
    mimetype
  - Fixes: rhbz#2279995


author: Carl George <carlwgeorge@fedoraproject.org> - 1.15.0-1
changelog:
  - Update to version 1.15.0 rhbz#2250567
  - Port to pyproject macros
  - Drop python3-litecli subpackage


author: Simone Caronni <negativo17@gmail.com> - 1:31.0-14
changelog:
  - Remove obsolete EL7, Python 2 conditionals and Conflicts.
  - Switch to a valid Source URL.
  - Explicitly list man pages.
  - Format SPEC file.
  - Trim changelog.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.5.3^20220831git2d4ba970-10
changelog:
  - F42+: Add old style pre scriptlet for LXDM user creation so as to make it work
    when upgrading from F41


author: Hans de Goede <hans@hansg.org> - 0.7.6-34
changelog:
  - Switch back to https://github.com/thelaui/M.A.R.S. upstream which has
    merged all the patches to remove non-free data files
  - Remove all references to dead marsshooter<dot>org domain which is now
    filled with spam


author: Sérgio Basto <sergio@serjux.com> - 2.5.3-3
changelog:
  - Update provides and obsoletes for openjpeg2 of Fedora 40
  - Also add a more agressive way to remove old openjpeg-libs (1.x)


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Dominik Mierzejewski <dominik@greysector.net> - 3.0.2-9
changelog:
  - switch to tar.gz source to avoid manual build
  - build using CMake (use upstream SONAME)
  - ship pkg-config and CMake files (resolves rhbz#2378931)
  - fix build with CMake 4.0
  - use dos2unix instead of sed


author: RPM Fusion Release Engineering <sergiomb@rpmfusion.org> - 2.2.1-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add GCC-15 patch from upstream


author: Fedora Release Engineering <releng@fedoraproject.org> - 7.28.0-7
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Add mini patch for GCC 15
  - Drop BR gtk2-devel
  - Fix conditionals for epel9+


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 0.2.2-1
changelog:
  - Update to 0.2.2
  - Test desktop file
  - Add AppData file and test it
  - Remove environment-modules-gui provides
  - Clarify license used for icon files (CC-BY-SA-3.0)


author: Tobias Girstmair <t-fedora@girst.at> - 4.0.0~a4-1
changelog:
  - Update to 4.0.0a4 for Python 3.14 compatibility (RHBZ#2367738) and fix gstreamer 1.26 compatibility


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 2.5-1
changelog:
  - Update to upstream (bz#2453492)
  - Fix check_icmp: host-count overflow leads to heap buffer overflow
    in setuid-root binary (bz#2513957)
  - Remove RHEL7- support
  - Add dependency on openssl3-devel for fedora-45+ (bz#2504361)


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 2.5-2
changelog:
  - Added perl-Math-BigInt as dependency for
    nagios-plugins-ssl_validity (bz#2439960)
  - Update 0012-fix-perl-ntp-ipv6.patch to allow uppercase hostnames (bz#2500542)


author: Steve Cossette <farchord@gmail.com> - 3.8-1
changelog:
  - Update to 3.8 to fix several CVEs:
  - CVE-2024-48991: Prevent race condition on /proc/$PID/exec evaluation
  - CVE-2024-11003: Drop usage of Module::ScanDeps to prevent LPE.
  - CVE-2024-48990: Do not set PYTHONPATH environment variable to prevent a LPE.
  - CVE-2024-48992: Do not set RUBYLIB environment variable to prevent a LPE.


author: Kevin Fenzi <kevin@scrye.com> - 8.3.3-1
changelog:
  - Update to 8.3.3 (fixes rhbz#2277754 )
  - Fix FTBFS (fixes rhbz#2341174 )
  - Fix FTI (fixes rhbz#372002 )


author: Sandro <devel@penguinpee.nl>
changelog:
  - Add python3-ninja sub package providing metadata for Python packages
    depending on ninja to facilitate automatic dependency resolution.


author: Jerry James <loganjerry@gmail.com> - 2.16.0-1
changelog:
  - Version 2.16.0
  - Remove the deprecated ocaml-atdgen-devel package
  - New ocaml-atdcpp package for generating C++


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 16.11.0-1
changelog:
  - Update to latest version (#2335692)
  - Drop webservice subpackage as we don't have streamlit packaged


author: Haibo Lin <hlin@redhat.com> - 0.8.1-1
changelog:
  - client: Make black happy
  - client: Print OIDC exchange info to stderr
  - client: Require browser or TTY for authorization code flow
  - server: Add support for post-compose script
  - server: Allow customizing TTL for raw config composes
  - server: Delete generatelocalhostcert command
  - server: Ensure the dest dir of git clone does not exist
  - server: Gather git checkout/clone error message
  - server: Make sure writing COMPOSE_ID file


author: Haibo Lin <hlin@redhat.com> - 0.9.0-1
changelog:
  - server: Add `odcs-manager metrics` command
  - server: Add cleanup command to odcs-manager
  - server: Fix black complaints
  - server: Allow , in NVR input
  - README: explain ODCS project future


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-13
changelog:
  - Clean up spec file from pre-systemd times
  - Use systemd services to initiate oddjobd configuration reload
  - Resolves: rhbz#2248817


author: Simon Pichugin <spichugi@redhat.com> - 2.6.10-4
changelog:
  - Fix LDAP initialization does unnecessary resolution of hostname (rhbz#2392068)
  - Convert STI tests to FMF (rhbz#2392069)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.4-2
changelog:
  - Resolves: CVE-2025-15467
  - Resolves: CVE-2025-15468
  - Resolves: CVE-2025-15469
  - Resolves: CVE-2025-66199
  - Resolves: CVE-2025-68160
  - Resolves: CVE-2025-69418
  - Resolves: CVE-2025-69420
  - Resolves: CVE-2025-69421
  - Resolves: CVE-2025-69419
  - Resolves: CVE-2026-22795
  - Resolves: CVE-2026-22796
  - Resolves: CVE-2025-11187


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.4-3
changelog:
  - Backport security patches from OpenSSL 3.5.6
    Resolves: CVE-2026-2673
    Resolves: CVE-2026-28387
    Resolves: CVE-2026-28388
    Resolves: CVE-2026-28389
    Resolves: CVE-2026-28390
    Resolves: CVE-2026-31789
    Resolves: CVE-2026-31790


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.7-1
changelog:
  - Rebase to OpenSSL 3.5.7
    Resolves: CVE-2026-45447
    Resolves: CVE-2026-34182
    Resolves: CVE-2026-34183
    Resolves: CVE-2026-42764
    Resolves: CVE-2026-45445
    Resolves: CVE-2026-7383
    Resolves: CVE-2026-9076
    Resolves: CVE-2026-34180
    Resolves: CVE-2026-34181
    Resolves: CVE-2026-42766
    Resolves: CVE-2026-42767
    Resolves: CVE-2026-42768
    Resolves: CVE-2026-42769
    Resolves: CVE-2026-42770
    Resolves: CVE-2026-45446


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.7-2
changelog:
  - Don't raise NOT_ENOUGH_DATA on a clean EOF at an object boundary
    (Backport from https://github.com/openssl/openssl/commit/3687ff7)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.8-1
changelog:
  - Rebase to OpenSSL 3.5.8
    Resolves: CVE-2026-14456
    Resolves: CVE-2026-14457
    Resolves: CVE-2026-18798
    Resolves: CVE-2026-54874
    Resolves: CVE-2026-63072
    Resolves: CVE-2026-63073
    Resolves: CVE-2026-63074
    Resolves: CVE-2026-63075
    Resolves: CVE-2026-63076
    Resolves: CVE-2026-75803


author: Pavol Sloboda <psloboda@redhat.com> - 0.07.18-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively. Also
    it was mentioned in the spec file twice as a BuildRequires.


author: Packit <hello@packit.dev> - 177-1
changelog:
  Changes with 177
  ----------------
    - Add stages used for building s390x isos (HMS-9967) (#2390)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: default to using DNF5 depsolver on Fedora 45+ (current Rawhide) (HMS-10343) (#2389)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to support building ppc64le isos (HMS-9968) (#2377)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2394)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2392)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260315 (#2393)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260322 (#2397)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - buildroot: Use bwrap's --drop-cap ALL (#2395)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Alexander Larsson
    - chore: clean up team ssh keys (#2391)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Anna Vítová, Tomáš Hozza
    - cli: Print checkpoint cache status (#2388)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - stages/aleph: make path parametrizable (#2384)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - tools/osbuild-store: do stuff with sources and store (HMS-10238) (#2364)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-26


author: Packit <hello@packit.dev> - 178-1
changelog:
  Changes with 178
  ----------------
    - Packit: disable s390x builds in COPR (#2406)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Simon de Vlieger
    - Support uri encoded urls (#2405)
      - Author: Justin Sherrill, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild-ci container images (#2408)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260329 (#2403)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stage: flatpak.build-import-bundle.oci (HMS-10170) (#2400)
      - Author: Simon de Vlieger, Reviewers: Dusty Mabe, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-02


author: Packit <hello@packit.dev> - 181-1
changelog:
  Changes with 181
  ----------------
    - stages/bootc.install-to-fs: remount /dev (#2440)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-11


author: Packit <hello@packit.dev> - 183-1
changelog:
  Changes with 183
  ----------------
    - .gitlab-ci.yml: add 9.8-ga and 10.2-ga (#2457)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    - Optimize osbuild-depsolve-dnf memory and runtime performance (HMS-10526) (#2456)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal
    - Update images dependency ref to latest (#2461)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - mounts/ddi: mounting of DDIs (#2459)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - runners: `eln11` (HMS-10652, HMS-10652) (#2453)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - test: update container IDs for manifest-list-test (#2455)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-27


author: Packit <hello@packit.dev> - 185-1
changelog:
  Changes with 185
  ----------------
    - Update snapshots to 20260531 (#2466)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - ci: fix `test_qemu` (#2483)
      - Author: Simon de Vlieger, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - org.osbuild.ovf: support setting virtual hardware version (HMS-3248) (#2468)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - runners: Add Oracle Linux 9 runner symlinked to CentOS9 (#2476)
      - Author: Laurence Rochfort, Reviewers: Brian C. Lane, Simon de Vlieger
    - sources/librepo: accept SHA1 (#2477)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-06-17


author: Packit <hello@packit.dev> - 187-1
changelog:
  Changes with 187
  ----------------
    - Update images dependency ref to latest (#2497)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update osbuild-ci container images (#2493)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260705 (#2496)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - containers-storage: Handle missing `storage.conf` values (#2501)
      - Author: Joel Capitao, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/bootc.install-to-fs: remount /dev/shm in addition to /dev/shm (#2494)
      - Author: Alexander Larsson, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/org.osbuild.bfb: BFB boot grub shims (#2471)
      - Author: Eli Elgaev, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages: add org.osbuild.grub2.d (#2473)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - utils: add utils.makeefi library (#2499)
      - Author: Dusty Mabe, Reviewers: Achilleas Koutsou, Renata Ravanelli, Simon de Vlieger

  — Somewhere on the Internet, 2026-07-10


author: Packit <hello@packit.dev> - 189-1
changelog:
  Changes with 189
  ----------------
    - Added new stage org.osbuild.idmap to enable shifting UIDs/GIDs (#2495)
      - Author: Michael Engel, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2517)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild-ci container images (#2508)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260712 (#2505)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260719 (#2511)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update snapshots to 20260726 (#2516)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - add Oracle as datasource to cloud init (#2519)
      - Author: src-up, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ci: enable allow-unsafe-pr-checkout (#2515)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Brian C. Lane, Simon de Vlieger
    - stage/rpm: include additional header digests (#2478)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - test: adapt to image-builder cache new layout (HMS-10855) (#2514)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2026-07-29


author: Packit <hello@packit.dev> - 190-1
changelog:
  Changes with 190
  ----------------
    - Update images dependency ref to latest (#2523)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update images dependency ref to latest (#2529)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild-ci container images (#2521)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Update snapshots to 20260802 (#2522)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260809 (#2528)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - stage/rpm: general env options (#2524)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - stage/rpm: query only supported metadata tags (HMS-11174) (#2526)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-08-11


author: Packit <hello@packit.dev> - 191-1
changelog:
  Changes with 191
  ----------------
    - Add SECURITY.md file (#2536)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Add a manifest for buiding a Fedora riscv64 container in an x86_64 buildroot (#2539)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Schutzfile: update Fedora 43 repo snapshots (#2535)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Support rootless osbuild runs without container (#2546)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2543)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Update osbuild-ci container images (#2540)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260816 (#2541)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - main: Make rootless work when using the /usr/bin/osbuild wrapper (#2547)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - rhsm: prefer Katello CA on Satellite-registered hosts (SAT-37848) (#2537)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - spec: update osbuild-initrd dependency to 0.2 (#2545)
      - Author: Achilleas Koutsou, Reviewers: Alexander Larsson, Simon de Vlieger
    - stages/dd: create `dd` stage (#2533)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: fix missing mock_run (#2534)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-08-23


author: Packit <hello@packit.dev> - 193-1
changelog:
  Changes with 193
  ----------------
    - Update images dependency ref to latest (#2555)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild-ci container images (#2556)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild-ci container images (#2558)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260830 (#2553)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - qemu: Uncompress kernels not supported by qemu (#2551)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - rm SECURITY.md: fall back to org-wide policy (#2554)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - rootless: Use the correct container storage (#2550)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - stages/tree-delta: produce delta trees (#2527)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová, Florian Schüller

  — Somewhere on the Internet, 2026-09-06


author: Adam Williamson <awilliam@redhat.com> - 0.18.1-17
changelog:
  - Update to latest git master, drops retired m2crypto dep (#2318309)
  - Backport PR #316 to fix build with one of the master patches


author: Packit <hello@packit.dev> - 0.1.3-1
changelog:
  - Add some installability checks (Akashdeep Dhar)
  - Update Packit configuration (Akashdeep Dhar)
  - Step down the version requirement for python-gitlab (Akashdeep Dhar)
  - Bump version from v0.1.2 to v0.1.3 (fedohide-origin)
  - Automated dependency updates (renovate[bot])
  - add fedora-rawhide & fedora-40 aliases to packit jobs config (Shubham Karande)
  - Change the recordings after the GitLab Runners tokens were purged (Akashdeep Dhar)
  - Remove stray GitLab Runners token when detected (Akashdeep Dhar)
  - Remove stray IntelliJ files (Akashdeep Dhar)
  - Rework the testcases to address cleaning of repositories (Akashdeep Dhar)
  - Add refreshed recordings for the newly added functionalities (Akashdeep Dhar)
  - Include view and work code for retaining issue ticket order (Akashdeep Dhar)
  - Add options and variables to track the new feature (Akashdeep Dhar)
  - Update dependency ruff to ^0.0.285 || ^0.1.0 || ^0.2.0 || ^0.3.0 (renovate[bot])
  - Rework the recordings to address the changed tests (Akashdeep Dhar)
  - Clean statutory rate limit addressing functions (Akashdeep Dhar)
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Update recordings to speed up the testing process (Akashdeep Dhar)
  - Change the testcases to accommodate the shift (Akashdeep Dhar)
  - Modify the condition config for the test environment (Akashdeep Dhar)
  - Replace scoped client object in favor for contextualized client object (Akashdeep Dhar)
  - Introduce two shared variables to contextualize GitLab client and project objects (Akashdeep Dhar)
  - Move repository checking code from requests to python-gitlab (Akashdeep Dhar)
  - update_doc_use_venv_instead_of_virtualenv (ooooo)
  - Complete first run of refactoring (Akashdeep Dhar)
  - Add python-gitlab in dependencies (Akashdeep Dhar)
  - Automated dependency updates (renovate[bot])
  - Update dependency ruff to ^0.0.285 || ^0.1.0 || ^0.2.0 (renovate[bot])
  - Update dependency black to v24 (renovate[bot])
  - Update dependency pytest to v8 (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Automated dependency updates (renovate[bot])
  - Resolves rhbz#2269273


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.3.5-3
changelog:
  - Work around numpy 2.2 issues (close RHBZ#2341169)
  - Fix one issue, and skip tests for two others that we don’t know what to
    do about


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Drop 5.006 support
    - Compensate for perls without installsitescript
  - Use %{make_build} and %{make_install}


author: Charles R. Anderson <cra@alum.wpi.edu> 0.001-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(blib) instead of perl-blib
  - Remove explicit Requires: perl(Exporter)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Paul Howarth <paul@city-fan.org> - 1.6500-1
changelog:
  - Update to 1.65
    - Added EXCHANGE feature to Sinvestor.pm and some fixes (GH#481)
    - Added EXCHANGE feature to OnVista.pm (GH#480)
    - Added EXCHANGE feature to Consorsbank.pm and some fixes (GH#479)
    - Enabled usage count in Quote.pm
    - Removed DWS.pm
    - Improved check that dividend yield is a number in YahooJSON.pm by adding
      regex anchors
    - Added ssl_opts to user agent in Union.pm to account for bad certificate
      chain (GH#482)
    - Added ETFs search, more labels and EXCHANGE feature to Comdirect.pm (GH#478)
    - GoogleWeb: Add support for Hong Kong Exchange (GH#476)
    - YahooJSON: Adjust other currency fields when data is returned in GBp, ZAc,
      or ILA
    - Added labels wkn, ìsin, close, ask, bid, p_change, time to OnVista.pm
    - Modified OnVista.pm to enable search by ISIN and WKN and search for ETFs
    - Added methodinfo hash to Tradegate.pm (GH#465)
    - Added labels isin, open, ask, bid, time to Tradegate.pm (GH#465)
    - Fixed Tradegate.pm - Search for ETFs (GH#465)
    - Removed MorningstarAU (GH#405)
    - Fixed malformed character in YahooWeb.pm (GH#468)
    - Changed useragent in YahooJSON.pm (GH#467)
    - Added methodinfo hash to AEX.pm (GH#466)
    - Added labels exchange, close, time to AEX.pm (GH#466)
    - Fixed XETRA.pm (GH#460)
    - Added methodinfo hash to Fool.pm
    - Fixed MorningstarJP.pm (GH#443, GH#451)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.6600-1
changelog:
  - Update to 1.66
    - Modified CurrencyRates/CurrencyFreaks.pm to return from and to values
      instead of calculated rate
    - Removed Bloomberg.pm, Tiaacref.pm, Troweprice.pm
    - AlphaVantage: Return 'symbol not found' when no price data is returned
    - ASX: Changed error message when symbol isn't found (GH#497)
    - Added a new module to fetch the fund NAV from CMBChina (GH#494)
    - Added Cookie Jar to Comdirect user agent (GH#491)
    - Removed HU.pm, Oslobors.pm, and SEB.pm (GH#490)


author: Paul Howarth <paul@city-fan.org> - 1.6700-1
changelog:
  - Update to 1.67
    - Fixed ASEGR.pm; web site redesigned, URL used for data was no longer
      working (GH#509)
    - Fixed TesouroDireto.pm using Tesouro Transparente as data source (GH#527)
    - Added a new module to fetch data from SwissFundData (GH#515)
    - Handle no trade date in BorsaItaliana.pm (GH#528)
    - Added methodinfo() to MarketWatch.pm and BorsaItaliana.pm
    - Fixed MorningstarCH.pm
    - Fixed MorningstarUK.pm
  - Package new CONTRIBUTING.md file


author: Paul Howarth <paul@city-fan.org> - 1.6800-1
changelog:
  - Update to 1.68
    - Changes to AlphaVantage.pm and CurrencyRates/AlphaVantage.pm to throttle
      queries (GH#546)
    - YahooJSON.pm: Add additional fields/labels (GH#544)
    - New module USBonds.pm
    - MarketWatch.pm: Added headers to fix 401 code (GH#542)
    - Modified AEX.pm to return no data available if currency indicator is '%'
      (bonds return percentage of par/facevalue) (GH#539)
    - Fixed YahooWeb.pm (GH#533, GH#538)
    - Removed CMBChina.pm - no longer working (GH#534)
    - Rewrote Union.pm for URL that returns JSON (GH#516)
    - Modified parsing in BVB.pm (GH#513)


author: Paul Howarth <paul@city-fan.org> - 1.6900-1
changelog:
  - Update to 1.69
    - Sinvestor.pm: Trim whitespace before parsing date and price
    - XETRA.pm: Trim whitespace from date-time before extracting the actual date
      value (GH#557)
    - Modified Stooq.pm to send cookies
      - Stooq requires European visitors to their website to accept cookies
      - Cookies are set using JavaScript
      - Current version of module hard codes these cookies gleaned from a browser
        session
      - Added CurrencyRates/TwelveData.pm


author: Paul Howarth <paul@city-fan.org> - 1.7000-1
changelog:
  - Update to 1.70
    - New module Finnhub.pm: Fetches quotes from https://finnhub.io using a free
      personal-use API key
    - GoogleWeb.pm: Adapt to the redesigned Google Finance site
    - Tradegate.pm: Remove explicit "our $VERSION" assignment that collided with
      the dzil-injected version, producing a duplicate declaration and an
      "our variable $VERSION redeclared" warning; use a bare # VERSION
      marker like the other modules
    - Tradegate.pm: Trim whitespace before parsing date and time
    - Added CurrencyRates/Frankfurter
    - Removed AEX.pm: Euronext.com added JavaScript based anti-webscraping
    - Added CurrencyRates/UniRate.pm


author: Paul Howarth <paul@city-fan.org> - 1.7100-1
changelog:
  - Update to 1.71
    - NZX.pm: Fixed JSON mapping (GH#586)
    - IndiaMutual.pm: Update AMFI NAV file parsing to 8-column format with Plan
      and Option fields (GH#584)
    - Removed MorningstarCH.pm (GH#582)
    - Removed MorningstarUK.pm (GH#579)
    - IndiaMutual.pm: Add support for SIF quotes from AMFI (GH#580)
    - FTfunds.pm: Added useragent, cloned from BVB.pm (GH#577)


author: Paul Howarth <paul@city-fan.org> - 1.896-1
changelog:
  - Update to 1.896 (rhbz#2291411)
    - Weaken internal core MCE reference to reap workers automatically upon
      leaving the scope i.e. omitting shutdown
      - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
      - Call finish explicitly to reap workers
      - This resolves the case when omitting calling $mce->run(), $mce->run(1) or
        $mce->shutdown() inside a scope, causing workers to linger around until
        completion of the script


author: Paul Howarth <paul@city-fan.org> - 1.897-1
changelog:
  - Update to 1.897
    - In scalar context, the init function in MCE Child and models Flow, Grep,
      Loop, Map, Step, and Stream returns a guard to call finish automatically
      upon leaving the { scope } (i.e. omitting finish)
    - Add out_iter_callback to MCE::Candy


author: Paul Howarth <paul@city-fan.org> - 1.898-1
changelog:
  - Update to 1.898 (rhbz#2307114)
    - Fix for MCE::Child, Can't call method "len" on an undefined value
      during global destruction (GH#22)


author: Paul Howarth <paul@city-fan.org> - 2.28-1
changelog:
  - Update to 2.28
    Fixes:
    - Some 'deprecated' texts made it to types.db
    Improvements:
    - text/ecmascript RFC9239
    - Default charsets according to RFC6657
    - Update reference to specs RFC6838 and RFC9694
    - IANA updates
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.29-1
changelog:
  - Update to 2.29
    - Require 5.16 (2012)
    - Remove xt/98perl.t
    - ::Type->defaultCharset()
    - Remove use of bareword filehandle
    - IANA updates


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.006000-1
changelog:
  - Update to 2.006000.
  - Reflect perl(Reply::Plugin) having been added to Fedora.
  - Remove references to perl-Type-Tie.


author: Aaron Rainbolt <arraybolt@fedoraproject.org> - 1:1.9.0-33
changelog:
  - Set minimum CMake version to 3.5 (rhbz#2381472)
  - Set non-standard CMake variables back to expected values (rhbz#2381665)
  - Migrate InstallMgr test to tmt framework (rhbz#2383081)


author: Remi Collet <remi@remirepo.net> - 8.3.0-1
changelog:
  - update to 8.3.0
  - re-license spec file to CECILL-2.1
  - fix build with old libip2location using patch from
    https://github.com/chrislim2888/IP2Location-PECL-Extension/pull/25


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 14.1.10-1
changelog:
  - update to 14.1.10
  - raise dependency on sebastian/environment 9.3.2
  - raise dependency on sebastian/lines-of-code 5.0.1


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.2
  - raise dependency on sebastian/recursion-context 6
  - rename to php-sebastian-exporter6
  - move to /usr/share/php/SebastianBergmann/Exporter6


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-recursion-context6
  - move to /usr/share/php/SebastianBergmann/RecursionContext6


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-recursion-context7
  - move to /usr/share/php/SebastianBergmann/RecursionContext7


author: Remi Collet <remi@remirepo.net> - 5.0.0-1
changelog:
  - update to 5.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-type5
  - move to /usr/share/php/SebastianBergmann/Type5


author: Remi Collet <remi@remirepo.net> - 2.0.1-1
changelog:
  - update to 2.0.1
  - move to /usr/share/php/Yoast/PHPUnitPolyfills2
  - raise dependency on PHP 5.6
  - drop phpunit7, add phpunit10


author: Remi Collet <remi@remirepo.net> - 11.0.0-1
changelog:
  - update to 11.0.0
  - raise dependency on phpunit/phpunit 12.0
  - raise dependency on phpunit/php-code-coverage 12
  - raise dependency on phpunit/php-file-iterator 6
  - raise dependency on sebastian/cli-parser 4
  - raise dependency on sebastian/diff 7
  - raise dependency on sebastian/version 6


author: Remi Collet <remi@remirepo.net> - 11.0.1-1
changelog:
  - update to 11.0.1 (no change)
  - raise dependency on phpunit/phpunit 12.1.6
  - raise dependency on phpunit/php-code-coverage 12.3


author: Remi Collet <remi@remirepo.net> - 11.0.2-1
changelog:
  - update to 11.0.2 (no change)
  - raise dependency on phpunit/phpunit 12.3.7
  - raise dependency on phpunit/php-code-coverage 12.3.6


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.19.6-13
changelog:
  - Temporarily use GCC 14 to workaround FTBFS on i686 and s390x
  - Don’t build Python extension with C++ on Python 3.14+


author: Pavel Raiskup <praiskup@redhat.com> 1.26-1
changelog:
  - dnf5 compat: Use file:// in baseurls explicitly
  - pair_srpm_rpm: migrate to DNF5, keep DNF4 backward compat
  - pair_srpm_rpm: use a correct specifier for logging strings


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.13.0-1
changelog:
  - phase/kiwi, phase/image-builder: xorrisofs (cmdr)
  - phase/kiwi, phase/image-builder: iso fields (cmdr)
  - imagebuilder,kiwibuild: fix failable wildcard arch expansion (lsedlar)
  - Improve Koji task ID discovery and logging (awilliam)
  - phases/buildinstall: remove unused non-lorax paths (awilliam)
  - Correct ostree_installer phase name in log messages (awilliam)
  - phase/imagebuilder: failable arches fix (cmdr)
  - Move image sanity checks from test phase to image-generating phases (lsedlar)
  - Update phase diagram (lsedlar)
  - Remove OSBS and ImageContainer phases (awilliam)
  - Drop size check for ISOs (lsedlar)
  - Support list of URLs for rpm_repo_mapping (hlin)
  - docs: modernize Sphinx conf.py (hlin)
  - kiwi: also include subvariant in failure logging (awilliam)
  - kiwi: include image profile in global logs and watch-task filenames
    (awilliam)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.14.0-1
changelog:
  - Add support for building boot.iso via image-builder and kiwibuild (supakeen)
  - phase/imagebuilder: vhd-compressed mapping (cmdr)


author: Michael J Gruber <mjg@fedoraproject.org> - 3.59-1
changelog:
  - Upgrade to version 3.59 (rhbz#2302675)
  - core: strip whitespaces from OUTPUT, OUTPUT_PART events
  - external_script module: fix clicking on parts of message
  - mpris module: fix kdeconnect interaction


author: Michael J Gruber <mjg@fedoraproject.org> - 3.60-1
changelog:
  - Upgrade to version 3.60 (rhbz#2321559)
  - external_script module: add composite placeholder
  - playerctl module: hide non-can-play players and use chrome and chromium
    as default value


author: Michael J Gruber <mjg@fedoraproject.org> - 3.61-1
changelog:
  - Upgrade to version 3.61 (rhbz#2330535)
  - argparsers: pgrep i3 with shmlog
  - modules: fix SyntaxWarning for python 3.12+
  - conky module: fix tempfile and ignore new output
  - mpris module: hide all non can_play players
  - playerctl module: gi.require_version notification fix


author: Michael J Gruber <mjg@fedoraproject.org> - 3.62-1
changelog:
  - Upgrade to version 3.62 (rhbz#2368349)
  - py3: add new helper: get_replacements_list
  - conky module: add fallback delete parameter for py3.11 or less
  - external_script module: adjust how urgent is specified
  - external_script module: allow scripts to specify urgent
  - mpris module: implement track number support
  - mpris module: use new helper: get_replacements_list
  - various fixes


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Adam Williamson <awilliam@redhat.com> - 1.0.3-16
changelog:
  - Backport #1964 (partial) and #2361 (rebased) to fix build with Python 3.14
  - Rebuilt for Python 3.14


author: Adam Williamson <awilliam@redhat.com> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - Drop patches merged upstream
  - Backport more patches to fix build/tests and a FICS bug with Python 3.13+


author: Brian C. Lane <bcl@redhat.com> - 3.63-1
changelog:
  - Do not remove "md" prefix from RAID names (vtrefny)
  - Add Fedora 43 support (bcl)
  - workflows: Switch to ubuntu-latest (bcl)
  - Update formatting of certificate section documentation (rvykydal)
  - Update %certificate documentation with not about bundles (rvykydal)
  - Fix formatting of %certificate documentation example (rvykydal)
  - Update %certificate section documentation (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.64-1
changelog:
  - workflow: Add python 3.13 testing (bcl)
  - tests: Remove unused import of constants (bcl)
  - realm: Clean up documentation (bcl)
  - Add support for new bootc kickstart command (ppolawsk)
  - Update documentation for clearpart --initlabel option. (rvykydal)
  - Update the %certificate section documentation (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.65-1
changelog:
  - workflows: Add python 3.14 to the test matrix (bcl)
  - Add support for RDP (jkonecny)
  - Deprecate VNC (jkonecny)
  - docs: Fix chapter numbering after adding certificate (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.66-1
changelog:
  - workflows: Use py3.14 beta.4 (bcl)
  - pylint: Ignore files in .git (bcl)
  - pyproject: Bump setuptools to 77 or later (bcl)
  - Makefile: Stop running setup.py directly (bcl)


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.0.6-1
changelog:
  - Update to latest upstream release (closes rhbz#2338907)
  - Fix CVE-2025-24359 (closes rhbz#2341976)


author: Sandro <devel@penguinpee.nl> - 1.6.2-8
changelog:
  - Apply patches for Python 3.13 (RHBZ#2276611)
  - Drop dependency on future
  - Fix indentation in docstring


author: Sandro <devel@penguinpee.nl> - 1.7.0-1
changelog:
  - Update to 1.7.0 (RHBZ#2307372)
  - Drop patches (merged upstream)
  - Use tag instead of commit (releases are tagged now)


author: Sandro <devel@penguinpee.nl> - 1.8.0-1
changelog:
  - Update to 1.8.0 (RHBZ#2364087)
  - Add 'scipy' extra
  - Read dependencies from defined extras
  - Add tutorial to docs


author: Miro Hrončok <miro@hroncok.cz> - 1.2.6-30
changelog:
  - Replace nose test-framework functionality with pytest
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Scott K Logan <logans@cottsay.net> - 3.0-19
changelog:
  - Add proposed patch to unblock Python 3.14 builds (rhbz#2328004)
  - Switch to pyproject build macros (rhbz#2377504)


author: Scott K Logan <logans@cottsay.net> - 1.1.0-1
changelog:
  - Update to 1.1.0 (rhbz#2394423)
  - Replace macro use in URL/Source0 fields for spec legibility
  - Move doc subpackage after python3 so %{summary} resolves correctly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 15.0.1-9
changelog:
  - Rebuilt for Python 3.13 (close RHBZ#2291652)
  - Applied a simple patch for 'pipes' module removal in Python 3.13


author: Scott K Logan <logans@cottsay.net> - 15.0.1-12
changelog:
  - Add missing BuildRequires: /usr/bin/script (rhbz#2341136)
  - Switch to pyproject build macros (rhbz#2377563)


author: Miro Hrončok <miro@hroncok.cz> - 1.4.1-8
changelog:
  - Remove unused BuildRequires for deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Michel Lind <salimma@fedoraproject.org> - 25.1-1
changelog:
  - Update to 25.1; Resolves: RHBZ#2239310
  - This fixes building with Python 3.14; Resolves: RHBZ#2336944
  - Modernize packaging; Resolves: RHBZ#2377642
  - Re-enable tests
  - Update automatically converted SPDX license; this is BSD-3-Clause


author: Benjamin A. Beasley <code@musicinmybrain.net> - 10.0-12
changelog:
  - Patch for pipes module removal in Python 3.13 (fix RHBZ#2245647)
  - At least do an import-only check when tests are disabled
  - Fix and re-enable the tests
  - Add a bootstrap conditional


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.2-5
changelog:
  - Drop unused test dependency on deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Jason Montleon <jmontleo@redhat.com 1:30.1.0-5
changelog:
  - Fix fail to install for tests sub-package for EPEL 9.
  - BZ #2314125 will fully resolve FTI on EPEL 10.


author: Miro Hrončok <mhroncok@redhat.com> - 1:31.0.0-2
changelog:
  - Remove unused tests Requires
  - https://fedoraproject.org/wiki/Changes/DeprecateNose
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonMock


author: Jerry James <loganjerry@gmail.com> - 3.0.1-1
changelog:
  - Version 3.0.1
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patch for python 3.13 support


author: Jerry James <loganjerry@gmail.com> - 1.3.0-7
changelog:
  - Restore the doc subpackage
  - Minimize the LaTeX dependencies
  - Use modern python macros
  - Migrate License field to SPDX
  - Package the gmpy2 extra
  - Minor spec file cleanups


author: Joel Capitao <jcapitao@redhat.com> 5.6.0-2
changelog:
  - Use \
  TOX_TESTENV_PASSENV="${TOX_TESTENV_PASSENV:-*}" \
  \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    PATH="/builddir/build/BUILD/python-oslo-context-5.7.0-build/BUILDROOT/usr/bin:$PATH"\
    PYTHONPATH="${PYTHONPATH:-/builddir/build/BUILD/python-oslo-context-5.7.0-build/BUILDROOT/usr/lib64/python3.14/site-packages:/builddir/build/BUILD/python-oslo-context-5.7.0-build/BUILDROOT/usr/lib/python3.14/site-packages}"\
    PYTHONDONTWRITEBYTECODE=1\
    PYTEST_ADDOPTS="${PYTEST_ADDOPTS:-} --ignore=/builddir/build/BUILD/python-oslo-context-5.7.0-build/.pyproject-builddir"\
    PYTEST_XDIST_AUTO_NUM_WORKERS="${PYTEST_XDIST_AUTO_NUM_WORKERS:-8}" \
  HOSTNAME="rpmbuild" \
  /usr/bin/python3 -m tox --current-env --assert-config -q --recreate -e "py314" macro


author: Paul Howarth <paul@city-fan.org> - 3.4.0-6
changelog:
  - Fix detection of SHA1 signing support
    https://github.com/paramiko/paramiko/pull/2420
    https://github.com/pyca/cryptography/issues/11332
    https://github.com/PyO3/pyo3/issues/3059
  - Remove cache Sphinx build folder ".doctrees"


author: Paul Howarth <paul@city-fan.org> - 3.4.1-1
changelog:
  - Update to 3.4.1
    - Massage our import of the TripleDES cipher to support Cryptography ≥ 43;
      this should prevent 'CryptographyDeprecationWarning' from appearing upon
      import (GH#2419, GH#2421)
    - Modify a test-harness skiptest check to work with newer versions of
      Cryptography (GH#2420)
    - Fix a 64-bit-ism in the test suite so the tests don't encounter a false
      negative on 32-bit systems (GH#2353)


author: Paul Howarth <paul@city-fan.org> - 3.5.0-1
changelog:
  - Update to 3.5.0 (rhbz#2312503)
    - Add support for AES-GCM encryption ciphers (128 and 256 bit variants)
      (GH#982, GH#2157, GH#2444, rhbz#2311855); this functionality has been
      tested in client mode against OpenSSH 9.0, 9.2 and 9.6, as well as against
      a number of proprietary appliance SSH servers
    - Check for 'None' transport members inside '~paramiko.channel.Channel' when
      closing the channel; this likely doesn't come up much in the real world,
      but was causing warnings in the test suite


author: Paul Howarth <paul@city-fan.org> - 3.5.1-1
changelog:
  - Update to 3.5.1 (rhbz#2343673)
    - Private key material is now explicitly 'unpadded' during decryption,
      removing a reliance on some lax OpenSSL behavior and making us compatible
      with future Cryptography releases (GH#2490)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.26-2
changelog:
  - Add a weak dependency on python3-jsonschema
  - Remove testing workaround for formerly-missing JSON schema file


author: Jerry James <loganjerry@gmail.com> - 0.25.1-1
changelog:
  - Version 0.25.1
  - Use the pyproject declarative buildsystem
  - Drop all patches
  - Drop pkg_resources workaround


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-2
changelog:
  - add python3-pyliblo3 subpackage
  - move 'Obsoletes:' tag to python3-pyliblo3 subpackage
  - move doc subpackage after the python3-pyliblo3 subpackage
  - remove 'Recommends:' tag 
  - rename python-pyliblo3 to python3-pyliblo3
  - remove macro %{modname} for better readability


author: Jerry James <loganjerry@gmail.com> - 4.9.1-1
changelog:
  - Version 4.9.1
  - Fixes CVE-2024-21506 (rhbz#2273860)
  - Fixes CVE-2024-5629 (rhbz#2290587)
  - Modernize the spec file
  - Fix up the license information
  - Add check script
  - Package the ocsp, snappy, and zstd extras
  - Build docs for Fedora only
  - Permit use of pytest-asyncio 0.23 until Fedora can catch up


author: Scott K Logan <logans@cottsay.net> - 0.26.0-1
changelog:
  - Update to 0.26.0 (rhbz#2307470)
  - Switch to pyproject build macros (rhbz#2378179)
  - Add patch for sphinx 8 compatibility (rhbz#2329891)
  - Review SPDX licensing


author: Scott K Logan <logans@cottsay.net> - 1.6.0-1
changelog:
  - Update to 1.6.0 (rhbz#2342035)
  - Drop spec file support for RHEL 7
  - Review SPDX licensing
  - Fix summary on Python 3 subpackage


author: Carl George <carlwgeorge@fedoraproject.org> - 24.2.0-1
changelog:
  - Update to version 24.2.0 rhbz#2258307
  - Remove hatch-fancy-pypi-readme build-system dependency
  - Disable docs when building for RHEL (EPEL)


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - jquery and underscore are no longer installed
  - Assert that a license file is installed


author: Orion Poplawski <orion@nwra.com> - 5.0-6
changelog:
  - Rebuild without bootstrop (rhbz#2314522)
  - Add upstream fix for doc build with sphinx 8.x (rhbz#2329899)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.48-1
changelog:
  - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4,
    fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.55-1
changelog:
  - Update to 3.1.55: Fixes GHSA-2f96-g7mh-g2hx, GHSA-v396-v7q4-x2qj,
    GHSA-956x-8gvw-wg5v, GHSA-rwj8-pgh3-r573, GHSA-3rp5-jjmw-4wv2,
    GHSA-r9mr-m37c-5fr3, GHSA-fjr4-x663-mwxc, GHSA-6p8h-3wgx-97gf, and
    GHSA-94p4-4cq8-9g67


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.59-1
changelog:
  - Update to 3.1.59 (close RHBZ#2499503)
  - Fixes GHSA-5xxx-qhh7-9287, GHSA-3wxw-xv34-2frg, GHSA-8mcc-hrx5-hvxc,
    GHSA-284h-m62q-gf8w, GHSA-7833-fr7j-v32q, GHSA-hh9p-6wh2-4mfc,
    GHSA-9rj7-rf2p-w77r, GHSA-4gmw-gg2m-w46p, GHSA-wvpp-8hx9-p66j,
    GHSA-jm78-9fvv-mhgr, GHSA-hmq2-w58f-27jc, GHSA-3f7w-8rr8-f37f,
    GHSA-539m-9xh6-q6rr, and GHSA-p538-c434-8v24


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.60-1
changelog:
  - Update to 3.1.60; close RHBZ#2523750
  - Fixes GHSA-g5vv-9gxw-82hx, GHSA-whh4-5q6c-9v3x, and GHSA-239g-whfq-7xj9


author: Sandro <devel@penguinpee.nl> - 1.4.0-1
changelog:
  - Update to 1.4.0 (RHBZ#2348983)
  - Remove conditionals for EOL release
  - Review and update versions of bundled fonts
  - Drop dependency on `fontawesome4-fonts-web`


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-1
changelog:
  - Update to version 1.12
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )
  - Rebuilt for Python 3.14.0rc2+ bytecode (resolves rhbz#2388850)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.0-1
changelog:
  - Update to 2.0.0 (close RHBZ#2527402)
  - An agent-detector command-line tool is added; this is backwards-
    compatible with 1.x releases.


author: Parag Nemade <pnemade AT redhat DOT com> - 2.6.0-1
changelog:
  - Update to 2.6.0 version (#2307515)
  - Use pyproject macros
  - Drop python2 subpackage as its not compatible with new python packaging


author: Adam Williamson <awilliam@redhat.com> - 2.4.0-2
changelog:
  - Backport PR #1377 to fix tests with Python 3.13
  - Run tests with -n auto to avoid hang (GH #1369)
  - Rebuilt for Python 3.13


author: Carl George <carlwgeorge@fedoraproject.org> - 3.50.2.0-1
changelog:
  - Update to version 3.50.2.0
  - Port to pyproject macros rhbz#2377454
  - Add upstream patch to avoid segfault during tests


author: Lumír Balhar <lbalhar@redhat.com> - 5.0.1-2
changelog:
  - Deprecate python3-async-timeout
  https://fedoraproject.org/wiki/Changes/DeprecatePythonAsyncTimeout


author: Carl George <carlwgeorge@fedoraproject.org> - 0.5.17-1
changelog:
  - Update to version 0.5.17 rhbz#2333482
  - Add missing click dependency
  - Avoid duplicate LICENSE.txt file


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 1.1.0~b1-2
changelog:
  - Apply suggested changes from package review
  - Add -l to the %pyproject_save_files macro to enforce the license is
    installed
  - Drop the note about Python 3.8 from the description


author: Scott K Logan <logans@cottsay.net> - 4.1.4-1
changelog:
  - Update to 4.1.4 (rhbz#2143436)
  - Define _description variable to reduce duplication
  - Drop macro from URL to improve ergonomics
  - Use modern Python packaging macros


author: Miro Hrončok <mhroncok@redhat.com> - 2.49.0-24
changelog:
  - Remove unused test BuildRequires
  - https://fedoraproject.org/wiki/Changes/DeprecateNose
  - Run a very basic import check during the build


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 2.3.1-0.1.20230409gitcda5072
changelog:
  - Update BuildRequires to python3-cryptography (RHBZ#2061786)
  - Update to 2.3.1 prerelease with support for python3-cryptography


author: Miro Hrončok <miro@hroncok.cz> - 1.3.0-3
changelog:
  - Fedora ELN: Build python3-build+virtualenv package
  - Fixes: https://github.com/fedora-eln/eln/issues/309


author: Adam Williamson <awilliam@redhat.com> - 1.6.22-6
changelog:
  - Backport PR #111 to handle changed ntpath.isabs in Python 3.13 (#2259550)
  - Rebuilt for Python 3.13


author: Miro Hrončok <miro@hroncok.cz> - 2024.08.30-4
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337319


author: Brian C. Lane <bcl@redhat.com> - 4.0.1-1
changelog:
  - Update to new upstream version 4.0.1
  - Update spec to use pyproject_ macros
  - Drop html docs, generation with sphinx no longer works
  - Use docopt-ng on Fedora


author: Paul Howarth <paul@city-fan.org> - 2.6.1-56
changelog:
  - Stop using deprecated %py3_build/%py3_install macros (rhbz#2377592)
  - Drop support for building for multiple Python versions


author: Carl George <carlwgeorge@fedoraproject.org> - 1.6^1.1484546-1
changelog:
  - Update to latest upstream snapshot
  - Resolves Python 3.13 build error rhbz#2246053
  - Switch to SPDX license notation


author: Miro Hrončok <miro@hroncok.cz> - 3.0.11-5
changelog:
  - Avoid accidentally including bogus *.txt files as documentation
  - Include README.rst and CHANGES.rst instead


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.2.3-17
changelog:
  - Fix build with pytest-asyncio 1.x
  - Address future deprecations
  - Convert to pyproject macros (rhbz#2377610)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Michel Lind <salimma@fedoraproject.org> - 1.0.6-1
changelog:
  - Update to version 1.0.6
  - Modernize to follow the latest Python packaging guidelines
  - Generate extras subpackages
  - Enable import checks
  - Run unit tests
  - Use proper SPDX license identifier (zlib -> Zlib)
  - Enable Packit for future Rawhide updates


author: Michel Lind <salimma@fedoraproject.org> - 1.1.8-1
changelog:
  - Update to 1.1.8 upstream release
  - Add conditional BR on openssl to run some tests
  - Remove unneeded `upstream_project_url` from packit.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 4.1.2-1
changelog:
  - Update to 4.1.2
  - snapper: Add support for specifying snapper config name (RhBug:2089544)
  - rpmconf: Implement unattended config option


author: Carl George <carlwgeorge@fedoraproject.org> - 0.9.0-1
changelog:
  - Switch to docopt-ng upstream rhbz#2267060
  - Convert to pyproject macros
  - Confirmed SPDX license identifier


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.2.0-7
changelog:
  - Completely modernize (and greatly simplify) the packaging
  - Use pyproject-rpm-macros (fix RHBZ#2377674)
  - Package from the GitHub archive instead of the PyPI sdist
  - Run the tests
  - Use the provisional pyproject declarative buildsystem


author: Jos de Kloe <josdekloe@gmail.com> 2.45.0-1
changelog:
  - move to upstream release 2.45.0
   (skipped version 2.44.0 due to bug https://github.com/ecmwf/eccodes-python/issues/145)


author: Michel Lind <salimma@fedoraproject.org> - 9.0.4-9
changelog:
  - Replace mock with unittest.mock
  - Use bcond to toggle tests and gate test BRs but keep them disabled for now


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-6
changelog:
  - Use XWayland to run the graphical tests
  - Accurately categorize skipped tests, and re-enable a few.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.0~20231031git5aea0fd-1
changelog:
  - Update to a pre-release snapshot of 0.5.0
  - Update to current packaging standards, with pyproject-rpm-macros
  - Run the tests (with a few unexplained failures)


author: Steve Traylen <steve.traylen@cern.ch> - 0.5-1
changelog:
  - Update to 0.5 release - rhbz#1595860
  - Run tests with pytest macro - rhbz#2319655
  - Correct autogenerated license field
  - Switch source to github URL


author: Ondřej Pohořelský <opohorel@redhat.com> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Migrated to new python packaging guidelines
  - Resolves: rhbz#2377697, rhbz#2377047


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Drop bodhi-client dependency (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - Show how to get only version numbers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.3-1
changelog:
  - Make sure everything behaves correctly during the branching window
    (frostyx@email.cz)
  - Add releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.5-1
changelog:
  - Implement a caching mechanism (frostyx@email.cz)
  - Return bodhi releases as simple dicts (frostyx@email.cz)
  - Add CLI (mfocko@redhat.com)
  - Use pagination for bodhi's API (carlwgeorge@gmail.com)
  - Combine HTTP calls in bodhi_active_releases (carlwgeorge@gmail.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.7-1
changelog:
  - Exclude archived releases (nforro@redhat.com)
  - Generate aliases for minor versions of EPEL (nforro@redhat.com)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.19.2-1
changelog:
  - Version 0.19.2 (rhbz#2355107)
  - Just two small changes related to unexpected AttributeError thrown by the
    code.


author: Michel Lind <salimma@fedoraproject.org> - 5.1.0-1
changelog:
  - Update to version 5.1.0; Resolves: rhbz#2319659
  - Modernize spec for the latest packaging guidelines


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-35
changelog:
  - Drop unneeded BuildRequires for python3-spec and python3-nose, use unittest
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.4.16-12
changelog:
  - Remove obsolete test skip (regression was fixed in Python 3.12.1)
  - Report and skip regressions related to URL formation in Python 3.14;
    fixes RHBZ#2336951


author: Miro Hrončok <miro@hroncok.cz> - 0.3.2-2
changelog:
  - Do not attempt to generate test requirements using tox, there is no tox
    configuration
  - Fixes: rhbz#2354142


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.3.1-33
changelog:
  - F41+: Use the provisional pyproject declarative buildsystem
  - Since this is only for F41+, drop EPEL conditionals
  - Always run an import-only smoke test; add a bcond vtk_dep for optionally
    including VTK integration modules in this


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.4.0-1
changelog:
  - Update to 5.4.0 (close RHBZ#2368139)
  - Drop the plotly dependency from the “vis” extra until the python-plotly
    package can be updated


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.4.1-2
changelog:
  - Assert that the .dist-info directory contains a license file
  - Since AUTHORS is packaged as a license file in .dist-info too, don’t
    package a separate, duplicate copy of it


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.0-1
changelog:
  - Update to 4.0.0 (close RHBZ#2341728)
  - Remove conditionals for Fedora 40, since this version will never ship
    there
  - Print reasons for skipped tests


author: Carl George <carlwgeorge@fedoraproject.org> - 1.0.8-1
changelog:
  - Update to version 1.0.8 rhbz#2359117
  - Fix Python 3.14 AttributeError rhbz#2353138
  - Enable tests on EPEL


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.1-7
changelog:
  - Do not spuriously attempt to generate BuildRequires from tox
    (fix RHBZ#2354110)
  - Add an import-only smoke test, and document why we cannot run tests
  - Fix missing license file
  - Remove language about Python 3 in the description, left over from when we
    also had Python 2


author: Miroslav Suchý <msuchy@redhat.com> 2.4.1-1
changelog:
  - remove python2 code
  - spec: generate only python3 package
  - use SPDX identifier for license
  - add PCI subsystem support (jussi.kuokkanen@protonmail.com)


author: Steve Traylen <steve.traylen@cern.ch> - 1.48.0-4
changelog:
  - Create sub packages for ciso, async and extra
  - Stop running non-existent tox testing
  - Relax some strong versionion of dependencies


author: Miro Hrončok <miro@hroncok.cz> - 8.37.0-11
changelog:
  - Remove -s from ipython's shebang
  - Allows ipython to see user-installed packages
  - Fixes: rhbz#2404039


author: Sandro <devel@penguinpee.nl> - 1.1.1-1
changelog:
  - New package: python-ipython-pygments-lexers
  - Defines a variety of Pygments lexers for highlighting IPython code
  - Close RHBZ#2352575


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-13
changelog:
  - Use pytest instead of nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose
  - Use a proper SPDX License tag


author: Ondrej Mosnáček <omosnacek@gmail.com> - 4.0.0-2
changelog:
  - Fix the install command to comply with guidelines
  - Use %{pyproject_[save_]files}
  - Fix EPEL9 build


author: Björn Esser <besser82@fedoraproject.org> - 0.2.4-30
changelog:
  - Run unittests directly
    Fixes: rhbz#2319667
  - Modernize spec-file
  - Add patch to fix setuptool warnings


author: Göran Uddeborg <goeran@uddeborg.se> - 0.9.0-1
changelog:
  - Upgrade to version 0.9.0 rhbz#2348855
  - Replaces the previous workaround for Python 3.14 rhbz#2327982


author: Sudip Shil <sshil@redhat.com> - 1.0.9-12
changelog:
  - Migrate to %pyproject_* macros and remove deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /install


author: Miro Hrončok <miro@hroncok.cz> - 1.1.9-3
changelog:
  - Stop providing the legacy lark-parser Python package metadata
  - python3-lark-parser is still Provided+Obsoleted on the RPM level


author: Carl George <carlwgeorge@fedoraproject.org> - 2.9.1-10
changelog:
  - Update license tag to LGPL-3.0-or-later
  - Remove duplicate COPYING.LESSER.txt license file
  - Run an import check and the upstream test suite in %check


author: Paul Howarth <paul@city-fan.org> - 3.0.0-1
changelog:
  - Update to 3.0.0
    - Dropped support for Python <3.9
    - Modernized project metadata re: Python interpreters, development


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.3-1
changelog:
  - Version 5.3 (rhbz#2352617)
  - Upstream release notes suggest only small backward-compatible changes


author: Packit <hello@packit.dev> - 20231020-1
changelog:
  - [packit] 20231020 upstream release
  - Resolves rhbz#2245262 Upstream tag: 20231020 Upstream commit: d31e0d38


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.3-5
changelog:
  - Backport a patch for a DeprecationWarning in Python 3.14
  - As a side effect, we no longer need to patch the tests to work without
    pytest-mypy-plugins.


author: Sandro <devel@penguinpee.nl> - 2.0.0-1
changelog:
  - Update to 2.0.0 (RHBZ#2255304)
  - Changes entry point to `black`.
  - Changes namespace from `pylsp.pylsp_black` to `pylsp.black`.
  - Drop patch in favor of inline patching


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.15.6-3
changelog:
  - Replace spurious/obsolete BuildRequires on python-pytest-runner
  - Depend directly on pytest instead


author: Dan Callaghan <djc@djc.id.au> - 0.3.0-1
changelog:
  - new upstream release 0.3.0:
    https://github.com/matrix-org/matrix-synapse-ldap3/releases/tag/v0.3.0


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.3.0-1
changelog:
  - Update to latest upstream version 1.3.0 (closes rhbz#2219697)
  - Fix rhbz#2219756, rhbz#2261581 and rhbz#2232585


author: Michele Baldessari <michele@acksyn.org> - 0.12.0-6
changelog:
  - Apply patches from v0.12.0 to 6accdc4c4a7fe4d808b674a97fb5474e12621504
  - Also apply PR 73 to avoid python 3.13 breakage (although it will regress on more obscure image formats)


author: Konrad Kleine <kkleine@redhat.com> - 2.6.1-4
changelog:
  - Drop -devel package
  - Everything it included is now part of  the main package
  - The main package obsoletes the -devel package
  - The main package provides the -devel name


author: Dmitry Tantsur <dtantsur@proton.me> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - Use poetry instead of explicit setup.py, switch to new packaging macros
  - Patch out the hardcoded poetry version, we have a much newer one


author: Dmitry Tantsur <dtantsur@proton.me> - 4.4.0-1
changelog:
  - Update to 4.4.0 (fixes #2291789, #2296411)
  - Remove the poetry hack, fixed upstream
  - Downgrade the cffi dependency - the Python 3.13 fix is already here


author: Petr Šplíchal <psplicha@redhat.com> - 1.9.0-1
changelog:
  - Fix initializing version object by a version object (#48)
  - Send cookies with Python 3 as well
  - Rename required package, fix docs building & tests (#46)
  - Do not build and test on `epel-7` anymore
  - Use the `py3_shebang_fix` macro instead of `pathfix.py`
  - Add an explicit config for building readthedocs
  - Include srpm build requirements in Packit config
  - Remove 'enable_net' from Packit config
  - Remove 'metadata' from Packit config
  - Add missing build job(s) to Packit config


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.4-3
changelog:
  - Remove deprecated pytest-runner dependency
  - Since the patch offered upstream introduces a "test" extra, use it
  - Assert that .dist-info contains a license file


author: Sandro <devel@penguinpee.nl> - 2.10.2-1
changelog:
  - Update to 2.10.2
  - Add NumPy 2.x support (since 2.10.0)
  - Drop patches (appear to be no longer required)
  - Close RHBZ#2332471


author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Richard Shaw <hobbes1069@gmail.com> - 1.0.1-40
changelog:
  - Update to use pyproject over deprecated setuptools for builds.
  - Add patch for urlparse as for Python 3 it has been moved to urllib.parse.


author: Stephen Smoogen <ssmoogen@redhat.com> - 0.2.22-1
changelog:
  - Initial package build
  - Get initial review done
  - Upload packages to src.fedoraproject.org
  - Attempt to build.


author: Miro Hrončok <miro@hroncok.cz> - 4.1.0-16
changelog:
  - Drop redundant test BuildRequires on deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Michel Lind <salimma@fedoraproject.org> - 0.5.7-1
changelog:
  - Update to 0.5.7 upstream release
  - Resolves: rhbz#2371010
  - This includes tox.ini; Resolves: rhbz#2354116


author: Adam Williamson <awilliam@redhat.com> - 2.0.2-13
changelog:
  - Backport PR #47 to drop use of (and undeclared dep on) six
  - Backport PR #49 to drop unused footgun pam.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.19.0-11
changelog:
  - Correct the License (and convert to SPDX)
  - Before 1.19.1, the package had an incorrect trove classifier indicating a
    BSD license, but the license file had MIT text; see
    https://github.com/r1chardj0n3s/parse/issues/145.


author: Dan Callaghan <djc@djc.id.au> - 8.13.48-1
changelog:
  - new upstream release 8.13.48:
    https://github.com/daviddrysdale/python-phonenumbers/blob/v8.13.48/python/HISTORY.md


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.24.4-3
changelog:
  - Temporarily omit dask/xarray to build for Python 3.14
  - Disable dask extra until it can be built
  - Disable xarray extra until it can be built, and due to a circular
    dependency
  - Fixes RHBZ#2372030


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.4.5-1
changelog:
  - Starting with Fedora 43, do not build PDF documentation
  - Drop the -doc subpackage (again, starting with Fedora 43)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.24.1-6
changelog:
  - Omit xarray integration tests on F43+
  - Fix RHBZ#2385510 and fix RHBZ#2372034 by working around the failure of
    python-xarray to build and install with Python 3.14.


author: Vojtech Trefny <vtrefny@redhat.com> - 0.25-1
changelog:
  - New version 0.25
  - Remove unneeded IAstroidChecker (bcl)
  - Replace check_messages decorator with only_required_for_messages (bcl)
  - spec: Change license string to the SPDX format required by Fedora
    (vtrefny)


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 1.1-5
changelog:
  - Fix Python 3.12 compatibility (rhbz#2175200, rhbz#2220425)
  - Verify that the License tag is valid SPDX


author: Jerry James <loganjerry@gmail.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Verify the license is valid SPDX
  - Automatically generate python BuildRequires
  - Modernize python RPM macro usage
  - Update description to remove upper bound on graphviz attribute support


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.3.0-2
changelog:
  - Test fix: patch httpretty socket for latest urllib3 release
  - Test fix: work around expired test token
  - Fixes RHBZ#2334702


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.0-14
changelog:
  - Port to pyproject-rpm-macros; drop obsolete practices
  - Start packaging CHANGELOG.md
  - Run an import-only “smoke test”


author: Christian Krause <chkr@fedoraproject.org> - 3.6.9-1
changelog:
  - Update to 3.6.9 (#2267692)
  - Remove example client and server (upstream split the source package)
  - Remove according weak requirements for example tools


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-2
changelog:
  - Stop disabling tests by default
  - Use generated BuildRequires, and prune some obsolete or bogus manual ones
  - Add an import-only smoke test, even when tests are disabled
  - Update the License field to just "MIT"


author: Hirotaka Wakabayashi <hiwkby@yahoo.com> - 2.3.0^20200513git60b6f10-5.20200513git60b6f10
changelog:
  - Requires legacy-cgi as build dependency (Fedora#2245641)
  - Removes python3-cgi dependency ad runtime


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
author:
  Fedora Release Engineering <releng@fedoraproject.org> - 2.3.0^20200513git60b6f10-6.20200513git60b6f10


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
author:
  Fedora Release Engineering <releng@fedoraproject.org> - 2.3.0^20200513git60b6f10-7.20200513git60b6f10


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
author:
  Fedora Release Engineering <releng@fedoraproject.org> - 2.3.0^20200513git60b6f10-9.20200513git60b6f10


author: Jos de Kloe <josdekloe@gmail.com> 3.7.2-1
changelog:
  - Update to 3.7.2; 2 tests are still disabled due to a regression in proj 9.6.2
  - Introduce new style pyproject macros


author: Kevin Fenzi <kevin@scrye.com> - 2.6-1
changelog:
  - Update to 2.6. Fixes rhbz#2326182
  - Moderize spec and check license
  - Fix FTBFS. Fixes rhbz#2319703


author: Fabian Affolter <mail@fabian-affolter.ch> - 0.6.5-1
changelog:
  - Update to latest upstream release (closes rhbz#2354883)
  - Replace py3_build/py3_install (closes rhbz#2378096)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.8.6-5
changelog:
  - Remove spurious/obsolete BuildRequires on python-pytest-runner
  - Add a direct BuildRequires on pytest


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.8-7
changelog:
  - Use tomllib instead of toml (used only in tests)
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Scott K Logan <logans@cottsay.net> - 0.9.3-1
changelog:
  - Update to 0.9.3 (rhbz#2241970)
  - Define _description variable to reduce duplication
  - Drop macro from URL to improve ergonomics
  - Use modern Python packaging macros
  - Switch to SPDX license identifier


author: Michel Lind <salimma@fedoraproject.org> - 4.0-25
changelog:
  - Use `pytest` instead of the removed `setup.py test` for setuptools 74+ compatibility
  - Mark as deprecated


author: Michel Lind <salimma@fedoraproject.org> - 4.0-27
changelog:
  - Link to approved Change Proposal for deprecating python-pytest-runner
  - Also mark python3-pytest-runner subpackage as deprecated


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.8.0-1
changelog:
  - Update to 1.8.0 - Closes rhbz#2319440
  - pyprojectize the spec
  - Drop all patches
  - Remove all unneeded prep changes


author: Scott Talbert <swt@techie.net> - 3.0.0-1
changelog:
  - Update to new upstream release 3.0.0
  - Update License tag to use SPDX identifiers
  - Modernize Python packaging


author: Scott Talbert <swt@techie.net> - 3.0-1
changelog:
  - Update to new upstream release 3.0
  - Update License tag to use SPDX identifiers
  - Modernize Python packaging


author: Packit <hello@packit.dev> - 1.16.6-1
changelog:
  - Update to 1.16.6 upstream release
  - Resolves: rhbz#2275890
  - Splits the examples into a separate subpackage


author: Packit <hello@packit.dev> - 1.17.0-1
changelog:
  - Update to 1.17.0 upstream release
  - Resolves: rhbz#2336120
  - The pyxdf.examples package is renamed to pyxdf.cli; we still package it
    as python3-pyxdf-examples.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.28.0-2
changelog:
  - Restore dependencies that haven't been detected automatically
    (erroneously removed in 0.25.0-3).


author: Peter Bieringer <pb@bieringer.de>
changelog:
  - Add missing requirement InfCloud-fontware to InfCloud
  - Extend SELinux policy for access to /run/systemd/userdb/io.systemd.DynamicUser on start


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.3-11
changelog:
  - Assert that the .dist-info directory contains a license file
  - Do not package a duplicate license file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.4.0-1
changelog:
  - Update to 1.4.0 (close RHBZ#2308262)
  - Re-enable the server_test, which now works properly offline


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 3.0.0-1
changelog:
  - Update to upstream
  - Disable crypt check. Crypt module has been removed from python3.13,
    repoze-who works well without it and therefore this test is useless
  - Use pytest instead of setup.py test


author: David Shea <reallylongword@gmail.com> - 0.3.1-38
changelog:
  - Switch to pyproject macros
  - Remove python2 support
  - Switch to github for the upstream source
  - Run the tests in %check


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.25-6
changelog:
  - rhbz#2378169 Migrating to pyproject macros
  - https://fedoraproject.org/wiki/Changes/DeprecateSetuppyMacros


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.27-1
changelog:
  - New upstream version 1.27
  - Fix serialisation on FIPS enabled system
  - Rebuilt for Python 3.14.0rc3 bytecode


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.0-9
changelog:
  - Don't try to generate build dependencies by tox, there is no tox configuration
  - Fixes: rhbz#2354121


author: Packit <hello@packit.dev> - 0.9.0-1
changelog:
  - Supports recording of the requests done by `httpx` via `record_httpx()` and `recording_httpx()` decorators. (#297)


author: Packit <hello@packit.dev> - 0.9.1-1
changelog:
  - Adjusted `requre-purge` to not replace GitHub tokens with dummy token that
    still looks like a legit one and also case-sensitiveness on the cookies from
    Pagure.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.1-13
changelog:
  - Simplify and reformat the spec file
  - Deconditionalize the tests
  - Stop using the “forge macros,” which don’t contribute much here


author: Pavol Sloboda <psloboda@redhat.com> - 1.00.14-2
changelog:
  - Removed the redundant BuildRequires of mysql-devel I have removed the
    redundant BuildRequires of mysql-devel as it is already uncoditionally
    required by soci-mysql-devel, which is in turn uncoditionally required by
    this package thus being available in the build chroot transitively.


author: Michel Lind <salimma@fedoraproject.org> - 0.4-13
changelog:
  - Switch test runner from tox (which calls setup.py test) to pytest
  - Verify SPDX conversion
  - Update source URL
  - Resolves: rhbz#2319713


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main python package
  - New subpackages: root-graf3d-glad, root-net-curl,
    root-tmva-sofie-parser-python, root-tree-ml, root-histv7util
  - Dropped patches: 2
  - New patches: 7


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-5
changelog:
  - Use the system civetweb library since it now supports web sockets
  - Drop the davix module for Fedora 45+ (davix will soon be retired)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.04-1
changelog:
  - Update to 6.40.04
  - The root-roofit-jsoninterface package was merged with root-roofit-hs3
  - Fix calculation of kerning distances in generated PDF files
  - Dropped patches: 1
  - New patches: 2


author: Miro Hrončok <mhroncok@redhat.com> - 2.4.0-8
changelog:
  - Generate BuildRequires dynamically
  - Drop unneeded build dependency on python3dist(toml)
  - Drop duplicate runtime dependency on python3-dateutil


author: Cristian Le <git@lecris.dev> - 0.10.7-3
changelog:
  - Various simplifications
  - Added `Requires: ninja-build` by default
  - Removed `Suggests` and `Recommends`, these are not likely to be used
  - Removed the test conditional for epel10 since everything will be packaged
  - Removed the `pyproject` subpackage since it's empty and all dependents
    are gone


author: Miro Hrončok <miro@hroncok.cz> - 1.3.0-39
changelog:
  - Convert to modern Python packaging guidelines
  - Stop building the documentation
  - Fixes: rhbz#2319715


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.0-6
changelog:
  - Adapt for fit_params renaming in scikit-learn 1.6 (fix RHBZ#2341213)
  - Since this patch is specific to Fedora 42 and later, remove conditionals
    pertaining to older releases.


author: Matthieu Saulnier <fantom@fedoraproject.org> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - Update URL and SourcesURL tags
  - Remove python3-omemo-backend-signal as BuildRequires


author: Packit <hello@packit.dev> - 1.19.4-1
changelog:
  - Update to 1.19.4 upstream release
  - Resolves: rhbz#2374311
  - Remove upstream’s upper-bound on the version of python-packaging
  - Add bootstrap conditional to break new snakemake circular dep.


author: Cristian Le <git@lecris.dev> - 2.6.0-2
changelog:
  - Fix python build
  - Cleanup the spec file to use %conf
  - Set the python CMAKE_BUILD_TYPE to RelWithDebInfo
  - Made sure the python files do not bundle Spglib
  - Fixed the tmt tests, for now


author: Jerry James <loganjerry@gmail.com> - 1.0.0-1
changelog:
  - Version 1.0.0
  - Use the pyproject declarative buildsystem
  - Stop building documentation, which now requires use of a bundled sphinx
    theme with an unknown license


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-0.24.b2
changelog:
  - Remove patch for compatibility with click 8.2
  - Due to numerous regressions, we are going to revert back to click 8.1.7


author: Dan Callaghan <djc@djc.id.au> - 1.8.1-1
changelog:
  - new upstream release 1.8.1:
    https://sphinxcontrib-httpdomain.readthedocs.io/en/stable/#version-1-8-0


author: Jerry James <loganjerry@gmail.com> - 0.2.4-1
changelog:
  - Version 0.2.4
  - Drop upstreamed patches
  - Remove MIT and Unlicense from the License field
  - Run tests in verbose mode
  - Add LICENSE file


author: Jerry James <loganjerry@gmail.com> - 1.14.0-1
changelog:
  - Version 1.14.0
  - Drop upstreamed tempfile flush patch
  - Add patch to avoid intersphinx_registry
  - Drop workaround for buggy lark on ppc64le
  - Drop examples subpackage


author: Jerry James <loganjerry@gmail.com> - 1.14.0-4
changelog:
  - Make the package noarch again
  - Use the pyproject declarative buildsystem
  - Restrict build to x86_64
  - Remove note about aesara, which has fallen into disrepair


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-1
changelog:
  - Version 2022.0.0
  - Drop unnecessary Werror patch
  - Drop unnecessary python shebang mangling
  - Let pkgconfig specify the version of hwloc to use


author: Jerry James <loganjerry@gmail.com> - 2022.0.0-3
changelog:
  - Add patch to fix linking tbbmalloc with GCC 15
  - Update %giturl for the uxlfoundation change
  - Fix intersphinx_mapping to use local objects.inv


author: Jerry James <loganjerry@gmail.com> - 2022.2.0-1
changelog:
  - Version 2022.2.0
  - Drop the doc subpackage which cannot be built due to missing deps
  - Add patch to disable -fcf-protection=full on non-x86 architectures


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Miroslav Suchý <msuchy@redhat.com> 1.6-1
changelog:
  - remove license classifier from setup.py
  - modernize python macros
  - update license to SPDX in README
  - update license to SPDX in setup.py too


author: Michel Lind <salimma@fedoraproject.org> - 2.7.1-14
changelog:
  - Fix building with Python 3.14; Resolves: RHBZ#2343971
  - Fix building with pygments 2.19.1; Resolves: RHBZ#2350306


author: Jerry James <loganjerry@gmail.com> - 1.0.0-3
changelog:
  - Add upstream patch for python 3.14 compatibility
  - Update License field
  - Use modern python build macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.5.0-4
changelog:
  - Update to 3.5.0 (close RHBZ#2361673)
  - Report and skip brittle integration tests failing with current fonttools;
    fixes RHBZ#2372184


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-1
changelog:
  - Update to 0.17.0 (close RHBZ#2322970)
  - Don’t package a duplicate LICENSE file; assert one is found and handled
  - Add missing extras metpackages


author: Michel Lind <salimma@fedoraproject.org> - 1.4.0-1
changelog:
  - Update to version 1.4.0; Fixes: RHBZ#2386033
  - Modernize packaging; Fixes: RHBZ#2378304
  - Run unit tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.34.0-2
changelog:
  - Build for Python 3.14 (fix RHBZ#2372189)
  - Disable uvloop dep., and therefore the "standard" extra, for now
  - Do not error on warnings, as this is too strict and there are new
    DeprecationWarnings
  - Patch test_loop_auto for Python 3.14


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.30-4
changelog:
  - Disable perl-Coro for rawhide, as this blocks rebuilding
    for perl 5.42 (see https://bugzilla.redhat.com/show_bug.cgi?id=2379448)


author: Sandro <devel@penguinpee.nl> - 3.1.1.post2-1
changelog:
  - Update to 3.1.1.post2
  - Make `pyproject.toml` compatible with `setuptools` >= 69.
  - Fix RHBZ#2259653.


author: Davide Cavalca <dcavalca@fedoraproject.org> - 6.0.0-5
changelog:
  - Relax test dependencies
  - relax version pins
  - drop ruff as it's not actually needed
  - drop eventlet as it's been retired


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-3
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.7.4-35
changelog:
  - Switch from 'setup.py test' to '\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    PATH="/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/bin:$PATH"\
    PYTHONPATH="${PYTHONPATH:-/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/lib64/python3.14/site-packages:/builddir/build/BUILD/python-whoosh-2.7.4-build/BUILDROOT/usr/lib/python3.14/site-packages}"\
    PYTHONDONTWRITEBYTECODE=1\
    \
    PYTEST_XDIST_AUTO_NUM_WORKERS="${PYTEST_XDIST_AUTO_NUM_WORKERS:-8}" /usr/bin/pytest'
  - Resolves: rhbz#2319736


author: Dan Callaghan <djc@djc.id.au> - 0.9.2-29
changelog:
  - Updated license tag to valid SPDX identifier
  - Dropped nose dependency and usage of setuptools test command


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.0.4-13
changelog:
  - Regenerate C source from Vala source and enable
    -Werror=incompatible-pointer-types again
    (Thanks to Florian Weimer <fweimer@redhat.com>)


author: Jerry James <loganjerry@gmail.com> - 5.1-1
changelog:
  - Version 5.1 (rhbz#2290844)
  - Add patch for python 3.13 compatibility (rhbz#2280553)
  - Minor spec file cleanups


author: David Auer <dreua@posteo.de> - 5.2-1
changelog:
  - Version 5.2 (rhbz#2322672, rhbz#2329901)
  - Remove patch
  - Remove setuptools version requirement in tox.ini


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Miro Hrončok <mhroncok@redhat.com> - 3.15.0~b2-5
changelog:
  - Restore compatibility with setuptools nspkg.pth files in site module
  - Fixes: rhbz#2486045
  - Fixes: rhbz#2486059
  - Fixes: rhbz#2487621
  - Fixes: rhbz#2488369


author: Ben Boeckel <fedora@me.benboeckel.net> - 1.9.4-1
changelog:
  - Update to 1.9.4 (rhbz#2324228)
  - Support Python 3.13 (rhbz#2315724)
  - Update license to GPL-3.0 (no "or later" present in comment headers)


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Pavel Raiskup <praiskup@redhat.com> 2.1-1
changelog:
  - The wait-for-ssh script was moved to resalloc-helpers
  - releng: release to all active Fedora releases


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.3-1
changelog:
  - Add functionality for tagging resource by its crn (j1.kyjovsky@gmail.com)
  - Add option for specifying resource group (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - Log the instance create request content
  - Allow specifying a list of Floating IPs
  - Drop executable bits from PYTHONPATH scripts


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Convert license headers to SPDX format
  - Bug fixes and translation updates


  - Resolves: rhbz#2376500


author: Jakub Kadlcik <frostyx@email.cz> 3.3-1
changelog:
  - Make the INVALID_SPEC_TEMPLATE really invalid
  - Use quote from shlex instead of deprecated pipes
  - rpkg-macros.spec: testsuite work-around for new git
  - Fix FTBFS on Fedora 38+


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.1.0-24
changelog:
  - Use recent gem packaging style
  - Modify License tag
  - Use test-unit for testsuite
  - Upstream PR to suppress warnings for literal string


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.3.4-9
changelog:
  - Re-generated spec file with current rust2rpm
  - Package reintroduced after previous retirement; close RHBZ#2516017


author: Robby Callicotte <rcallicotte@fedoraproject.org> - 3007.4-1
changelog:
  - Update to 3007.4 RHBZ#2366381 - Resolves CVE-2024-38824 RHBZ#2372731 -
    Resolves CVE-2024-38824 RHBZ#2372733 - Resolves CVE-2025-22239
    RHBZ#2372732 - Resolves CVE-2025-22239 RHBZ#2372734 - Resolves
    CVE-2025-22236 RHBZ#2372774 - Resolves CVE-2025-22236 RHBZ#2372776 -
    Resolves CVE-2025-22242 RHBZ#2372741 - Resolves CVE-2025-22242
    RHBZ#2372745 - Resolves CVE-2025-22240 RHBZ#2372746 - Resolves
    CVE-2025-22241 RHBZ#2372748 - Resolves CVE-2025-22240 RHBZ#2372752 -
    Resolves CVE-2025-22241 RHBZ#2372753


author: Stephane Thiell <sthiell@stanford.edu> 0.6.1-7
changelog:
  - Migrate from deprecated setup.py build/install to pyproject macros
  - Switch Source0 to PyPI archive


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - Convert STI tests to TMT (rhbz#2383068)
  - use baserelease as that rpmdev-bumpspec can be used
  - cleanly include <crm/crm.h> for crm_system_name and others


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.15-1
changelog:
  - restorecon.py: exclude more paths
  - Improve disable_ipv6 plugin then_text
  - Update generated configuration files
  - Update translations


author: Paul Pfeister <code@pfeister.dev> - 0.15.0-1
changelog:
  - Importable module renamed to sherlock_project (see Debian 1072733).
  - --dump-response flag added to aid in debugging.


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-7
changelog:
  - Added -DSM_CONF_STDBOOL_H in /usr/bin/make -O -j${RPM_BUILD_NCPUS} V=1 VERBOSE=1 to fix BZ#2385632.


author: Jordi Sanfeliu <jordi@fibranet.cat> 2.5.1^20220423g061e937-8
changelog:
  - Added the line '/usr/lib/sysusers.d/smf-spf.conf' in %files.
  - Added the line 'install -m0644 -D /builddir/build/SOURCES/smf-spf.sysusers /builddir/build/BUILD/smf-spf-2.5.1_20220423g061e937-build/BUILDROOT/usr/lib/sysusers.d/smfs.conf'.


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.0-1
changelog:
  - Initial release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.1.0


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.1.0-2
changelog:
  - Existing release for SyncStar project
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.0-1
changelog:
  - Second release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.0


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.1-1
changelog:
  - Third release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.1


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.2-1
changelog:
  - Fourth release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.2


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.2-2
changelog:
  - Temporarily disabled the buildtime checks until an approach is finalized
  - See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/ZSHSHZKVA4XJQBJD7FMMCALKN4UP5SAJ/


author: Peter Czanik <peter@czanik.hu> - 4.9.0-1
changelog:
  - update to 4.9.0
  - add destination drivers for ClickHouse and PubSub
  - add missing Python dependencies


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Tony Asleson <tasleson@redhat.com> - 0.10.4-8
changelog:
  - Workaround for: https://github.com/open-iscsi/rtslib-fb/issues/220
  - Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2383084


author: Than Ngo <than@redhat.com> - 11:2023-74
changelog:
  - fixed rhbz#2314476, missing dependencies for package texlive-europasscv
  - fixed rhbz#2295803, Chessboard requires skaknew for a font


author: Than Ngo <than@redhat.com> - 11:2023-77
changelog:
  - Fixed rhbz#2284201 - texlive-tcolorbox has missing dependencies
  - Fixed rhbz#2359772 - texlive-readarray requires texlive-forloop


author: Didier Fabert <didier.fabert@gmail.com> - 0.1-35.20171025gitab9bbbd
changelog:
  - Stop using deprecated py3_build/py3_install macros https://bugzilla.redhat.com/show_bug.cgi?id=2378474
  - migrated to last commit


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
      resolves: RHEL-79943
    - functions: make calc_isolated_cores return CPU ranges
      resolves: RHEL-75751
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
      resolves: RHEL-61801
    - realtime: Disable appropriate P-State drivers
      resolves: RHEL-85637
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
      resolves: RHEL-71304
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
      resolves: RHEL-101578
    - gui: fix the profile deleter script


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1:2025.10-1
changelog:
  - Update to 2025.10 GA (rhbz#2401964)
  - Fix booting when using FW device-tree (rhbz#2402498)
  - Fix for some variants of Raspberry Pi
  - Fixes for Jetson device booting


author: Jens Petersen <petersen@redhat.com> - 17.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode17.0.0/
  - https://blog.unicode.org/2025/09/unicode-170-release-announcement.html


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Remi Collet <remi@fedoraproject.org> - 8.1.4-1
changelog:
  - Valkey 8.1.4 - Released Fri 09 October 2025
  - Upgrade urgency SECURITY:
    CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689


author: Remi Collet <remi@fedoraproject.org> - 8.1.6-1
changelog:
  - Valkey 8.1.6 - Released Mon 23 February 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Remi Collet <remi@remirepo.net> - 8.1.7-1
changelog:
  - Valkey 8.1.7 - Tue 05 May 2026
  - Upgrade urgency SECURITY: This release includes security fixes.
    CVE-2026-23479 CVE-2026-25243 CVE-2026-23631


author: Remi Collet <remi@remirepo.net> - 8.1.8-1
changelog:
  - Valkey 8.1.8 - Tue 02 June 2026
  - Upgrade urgency HIGH:
    There is a critical bug that may affect a subset of users.


author: Remi Collet <remi@remirepo.net> - 8.1.9-1
changelog:
  - Valkey 8.1.9 - Released Tue 21 July 2026
  - Upgrade urgency SECURITY: This release includes security fixes
    CVE-2026-56684 CVE-2026-63639


author: Remi Collet <remi@remirepo.net> - 8.1.10-1
changelog:
  - Valkey 8.1.10 - Released Mon 31 August 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Martin Gansser <martinkg@fedoraproject.org> - 0.9.0-0.1.beta1
changelog:
  - Update to 0.9.0-0.1.beta1
  - Add python3dist(setuptools-gettext)
  - Fixed icon installation
  - Fixed desktop validation
  - Fixed setuptools discovery warnings


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Patrick Monnerat <patrick@monnerat.net> 2.5.0-3
changelog:
  - Patch "pastekey" fixes a crash pasting an encrypted private key.
    https://github.com/chris2511/xca/commit/d29d55a
  - Patch "revokedel" fixes a freeze when deleting a certificate.
    https://github.com/chris2511/xca/commit/43e1b33
  - Patch "delete_after_revoke" fixes a crash deleting+revoking a certificate.
    https://bugzilla.redhat.com/show_bug.cgi?id=2259477


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-2
changelog:
  - Require and use mutter as default compositor in RHEL
  - Make other compositors very weak dependencies in RHEL


author: Richard W.M. Jones <rjones@redhat.com> - 4.5.2-5
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Neil Hanlon <neil@shrug.pw> - 1.9.1-4
changelog:
  - switch to pure cmake (1.9.0 turned configure into a wrapper which dropped options)
  - resolve ftbfs, fti, new version (#226393 #2301380 #2292226)
  - resolve CVE-2024-39844 (#2295622)


