# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-5
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Resolves: rhbz#2424132 Upgrade from freeipa-4.12.5-3 and 390-ds-
    base-3.1.3-10 to latest rawhide fails


author: Jerry James <loganjerry@gmail.com> - 1.6.15-1
changelog:
  - Verion 1.6.15
  - Drop upstreamed const patch
  - Force use of environment-modules in Rawhide until Lmod is fixed


author: Íñigo Huguet <ihuguet@riseup.net>
changelog:
  - Update to 1.56-rc2 release
  - Fixes CVE-2025-9615. To achieve it, remove normal users' permission to modify system connections.


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.56.0-1
changelog:
  - Update to 1.56.0 release
  - Enable polkit_noauth_group=wheel (rhbz#2437985)
  - Fix bugs related to secrets handling and permissions


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.4-5
changelog:
  - Go back to bundling dr_flac and dr_mp3, since it is not straightforward to
    patch for the current releases


author: Dominik Mierzejewski <dominik@greysector.net> - 2.0.5^20260117git1be041b-1
changelog:
  - update to 20260117 snapshot from stable-2.0 branch
  - fixes CVE-2025-14369 (resolves rhbz#2431177)
  - fixes rpmbuild -bi --short-circuit


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.0.0~20260117gitb00e4a3-1
changelog:
  - update to 20260117 snapshot from main (3.0) branch
  - fixes CVE-2025-14369 (resolves rhbz#2431178)
  - fixes rpmbuild -bi --short-circuit


author: Jerry James <loganjerry@gmail.com> - 4.4.1p5-1
changelog:
  - Version 4.4.1p5
  - Drop sharutils build dependency
  - Drop upstreamed ntl8 and flint3.3 patches
  - Drop workaround for normaliz 3.10.5
  - Build with C++20


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.0-1
changelog:
  - Version 0.7.0
  - linkdupes subpackage is added. It is required by build-reproducibility-
    srpm-macros, so it'll be pulled into buildroots.
  - redhat-rpm-config needs to be updated to call
    %__os_install_post_hardlink in %__os_install_post for the helper to
    actually be used in builds.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.1-1
changelog:
  - Version 0.7.1
  - This implements https://fedoraproject.org/wiki/Changes/Hardlink_identical
    _files_in_packages_by_default.


author: Packit <hello@packit.dev> - 44.17-1
changelog:
  - rescue: Change 'immutable' to 'atomic' in warning message (k.koukiou)
  - Only show compatible translations in text mode (mkolman)
  - Add instructions for externally build boot iso updates (mkolman)


author: Packit <hello@packit.dev> - 44.18-1
changelog:
  - Always restorecon user home directory after creating it (awilliam)
  - Replace direct inst call with DRACUT_NO_XATTR=1 workaround (k.koukiou)
  - Restructure readthedocs documentation with audience-based organization
    (k.koukiou)
  - dracut: Include systemd-sysroot-fstab-check binary in initramfs (k.koukiou)


author: Packit <hello@packit.dev> - 44.20-1
changelog:
  - Don't pass `-R /` to shadow commands (awilliam)
    Resolves: rhbz#2435621
  - chore: Support multiple console= kernel entries (ppolawsk)
  - Include JS files to translations (baurthefirst)
  - glib: Fix TypeError in timeout callback (k.koukiou)
  - flatpak: tests: fix unreachable code (fsouza.bruno)
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
  - flatpak: Make installation failures non-blocking (bciconel)
  - Allow manual trigger for container-rebuild-action workflow (k.koukiou)


author: Packit <hello@packit.dev> - 44.21-1
changelog:
  - anaconda.conf: Add clk_ignore_unused, pd_ignore_unused to preserved_arguments
    (johannes.goede)
  - storage/bootloader/utils: Make create_bls_entries() work with kernel-uki-
    dtbloader (johannes.goede)
  - data/profile.d/fedora-kde-mobile: Set the correct payload settings (neal)


author: Packit <hello@packit.dev> - 44.24-1
changelog:
  - Fix crash when org.freedesktop.ScreenSaver Inhibit is unavailable (k.koukiou)
    Resolves: rhbz#2440367


author: Packit <hello@packit.dev> - 44.25-1
changelog:
  - Workaround rsync xattr errors on KIWI boxed-build ISOs (adamkankovsky)
  - Make --enable-vt-switch backwards compatible with older gnome-kiosk
    (k.koukiou)
  - Add --enable-vt-switch when running gnome-kiosk (mkolman)
  - Fix asyncio deprecation warnings flooding logs in text mode (bciconel)
  - Hub: Fix grid layout alignment in Hub (yueyuankun)
  - liveinst: prevent launching multiple installer instances (k.koukiou)
    Resolves: rhbz#2440264
  - doc: update documentation for webui boot.iso build and PR inclusion
    (rvykydal)


author: Nick Clifton <nickc@redhat.com> - 13.08-1
changelog:
  - Rebase sources and rebuild against the latest version of gcc.  (#2445165)
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Neal Gompa <ngompa@fedoraproject.org> - 1.35.0-1
changelog:
  - Update to version 1.35.0
    Resolves: rhbz#2419155
  - Add patch to fix build with Linux 6.19+ headers


author: Neal Gompa <ngompa@fedoraproject.org> - 1.37.2-1
changelog:
  - Update to version 1.37.2
  - Resolves: rhbz#2447761
  - Backport fixes for various altarch build failures


author: Rasmus Ory Nielsen <ron@ron.dk> - 1.23-1
changelog:
  - Updated to 1.23
  - Removed obsolete vcf_plugin_tests patch
  - Remove invalid `-errors` from PERL_LIBS to fix linker warnings


author: Dominik Mierzejewski <dominik@greysector.net> - 122-1
changelog:
  - update to 122 (resolves rhbz#2342841)
  - rebase patch for using system GTest
  - fix setting the RPATH to private shared library
  - skip v8 tests (not available in Fedora)


author: Dominik Mierzejewski <dominik@greysector.net> - 126-1
changelog:
  - update to 126 (resolves rhbz#2439791)
  - backport upstream fix for https://github.com/WebAssembly/binaryen/issues/8360


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Bastien Nocera <bnocera@redhat.com> - 5.86-4
changelog:
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Update audio output patch to be upstream version
  - Fix "bluetoothctl list" empty output (Closes: #2440346)


author: Jonathan Wakely <jwakely@fedoraproject.org> - 1.90.0-1
changelog:
  - Rebase to 1.90.0
  - See https://fedoraproject.org/wiki/Changes/F44Boost189
  - Drop boost-system subpackage and libboost_thread.so linker script
  - Add new boost-charconv, boost-cobalt, and boost-process subpackages


author: Jonathan Wakely <jwakely@fedoraproject.org> - 1.90.0-7
changelog:
  - Add workaround for failing regex tests (#2430541)
  - Add BR:which as needed by the bootstrap.sh script
  - Add additional SPDX tags


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.1^20250418.947f7ab-1
changelog:
  - Update to 0.0.1^20250418.947f7ab
  - Change snapshot information field format
  - Rebuild for c4core 0.2.9


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Than Ngo <than@redhat.com> - 146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
    * High CVE-2026-5273: Use after free in CSS
    * High CVE-2026-5272: Heap buffer overflow in GPU
    * High CVE-2026-5274: Integer overflow in Codecs
    * High CVE-2026-5275: Heap buffer overflow in ANGLE
    * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
    * High CVE-2026-5277: Integer overflow in ANGLE
    * High CVE-2026-5278: Use after free in Web MIDI
    * High CVE-2026-5279: Object corruption in V8
    * High CVE-2026-5280: Use after free in WebCodecs
    * High CVE-2026-5281: Use after free in Dawn
    * High CVE-2026-5282: Out of bounds read in WebCodecs
    * High CVE-2026-5283: Inappropriate implementation in ANGLE
    * High CVE-2026-5284: Use after free in Dawn
    * High CVE-2026-5285: Use after free in WebGL
    * High CVE-2026-5286: Use after free in Dawn
    * High CVE-2026-5287: Use after free in PDF
    * High CVE-2026-5288: Use after free in WebView
    * High CVE-2026-5289: Use after free in Navigation
    * High CVE-2026-5290: Use after free in Compositing
    * Medium CVE-2026-5291: Inappropriate implementation in WebGL
    * Medium CVE-2026-5292: Out of bounds read in WebCodecs


author: Than Ngo <than@redhat.com> - 147.0.7727.55-1
changelog:
  - Update to 147.0.7727.55
    * Critical CVE-2026-5858: Heap buffer overflow in WebML
    * Critical CVE-2026-5859: Integer overflow in WebML
    * High CVE-2026-5860: Use after free in WebRTC
    * High CVE-2026-5861: Use after free in V8
    * High CVE-2026-5862: Inappropriate implementation in V8
    * High CVE-2026-5863: Inappropriate implementation in V8
    * High CVE-2026-5864: Heap buffer overflow in WebAudio
    * High CVE-2026-5865: Type Confusion in V8
    * High CVE-2026-5866: Use after free in Media
    * High CVE-2026-5867: Heap buffer overflow in WebML
    * High CVE-2026-5868: Heap buffer overflow in ANGLE
    * High CVE-2026-5869: Heap buffer overflow in WebML
    * High CVE-2026-5870: Integer overflow in Skia
    * High CVE-2026-5871: Type Confusion in V8
    * High CVE-2026-5872: Use after free in Blink
    * High CVE-2026-5873: Out of bounds read and write in V8
    * Medium CVE-2026-5874: Use after free in PrivateAI
    * Medium CVE-2026-5875: Policy bypass in Blink
    * Medium CVE-2026-5876: Side-channel information leakage in Navigation
    * Medium CVE-2026-5877: Use after free in Navigation
    * Medium CVE-2026-5878: Incorrect security UI in Blink
    * Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
    * Medium CVE-2026-5880: Incorrect security UI in browser UI
    * Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
    * Medium CVE-2026-5882: Incorrect security UI in Fullscreen
    * Medium CVE-2026-5883: Use after free in Media
    * Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
    * Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
    * Medium CVE-2026-5886: Out of bounds read in WebAudio
    * Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
    * Medium CVE-2026-5888: Uninitialized Use in WebCodecs
    * Medium CVE-2026-5889: Cryptographic Flaw in PDFium
    * Medium CVE-2026-5890: Race in WebCodecs
    * Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
    * Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
    * Medium CVE-2026-5893: Race in V8
    * Low CVE-2026-5894: Inappropriate implementation in PDF
    * Low CVE-2026-5895: Incorrect security UI in Omnibox
    * Low CVE-2026-5896: Policy bypass in Audio
    * Low CVE-2026-5897: Incorrect security UI in Downloads
    * Low CVE-2026-5898: Incorrect security UI in Omnibox
    * Low CVE-2026-5899: Incorrect security UI in History Navigation
    * Low CVE-2026-5900: Policy bypass in Downloads
    * Low CVE-2026-5901: Policy bypass in DevTools
    * Low CVE-2026-5902: Race in Media
    * Low CVE-2026-5903: Policy bypass in IFrameSandbox
    * Low CVE-2026-5904: Use after free in V8
    * Low CVE-2026-5905: Incorrect security UI in Permissions
    * Low CVE-2026-5906: Incorrect security UI in Omnibox
    * Low CVE-2026-5907: Insufficient data validation in Media
    * Low CVE-2026-5908: Integer overflow in Media
    * Low CVE-2026-5909: Integer overflow in Media
    * Low CVE-2026-5910: Integer overflow in Media
    * Low CVE-2026-5911: Policy bypass in ServiceWorkers
    * Low CVE-2026-5912: Integer overflow in WebRTC
    * Low CVE-2026-5913: Out of bounds read in Blink
    * Low CVE-2026-5914: Type Confusion in CSS
    * Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
    * Low CVE-2026-5918: Inappropriate implementation in Navigation
    * Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets


author: Than Ngo <than@redhat.com> - 147.0.7727.101-1
changelog:
  - Update to 147.0.7727.101
    * Critical CVE-2026-6296: Heap buffer overflow in ANGLE
    * Critical CVE-2026-6297: Use after free in Proxy
    * Critical CVE-2026-6298: Heap buffer overflow in Skia
    * Critical CVE-2026-6299: Use after free in Prerender
    * Critical CVE-2026-6358: Use after free in XR
    * High CVE-2026-6359: Use after free in Video
    * High CVE-2026-6300: Use after free in CSS
    * High CVE-2026-6301: Type Confusion in Turbofan
    * High CVE-2026-6302: Use after free in Video
    * High CVE-2026-6303: Use after free in Codecs
    * High CVE-2026-6304: Use after free in Graphite
    * High CVE-2026-6305: Heap buffer overflow in PDFium
    * High CVE-2026-6306: Heap buffer overflow in PDFium
    * High CVE-2026-6307: Type Confusion in Turbofan
    * High CVE-2026-6308: Out of bounds read in Media
    * High CVE-2026-6309: Use after free in Viz
    * High CVE-2026-6360: Use after free in FileSystem
    * High CVE-2026-6310: Use after free in Dawn
    * High CVE-2026-6311: Uninitialized Use in Accessibility
    * High CVE-2026-6312: Insufficient policy enforcement in Passwords
    * High CVE-2026-6313: Insufficient policy enforcement in CORS
    * High CVE-2026-6314: Out of bounds write in GPU
    * High CVE-2026-6315: Use after free in Permissions
    * High CVE-2026-6316: Use after free in Forms
    * High CVE-2026-6361: Heap buffer overflow in PDFium
    * High CVE-2026-6362: Use after free in Codecs
    * High CVE-2026-6317: Use after free in Cast
    * Medium CVE-2026-6363: Type Confusion in V8
    * Medium CVE-2026-6318: Use after free in Codecs
    * Medium CVE-2026-6319: Use after free in Payments
    * Medium CVE-2026-6364: Out of bounds read in Skia


author: Than Ngo <than@redhat.com> - 147.0.7727.116-1
changelog:
  - Update to 147.0.7727.116
    * High CVE-2026-6919: Use after free in DevTools
    * High CVE-2026-6920: Out of bounds read in GPU
    * Medium CVE-2026-6921: Race in GPU
  - Fix rhbz#2458171, unexpanded macros in manpage


author: Than Ngo <than@redhat.com> - 147.0.7727.116-2
changelog:
  - Fix FTBFS with rust 1.95
  - Backport the upstream fix GL native pixmap import support reset in GpuInit


author: Than Ngo <than@redhat.com> - 147.0.7727.137-1
changelog:
  - Update to 147.0.7727.137
     * Critical CVE-2026-7363: Use after free in Canvas
     * Critical CVE-2026-7361: Use after free in iOS
     * Critical CVE-2026-7344: Use after free in Accessibility
     * Critical CVE-2026-7343: Use after free in Views
     * High CVE-2026-7333: Use after free in GPU
     * High CVE-2026-7360: Insufficient validation of untrusted input in Compositing
     * High CVE-2026-7359: Use after free in ANGLE
     * High CVE-2026-7358: Use after free in Animation
     * High CVE-2026-7334: Use after free in Views
     * High CVE-2026-7357: Use after free in GPU
     * High CVE-2026-7356: Use after free in Navigation
     * High CVE-2026-7354: Out of bounds read and write in Angle
     * High CVE-2026-7353: Heap buffer overflow in Skia
     * High CVE-2026-7352: Use after free in Media
     * High CVE-2026-7351: Race in MHTML
     * High CVE-2026-7350: Use after free in WebMIDI
     * High CVE-2026-7349: Use after free in Cast
     * High CVE-2026-7348: Use after free in Codecs
     * High CVE-2026-7335: Use after free in media
     * High CVE-2026-7336: Use after free in WebRTC
     * High CVE-2026-7337: Type Confusion in V8
     * High CVE-2026-7347: Use after free in Chromoting
     * High CVE-2026-7346: Inappropriate implementation in Tint
     * High CVE-2026-7345: Insufficient validation of untrusted input in Feedback
     * High CVE-2026-7338: Use after free in Cast
     * High CVE-2026-7342: Use after free in WebView
     * High CVE-2026-7341: Use after free in WebRTC
     * Medium CVE-2026-7339: Heap buffer overflow in WebRTC
     * Medium CVE-2026-7340: Integer overflow in ANGLE
     * Medium CVE-2026-7355: Use after free in Media


author: Than Ngo <than@redhat.com> - 148.0.7778.96-1
changelog:
  - Update to 148.0.7778.96
     * CVE-2026-7896: Integer overflow in Blink
     * CVE-2026-7897: Use after free in Mobile
     * CVE-2026-7898: Use after free in Chromoting
     * CVE-2026-7899: Out of bounds read and write in V8
     * CVE-2026-7900: Heap buffer overflow in ANGLE
     * CVE-2026-7901: Use after free in ANGLE
     * CVE-2026-7902: Out of bounds memory access in V8
     * CVE-2026-7903: Integer overflow in ANGLE
     * CVE-2026-7904: Out of bounds read in Fonts
     * CVE-2026-7905: Insufficient validation of untrusted input in Media
     * CVE-2026-7906: Use after free in SVG
     * CVE-2026-7907: Use after free in DOM
     * CVE-2026-7908: Use after free in Fullscreen
     * CVE-2026-7909: Inappropriate implementation in ServiceWorker
     * CVE-2026-7910: Use after free in Views
     * CVE-2026-7911: Use after free in Aura
     * CVE-2026-7912: Integer overflow in GPU
     * CVE-2026-7913: Insufficient policy enforcement in DevTools
     * CVE-2026-7914: Type Confusion in Accessibility
     * CVE-2026-7915: Insufficient data validation in DevTools
     * CVE-2026-7916: Insufficient data validation in InterestGroups
     * CVE-2026-7917: Use after free in Fullscreen
     * CVE-2026-7918: Use after free in GPU
     * CVE-2026-7919: Use after free in Aura
     * CVE-2026-7920: Use after free in Skia
     * CVE-2026-7921: Use after free in Passwords
     * CVE-2026-7922: Use after free in ServiceWorker
     * CVE-2026-7923: Out of bounds write in Skia
     * CVE-2026-7924: Uninitialized Use in Dawn
     * CVE-2026-7925: Use after free in Chromoting
     * CVE-2026-7926: Use after free in PresentationAPI
     * CVE-2026-7927: Type Confusion in Runtime
     * CVE-2026-7928: Use after free in WebRTC
     * CVE-2026-7929: Use after free in MediaRecording
     * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
     * CVE-2026-7931: Insufficient validation of untrusted input in iOS
     * CVE-2026-7932: Insufficient policy enforcement in Downloads
     * CVE-2026-7933: Out of bounds read in WebCodecs
     * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
     * CVE-2026-7935: Inappropriate implementation in Speech
     * CVE-2026-7936: Object lifecycle issue in V8
     * CVE-2026-7937: Insufficient policy enforcement in DevTools
     * CVE-2026-7938: Use after free in CSS
     * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
     * CVE-2026-7940: Use after free in V8
     * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
     * CVE-2026-7942: Integer overflow in ANGLE
     * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
     * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
     * CVE-2026-7945: Insufficient validation of untrusted input in COOP
     * CVE-2026-7946: Insufficient policy enforcement in WebUI
     * CVE-2026-7947: Insufficient validation of untrusted input in Network
     * CVE-2026-7948: Race in Chromoting
     * CVE-2026-7949: Out of bounds read in Skia
     * CVE-2026-7950: Out of bounds read and write in GFX
     * CVE-2026-7951: Out of bounds write in WebRTC
     * CVE-2026-7952: Insufficient policy enforcement in Extensions
     * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
     * CVE-2026-7954: Race in Shared Storage
     * CVE-2026-7955: Uninitialized Use in GPU
     * CVE-2026-7956: Use after free in Navigation
     * CVE-2026-7957: Out of bounds write in Media
     * CVE-2026-7958: Inappropriate implementation in ServiceWorker
     * CVE-2026-7959: Inappropriate implementation in Navigation
     * CVE-2026-7960: Race in Speech
     * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
     * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
     * CVE-2026-7963: Inappropriate implementation in ServiceWorker
     * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
     * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
     * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
     * CVE-2026-7968: Insufficient validation of untrusted input in CORS
     * CVE-2026-7969: Integer overflow in Network
     * CVE-2026-7970: Use after free in TopChrome
     * CVE-2026-7971: Inappropriate implementation in ORB
     * CVE-2026-7972: Uninitialized Use in GPU
     * CVE-2026-7973: Integer overflow in Dawn
     * CVE-2026-7974: Use after free in Blink
     * CVE-2026-7975: Use after free in DevTools
     * CVE-2026-7976: Use after free in Views
     * CVE-2026-7977: Inappropriate implementation in Canvas
     * CVE-2026-7978: Inappropriate implementation in Companion
     * CVE-2026-7979: Inappropriate implementation in Media
     * CVE-2026-7980: Use after free in WebAudio
     * CVE-2026-7981: Out of bounds read in Codecs
     * CVE-2026-7982: Uninitialized Use in WebCodecs
     * CVE-2026-7983: Out of bounds read in Dawn
     * CVE-2026-7984: Use after free in ReadingMode
     * CVE-2026-7985: Use after free in GPU
     * CVE-2026-7986: Insufficient policy enforcement in Autofill
     * CVE-2026-7987: Use after free in WebRTC
     * CVE-2026-7988: Type Confusion in WebRTC
     * CVE-2026-7989: Insufficient data validation in DataTransfer
     * CVE-2026-7990: Insufficient validation of untrusted input in Updater
     * CVE-2026-7991: Use after free in UI
     * CVE-2026-7992: Insufficient validation of untrusted input in UI
     * CVE-2026-7993: Insufficient validation of untrusted input in Payments
     * CVE-2026-7994: Inappropriate implementation in Chromoting
     * CVE-2026-7995: Out of bounds read in AdFilter
     * CVE-2026-7996: Insufficient validation of untrusted input in SSL
     * CVE-2026-7997: Insufficient validation of untrusted input in Updater
     * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
     * CVE-2026-7999: Inappropriate implementation in V8
     * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
     * CVE-2026-8001: Use after free in Printing
     * CVE-2026-8002: Use after free in Audio
     * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
     * CVE-2026-8004: Insufficient policy enforcement in DevTools
     * CVE-2026-8005: Insufficient validation of untrusted input in Cast
     * CVE-2026-8006: Insufficient policy enforcement in DevTools
     * CVE-2026-8007: Insufficient validation of untrusted input in Cast
     * CVE-2026-8008: Inappropriate implementation in DevTools
     * CVE-2026-8009: Inappropriate implementation in Cast
     * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8011: Insufficient policy enforcement in Search
     * CVE-2026-8012: Inappropriate implementation in MHTML
     * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
     * CVE-2026-8014: Inappropriate implementation in Preload
     * CVE-2026-8015: Inappropriate implementation in Media
     * CVE-2026-8016: Use after free in WebRTC
     * CVE-2026-8017: Side-channel information leakage in Media
     * CVE-2026-8018: Insufficient policy enforcement in DevTools
     * CVE-2026-8019: Insufficient policy enforcement in WebApp
     * CVE-2026-8020: Uninitialized Use in GPU
     * CVE-2026-8021: Script injection in UI
     * CVE-2026-8022: Inappropriate implementation in MHTML
  - Remove old remoting-no-tests patch
  - Remove fix_GL_native_pixmap_import_support_reset_in_GpuInit patch
  - Fix build error causing by sanitizer defines in GN
  - Refresh rust-enable-unstable_feature patch
  - Fix build error with system rust compiler
  - Fix build error causing by new clang++ options which are not supported yet
  - Fix build error causing by harfbuzz library rename


author: Than Ngo <than@redhat.com> - 148.0.7778.167-1
changelog:
  - Update to 148.0.7778.167
     * CVE-2026-8509: Heap buffer overflow in WebML
     * CVE-2026-8510: Integer overflow in Skia
     * CVE-2026-8511: Use after free in UI
     * CVE-2026-8512: Use after free in FileSystem
     * CVE-2026-8513: Use after free in Input
     * CVE-2026-8514: Use after free in Aura
     * CVE-2026-8515: Use after free in HID
     * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
     * CVE-2026-8517: Object lifecycle issue in WebShare
     * CVE-2026-8518: Use after free in Blink
     * CVE-2026-8519: Integer overflow in ANGLE
     * CVE-2026-8520: Race in Payments
     * CVE-2026-8521: Use after free in Tab Groups
     * CVE-2026-8522: Use after free in Downloads
     * CVE-2026-8523: Use after free in Mojo
     * CVE-2026-8558: Out of bounds write in Fonts
     * CVE-2026-8524: Out of bounds write in WebAudio
     * CVE-2026-8525: Heap buffer overflow in ANGLE
     * CVE-2026-8526: Out of bounds write in WebRTC
     * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
     * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
     * CVE-2026-8529: Heap buffer overflow in Codecs
     * CVE-2026-8530: Use after free in Network
     * CVE-2026-8531: Heap buffer overflow in WebML
     * CVE-2026-8532: Integer overflow in XML
     * CVE-2026-8533: Use after free in Accessibility
     * CVE-2026-8534: Integer overflow in GPU
     * CVE-2026-8535: Out of bounds read in Media
     * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
     * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
     * CVE-2026-8538: Insufficient validation of untrusted input in GPU
     * CVE-2026-8539: Script injection in SanitizerAPI
     * CVE-2026-8540: Type Confusion in V8
     * CVE-2026-8541: Out of bounds read in UI
     * CVE-2026-8542: Use after free in Core
     * CVE-2026-8543: Out of bounds read in FileSystem
     * CVE-2026-8544: Use after free in Media
     * CVE-2026-8545: Object corruption in Compositing
     * CVE-2026-8546: Out of bounds read in GPU
     * CVE-2026-8547: Insufficient policy enforcement in Passwords
     * CVE-2026-8548: Out of bounds write in Media
     * CVE-2026-8549: Use after free in Media
     * CVE-2026-8550: Use after free in Google Lens
     * CVE-2026-8551: Use after free in Downloads
     * CVE-2026-8552: Heap buffer overflow in GPU
     * CVE-2026-8553: Use after free in GPU
     * CVE-2026-8554: Type Confusion in ANGLE
     * CVE-2026-8555: Use after free in GTK
     * CVE-2026-8556: Inappropriate implementation in ANGLE
     * CVE-2026-8557: Use after free in Accessibility
     * CVE-2026-8559: Integer overflow in Internationalization
     * CVE-2026-8560: Heap buffer overflow in SwiftShader
     * CVE-2026-8561: Incorrect security UI in Fullscreen
     * CVE-2026-8562: Side-channel information leakage in Navigation
     * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
     * CVE-2026-8564: Incorrect security UI in Downloads
     * CVE-2026-8565: Inappropriate implementation in Downloads
     * CVE-2026-8566: Insufficient policy enforcement in Payments
     * CVE-2026-8567: Integer overflow in ANGLE
     * CVE-2026-8568: Insufficient policy enforcement in AI
     * CVE-2026-8569: Out of bounds write in Codecs
     * CVE-2026-8570: Type Confusion in V8
     * CVE-2026-8571: Insufficient policy enforcement in GPU
     * CVE-2026-8572: Insufficient policy enforcement in Network
     * CVE-2026-8573: Integer overflow in Codecs
     * CVE-2026-8574: Use after free in Core
     * CVE-2026-8575: Use after free in UI
     * CVE-2026-8576: Inappropriate implementation in CORS
     * CVE-2026-8577: Integer overflow in Fonts
     * CVE-2026-8578: Out of bounds read in GPU
     * CVE-2026-8579: Insufficient validation of untrusted input in Skia
     * CVE-2026-8580: Use after free in Mojo
     * CVE-2026-8581: Use after free in GPU
     * CVE-2026-8582: Object lifecycle issue in Dawn
     * CVE-2026-8583: Insufficient policy enforcement in WebXR
     * CVE-2026-8584: Inappropriate implementation in Views
     * CVE-2026-8585: Inappropriate implementation in Media
     * CVE-2026-8586: Inappropriate implementation in Chromoting
     * CVE-2026-8587: Use after free in Extensions


author: Than Ngo <than@redhat.com> - 148.0.7778.178-1
changelog:
  - Update to 148.0.7778.178
    * CVE-2026-9111: Use after free in WebRTC
    * CVE-2026-9110: Inappropriate implementation in UI
    * CVE-2026-9112: Use after free in GPU
    * CVE-2026-9113: Out of bounds read in GPU
    * CVE-2026-9114: Use after free in QUIC
    * CVE-2026-9115: Insufficient policy enforcement in Service Worker
    * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-9117: Type Confusion in GFX
    * CVE-2026-9118: Use after free in XR
    * CVE-2026-9119: Heap buffer overflow in WebRTC
    * CVE-2026-9120: Use after free in WebRTC
    * CVE-2026-9126: Use after free in DOM
    * CVE-2026-9121: Out of bounds read in GPU
    * CVE-2026-9122: Out of bounds read in GPU
    * CVE-2026-9123: Heap buffer overflow in Chromecast
    * CVE-2026-9124: Insufficient validation of untrusted input in Input
  - Backport upstream patches to improve auto dark image inversion logic
  - Update default chromium browser config


author: Than Ngo <than@redhat.com> - 148.0.7778.215-1
changelog:
  - Update to 148.0.7778.215
    * CVE-2026-9872: Out of bounds write in GPU
    * CVE-2026-9873: Use after free in Network
    * CVE-2026-9874: Use after free in Dawn
    * CVE-2026-9875: Out of bounds read in WebGL
    * CVE-2026-9876: Use after free in WebGL
    * CVE-2026-9877: Use after free in ANGLE
    * CVE-2026-9878: Use after free in ANGLE
    * CVE-2026-9879: Out of bounds write in ANGLE
    * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
    * CVE-2026-9881: Use after free in Bluetooth
    * CVE-2026-9882: Integer overflow in ANGLE
    * CVE-2026-9883: Use after free in Base
    * CVE-2026-9884: Use after free in Browser
    * CVE-2026-9885: Insufficient validation of untrusted input in UI
    * CVE-2026-9886: Use after free in Base
    * CVE-2026-9887: Use after free in Proxy
    * CVE-2026-9888: Use after free in WebView
    * CVE-2026-9889: Out of bounds read and write in Dawn
    * CVE-2026-9890: Use after free in XR
    * CVE-2026-9891: Use after free in Extensions
    * CVE-2026-9892: Inappropriate implementation in Skia
    * CVE-2026-9893: Use after free in Skia
    * CVE-2026-9894: Use after free in GPU
    * CVE-2026-9895: Out of bounds read in GPU
    * CVE-2026-9896: Out of bounds write in V8
    * CVE-2026-9897: Use after free in DOM
    * CVE-2026-9898: Insufficient validation of untrusted input in GPU
    * CVE-2026-9899: Use after free in ANGLE
    * CVE-2026-9900: Out of bounds write in ANGLE
    * CVE-2026-9901: Use after free in ANGLE
    * CVE-2026-9902: Use after free in Accessibility
    * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
    * CVE-2026-9904: Use after free in ANGLE
    * CVE-2026-9905: Use after free in Accessibility
    * CVE-2026-9906: Out of bounds write in GPU
    * CVE-2026-9907: Out of bounds read in Dawn
    * CVE-2026-9908: Out of bounds read in ANGLE
    * CVE-2026-9909: Integer overflow in Skia
    * CVE-2026-9910: Out of bounds memory access in ANGLE
    * CVE-2026-9911: Integer overflow in ANGLE
    * CVE-2026-9912: Inappropriate implementation in GPU
    * CVE-2026-9913: Inappropriate implementation in ANGLE
    * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9915: Heap buffer overflow in ANGLE
    * CVE-2026-9916: Out of bounds write in ANGLE
    * CVE-2026-9917: Uninitialized Use in WebGL
    * CVE-2026-9918: Inappropriate implementation in Tint
    * CVE-2026-9919: Out of bounds read in WebGL
    * CVE-2026-9920: Uninitialized Use in GPU
    * CVE-2026-9921: Uninitialized Use in WebGL
    * CVE-2026-9922: Use after free in GPU
    * CVE-2026-9923: Use after free in Skia
    * CVE-2026-9924: Heap buffer overflow in ANGLE
    * CVE-2026-9925: Use after free in ANGLE
    * CVE-2026-9926: Heap buffer overflow in ANGLE
    * CVE-2026-9927: Use after free in ANGLE
    * CVE-2026-9928: Out of bounds read in ANGLE
    * CVE-2026-9929: Inappropriate implementation in WebGL
    * CVE-2026-9930: Out of bounds write in Dawn
    * CVE-2026-9931: Use after free in GPU
    * CVE-2026-9932: Use after free in ANGLE
    * CVE-2026-9933: Use after free in Input
    * CVE-2026-9934: Use after free in Aura
    * CVE-2026-9935: Uninitialized Use in ANGLE
    * CVE-2026-9936: Use after free in GFX
    * CVE-2026-9937: Use after free in UI
    * CVE-2026-9938: Inappropriate implementation in V8
    * CVE-2026-9939: Heap buffer overflow in WebCodecs
    * CVE-2026-9940: Heap buffer overflow in ANGLE
    * CVE-2026-9941: Use after free in ANGLE
    * CVE-2026-9942: Uninitialized Use in ANGLE
    * CVE-2026-9943: Out of bounds read in WebGL
    * CVE-2026-9944: Uninitialized Use in ANGLE
    * CVE-2026-9945: Use after free in Media
    * CVE-2026-9946: Use after free in ANGLE
    * CVE-2026-9947: Use after free in XML
    * CVE-2026-9948: Use after free in Views
    * CVE-2026-9949: Use after free in Core
    * CVE-2026-9950: Insufficient validation of untrusted input in iOS
    * CVE-2026-9951: Use after free in UI
    * CVE-2026-9952: Use after free in WebAudio
    * CVE-2026-9953: Out of bounds read in ANGLE
    * CVE-2026-9954: Use after free in TabStrip
    * CVE-2026-9955: Inappropriate implementation in iOS
    * CVE-2026-9956: Use after free in iOS
    * CVE-2026-9957: Use after free in PDF
    * CVE-2026-9958: Use after free in PDFium
    * CVE-2026-9959: Race in WebRTC
    * CVE-2026-9960: Integer overflow in PDFium
    * CVE-2026-9961: Use after free in SurfaceCapture
    * CVE-2026-9962: Use after free in WebRTC
    * CVE-2026-9963: Uninitialized Use in iOS
    * CVE-2026-9964: Use after free in Bluetooth
    * CVE-2026-9965: Out of bounds write in ANGLE
    * CVE-2026-9966: Integer overflow in XML
    * CVE-2026-9967: Out of bounds write in GPU
    * CVE-2026-9968: Integer overflow in V8
    * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9970: Use after free in WebGL
    * CVE-2026-9971: Inappropriate implementation in iOS
    * CVE-2026-9972: Uninitialized Use in Gamepad
    * CVE-2026-9973: Out of bounds write in V8
    * CVE-2026-9974: Out of bounds write in GPU
    * CVE-2026-9975: Out of bounds read and write in ANGLE
    * CVE-2026-9976: Inappropriate implementation in USB
    * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
    * CVE-2026-9978: Use after free in Glic
    * CVE-2026-9979: Insufficient validation of untrusted input in Input
    * CVE-2026-9980: Insufficient validation of untrusted input in Printing
    * CVE-2026-9981: Inappropriate implementation in Skia
    * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-9983: Type Confusion in Skia
    * CVE-2026-9984: Use after free in UI
    * CVE-2026-9985: Insufficient validation of untrusted input in Media
    * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
    * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
    * CVE-2026-9988: Use after free in WebRTC
    * CVE-2026-9989: Inappropriate implementation in Media
    * CVE-2026-9990: Use after free in WebAppInstalls
    * CVE-2026-9991: Inappropriate implementation in Media
    * CVE-2026-9992: Use after free in Network
    * CVE-2026-9993: Use after free in Views
    * CVE-2026-9994: Use after free in Core
    * CVE-2026-9995: Use after free in WebXR
    * CVE-2026-9996: Out of bounds read in WebRTC
    * CVE-2026-9997: Use after free in Input
    * CVE-2026-9998: Integer overflow in Skia
    * CVE-2026-9999: Inappropriate implementation in ANGLE
    * CVE-2026-10000: Use after free in Passwords
    * CVE-2026-10001: Use after free in PerformanceManager
    * CVE-2026-10002: Use after free in PDFium
    * CVE-2026-10003: Use after free in Views
    * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
    * CVE-2026-10005: Use after free in WebAppInstalls
    * CVE-2026-10006: Race in WebAudio
    * CVE-2026-10007: Use after free in SVG
    * CVE-2026-10008: Uninitialized Use in GPU
    * CVE-2026-10009: Integer overflow in Skia
    * CVE-2026-10010: Inappropriate implementation in Input
    * CVE-2026-10011: Inappropriate implementation in Skia
    * CVE-2026-10012: Use after free in Skia
    * CVE-2026-10013: Use after free in WebCodecs
    * CVE-2026-10014: Use after free in WebMIDI
    * CVE-2026-10015: Integer overflow in WTF
    * CVE-2026-10016: Use after free in DOM
    * CVE-2026-10017: Out of bounds read in Headless
    * CVE-2026-10018: Integer overflow in ANGLE
    * CVE-2026-10019: Integer overflow in ANGLE
    * CVE-2026-10020: Insufficient validation of untrusted input in Skia
    * CVE-2026-10021: Insufficient validation of untrusted input in USB
    * CVE-2026-10022: Type Confusion in V8


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> - 1.16-13
changelog:
  - civetweb 1.16, handle cmake-4 doesn't support cmake < 3.5 
  - upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
    don't seem to be any adverse effects building civetweb with that change.
    And someday there might even be a civetweb-1.17.


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Jerry James <loganjerry@gmail.com> - 1.14.0-3
changelog:
  - Build with the boost version of pdqsort
  - Run all of the tests
  - BR catch 2.x instead of 3.x
  - Drop unnecessary Requires from the devel subpackage
  - Use the cmake declarative buildsystem


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-1
changelog:
  - Update to release v1.8.0
  - Resolves: rhbz#2392433
  - Upstream fixes and new features
  - Correct packit configuration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-2
changelog:
  - Resolve CVE-2025-47910
  - Resolves: rhbz#2398656, rhbz#2398402
  - Rebuild with go 1.25.1 (fc44, fc43) or 1.24.7 (fc42, fc41)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.0-1
changelog:
  - Update to release v1.9.0
  - Resolves: rhbz#2420515
  - Resolves CVE-2025-58188: rhbz#2411454, rhbz#2411189, rhbz#2410923
  - Resolves CVE-2025-58185: rhbz#2410556, rhbz#2410277, rhbz#2409991
  - Resolves CVE-2025-61723: rhbz#2409605, rhbz#2409325, rhbz#2409043
  - Resolves CVE-2025-58189: rhbz#2408135, rhbz#2407858, rhbz#2407588
  - Fixes CVE-2025-67499, a bug in the nftables backend for the portmap
    plugin
  - Additional changes


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.8-1
changelog:
  - rebase to latest upstream release (rhbz#2397467)
  - remove downstream patch for selinux options deprecated since 2009


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-1
changelog:
  - rebase to the latest upstream release (rhbz#2436690)
  - enable manual URLs in --help
  - use glibc-all-langpacks to make sure that all locale data required by tests
    will be always present


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-2
changelog:
  - enable the execution of the downstream df/direct.sh test
  - temporarily disable test-getaddrinfo on RHEL builds


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-3
changelog:
  - fix possible hangups during testsuite execution
  - rewrite (un)expand multibyte support using the mbbuf module (rhbz#2443041)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.1
changelog:
  - update from trunk
    - PRs c++/81337, c++/115163, c++/123526, fortran/77415, ipa/122458,
  	ipa/123543, libfortran/123012, middle-end/123175,
  	rtl-optimization/123523, target/123415, testsuite/121752,
  	testsuite/123129, tree-optimization/122824, tree-optimization/122830,
  	tree-optimization/123417, tree-optimization/123528


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.2
changelog:
  - update from trunk
    - PRs fortran/91960, fortran/112460, libstdc++/123396,
  	rtl-optimization/123444, rtl-optimization/123501, target/117581,
  	target/123484, testsuite/123098, tree-optimization/122843,
  	tree-optimization/122845, tree-optimization/123301,
  	tree-optimization/123525, tree-optimization/123539


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.3
changelog:
  - update from trunk
    - PRs c/123309, c++/120775, c++/122634, c++/123081, c++/123551,
  	debug/121045, driver/108865, driver/123504, ipa/122852, ipa/123542,
  	middle-end/123115, middle-end/123392, middle-end/123573,
  	rtl-optimization/123312, rtl-optimization/123544, target/38118,
  	target/114528, target/120250, target/121240, target/123092,
  	testsuite/122522, tree-optimization/119402, tree-optimization/120322,
  	tree-optimization/123109, tree-optimization/123190,
  	tree-optimization/123530


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.4
changelog:
  - update from trunk
    - PRs ada/68179, ada/123589, algol68/123007, algol68/123653, algol68/123734,
  	analyzer/123145, analyzer/123540, c/123437, c++/122391, c++/123601,
  	c++/123627, c++/123639, c++/123677, c++/123692, c++/123694,
  	diagnostics/122622, fortran/94377, fortran/109512, fortran/123375,
  	ipa/123412, libgcc/123650, libgomp/88707, libgomp/122314,
  	libgomp/122356, libstdc++/114153, middle-end/123697,
  	middle-end/123744, modula2/123739, pch/110746,
  	rtl-optimization/121787, rtl-optimization/122215,
  	rtl-optimization/123380, rtl-optimization/123585, sarif-replay/123056,
  	target/71340, target/113666, target/117575, target/122781,
  	target/122869, target/123279, target/123460, target/123521,
  	target/123584, target/123603, target/123607, target/123626,
  	target/123631, target/123724, target/123742, testsuite/123175,
  	testsuite/123751, tree-optimization/113524, tree-optimization/123061,
  	tree-optimization/123314, tree-optimization/123513,
  	tree-optimization/123602, tree-optimization/123636,
  	tree-optimization/123645, tree-optimization/123656,
  	tree-optimization/123729, tree-optimization/123731,
  	tree-optimization/123736, tree-optimization/123741,
  	tree-optimization/123745, tree-optimization/123753,
  	tree-optimization/123755, tree-optimization/123756


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.5
changelog:
  - update from trunk
    - PRs algol68/123733, algol68/123785, c++/101140, c++/122494, c++/122609,
  	c++/123354, c++/123404, c++/123578, c++/123597, c++/123620,
  	c++/123663, c++/123667, c++/123676, c++/123684, c++/123737,
  	c++/123814, d/122800, fortran/118955, fortran/123772,
  	libstdc++/123758, middle-end/122348, middle-end/123703,
  	middle-end/123709, middle-end/123775, other/67300,
  	rtl-optimization/80357, rtl-optimization/94014,
  	rtl-optimization/123144, target/123780, target/123791, target/123792,
  	tree-optimization/106883, tree-optimization/120258,
  	tree-optimization/121347, tree-optimization/122474,
  	tree-optimization/122749, tree-optimization/123628,
  	tree-optimization/123657, tree-optimization/123767,
  	tree-optimization/123771, tree-optimization/123776,
  	tree-optimization/123778, tree-optimization/123794,
  	tree-optimization/123799, tree-optimization/123803,
  	tree-optimization/123820


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.6
changelog:
  - update from trunk
    - PRs ada/89159, ada/121316, ada/123580, ada/123832, ada/123857, ada/123861,
  	ada/123867, ada/123902, algol68/123959, analyzer/98447,
  	analyzer/116228, analyzer/116865, analyzer/117491, analyzer/122623,
  	analyzer/123880, c/101312, c/102846, c/123500, c/123583, c/123882,
  	c++/38612, c++/102613, c++/102846, c++/110871, c++/110872, c++/113968,
  	c++/114450, c++/121832, c++/122169, c++/122785, c++/123557,
  	c++/123611, c++/123614, c++/123659, c++/123695, c++/123738,
  	c++/123752, c++/123790, c++/123818, c++/123825, c++/123837,
  	c++/123845, c++/123866, c++/123871, c++/123913, c++/123918,
  	c++/123920, c++/123934, c++/123964, c++/123977, c++/124002,
  	cobol/119332, d/116975, d/120096, d/121477, d/122817, d/123046,
  	d/123263, d/123264, d/123349, d/123407, d/123419, d/123422, d/123798,
  	debug/110885, debug/123376, debug/123886, diagnostics/110522,
  	fortran/117303, fortran/123868, fortran/123941, fortran/123952,
  	gcov-profile/121084, gcov-profile/121123, gcov-profile/121409,
  	gcov-profile/123855, ipa/106260, ipa/111036, ipa/116296, ipa/123226,
  	ipa/123416, ipa/123619, libffi/117635, libgomp/113213, libgomp/121813,
  	libitm/69018, libstdc++/86164, libstdc++/114865, libstdc++/117404,
  	libstdc++/120567, libstdc++/123921, middle-end/49330,
  	middle-end/97898, middle-end/118608, middle-end/121661,
  	middle-end/122689, middle-end/123447, middle-end/123575,
  	middle-end/123826, middle-end/123869, middle-end/123876,
  	middle-end/123887, middle-end/123892, middle-end/123978, other/123841,
  	rtl-optimization/106859, rtl-optimization/119982,
  	rtl-optimization/122170, rtl-optimization/123294,
  	rtl-optimization/123322, rtl-optimization/123833,
  	rtl-optimization/123922, target/36503, target/117048, target/121571,
  	target/122097, target/122343, target/123016, target/123206,
  	target/123245, target/123548, target/123604, target/123766,
  	target/123779, target/123806, target/123807, target/123824,
  	target/123870, target/123910, target/123969, target/123971,
  	testsuite/123559, testsuite/123936, translation/89915,
  	tree-optimization/109410, tree-optimization/110043,
  	tree-optimization/114274, tree-optimization/114969,
  	tree-optimization/116747, tree-optimization/121104,
  	tree-optimization/121726, tree-optimization/122197,
  	tree-optimization/122537, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123672,
  	tree-optimization/123849, tree-optimization/123864,
  	tree-optimization/123897, tree-optimization/123898,
  	tree-optimization/123925, tree-optimization/123940,
  	tree-optimization/123958, tree-optimization/123983,
  	tree-optimization/123986


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.7
changelog:
  - update from trunk
    - PRs ada/121576, ada/124025, c++/123616, c++/123640, c++/123823,
  	c++/123889, c++/123984, d/123995, d/124026, fortran/85547,
  	fortran/122949, fortran/123545, fortran/123673, fortran/123961,
  	rtl-optimization/123796, target/123911, target/123926,
  	testsuite/124036, tree-optimization/117217, tree-optimization/123225,
  	tree-optimization/124034


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/124016, ada/124054, ada/124106, ada/124179, ada/124192,
  	ada/124201, ada/124224, ada/124226, ada/124282, ada/124285,
  	algol68/124028, algol68/124049, algol68/124115, analyzer/108400,
  	analyzer/111099, analyzer/113496, analyzer/117369, analyzer/121928,
  	analyzer/123973, analyzer/123981, analyzer/124055, analyzer/124073,
  	analyzer/124104, analyzer/124116, analyzer/124139, analyzer/124188,
  	analyzer/124195, analyzer/124232, c/87591, c/105555, c/119651,
  	c/123365, c/123472, c/123716, c++/98939, c++/101670, c++/102397,
  	c++/119756, c++/120685, c++/120974, c++/121500, c++/121822,
  	c++/122318, c++/122621, c++/123143, c++/123440, c++/123608,
  	c++/123612, c++/123641, c++/123642, c++/123660, c++/123661,
  	c++/123662, c++/123989, c++/124012, c++/124045, c++/124070,
  	c++/124096, c++/124119, c++/124150, c++/124153, c++/124173,
  	c++/124184, c++/124204, c++/124215, c++/124227, cobol/119455,
  	cobol/121499, cobol/122839, cobol/123238, demangler/106641,
  	diagnostics/122001, diagnostics/124014, fortran/78187, fortran/80012,
  	fortran/88076, fortran/99250, fortran/108663, fortran/120505,
  	fortran/121360, fortran/121429, fortran/122491, fortran/123943,
  	fortran/123947, fortran/123949, fortran/124071, fortran/124080,
  	fortran/124208, fortran/124235, fortran/124286, ipa/122856,
  	ipa/123229, ipa/123629, libfortran/88076, libfortran/123366,
  	libstdc++/105580, libstdc++/113450, libstdc++/119745,
  	libstdc++/121402, libstdc++/121771, libstdc++/123176,
  	libstdc++/123875, libstdc++/123908, libstdc++/123991,
  	libstdc++/124015, libstdc++/124024, libstdc++/124124,
  	middle-end/113436, middle-end/123386, middle-end/124056,
  	middle-end/124250, middle-end/124280, other/88472,
  	rtl-optimization/116053, rtl-optimization/116600,
  	rtl-optimization/120169, rtl-optimization/121191,
  	rtl-optimization/123048, rtl-optimization/123381,
  	rtl-optimization/123994, rtl-optimization/124062,
  	rtl-optimization/124079, target/57261, target/80881, target/112400,
  	target/113453, target/115042, target/119979, target/120233,
  	target/120234, target/120241, target/120888, target/122448,
  	target/123137, target/123195, target/123285, target/123556,
  	target/123624, target/124048, target/124094, target/124098,
  	target/124134, target/124136, target/124138, target/124147,
  	target/124162, target/124167, target/124194, target/124236,
  	target/124294, testsuite/103515, testsuite/115827, testsuite/123191,
  	testsuite/124064, translation/118988, tree-optimization/90036,
  	tree-optimization/95825, tree-optimization/99959,
  	tree-optimization/107690, tree-optimization/110091,
  	tree-optimization/114375, tree-optimization/117935,
  	tree-optimization/121103, tree-optimization/122297,
  	tree-optimization/124038, tree-optimization/124068,
  	tree-optimization/124086, tree-optimization/124099,
  	tree-optimization/124108, tree-optimization/124130,
  	tree-optimization/124132, tree-optimization/124142,
  	tree-optimization/124288


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.9
changelog:
  - update from trunk
    - PRs c/122572, c++/123408, c++/123665, c++/123810, c++/124229, c++/124306,
  	c++/124324, c++/124368, cobol/119456, fortran/124330, ipa/60674,
  	libfortran/124330, libstdc++/117402, libstdc++/119197,
  	libstdc++/122217, libstdc++/124363, middle-end/45273,
  	rtl-optimization/123786, rtl-optimization/124041,
  	rtl-optimization/124351, target/64835, target/124165, target/124315,
  	target/124335, target/124336, target/124341, target/124349,
  	target/124366, target/124367, testsuite/122961, testsuite/124320,
  	testsuite/124359, tree-optimization/119568
    - fix -flto -g handling of aarch64 AEABI attributes
      (#2439677, PR target/124365)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.10
changelog:
  - update from trunk
    - PRs ada/107475, ada/120669, ada/124369, ada/124376, algol68/124322,
  	algol68/124372, analyzer/107646, analyzer/124375, analyzer/124433,
  	analyzer/124451, bootstrap/124406, bootstrap/124547, c/97991,
  	c/122866, c/123461, c/123856, c/124230, c++/39057, c++/109521,
  	c++/115852, c++/118482, c++/120039, c++/120285, c++/122559,
  	c++/122786, c++/123618, c++/123622, c++/124118, c++/124145,
  	c++/124154, c++/124200, c++/124297, c++/124307, c++/124309,
  	c++/124311, c++/124331, c++/124388, c++/124389, c++/124390,
  	c++/124397, c++/124399, c++/124404, c++/124417, c++/124425,
  	c++/124431, c++/124440, c++/124447, c++/124456, c++/124459,
  	c++/124466, c++/124472, c++/124474, c++/124478, c++/124483,
  	c++/124485, c++/124489, c++/124493, c++/124494, c++/124496,
  	c++/124575, d/123202, d/124158, driver/69367, driver/69849,
  	fortran/82721, fortran/84779, fortran/93832, fortran/95338,
  	fortran/97818, fortran/102333, fortran/102459, fortran/102596,
  	fortran/103139, fortran/105168, fortran/106946, fortran/110877,
  	fortran/115316, fortran/120286, fortran/120723, fortran/121043,
  	fortran/121743, fortran/122696, fortran/122902, fortran/124161,
  	fortran/124450, fortran/124482, gcov-profile/123923,
  	gcov-profile/124075, ipa/124291, ipa/124462, libfortran/124371,
  	libstdc++/116110, libstdc++/118030, libstdc++/118341,
  	libstdc++/119794, libstdc++/120527, libstdc++/121790,
  	libstdc++/122300, libstdc++/122567, libstdc++/124268,
  	libstdc++/124290, libstdc++/124443, libstdc++/124444,
  	libstdc++/124463, libstdc++/124513, libstdc++/124568,
  	middle-end/120030, middle-end/121159, middle-end/124435,
  	middle-end/124491, middle-end/124552, objc/124260, other/124508,
  	preprocessor/105412, rtl-optimization/121649, rtl-optimization/123094,
  	rtl-optimization/123822, rtl-optimization/124078,
  	rtl-optimization/124439, rtl-optimization/124452,
  	rtl-optimization/124454, rtl-optimization/124476, target/117182,
  	target/122000, target/122925, target/122953, target/123271,
  	target/123749, target/124044, target/124126, target/124333,
  	target/124403, target/124407, target/124409, target/124436,
  	target/124461, target/124565, target/124566, testsuite/112520,
  	testsuite/119930, testsuite/124066, testsuite/124484,
  	translation/124422, tree-optimization/80006, tree-optimization/98064,
  	tree-optimization/120987, tree-optimization/122380,
  	tree-optimization/124037, tree-optimization/124135,
  	tree-optimization/124358, tree-optimization/124528,
  	tree-optimization/124555, tree-optimization/124578


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-5
changelog:
  - Add --skip-dynamic-tags for annocheck
  - annocheck test fails on aarch64 for pinns due to changes in binutils not
    handled by annocheck.
  - See https://sourceware.org/bugzilla/show_bug.cgi?id=33963 for more
    informaton
  - Tempory skip. Remove when annocheck 13.07 or newer is deployed in Fedora
    packit CI


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.0-3
changelog:
  - Release v1.35
  - Initial release of v1.35 for Fedora rawhide (F44) and F43
  - Requires golang 1.25
  - Upstream new features and fixes
  - Urgent Upgrade Note from upstream: "Action required:
    container_spec_memory_limit_bytes has moved from the memory metrics
    category to the new spec category. Update your CRI-O configuration to
    include spec in included_pod_metrics if you rely on this metric."


author: Vladis Dronov <vdronov@redhat.com> - 15.9-25
changelog:
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors (bz 2279099)
  - Minor edits in the rpm scripts and the changelog


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Günther Deschner <gd@samba.org> - 2:4.24.3-1
changelog:
  - Update to Samba 4.24.3
  - resolves: rhbz#2481468
  - resolves: rhbz#2481447 - Security fix for CVE-2026-4480
  - resolves: rhbz#2481875 - Security fix for CVE-2026-2340
  - resolves: rhbz#2481857 - Security fix for CVE-2026-3012
  - resolves: rhbz#2481876 - Security fix for CVE-2026-1933
  - Security fix for CVE-2026-4408
  - Security fix for CVE-2026-3238


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.17-1
changelog:
  - 2.4.17 (fedora#2456363, fedora#2456362, fedora#2454994, fedora#2454993,
    fedora#2454992, fedora#2454990)


author: Paul Howarth <paul@city-fan.org> - 1.7.2-1
changelog:
  - Update to 1.7.2 (rhbz#2391098)
    - Add support for libneon 34, 35
    - Increase buf read size to 64 (fixes read issue on linux 6.16)
    - Allow setting a mount password via DAVFS_PASSWORD
    - Introduce sync_on_lookup option (off by default)
    - Don't compress man pages


author: Paul Howarth <paul@city-fan.org> - 1.7.3-1
changelog:
  - Update to 1.7.3 (rhbz#2447065)
    - Add musl support
    - Fix macro-substitution in manual pages
    - Remove hardcoded neon versions from configure.ac
  - Consider AUTHORS as a license file rather than just documentation


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.25.0-1
changelog:
  - Update to version 1.25.0
    + Resolves: 2416455
    + New BuildRequires: cmake(Qt6LinguistTools)
    + Add translations
    + Add svg icons


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.2.0-1
changelog:
  - Update to 4.2.0 (close RHBZ#2412720)
  - App ID changes from com.github.cassidyjames.dippi to
    com.cassidyjames.dippi


author: Benjamin A. Beasley <code@musicinmybrain.net> - 5.0.2-1
changelog:
  - Update to 5.0.2
  - Correct/update License from GPL-3.0-only AND CC0-1.0 to GPL-3.0-or-later
    AND CC0-1.0
  - Add new Croatian translations for Summary and description


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-2
changelog:
  - Fix a crash in dnf5daemon-server when receiving an unknown locale from
    a D-Bus client (CVE-2026-3836) (bug #2445771)


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-3
changelog:
  - Fix a crash when formatting an RPM scriptlet output containing a non-ASCII
    character in C locale (bug #2443774)


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
changelog:
  - Updated to version 2.5.1
  - Upstream change notes:
    * This patch release fixes `assert()` usage for compatibility with newer
      libc versions and handles byte order correctly in cryptopan plugin to
      work for big endian systems.
    * Commits:
      ac12e05 copyright
      ed3ea49 cryptopan reference implementation
      997f047 cryptopan endian
      fa3cabb assert


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.2-1
changelog:
  - Updated to version 2.5.2
  - Upstream change notes:
    * This patch release fixes compatibility with GNU/Hurd and fixes running
      tests in parallel.
    * Commits:
      ea9c431 GNU/Hurd
      67800d4 Paralell tests take 2
      57dd3e0 Plugins tests
      f5246e4 strptime


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.3-1
changelog:
  - Update to release v0.26.3
  - Resolves CVE-2024-25621: rhbz#2419004, rhbz#2419033, rhbz#2419427
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.5-2
changelog:
  - Add rpminspect.yaml with temporary skip
  - the stack-prot annocheck test is failing on ppc64le and s390x but not
    other arch. Normally should skip
  - skip: stack-prot test because function fatalf is part of the CGO runtime
    library which is compiled without stack protection


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.0.0-1
changelog:
  - Update to release v5.0.0
  - Resolves: rhbz#2414590
  - Upstream notes: 'To avoid confusion with the "v2" and "v3" legacy compose
    file formats, we decided to directly jump to version 5.x'
  - New features and fixes.
  - Major change: 'Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)'


author: Than Ngo <than@redhat.com> - 7.5.3-1
changelog:
  - Update to 7.5.3
    * Fix: Exit with non-zero code if the conversion is aborted due to a binary file
    * Fix: Exit with zero code when an unicode conversion error occurs in quiet mode
    * Updated translations


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.8.1-1
changelog:
  - Update to v0.8.1
  - Drop Patch1 (unbundle picojson - replaced with nlohmann_json upstream)
  - Drop Patch3 (unbundle rang - dependency dropped upstream)
  - Drop Patch4 (libfmt10 compatibility - backport from this release)


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-3
changelog:
  - Add calling a little python script in the install stage to revert
    the (upstream) replacing of directories by a symlinks 
    which causes upgrade problems with rpm for the data package.


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-4
changelog:
  - Add a LUA script in a pretrans section to assist in replacing a directory
    by a symlink (this removes the need for the python script added in
    the previous commit)


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-5
changelog:
  - Forgot to update the changelog date for the previous commit, so fixed this
    with this update.
  - Also fix a typo in the ghost definitions.


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.28.0-1
changelog:
  - Update to 1.28.0
  - Fix FTBFS by forcing std17
  - Close: rhbz#2337186
  - Fix: rhbz#2340116
  - Rebuild for jpegxl (libjxl) 0.11.1


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-ATOMIC_VAR_INIT.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-more-dwarf5-lang.patch
    elfutils-0.192-fix-zsh-profile.patch
    elfutils-0.192-stacktrace-lto.patch
    elfutils-0.192-imasig-fail-free.patch
    elfutils-0.192-strip-ignore-non-ET_REL.patch


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.19.3-2
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13268 Revert
    "Orphaned for 6+ weeks"


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-3
changelog:
  - Rebuild against MIT Kerberos 1.22.2
  - Fix build against NodeJS in F44/45
  - Allow SELinux policy for ipa-otpd in non-IPA environment (standalone SSSD)
  - Fix freeipa-client package scriptlet to not fail when config is missing
  - Resolves: rhbz#2439482


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-8
changelog:
  - Fix SELinux policy for SSSD MFA helpers
  - Fix cases when passkey child was crashing when called from ipa-otpd


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-9
changelog:
  - Ensure proper error code return in case MS-PAC generator not yet enabled
  - Resolves: rhbz#2448253
  - Rebuild against Samba 4.24.0 final release
  - Related: rhbz#2448612


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.23.0-1
changelog:
  - Update to 3.23.0 (CVE-2026-26965, CVE-2026-26955, CVE-2026-26271,
    CVE-2026-25997, CVE-2026-25959, CVE-2026-25955, CVE-2026-25954,
    CVE-2026-25953, CVE-2026-25952, CVE-2026-25942, CVE-2026-25941)
    Resolves: rhbz#2442589
  - Small spec cleanups
  - Enable rdp2tcp channel support


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.0-1
changelog:
  - Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
    CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885,
    CVE-2026-31897)
    Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415
    Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428
    Resolves: rhbz#2447431


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.2-1
changelog:
  - Update to 3.24.2 (CVE-2026-33952, CVE-2026-33977, CVE-2026-33982,
    CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-33986,
    CVE-2026-33987, CVE-2026-33995)
    Resolves: rhbz#2448592


author: Tom Callaway <spot@fedoraproject.org> - 3.18.2-1
changelog:
  - update to 3.18.2
  - make explicit Requires also arch specific to prevent weird multilib combinations


author: Jerry James <loganjerry@gmail.com> - 4.13.1-4
changelog:
  - Fix debuginfo
  - Setting LC_ALL is no longer necessary
  - Use zlib-ng directly instead of via zlib compat


author: Marek Kasik <mkasik@redhat.com> - 3.12.1-4
changelog:
  - Rebuild (poppler)
  - Statically link stdc++ due to undefined references
  -   Assisted-by: Claude Code


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Rename 'gdb-add-rpm-suggestion-script.patch' to
    'gdb-rpm-suggestion-script.patch' and
    'gdb-6.3-rh-testversion-20041202.patch' to
    'gdb-test-show-version.patch'.  The new names better reflect the
    patch contents.


author: Kevin Buettner <kevinb@redhat.com> - 17.1-1
changelog:
  - Rebase to FSF GDB 17.1.
    Deleted: gdb-fix-bg-execution-repeat.patch
    Backport 919ba8ce158e, "bfd: fix build with C23", from Guinevere Larsen,
    fixing RH BZ 2424325.
    Backport "Fix some more C23 const-correctness issues", from Keith Seitz,
    fixing same class of problem described by RH BZ 2424325.
    Backport 777079c67c81, "[gdb/build, c++20] Fix deprecated implicit
    capture in cooked_index::set_contents", from Tom de Vries, fixing more
    FTBS problems.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Remove gcc-gdb-plugin BuildRequires and build with --disable-gdb-compile
    due to this feature's brokenness. Tests using this feature skip cleanly
    without timeouts.  Reduces binary size and attack surface.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit 70b66cf338b14336 to fix RH BZ 2402580.
    This backport will not be needed once we rebase to GDB 18.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Backport upstream commit c1da013915e from Kevin Buettner to fix
    gcore failures caused by glibc 2.42 guard page changes (RHBZ 2413405).
  - Backport upstream commit d2cc16cd7fc from Jan Vrany to fix
    FAILs in gdb.base/fileio.exp caused by macro expansion of
    path components in OUTDIR.


author: Jens Petersen <petersen@redhat.com> - 9.6.6-146
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Jens Petersen <petersen@redhat.com> - 9.8.4-147
changelog:
  - rebase to 9.8.4 from ghc9.8
  - https://downloads.haskell.org/~ghc/9.8.1/docs/users_guide/9.8.1-notes.html
  - https://downloads.haskell.org/~ghc/9.8.2/docs/users_guide/9.8.2-notes.html
  - https://downloads.haskell.org/~ghc/9.8.3/docs/users_guide/9.8.3-notes.html
  - https://downloads.haskell.org/~ghc/9.8.4/docs/users_guide/9.8.4-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.8.4-148
changelog:
  - revert Unique Word64 on i686 to avoid compilation crashes
    https://gitlab.haskell.org/ghc/ghc/-/issues/25904
  - disable haddock for ix86 and make doc-index arch


author: Jens Petersen <petersen@redhat.com> - 9.10.3-150
changelog:
  - rebase to ghc-9.10.3 from ghc9.10
  - https://downloads.haskell.org/~ghc/9.10.1/docs/users_guide/9.10.1-notes.html
  - https://downloads.haskell.org/~ghc/9.10.2/docs/users_guide/9.10.2-notes.html
  - https://downloads.haskell.org/~ghc/9.10.3/docs/users_guide/9.10.3-notes.html
  - new packages: ghc-experimental, ghc-platform, ghc-toolchain, os-string
  - add openSUSE's backport of riscv64 NCG
  - drop --hash-unit-ids


author: Jens Petersen <petersen@redhat.com> - 9.10.3-152
changelog:
  - obsolete ghc9.10
  - reenable building hadrian
  - ppc64le NCG: add an upstream patch for the clrrxi instruction
  - boot again from Rawhide (#2435862)


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-19
changelog:
  - Auto-sync with upstream branch master,
    commit 755798985d0dc2438c546851f926087158955614:
  - aarch64: Fix PT_GNU_PROPERTY checks for static exe (BZ 33713)
  - tst-sig-redzone: Decorate assembly function
  - hurd: check that signal processing does not hurt the x86_64 redzone
  - hurd: also test mmx state restoration
  - mach/hurd: add `bits/in.h`
  - Better terminology for ‘long double’ in manual
  - Update copyright dates not handled by scripts/update-copyrights
  - Update copyright dates with scripts/update-copyrights
  - Pass glibc pre-commit checks
  - malloc_info: fix closing </sizes> tag typo
  - LoongArch: Use generic __builtin_trap in abort.
  - malloc: Fix clang build after 1c588a2187
  - elf: Fix elf/tst-decorate-maps on aarch64 after 321e1fc73f
  - misc: Enable tst-atomic for clang
  - math: Use math_opt_barrier on ldbl-128 powl underflow/overflow handling
  - stdio: Fix tst-vfprintf-user-type on clang
  - x86: Do not use __builtin_isinf_sign for _Float64x/long double
  - x86: Do not use __builtin_fpclassify for _Float64x/long double
  - resolv: Add test for NOERROR/NODATA handling [BZ #14308]


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-21
changelog:
  - Auto-sync with upstream branch master,
    commit e539a269990dac3ff4d2432c0eb6966a5ee4f274:
  - hurd: Fix sigreturn clobbering some xmm registers (Samuel Thibault)
  - Linux: test sizes larger than UINT_MAX for copy_file_range (Xi Ruoyao)
  - Update the bundled <linux/fuse.h> userspace header from Linux 6.18 (Xi Ruoyao)
  - Linux: fix copy_file_range test on Linux >= 6.18 (Xi Ruoyao)
  - Switch currency symbol for the bg_BG locale to euro (Florian Weimer)


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 7b543dcdf97d07fd4346feb17916e08fe83ad0ae:
  - elf: Ignore LD_PROFILE if LD_PROFILE_OUTPUT is not set (bug 33797) (Florian Weimer)
  - hurd: make __thread_set_pcsptp align stack (Samuel Thibault)
  - Update advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0861 (Siddhesh Poyarekar)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915) (Carlos O'Donell)
  - memalign: reinstate alignment overflow check (CVE-2026-0861) (Siddhesh Poyarekar)
  - malloc: Add tst-mallocfork to tests-exclude-threaded exception list (Arjun Shankar)
  - aarch64: Fix LD_AUDIT with GCS in permissive mode (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for GCS handling (Adhemerval Zanella)
  - aarch64: Add LD_AUDIT tests for BTI handling (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for BTI handling (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_fpclassify for _Float64x/long double" (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_isinf_sign for _Float64x/long double" (Adhemerval Zanella)
  - aarch64: update NEWS for 2.43 release (Yury Khrustalev)
  - aarch64: Add LD_DEBUG=security to log BTI and GCS warnings (Yury Khrustalev)
  - tst-if_nameindex.c: Fix minimum buffer size (Samuel Thibault)
  - ldbl-128ibm-compat: Add local aliases for printf family symbols (Sachin Monga)
  - math: Fix powerpc64le -Os build after 6b7067460f (Adhemerval Zanella)
  - x86: Fix x86_64 build failure with -Os (BZ 33367) (Adhemerval Zanella)
  - math: Sync acosh from CORE-MATH (Adhemerval Zanella)
  - math: Sync atanh from CORE-MATH (Adhemerval Zanella)
  - math: Sync asinh from CORE-MATH (Adhemerval Zanella)
  - aarch64: Fix error messages for GCS and BTI incompatible modules (Yury Khrustalev)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-1
changelog:
  - Auto-sync with upstream branch master,
    commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc:
  - po: Incorporate translatins (nl updated, ar new) (Andreas K. Hüttel)
  - Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling (Aurelien Jarno)
  - NEWS: add new section 2.43.1 (Andreas K. Hüttel)
  - Replace advisories directory with file ADVISORIES (Andreas K. Hüttel)
  - Create ChangeLog.old/ChangeLog.32 (Andreas K. Hüttel)
  - version.h, include/features.h: Increase version number (Andreas K. Hüttel)
  - contrib.texi: Add missing accent (Andreas K. Hüttel)
  - tst-cond23: add <support/test-driver.h> include (Aurelien Jarno)
  - install.texi, INSTALL: update versions (Andreas K. Hüttel)
  - contrib.texi: Updates (Andreas K. Hüttel)
  - NEWS: Insert list of fixed security advisories (Andreas K. Hüttel)
  - NEWS: Mention build issues due to const-preserving macros (Andreas K. Hüttel)
  - NEWS: Insert list of fixed bugs (Andreas K. Hüttel)
  - NEWS: Editorial changes (Andreas K. Hüttel)
  - NEWS: Additional items and minor consolidation (Andreas K. Hüttel)
  - NEWS: Group ISO C23 related changes (Andreas K. Hüttel)
  - po: Incorporate translations (Andreas K. Hüttel)
  - Update advisory text for GLIBC-SA-2026-0003 (Adhemerval Zanella)
  - Add advisory text for CVE-2025-15281 (Carlos O'Donell)
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814) (Adhemerval Zanella)
  - libc.pot: regenerate (Andreas K. Hüttel)
  - Linux: fix tst-copy_file_range-large failure in 32-bit glibc build on 64-bit kernel [BZ 33790] (Xi Ruoyao)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-2
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 48f5a05a7a1eeb9e0567ab429f654648f831307f:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Don't include <bits/openat2.h> directly (bug 33848) (Andreas Schwab)


author: Milan Crha <mcrha@redhat.com> - 50~beta-7
changelog:
  - dnf5-plugin: Update the dnf5 plugin with the recent upstream fixes
  - reload package information after repository is enabled
  - change when repository GPG keys are auto-accepted
  - show fedora-third-party repositories in their section


author: Leo Sandoval <lsandova@redhat.com> - 2.12-51
changelog:
  - Revert 'Increase EFI max allocation to max usable address'
  - Related: #2427945
  - Related: #2263643
  - Fix ppc64le build (Hans de Goede)
  - Fix 20-install.sh installing the hmac under the wrong filename (Hans de Goede)


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 2.12-53
changelog:
  - Revert "Add support for Linux EFI stub loading on arm architectures"
    this fixes aarch64 kernels with stubble-/systemd-stub not booting


author: Josue Hernandez <josherna@redhat.com> - 2.12-54
changelog:
  - verifiers: Allocate EFI pages instead of grub_malloc for verified buffer
  - Resolves: #2427945
  - Resolves: #2263643


author: Leo Sandoval <lsandova@redhat.com> - 2.12-56
changelog:
  - Revert 'verifiers: Allocate EFI pages instead of grub_malloc for verified buffer'
  - Resolves: #2453022
  - Resolves: #2451630
  - Resolves: #2450672
  - Related: #2427945
  - Related: #2263643


author: Milan Crha <mcrha@redhat.com> - 4.22.1-2
changelog:
  - Add a patch "gtkapplication-wayland: Add a missing NULL check when
    forgetting a window"
  - Resolves: rhbz#2450986


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-2
changelog:
  - Modernize spec: use %make_install and add %check section
  - Use %make_install instead of manual make install
  - Move validation to %check
  - Remove deprecated %ldconfig_scriptlets
  - Fix trailing whitespace in Summary


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-3
changelog:
  - Modernize macros and paths
  - Use %{_metainfodir} for metainfo
  - Sort BuildRequires and change Source0 to Source
  - Clean up %prep chmod calls
  - Add %license to doc subpackage


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-4
changelog:
  - Convert BuildRequires to pkgconfig style
  - Use pkgconfig() for atk, cairo, gtk+-3.0, libofx, and libsoup-3.0


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-5
changelog:
  - Final cleanup of spec file
  - Add -p1 to %autosetup
  - Use trailing slashes for directories in %files
  - Consistent use of %{_metainfodir}


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.6-1
changelog:
  - hp-scan command failed to run and gives an error (fedora#2395809)
  - use new GPG key from HP - new key was used as fix for CVE-2025-43023


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-1
changelog:
  - Bump to 1.5.18
  - Fix Backspace in prediction
  - Update translations
  - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI
  - Delete gnome-themes-extra from Fedora CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~alpha1-3
changelog:
  - Resolves: #2321990#c10 Keep xinit postun in ibus for back compatibility
  - Resolves: #2418564 Do not install ibus-xinit in COSMIC desktop
  - Resolves: #2418670 Disable X11 display in GTK3 Wayland with hibernation
  - Resolves: #2418908 Delete Python2 and subpackage python3-ibus
  - Fix GTK3 build in src/tests/ibus-keypress
  - Add warning to clean VALA files in configure
  - Order locale compose and user compose


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~alpha1-4
changelog:
  - Resolves: #2419469 Fix SEGV with double bus_name_acquired_cb()
  - Resolves: #2424256 Delete Requires desktop-file-utils in spec
  - Resolves: #2425585 Separate lxqt-wayland-session and lxqt-x11-session in spec
  - Resolves: #2428238 Add awesome in spec
  - Rebase: #1797120 Fix assertion in panel_binding_construct()
  - Connect delete surrounding text in ibus-wayland
  - Fix Backspace after commit-text in Ghostty in ibus-wayland


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~rc1-1
changelog:
  - Bump to 1.5.34-rc1
  - Update translations
  - Fix "no memory" error with focus changes in Sway
  - Resolves #2444009 Latch key in Latvian(tilde) keymap
  - Fix only GTK3 builds
  - Close leaked keymap fd on early return in ibus-wayland


author: Packit <hello@packit.dev> - 44-1
changelog:
  Changes with 44
  ----------------
    - [RFC] main: print pretty json manifest (#414)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: document details about  {,bib}cmd{ManifestFromCobra,Build} (#402)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: fix anaconda-iso mTLS key extraction (#404)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    - bib: small cleanups (#400)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cmd: move `awscloudNewUploader` back into upload.go (#397)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: remove bibupload as it was never exposed to the public (#405)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - data: install tmpfiles.d/image-builder.conf to auto-clean cache (#418)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: error when image-builder is used to create anaconda-iso (#401)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: add rhel specific tests (#403)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 45-1
changelog:
  Changes with 45
  ----------------
    - deps: bump images to 0.231.0 (#425)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2026-01-05


author: Packit <hello@packit.dev> - 47-1
changelog:
  Changes with 47
  ----------------
    - Revert "spec: Use gosource macro for Source0" (#433)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-16


author: Packit <hello@packit.dev> - 48-1
changelog:
  Changes with 48
  ----------------
    - Add pxe-tar-xz to bib types and add boot tests for f43, stream9, and stream10 (#436)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support rootless bootc-image-builder (#445)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: fix constant format string (#438)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - tests: Fix bootc pxe testing (#439)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 50-1
changelog:
  Changes with 50
  ----------------
    - SPEC: define default permissions for /var/cache/image-builder (#454)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/cache from 4 to 5 (#434)
      - Author: {}, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - deps: bump Go to 1.24.12 and use new Go functions (#452)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to v0.240.0 (#456)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 51-1
changelog:
  Changes with 51
  ----------------
    - go.mod: update osbuild/images to v0.243.0 (#457)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-19


author: Packit <hello@packit.dev> - 53-1
changelog:
  Changes with 53
  ----------------
    - chore: bump dependencies via gobump (#475)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: allow specifying AWS credentials profile (#443)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: bump images to 0.248.0 (#479)
      - Author: Simon de Vlieger, Reviewers: Nobody
    - docs: update COPR command for RHEL (#477)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: bump ISO timeout (#469)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-03-13


author: Packit <hello@packit.dev> - 55-1
changelog:
  Changes with 55
  ----------------
    - chore: bump dependencies via gobump (#460)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal
    - deps: bump images (#483)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-03-24


author: Akira TAGOH <tagoh@redhat.com> - 1.8.10-1
changelog:
  - New upstream release.
  - Reflect correct environment variables to input method process.
    Resolves: rhbz#2324342
  - Correct DBus service filename
    Resolves: rhbz#2322097


author: Akira TAGOH <tagoh@redhat.com> - 1.8.11-1
changelog:
  - New upstream release.
  - Fix D-Bus session lifetime issue.
    Resolves: rhbz#2402652
  - Reset gtk-im-module gsettings key if no actions required for imsettings
    Resolves: rhbz#2402681


author: Mikhail Medvedev 1.5.2-1
changelog:
  - Fix: Memory leaks
  - Fix: Gigadevice status registers write error
  - Added new SPI chip sizes
  - Added Fidelix, Zetta, MXIC OTP algorithm
  - Added support for new Boya, Winbond chips


author: Mikhail Medvedev 1.5.3-1
changelog:
  - Last version of QHexEdit used
  - Hex-functions optimised
  - Added support GIANTEC, DOSILICON NOR FLASH chips
  - Fix: incorrect uninstall script
  - Fix: i2C 128K size is repeated twice
  - Fix: error calculating file size


author: Mikhail Medvedev 1.6.1-1
changelog:
  - Add new feature: compare files
  - Add new feature: fill test array
  - Fix: when the page size is changed, the buffer is cleared
  - Fix: the code is executed twice and the code slows down the display of the interface


author: Mikhail Medvedev 1.6.2-1
changelog:
  - Fix: program crashed if security registers was less than 256 bytes
  - Fix: Information in the status bar disappears when hovering over a menu
  - Added comparison of INTEL HEX and ASUS CAP with other files
  - Added close and minimise buttons for subordinate forms
  - New chips added to database
  - Chip information form code optimized


author: Mikhail Medvedev 1.7.1-1
changelog:
  - Fix: pressing the Stop key did not stop auto operations
  - Added support for SPI NAND flash
  - Added traditional chinese translation
  - New chips added to database


author: Mikhail Medvedev 1.7.2-1
changelog:
  - Fix: NAND Flash information form freeze
  - Added new images for CH341A v1.7    
  - Added programmer type menu
  - Added support for the AT24CM02 chip


author: Mikhail Medvedev 1.7.3-1
changelog:
  - Fix: Incorrect HexEdit size when starting the program
  - Added: saving program settings to an ini file


author: Mikhail Medvedev 1.8.1-1
changelog:
  - Fix: increased interface speed
  - Fix: increased SPI NOR Flash operations speed
  - Fix: incorrect chip page sizes values removed
  - Fix: unused files removed
  - Added: support for the CH347T programmer


author: Mikhail Medvedev 1.8.2-1
changelog:
  - Fix: error reading/writing data from I2C chips on the CH347T version 5.44
  - Fix: bit error during NOR/NAND operations in the CH347V1.1 programmer
  - Added: showing the programmer revision function
  - Added: erase check function
  - Added: filling code function


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-1
changelog:
  - New upstream snapshot.
  - Fixes CVEs 2025-11494, 2025-11495, 2026-2341, 2026-3441, 2026-3442.
    https://bugzilla.redhat.com/show_bug.cgi?id=2402843
    https://bugzilla.redhat.com/show_bug.cgi?id=2402846
    https://bugzilla.redhat.com/show_bug.cgi?id=2438918
    https://bugzilla.redhat.com/show_bug.cgi?id=2443834
  - Fixes CVEs 2025-69644, 2025-69645, 2025-69646.
    https://bugzilla.redhat.com/show_bug.cgi?id=2445281
    https://bugzilla.redhat.com/show_bug.cgi?id=2445284
    https://bugzilla.redhat.com/show_bug.cgi?id=2446276
  - Fixes FTBFS.
    https://bugzilla.redhat.com/show_bug.cgi?id=2434680
  - Relax BR of itcl/itk/iwidgets.
  - Patch "libtool_tag" to force C++ language tagging in libtool.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.1-0]
changelog:
  - Turn on ASUS_ARMOURY driver, fixes RHBZ 2433246 (Justin M. Forbes)
  - redhat/kernel.spec.template: Make -uki-dtbloader provide kernel-core-uname-r (Hans de Goede)
  - Linux v6.19.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.4-0]
changelog:
  - media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and XPS 14 9440 (Hans de Goede)
  - Linux v6.19.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.6-0]
changelog:
  - net: macb: Fix tx/rx malfunction after phy link down and up (Kevin Hao)
  - net: macb: Replace open-coded device config retrieval with of_device_get_match_data() (Kevin Hao)
  - net: macb: convert to use .get_rx_ring_count (Breno Leitao)
  - net: cadence: macb: Discard pm_runtime_put() return value (Rafael J. Wysocki)
  - arm64: dts: broadcom: bcm2712: Add watchdog DT node (Stanimir Varbanov)
  - arm64: dts: broadcom: bcm2712: Enable RNG (Peter Robinson)
  - fedora: minor beeper cleanups (Peter Robinson)
  - Add config introduced in 6.19.4 (Justin M. Forbes)
  - Linux v6.19.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.7-0]
changelog:
  - Add some BugsFixed by 6.19.7 (Justin M. Forbes)
  - drm/i915/psr: Compute psr_entry_setup_frames into intel_crtc_state (Jouni Högander)
  - drm/i915/psr: Disable PSR on update_m_n and update_lrr (Jouni Högander)
  - Turn on GPIB for Fedora (Justin M. Forbes)
  - drm/i915/psr: Fix for Panel Replay X granularity DPCD register handling (Jouni Högander)
  - drm/dp: Add definition for Panel Replay full-line granularity (Jouni Högander)
  - drm/i915/display: Allow async flip when Selective Fetch is enabled (Jouni Högander)
  - drm/i915/psr: Perform full frame update on async flip (Jouni Högander)
  - drm/i915/psr: Set plane id bit in crtc_state->async_flip_planes for PSR (Jouni Högander)
  - drm/i915/psr: Move sink_sync_latency to intel_connector (Jouni Högander)
  - drm/i915/psr: Move sink PSR and Panel Replay booleans to intel_connector (Jouni Högander)
  - drm/i915/psr: Move Panel Replay DSC sink support data to intel_connector (Jouni Högander)
  - drm/i915/psr: Clear pr_dpcd as well on disconnect (Jouni Högander)
  - drm/i915/psr: Move pr_dpcd and psr_dpcd to intel_connector (Jouni Högander)
  - drm/i915/psr: Compute Panel Replay/Adaptive Sync coexistence behavior (Jouni Högander)
  - drm/i915/psr: Use SU granularity information available in intel_connector (Jouni Högander)
  - drm/i915/psr: Add panel granularity information into intel_connector (Jouni Högander)
  - Work around binutils update in s390x perf (Justin M. Forbes)
  - iommu: Fix mapping check for 0x0 to avoid re-mapping it (Antheas Kapenekakis)
  - Revert the UKI dtbloader for F42 (Justin M. Forbes)
  - Turn on release_targets for F43/F42 (Justin M. Forbes)
  - Linux v6.19.7


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.8-0]
changelog:
  - Fix mute LED on HP OmniBook 7 Laptop 16 (Justin M. Forbes)
  - Add Lenovo bug to BugsFixed for 6.19.8 (Justin M. Forbes)
  - Turn on Uniwill x86 platform driver (Justin M. Forbes)
  - ASoC: SDCA: Add ASoC jack hookup in class driver (Charles Keepax)
  - Linux v6.19.8


author: Augusto Caringi <acaringi@redhat.com> [6.19.9-0]
changelog:
  - arm64: dts: broadcom: bcm2712-rpi: Move the firmware node down 1 level (Rob Herring (Arm))
  - arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712-rpi-5-b: add pinctrl properties for csi i2cs (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712: add camera backend node pispbe (Gregor Herburger)
  - arm64: dts: broadcom: rp1: add csi nodes (Gregor Herburger)
  - arm64: dts: broadcom: rp1: add i2c controller (Gregor Herburger)
  - mfd: bcm2835-pm: Add BCM2712 PM device support (Phil Elwell)
  - mfd: bcm2835-pm: Introduce SoC-specific type identifier (Phil Elwell)
  - arm64: dts: broadcom: bcm2712: Add V3D device node (Maíra Canal)
  - pmdomain: bcm: bcm2835-power: Fix broken reset status read (Maíra Canal)
  - arm64: dts: imx93-11x11-frdm: enable additional devices (Francesco Valla)
  - arm64: dts: imx93-11x11-frdm: Add MQS audio support (Daniel Baluta)
  - arm64: dts: freescale: add support for NXP i.MX93 FRDM (Fabian Pflug)
  - Revert "Fix mute LED on HP OmniBook 7 Laptop 16" (Justin M. Forbes)
  - Linux v6.19.9


author: Augusto Caringi <acaringi@redhat.com> [6.19.10-0]
changelog:
  - Add entries for 6.19.10 to BugsFixed (Justin M. Forbes)
  - Documentation: hid: intel-ish-hid: Document PRODUCT_FAMILY firmware matching (Vishnu Sankar)
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Vishnu Sankar)
  - Add BugsFixed for 6.19.10 (Justin M. Forbes)
  - drm/amdgpu: rework how we handle TLB fences (Alex Deucher)
  - Linux v6.19.10


author: Marie Loise Nolden <loise@kde.org> - 5.1.3-12
changelog:
  - do not use webkit anymore so switch to webengine available arches only
    (will be so for Qt6/KF6 port later anyway)


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Richard Berger <richard.berger@outlook.com> - 20250612-1
changelog:
  - Version bump to 20250612
  - disable kim-api (orphaned package)
  - add patch to avoid segfault in Fortran interface


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.0-1
changelog:
  - Update to v4.0
  - Drop Patch1 (crash in lazbuild) - issue fixed upstream
  - Drop Patch2 (Qt5 segfault) - backport from this release
  - Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -> "LGPL-2.0-only WITH Independent-modules-exception")


author: Kalev Lember <kalevlember@gmail.com> - 1:1.41.0-1
changelog:
  - Update to 1.41.0
  - Build with llvm 20
  - Re-bootstrap on ppc64le to switch to 128-bit IEEE long double ABI


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.5-1
changelog:
  - Update to version 6.5.5
  - Drop soname patch, use new configure option --enable-librelease instead
  - Unbundle yaml-cpp, using new configure option --with-yaml-cpp
  - EPEL 7 EOL specfile cleanup


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Python Maint <python-maint@redhat.com> - 21.0.0-3
changelog:
  - Rebuilt for Python 3.14.0rc2 bytecode
  - Plus rebuild w/ liborc-2.2.0 + orc-format-1.1.1 (i.e. liborc-2.2.0-2)


author: Remi Collet <remi@remirepo.net> - 1.30.6-2
changelog:
  - temporarily drop man pages on Fedora 44 as FTBFS
    reported as https://jira.mongodb.org/browse/CDRIVER-6210


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Mattia Verga <mattia.verga@proton.me> - 2.1.7-1
changelog:
  - Update to 2.1.7 (Fedora#2419094)
  - Switch to use system's hidapi libs
  - QT client now built on QT6


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Remi Collet <remi@remirepo.net> - 1.1.4-8
changelog:
  - fix test suite with memcached 1.6.40
    reported as https://github.com/awesomized/libmemcached/issues/161
    using fix from https://github.com/awesomized/libmemcached/pull/162


author: Jerry James <loganjerry@gmail.com> - 3.0.0-5
changelog:
  - Use the boost version of pdqsort
  - Drop Zlib from the License field
  - Build with the cmake buildsystem
  - Support soplex and scip in a non-bootstrap build


author: Jerry James <loganjerry@gmail.com> - 3.5.2-1
changelog:
  - Version 3.5.2
  - Drop all patches
  - Add MIT to license due to rx-ranges and magic_enum
  - Drop the doc subpackage due to unavailable dependencies
  - Use HPCombi on aarch64


author: Petr Písař <ppisar@redhat.com> - 0.7.36-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (upstream GH#616)


author: Milan Crha <mcrha@redhat.com> - 3.6.6-6
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Davide Cavalca <dcavalca@fedoraproject.org> - 23-8
changelog:
  - Convert license tag to SPDX
  - Update spec to the latest packaging guidelines
  - Disable broken test on ppc64le; Fixes: RHBZ#2261345


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.01.12-1
changelog:
  - update to 2026.01.12 (resolves rhbz#2428676)
  - switch Source URL to https newly provided by upstream


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.02.26-1
changelog:
  - update to 2026.02.26 (resolves rhbz#2442890)
  - add strict dependency on main package to -tools subpackage


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.287-3
changelog:
  - Add explicit folder definitions for cases where XDG Base Directory spec
    variables are not defined


author: Michal Schorm <mschorm@redhat.com> - 3:11.8.5-100
changelog:
  - Disable the 'distribution default' in MariaDB 10.11 (package 'mariadb10.11')
  - Enable the 'distribution default' in MariaDB 11.8 in this package


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.15-100
changelog:
  - Disable the 'distribution default' in MariaDB 10.11 in this package
  - Enable the 'distribution default' in MariaDB 11.8 (package 'mariadb11.8')


author: Jonathan Wright <jonathan@almalinux.org> - 4.3-6
changelog:
  - fix FTBFS on gcc15 rhbz#2340833
  - fix permissions on /usr/share/mdadm to be world-readable rhbz#2322402


author: Sandro Mani <manisandro@gmail.com>
changelog:
  - Backport fixes for CVE-2025-11494, CVE-2025-11495, CVE-2025-11082,
    CVE-2025-11081, CVE-2025-11083


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: psklenar@redhat.com <psklenar@redhat.com> - 5.8.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: Tomas Halman <thalman@redhat.com> - 2.4.16.11-1
changelog:
  Rebase to version 2.4.16.11
  - Resolves: rhbz#2357672 - mod_auth_openidc-2.4.16.11 is available
  - Resolves: CVE-2025-31492 mod_auth_openidc allows
              OIDCProviderAuthRequestMethod POSTs to leak protected data


author: Tomas Halman <thalman@redhat.com> - 2.4.17.2
changelog:
  Rebase to new version, opt in for autorelease and autochangelog
  - Resolves: rhbz#2361581 - mod_auth_openidc-2.4.17.2 is available


author: Sérgio Basto <sergio@serjux.com> - 0.40.0-1
changelog:
  - Update mpv to 0.40.0
  - filesystem package owns completions folders, no need to co-own
    these directories anymore


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Michel Lind <salimma@fedoraproject.org> - 2.102-1
changelog:
  - Update to 2.102 upstream release; Resolves: rhbz#2334057
  - Fix build with GCC 15; Resolves: rhbz#2340933


author: Timothée Ravier <tim@siosm.fr> - 2.23.0-4
changelog:
  - Fix macro expansion in description
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Use SPDX identifiers for license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_3


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.23.0-9
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Tarulia Dulacre <mihawk.90+git@googlemail.com> - 2.4.3-1
changelog:
  - Update to 2.4.3 (rhbz#2372785)
  - change Supplements to Enhances reverse weak dependency (rhbz#2369371)


author: Marcin Juszkiewicz - 1.17.0-11
changelog:
  - skip 3 tests on riscv64: test_float8_e4m3fn_negative_nan,
    test_float8_e5m2_negative_nan, test_maxpool_2d_uint8_cpu


author: Dominik Mierzejewski <dominik@greysector.net> - 0.2.0.4-1
changelog:
  - update to 0.2.0.4 (resolves rhbz#2399635)
  - generate SO version from release version automatically


author: Simon Pichugin <spichugi@redhat.com> - 2.6.10-4
changelog:
  - Fix LDAP initialization does unnecessary resolution of hostname (rhbz#2331728)
  - Convert STI tests to FMF (rhbz#2382998)


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-6
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex


author: Packit <hello@packit.dev> - 153-1
changelog:
  Changes with 153
  ----------------
    - CloudAPI: fix `/compose/{id}/manifests` endpoint behavior on manifest generation errors (HMS-9501) (#4885)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    - Many: adjust code to unified rpmmd.Package struct (HMS-9504) (#4889)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test/api/gcp: set root partition size to at least 4 GiB (#4879)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20251001 (#4880)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - build(deps): bump actions/setup-go from 5 to 6 (#4853)
      - Author: dependabot[bot], Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore: bump dependencies via gobump (#4891)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add pxe-tar-xz image type (HMS-9472) (#4882)
      - Author: Lucas Garfield, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - executor: remove internet access entirely (HMS-9304) (#4884)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - go.mod: update osbuild/images to v0.202.0 (#4886)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - internal/cloudapi: rename OverrideSerializeManifestFunc for consistency (#4887)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    - internal/worker: delete unneeded compatibility layers (HMS-9455) (#4875)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 154-1
changelog:
  Changes with 154
  ----------------
    - CI: run testing on RHEL 9.8 and 10.2 nightly (HMS-9226) (#4893)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20251023 (#4905)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4895)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - cloudapi: add new dnf customizations [HMS-9335] (#4899)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - cloudapi: split out resolver job enqueueing into a separate function (#4894)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - fix worker AMI builds by not running mock as root (#4902)
      - Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers
    - gitlab: only update github status at the end of the pipeline(s) (#4900)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane, Sanne Raymaekers
    - go.mod: update images to v0.209.0 (#4901)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: update osbuild/images to v0.208.0 (#4898)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Ondřej Budai
    - test/cases/usbi-wsl: delete azure resources in order (#4896)
      - Author: Sanne Raymaekers, Reviewers: Simon de Vlieger, Tomáš Hozza
    - worker: support partial results (HMS-9343) (#4897)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Numan Siddique <numans@ovn.org> - 24.09.2-04
changelog:
  - Update the OVN sources to upstream release v24.09.2
    with the base OVN commit df4f80a60d4cd712870aa73d32d5677448c11c78
    and OVS commit 9e07a69bbb2a7d3eb35f9b487161c50cfa5bd65e
    The below commits are also synced:

  - Prepare for 24.09.3.
  [Upstream: 0a899586b9ec222b335a956021971de1c2dd2312]

  - ic: Fix NULL ptr deref on log of duplicate routes.
  [Upstream: 5a19ae8fa2965e4bf6864f84dfd1adef85ba4b13]

  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes.
  [Upstream 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]

  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-1
changelog:
  - Updated the OVN sources to the upstream release v25.09.2 with the
    commit e3e0587865d8f02d0a8f72de53b82e464c5029d8.


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-82
changelog:
  - Updated the OVN sources to pick up the commits from v25.09.2 till the
    tip of branch-25.09 (c7066edbc3985f06c6bfa45e3724088baa97c4bd).
  - Updated the OVS sources to the branch-25.09 OVS submodule
    commit da6b84d691593e57951bcc5f2f916336c6e0d5cc.


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260507.g1afd4ed-1
changelog:
  - Install pesto, its SELinux policy, and the man page from the spec file
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_01_20.386b5f5..2026_05_07.1afd4ed


author: Sam Feifer <sfeifer@redhat.com> - 7.0.2-2
changelog:
  - Update selinux policy to fix pmda-hdb selinux issue
  - Patch pmda-hdb to fail gracefully when connection fails


author: Paul Howarth <paul@city-fan.org> - 0.48-1
changelog:
  - Update to 0.48
    - Performance: Optimize hot paths in Clone.xs
    - Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings
    - Fix: Don't require MGf_DUP flag for ext magic duplication
    - Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
    - Fix t/10-deep_recursion.t for Windows
    - Fix C89 declaration-after-statement violations in Clone.xs
    - Fix deep recursion stack overflow on Windows
    - Fix cloning of Math::BigInt::GMP objects (GH#16)
    - Fix cloning of threads::shared data structures (GH#18)
    - Add thread safety test for Class::DBI-like patterns (GH#14)
    - Add comprehensive documentation with examples and limitations
    - Improve README.md structure and installation instructions
    - Add DBI + DBD::SQLite as recommended test dependencies
    - Fix weakened reference cloning via deferred weakening (GH#15)
    - Fix memory leak when cloning non-existent hash values (GH#42)
    - Fix segfault when cloning DBI database handles (GH#27)
    - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)
    - Replace static recursion_depth with stack parameter
    - Fix C++ style comments in Clone.xs for C89 portability
    - Fix memory leak in Clone.xs (GH#42)
    - Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 aka CPAN RT#97525)
    - Rename tests with more readable names
    - Remove TODO from CoW test
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.219-1
changelog:
  - Update to 2.219
    - Add PERL_UNUSED_DECL for trace to silence clang warning
    - Fix indentation in Lzma.xs that triggers a clang warning
    - Remove vestigial references to Pod::Markdown (GH#14)
    - Fix POD typo
    - Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK
      (GH#16)
    - Remove unused constants (GH#17)
    - Documentation improvements (GH#15)


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 4.41-1
changelog:
  - Update to 4.41
    - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
    - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
    - Fix incr_parse single-quote string delimiter (GH#245)
    - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
      truncated input (GH#244)


author: Paul Howarth <paul@city-fan.org> - 0.63-1
changelog:
  - Update to 0.63
    - Remove the non-portable tests for Perl's "super" code points; testing
      values beyond 0x7FFF_FFFF isn’t necessary
    - Documentation typo corrections


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64
    - Unicode::UTF8 now allows noncharacters; they receive no special handling
      and are processed like any other code point
    - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
      (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
      reserved but should be allowed in interchange:
      https://www.unicode.org/versions/corrigendum9.html


author: Paul Howarth <paul@city-fan.org> - 0.65-1
changelog:
  - Update to 0.65
    - C99-compliant compiler is now required for Unicode::UTF8
    - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
      validation for non-ASCII input; this approach resulted in a 900% throughput
      improvement on English text and a 200% improvement on Swedish text compared
      with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.66-1
changelog:
  - Update to 0.66
    - Rewrote the UTF-8 validator using a shift-based DFA from
      https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
      up to 10x faster decoding compared with Encode.pm


author: Paul Howarth <paul@city-fan.org> - 0.68-1
changelog:
  - Update to 0.68
    - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
      builds
    - Use Dist::Zilla for the distro
  - Package new LICENSE file
  - Drop hacks related to use of Module::Install, no longer needed


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Drop upstreamed C23 patch
  - Add patch to properly detect the secure_getenv function
  - Figure the License fields out all over again
  - Rename swi-prolog-nox to swi-prolog-cli
  - Combine swi-prolog-x into swi-prolog-win


author: Adam Williamson <awilliam@redhat.com> - 6.6.4-3
changelog:
  - Backport MR #99 to fix launcher icon when selecting dark mode
  - Backport MR #100 to maybe fix strange behavior in wifi page


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.3-1
changelog:
  - New version
    Resolves: rhbz#2379297
  - Updated cyrus-imapd comment in config to point to the correct location
    Related: RHEL-63089


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.5-1
changelog:
  - New version
    Resolves: rhbz#2406450
  - Changed protocol for downloading sources from FTP to HTTP (HTTPS isn't supported)


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.10.7-3
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-128018


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.0-1
changelog:
  - Update to 4.7.0 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-0.html
  - Add sysusers.d config file to allow rpm to create users/groups automatically.
  - Modernise spec file


author: Devrim Gunduz <devrim@gunduz.org> - 4.7.1-1
changelog:
  - Update to 4.7.1 per changes described at:
    https://www.pgpool.net/docs/latest/en/html/release-4-7-1.html


author: Petr Khartskhaev <pkhartsk@redhat.com> - 2.3.0-2
changelog:
  - Added a tmt test to run upstream's installcheck and specified
    instructions for manual testing in README


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Tom spot Callaway <spotaws@amazon.com> - 2.9.4-2
changelog:
  - only run the tests on architectures where this app is likely to be
    actually used, due to itenerant failures on the other architectures


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-5
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/fixes_boost.patch.


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-6
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/boost-1.89.patch.


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.81-1
changelog:
  - New version
    Resolves: rhbz#2275179
  - Fixed vulnerability allowing recovery of NIST P-521 private keys
    Resolves: CVE-2024-31497


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-2
changelog:
  - Security fixes for CVE-2025-47273, CVE-2024-47081 and CVE-2025-50181
  - Fixes: rhbz#2367430, rhbz#2372476, rhbz#2373817


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.19-11
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431977


author: Miro Hrončok <miro@hroncok.cz> - 7.3.19-1
changelog:
  - Fork pypy3.11 from pypy3.10
  - Make this the main pypy3 on Fedora 42+
  - Obsolete the removed pypy3.9 packages


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 46.0.3-1
changelog:
  - Update to v46.0.3
  - Removed the deprecated get_attribute_for_oid method on
    CertificateSigningRequest. Users should use get_attribute_for_oid()
    instead.
  - Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the
    cipher module. These are still available in Decrepit cryptography.
  - In X.509, when performing a PSS signature with a SHA-3 hash, it is now
    encoded with the official NIST SHA3 OID.
  - Added support for free-threaded Python 3.14.


author: Miro Hrončok <miro@hroncok.cz> - 7.0.0-8
changelog:
  - python3-psutil-tests: Add dependencies, don't package test_scripts
  - pytest is Recommended as it is optional but preferred
  - procps-ng is needed to run some tests


author: Michel Lind <salimma@fedoraproject.org> - 7.2.2-1
changelog:
  - Update to 7.2.2 upstream release
  - Resolves: rhbz#2396273
  - Refactor test runs
  - Drop the tests subpackage, removed in 7.2.0
  - Enforce that license file is shipped


author: Danny Colin <contact@dannycolin.com> - 0.36.0-1
changelog:
  - New release 0.36.0
  - Update license information. We only need to keep MIT since the GPLed
    widgets have been removed from the repository.
  - Update pyproject_buildrequires declaration.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.15-46
changelog:
  - Add RPM Provides for python3.6-libs, python3.6-devel, python3.6-idle, python3.6-tkinter, python3.6-test


author: Germano Massullo <germano.massullo@gmail.com> - 4.7.0-1
changelog:
  - 4.7.0 release
  - Moved from tar.gz to tar.xz upstream file and updated Source0
  - Removed EL7 and EL8 leftovers
  - Moved from Qt5 to Qt6
  - Added cmake.patch


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Cristian Le <git@lecris.dev> - 7.5-1
changelog:
  - Update to 7.5 (rhbz#2093576,rhbz#2341257,rhbz#2350099)
  - Reworked most of the packaging
  - Use CMake build system
  - Use %forgemeta macros
  - Added devel packages
  - Debundled what could be debundled and commented on the rest


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-7
changelog:
  - Fix for CVE-2026-41035
  - Fixing bad time in rsync logs
  - Fixing regression from CVE-2024-12086 fix
  - Fixing improper clearing of DISPLAY env variable


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:2.37.0-2
changelog:
  - Properly generate Rust BuildRequires on Fedora
  - Update License (for s390utils/s390utils-base) to reflect Rust deps.


author: Dan Horák <dan[at]danny.cz> - 2:2.41.0-2
changelog:
  - rebuilt for rust-openssl CVEs
  - Resolves: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: Michel Lind <salimma@fedoraproject.org> - 2.5.2-4
changelog:
  - Fix FTBFS on releases with glibc >= 2.43; Resolves: rhbz#2435113
  - Drop compat conditionals for Fedora >= 42, 41 is EOL


author: Martin Osvald <mosvald@redhat.com> - 1.8.0.3-1
changelog:
  - Update to 1.8.0.3 (rhbz#2307725)
  - Resolves: CVE-2024-54661 (rhbz#2330520)
  - Resolves: non-working ipv6-join-group option (rhbz#2352860)
  - Resolves: FTBFS in Fedora (rhbz#2385633)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Peter Czanik <peter@czanik.hu> - 4.9.0-5
changelog:
  - add a couple of bug fixes for various crash and message loss problems:
    0001-Merge-pull-request-5437-from-HofiOne-fix-ack-tracker.patch
    0002-Merge-pull-request-5441-from-HofiOne-fix-mem-leaks.patch
    0003-Merge-pull-request-5445-from-beni-atlnz-log-writer-c.patch
    0004-Merge-pull-request-5447-from-therandomstring-s3-fix-.patch


author: Peter Czanik <peter@czanik.hu> - 4.10.2-1
changelog:
  - update to 4.10.2
  - disable SNMP support temporarily
  - remove patches made redundant by the version update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 259.4-1
changelog:
  - Version 259.4
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.8.1-34
changelog:
  - Fix compilation with -Werror=incompatible-pointer-types
  - Switch wocky backend to gnutls which is already upstream default


author: Tom Callaway <spot@fedoraproject.org> - 12:20250308-99
changelog:
  - time to land this big bird in rawhide. hold on to your butts.
  - oh and we're also forcing -std=gnu++17. Thanks icu.

  - Historical notes from my TL2025 out-of-band changes are below
  - * Tue Oct 21 2025 Tom Callaway <spot@fedoraproject.org>
    - strip the scripts out of bibtexperllibs to avoid conflicts
  - * Fri Oct 17 2025 Tom Callaway <spot@fedoraproject.org>
    - fix typos in explicit perl module dependencies
  - * Tue Oct  7 2025 Tom Callaway <spot@fedoraproject.org>
    - update crossrefware to r76407 to fix typo which was causing invalid perl(IO::file) (should be IO::File) dependency
    - add Provides for texlive-xelatex-dev (we don't actually package this)
  - * Mon Sep 22 2025 Tom Callaway <spot@fedoraproject.org>
    - add more obsoletes, make the ms one more accurate
  - * Fri Sep 19 2025 Tom Callaway <spot@fedoraproject.org>
    - obsolete texlive-ms/ms-doc
  - * Thu Sep 18 2025 Tom Callaway <spot@fedoraproject.org>
    - bootstrap off
  - * Thu Sep 18 2025 Tom Callaway <spot@fedoraproject.org>
    - remove all Requires on old "tex-" names, we don't use those anymore
      and it was causing old packages to be pulled in
    - bootstrap still on
  - * Tue Sep 16 2025 Tom Callaway <spot@fedoraproject.org>
    - fix dep issue
  - * Wed Jun 11 2025 Tom Callaway <spot@fedoraproject.org>
    - TeXLive 2025


author: Tom Callaway <spot@fedoraproject.org> - 12:20250308-101
changelog:
  - update git-latexdiff to svn75878 (bz2435847)
  - fix texlive-git-latexdiff to be noarch package (it is just shell)


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Dominik Mierzejewski <dominik@greysector.net> 2.6.3-4
changelog:
  - enable long article number support
  - drop obsolete/redundant configure options
  - switch to package names in BuildRequires and sort alphabetically
  - use modern macros and drop __foo macro usage
  - more explicit file list to avoid duplicates
  - add missing files


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.5-2
changelog:
  - stop verifying PGP-2 source tarball signature, gnupg1 was retired
    and it is considered insecure anyway due to MD5 hash usage


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.6.0-4
changelog:
  - Modernize spec
  - Use libayatana-appindicator instead of libappindicator
  - Convert dependencies to pkgconfig syntax
  - Fix dependencies wrt git and pod2man
  - Convert license to SPDX
  - Implement desktop-file and appstream validations


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Remi Collet <remi@fedoraproject.org> - 8.1.4-1
changelog:
  - Valkey 8.1.4 - Released Fri 09 October 2025
  - Upgrade urgency SECURITY:
    CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689


author: Remi Collet <remi@remirepo.net> - 9.0.2-1
changelog:
  - Valkey 9.0.2 - February 3, 2026
  - Upgrade urgency HIGH: There are critical bugs that may affect a subset of users.


author: Martin Gansser <martinkg@fedoraproject.org> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Add vdr-2.7.9-remove-leftover-path.diff
  - Add vdr-2.7.9-last-replayed-per-folder-05.diff


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.18.0-1
changelog:
  - Update to 8.18.0
  - Resolves: rhbz#2423186
  - Build against LibRaw
  - Switch from spng to libpng (preferred upstream)
  - Disable new uhdr feature (lack of libuhdr)


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


