# changelog

author: Ondřej Nosek <onosek@redhat.com> - 1.67-5
changelog:
  - Patch: `chain-build`: correct the info message
  - Patch: Fix regular expression for parsing Source lines
  - Patch: Add draft builds support


author: Ondřej Nosek <onosek@redhat.com> - 1.68-1
changelog:
  - Restrict Git index version to what GitPython supports (otto.liljalaakso)
  - `set-pagure-token`: config - more restrictive permissions (git)
  - `pre-push-check`: show spectool command output - #732 (onosek)
  - `prep`: added an argument to check dependencies - 585 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - Fix formatting for error when mockbuild sources fails (otto.liljalaakso)
  - `clog` is duplicating changelog lines - 581 (onosek)
  - Fixing unittests for py36 (onosek)
  - `chain-build`: correct the info message - 567 (onosek)
  - Fix regular expression for parsing Source lines - #721 (onosek)
  - Add draft builds support (onosek)
  - Fixing encoding of the url when checking lookaside (onosek)
  - Fix package in Pypi (onosek)


author: Nils Philippsen <nils@redhat.com> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Update license
  - Make using click, pygit2, rpm Python packages optional and enable
    fallbacks


author: Cristian Le <git@lecris.dev> - 0.10.7-3
changelog:
  - Various simplifications
  - Added `Requires: ninja-build` by default
  - Removed `Suggests` and `Recommends`, these are not likely to be used
  - Removed the test conditional for epel10 since everything will be packaged
  - Removed the `pyproject` subpackage since it's empty and all dependents
    are gone


author: Packit <hello@packit.dev> - 0.7.0-1
changelog:
  - 0.7.0 release (Tomas Tomecek)
  - RPM packaging: drop pytest-capturelog (Tomas Tomecek)
  - simplify packit.yaml (Tomas Tomecek)
  - Use more sources for port binding (soyo42)
  - Read alternative cpu-count safely (soyo42)


author: Roman Inflianskas <rominf@pm.me> - 2.13.0-1
changelog:
  - Update to v2.13.0 (fedora#2301207, fedora#2301991, fedora#2302923,
    fedora#2304029, fedora#2304047, fedora#2304128)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 7.1.0-13
changelog:
  - Temporarily disable “all” and “gcs” extras
  - Works around broken python-google-cloud-storage due to protobuf on Python
    3.14; fixes RHBZ#2372125


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:3.5.0-1
changelog:
  - Revert "Update to 3.6.0"
  - Release 3.6.0 is incompatible with snakemake 8.30.0.
  - Introduce an Epoch


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - There is a new convenience method `Sections.get_or_create()` that allows you to manipulate a section
    without checking if it exists first. If a section doesn't exist, it will be appended to the end. (#441)
    For example, this will work properly even on spec files without `%changelog`:

    ```
    with spec.sections() as sections:
        changelog = sections.get_or_create("changelog")
        changelog[:] = ["%autochangelog"]
    ```
  - Resolves: rhbz#2332288


author: Packit <hello@packit.dev> - 0.34.2-1
changelog:
  - context_management: add a type stub override to fix typing. Type checkers like mypy and pyright can now correctly determine the types for `.sources()`, `.sections()`, and the other `Specfile` methods that return context managers. (#457)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - Added support for creating Specfile instances from file objects and strings. (#458)
  - The `context_management` type stubs now use `ParamSpec` from `typing_extensions` to support Python < 3.10. (#466)


author: Packit <hello@packit.dev> - 0.35.1-1
changelog:
  - We have fixed a bug that caused changes to get lost when a spec file passed as a path was replaced or deleted. (#470)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Jerry James <loganjerry@gmail.com> - 0.2.4-1
changelog:
  - Version 0.2.4
  - Drop upstreamed patches
  - Remove MIT and Unlicense from the License field
  - Run tests in verbose mode
  - Add LICENSE file


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Packit <hello@packit.dev> - 4.4.8-1
changelog:
  - Update to 4.4.8 upstream release
  - Resolves: rhbz#2309131
  - Patch out fast-simplification dependency from the recommend extra for
    now, until it can be packaged


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.4.9-3
changelog:
  - Restore the dependency on fast-simplification
  - Now that we have a python-fast-simplification package, we no longer have
    to patch fast-simplification out of the recommend extra.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-2
changelog:
  - No longer skip the shell completion tests
  - These are now more adaptable to different environments and do not fail


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.1-9
changelog:
  - Remove Conflicts with erlang-dialyzer
  - Since erlang-26.2.5.13-2, python3-typer-cli no longer conflicts with
    erlang-dialyzer; we keep the Conflicts for older versions.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.3-4
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.0.7-1
changelog:
  - Update to v0.0.7
  - Switch to downloading sources from GitHub (pypi tarballs ship without tests)
  - Run test suite during %check
  - Migrate License tag to SPDX


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.8.2-1
changelog:
  - Update to version 5.8.2
  - Use reserved uid and gid 194 for the xrootd user
    - https://pagure.io/packaging-committee/issue/1444
    - https://src.fedoraproject.org/rpms/setup/pull-request/27


author: Brad Bell <bradbell at seanet dot com> - 2024.0.0-1
changelog:
  - New upstream source.
  - pyspellchecker is now available as a fedora package.
  - Remove some extra blank lines.


author: Brad Bell <bradbell at seanet dot com> - 2025.0.2-3
changelog:
  - Change import toml -> import tomli; see
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.0~b3-1
changelog:
  - Update to Python 3.14.0b3
  - The .pyc magic number was bumped
  - python3.14-freethreading is no longer provisional


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.15-46
changelog:
  - Add RPM Provides for python3.6-libs, python3.6-devel, python3.6-idle, python3.6-tkinter, python3.6-test


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.20-4
changelog:
  - Bump release for rebuilding with the redhat-rpm-config fix
  for the BTI/PAC flag in the extension builders


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.22-2
changelog:
  - Add RPM Provides for python3.9-libs, python3.9-devel, python3.9-idle, python3.9-tkinter, python3.9-test


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20250128gitc84545f-1
changelog:
  - Update to 0^20250128gitc84545f
  - Remove `PyConfig.use_system_logger`: it will only be available on Python
    3.13.2 which is not released yet.
  - Fix multiple definitions for `Py_fclose`
  - Avoid `Py_ARRAY_LENGTH()` (because it fails with C++ on Python 3.9 on
    macOS)
  - Improve `test_config`
  - Replace `extern` with `PyAPI_FUNC()`


author: Dmitri Smirnov <dmitri@smirnov.ee> - 4.6.0-2
changelog:
  - Move pre-downloaded files to patch to avoid issues when building 
  - Remove pqtch 1251 which is no longer needed


author: Daniel P. Berrangé <berrange@redhat.com> - 9.1.3-2
changelog:
  - Add weak dep on systemtap-clients from qemu-tools (rhbz #2349579)
  - Gracefully handle missing stap binary (rhbz #2349579)


author: Stefan Becker <chemobejk@gmail.com> 2.0-1
changelog:
  - update to version 2.0
  - drop downstream patches
  - switch from qmake + make to cmake + ninja
  - disable fill form shortcuts as they don't work under Wayland anyway
  - add translations (de, pl)


author: Zdenek Dohnal <zdohnal@redhat.com> - 11.9.0-1
changelog:
  - 2267205 - TRIAGE CVE-2024-24246 qpdf - Heap Buffer Overflow vulnerability in qpdf [fedora-all]
  - 2265854 - qpdf-11.9.0 is available


author: Liu Yang <Yang.Liu.sn@gmail.com> - 5.15.13-2
changelog:
  - Add riscv64 to macro i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 mips mipsel mips64el riscv64.


author: Marie Loise Nolden <loise@kde.org> - 6.6.1-1
changelog:
  - Initial import based on qt5-doc. Simplify and split into qt6-doc,
    qt6-doc-devel (QCH) and qt6-doc-html (only HTML files)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-5
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219


author: Jakub Kadlcik <frostyx@email.cz> - 0.29.0-2
changelog:
  - Small fixes to the specfile formatting
  - Add some build dependencies for tests
  - Don't depend on deprecated python3-pytest7


author: Jakub Kadlcik <frostyx@email.cz> - 0.29.0-5
changelog:
  - Exclude one more test
  - Add todo about dynamic BuildRequires
  - Drop the python3-pytest-cov dependency


author: Ben Boeckel <fedora@me.benboeckel.net> - 1.9.4-1
changelog:
  - Update to 1.9.4 (rhbz#2324228)
  - Support Python 3.13 (rhbz#2315724)
  - Update license to GPL-3.0 (no "or later" present in comment headers)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.3.2-1
changelog:
  - Update to 1.3.2 - Closes rhbz#2331229
  - Drop pod file as man page is now included
  - Drop build section as native extension was removed #1428
  - Add packit configuration
  - Enable tests by skipping three failing tests


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.68.2-1
changelog:
  - Update to 1.68.2 - Closes rhbz#2311287 rhbz#2326578 rhbz#2333262
    rhbz#2333238 rhbz#2331989 rhbz#2331961


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.68.2-2
changelog:
  - Update to 1.68.2
  - Move to bundling with gotmax23 tool
  - Bump golang.org/x/net/html to v0.33.0 to fix CVE-2024-45338
  - Bump golang.org/x/crypto/ssh to v0.31.0 to fix CVE-2024-45337
  - Bump github.com/quic-go/quic-go to 0.48.2 to fix CVE-2024-53259 and
    CVE-2024-22189
  - s390x is temporarly disable until a workaround to
    https://github.com/cronokirby/saferith/issues/52 is found


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Clark Williams <williams@redhat.com> - 2.4-1
changelog:
  - Makefile cleanups and added .gitignore
  - remove Red Hat Makefile targets and specfile
  - ensure all files have valid SPDX license identifiers
  - version bump


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-8
changelog:
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!) chronologically
    from the latest:
    - Resolve libs for executable links in COPY_AS_IS, PR 3073
    - Skip invalid disk drives when saving layout PR 3047
    - Do not delete NetBackup logs in case of errors and save
      /usr/openv/netbackup/logs to the restored system after a successful recovery
    - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
      with NetBackup 10.2.0.1
    - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Miro Hrončok <mhroncok@redhat.com> - 285-1
changelog:
  - brp-mangle-shebangs: Strip env flags when mangling shebangs
  - For example, mangle "#!/usr/bin/env -S vd" to "#!/usr/bin/vd"
  - Fixes: rhbz#2265038


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 289-1
changelog:
  - Add %__os_install_post_build_reproducibility to %__os_install_post.
    This hooks 'add-determinism' post-processing tool into the build process.
    See https://fedoraproject.org/wiki/Changes/ReproduciblePackageBuilds
    and https://docs.fedoraproject.org/en-US/reproducible-builds/ for
    more details.
  - Pull in build-reproducibility-srpm-macros.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 292-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Jiri Kyjovsky 1.0-1
changelog:
  - Use setuptools instead of poetry
  - spec: use SPDX lincese and drop build requires due to generic reqs


author: Pavel Raiskup <praiskup@redhat.com> 1.1-1
changelog:
  - Simplify the get_service() helper
  - list-deleting-volumes: new helper for customer case reporting
  - fix manpage contents
  - provide subnets ids directly to the tool via argument (j1.kyjovsky@gmail.com)
  - specify ibm cloud zone instead of hardcoded API url (j1.kyjovsky@gmail.com)
  - add option to use instance's private IP to connect to it (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.1-1
changelog:
  - The wait-for-ssh script was moved to resalloc-helpers
  - releng: release to all active Fedora releases


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.3-1
changelog:
  - Add functionality for tagging resource by its crn (j1.kyjovsky@gmail.com)
  - Add option for specifying resource group (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - Log the instance create request content
  - Allow specifying a list of Floating IPs
  - Drop executable bits from PYTHONPATH scripts


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> - 1.5.0-0
changelog:
  - New upstream version 1.5.0
  - Use prebuilt binary fonts instead of building from source
  - Fixes RHBZ #2293815


author: Parag Nemade <pnemade AT redhat DOT com> - 1.5.0-1
changelog:
  - Previous build packaged only otf and xml files but not docs and conf files
    Let's rebuild this to make sure all packaged files available for installation


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.0-5
changelog:
  - Filter out python-missing-require warnings,
    Fedora's style of Python requirements is not supported
  - Resolves: rhbz#2260169


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Jun Aruga <jaruga@redhat.com> - 3.3.4-13
changelog:
  - Add systemtap-sdt-devel to build Ruby with systemtap sdt header files.
    Co-authored-by: Lumír Balhar <lbalhar@redhat.com>


author: Vít Ondruch <vondruch@redhat.com> - 3.3.8-19
changelog:
  - Upgrade to Ruby 3.3.8.
  - CVE-2025-25186: Fix Net::IMAP vulnerable to possible DoS by memory exhaustion
    Resolves: rhbz#2345557
  - CVE-2025-27219: Denial of Service in CGI::Cookie.parse
    Resolves: rhbz#2357516
  - CVE-2025-27221: userinfo leakage in URI#join, URI#merge and URI#+


author: Björn Esser <besser82@fedoraproject.org> - 0.6.1.2-1
changelog:
  - New upstream release
  - Add patch with last upstream commits
  - Set GCC in C99 mode explicitly
  - Build devel package archful
  - Drop explicit Requires and Provides


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.16.4-2
changelog:
  - Make rubygem-minizip testsuite dependency optional, drop on RHEL
    (Patch by Jun Aruga <jaruga@redhat.com>)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.1.15-1
changelog:
  - Update to v1.1.15
  - It fixes a few issues with seccomp, leaked mounts, and system
    performance. See upstream change log.


author: Michel Lind <salimma@fedoraproject.org> - 0.9.0-1
changelog:
  - Update to 0.9.0; Fixes: RHBZ#2347620
  - Disable assertions that fail at certain times of day; Fixes: RHBZ#2338148


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Kalev Lember <klember@redhat.com> - 0.18.0-1
changelog:
  - Update to version 0.18.0; Fixes RHBZ#2224887
  - Re-enable tests as they are fixed in the new release


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.0-1
changelog:
  - Initial package (close RHBZ#2328487)
  - Re-generate with rust2rpm 27 for a slightly nicer spec file


author: Michel Lind <salimma@fedoraproject.org> - 2.2.1-1
changelog:
  - Update to 2.2.1; Fixes RHBZ#2277401
  - Temporarily remove tests/ because of unsatisfied color-eyre dependency


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.1-1
changelog:
  - Update to 0.4.1 (close RHBZ#2277955)
  - Reduce manual editing of the spec file after running rust2rpm
  - Reduce unnecessary (benchmark-only) build dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0-1
changelog:
  - Update to 0.7.0 (close RHBZ#2337404)
  - Patch out optional features that would require blosc2-rs or isal-rs
    crates


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.3.0-12
changelog:
  - Bump release for uniqueness and upgrade path
  - Ensures the libcramjam/libcramjam-devel subpackages upgrade (and
    certainly do not have the same NVR as) those previously built from the
    rust-libcramjam (non-compat) package.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.23.1-1
changelog:
  - Update to 1.23.1 (close RHBZ#2349449)
  - Use rust2rpm.toml to exclude license file for unbundled libdeflate
  - Update .rpmlintrc file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.24.0-1
changelog:
  - Update to 1.24.0 (close RHBZ#2365609)
  - Now that we can easily re-apply Cargo.toml patches when updating, do not
    use tomcli to remove criterion


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.2.0-4
changelog:
  - Unretirement request: pagure.io/releng/issue/12761 Revert "unused leaf
    package for more than two release cycles"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-4
changelog:
  - Allow procfs 0.17, which 7, and roxmltree 0.20
  - https://github.com/nushell/nushell/pull/14489
  - https://github.com/nushell/nushell/pull/14513


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.22.0-2
changelog:
  - Update the rust-image-0.25 patch to match what was merged upstream
  - Fewer image formats are now supported.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-1
changelog:
  - Update to version 0.17.0; Fixes RHBZ#2316899
  - Re-enable all tests except test_procinfo, and a couple we had to skip


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-2
changelog:
  - Report and skip failing tests on non-x86_64 architectures
  - Fix tests failing to compile on 32-bit architectures


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.8-1
changelog:
  - Update to version 0.8.8; Fixes RHBZ#2311783
  - Add upstream link for fixing mixture of newline styles
  - Backport commit from upstream to fix s390x issues
  - Where possible, patch out "support for common crates" features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.0-5
changelog:
  - Port to rust2rpm.toml
  - Actually hide features for testing particular hardware
  - Hide the crypto_nossl feature, which would require the x509-cert crate;
    fixes RHBZ#2310742


author: Benjamin A. Beasley <code@musicinmybrain.net> - 12.1.2-13
changelog:
  - Align rust2rpm.toml patch comments with the spec file
  - Re-generate the spec file with rust2rpm 27


author: Sergio Lopez <slp@redhat.com> - 0.10.0-1
changelog:
  - Update to version 0.10.0
  - Regenerate with rust2rpm 24
  - Drop no longer need patch downgrading nix dependency


author: Sergio Lopez <slp@redhat.com> - 0.7.0-2
changelog:
  - Add virtio-queue-fix-endianess-issues-in-mock-queue.diff patch
  - Add virtio-queue-fix-endianess-issues-in-mock-queue.diff patch


author: Sergio Lopez <slp@redhat.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
  - Update to version 0.7.1
  - Drop virtio-queue-fix-endianess-issues-in-mock-queue.diff patch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.10.4-2
changelog:
  - On i686, skip a test that is designed for 64-bit
  - Send a PR upstream to conditionalize the test by architecture.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to 0.8.0 (close RHBZ#2259758)
  - Patch out the zopfli binary, which conflicts with the one provided by the
    zopfli package


author: Dan Horák <dan[at]danny.cz> - 2:2.33.1-3
changelog:
  - "which" is not required any more
  - Revert "zipl/src: Fix problems when target parameters are specified by user"


author: Julio González Gil <packages@juliogonzalez.es> - 1.92-1
changelog:
  - Update to 1.92 from https://github.com/s3fs-fuse/s3fs-fuse (#2209081)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.92


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Robby Callicotte <rcallicotte@fedoraproject.org> - 3007.4-1
changelog:
  - Update to 3007.4 RHBZ#2366381 - Resolves CVE-2024-38824 RHBZ#2372731 -
    Resolves CVE-2024-38824 RHBZ#2372733 - Resolves CVE-2025-22239
    RHBZ#2372732 - Resolves CVE-2025-22239 RHBZ#2372734 - Resolves
    CVE-2025-22236 RHBZ#2372774 - Resolves CVE-2025-22236 RHBZ#2372776 -
    Resolves CVE-2025-22242 RHBZ#2372741 - Resolves CVE-2025-22242
    RHBZ#2372745 - Resolves CVE-2025-22240 RHBZ#2372746 - Resolves
    CVE-2025-22241 RHBZ#2372748 - Resolves CVE-2025-22240 RHBZ#2372752 -
    Resolves CVE-2025-22241 RHBZ#2372753


author: Matthew Burket <mburket@redhat.com> - 0.1.70-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.70 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.71-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.71 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.73


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74
  - Remove /usr/bin/python3 from BuildRequires


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.75


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.0-1
changelog:
  - Allow the scitokens library user to setup a custom CA file
  - Fix typecast errors in scitoken_status_get_*() that caused async queries to fail
  - Fix logic error in deserialize_continue() that caused async deserialization to fail


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Christian Krause <chkr@fedoraproject.org> - 2.8.1-1
changelog:
  - Update to 2.8.1 (#2254942)
  - Fix FTBFS (#2261685)
  - Adjust filenames
  - Set StartupWMClass in desktop file in order to enable the window manager
    to reference the correct desktop file (e.g. needed for the
    task switcher to show the correct application icon)
  - Add upstreamed patch to fix compile issue with GCC 14
  - Update license tag
  - Add BR: libmikmod-devel, libvpx-devel and sonivox-devel


author: Christian Krause <chkr@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 (#2330987)
  - Fix FTBFS (#2341334)
  - Remove patch already included upstream
  - Add BR: pipewire-jack-audio-connection-kit (needed for fluidsynth)


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Zdenek Pytela <zpytela@redhat.com> - 41.37-1
changelog:
  - Allow tuned-ppd read sssd public files
  - Allow tuned-ppd watch_reads sysfs directories
  - Confine /usr/lib/systemd/systemd-user-runtime-dir
  - Revert "Dontaudit systemd-logind remove all files"
  - Make bootupd use bootupd_tmp_t as its private type for files in /tmp
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  - Allow power-profiles-daemon watch sysfs directories
  - systemd: allow reading /dev/cpu/0/msr
  - Update the pcmsensor policy
  - Allow chronyd-restricted sendto to chronyc
  - Allow system_dbusd_t r/w unix stream sockets of unconfined_service_t
  - Allow dovecot-deliver read mail aliases
  - Trim changelog so that it starts with v41.1


author: Zdenek Pytela <zpytela@redhat.com> - 41.38-1
changelog:
  - Allow init and login_pgm connect to systemd-logind over a unix socket
  - Allow login_userdomain read pressure stall information
  - Allow systemd-journald create and use vsock socket
  - Update systemd-pcrextend policy
  - Allow systemd watch/watch_reads usb ttys
  - Update coreos-installer-generator policy
  - Update systemd-homed policy
  - Allow systemd-user-runtime-dir get/set tmpfs quotas
  - Allow systemd-rfkill read nsfs files
  - Dontaudit bootc-systemd-generator search sssd lib directories
  - Allow systemd-user-runtime-dir delete gnome homedir content


author: Zdenek Pytela <zpytela@redhat.com> - 41.39-1
changelog:
  - Allow collectd accept and listen to tcp sockets
  - Allow init_t nnp domain transition to redis_t
  - Allow tlshd read network sysctls
  - Allow NetworkManager create and use icmp_socket
  - Allow varnishd execute the prlimit64() syscall
  - Allow rhsmcertd connect to systemd-machined
  - Allow virt_domain write to virt_image_t files
  - Allow system-dbusd list systemd-machined directories
  - Allow asterisk read network sysctls
  - Allow virtstoraged fsetid capability
  - Allow xdm watch a mnt_t directory
  - Allow collectd bind TCP sockets to the collectd port
  - Allow virtqemud relabel from tmpfs lnk files
  - Allow gnome-remote-desktop additional sockets permissions
  - Update insights-core policy
  - Update systemd-homed policy
  - Allow xenstored_t manage xend_var_lib_t files (bsc#1228540)


author: Zdenek Pytela <zpytela@redhat.com> - 41.40-1
changelog:
  - Add missing permissions for ftpd_anon_write to manage NFS directories
  - Add missing permissions for ftpd_anon_write to manage CIFS directories
  - Allow nut-upsmon write systemd inhibit pipes
  - Allow systemd-user-runtime-dir connect to systemd-userdbd over a unix socket
  - Remove permissive domain for systemd_vsftpd_generator_t
  - Change generator-specific rules to apply to systemd_generator
  - Define file equivalency for /var/etc
  - Allow tuned-ppd create ppd_base_profile with a file transition
  - Allow lldpd connect to systemd-homed over a unix socket
  - Allow sysadm_sudo_t signal rpm script
  - Fix the "/var/cache/systemd/home(/.*)?" regex


author: Zdenek Pytela <zpytela@redhat.com> - 41.41-1
changelog:
  - Allow mdadm nosuid_transition
  - Label plasma user service files as xdm_unit_file_t.
  - Revert "Allow systemd-homed to start services."
  - Allow virtstoraged write qemu runtime files
  - Allow virtqemud read/write/setattr input event devices
  - Allow systemd create journal pid files
  - Allow networkmanager send a general signal to iptables
  - Allow syslogd watch syslog_conf_t directories
  - Allow systemd-machined work with its private tmp and tmpfs files
  - Allow geoclue read virt lib files
  - Fix files_dontaudit_delete_all_files()
  - Label /run/polkit-1 with policykit_var_run_t
  - Label /dev/diag as diagnostic_device_t
  - Allow systemd-homed to start services.
  - Allow named_t to read NetworkManager's runtime files
  - Improve README* documentation


author: Zdenek Pytela <zpytela@redhat.com> - 41.42-1
changelog:
  - Drop config for /run/random-seed
  - Update file location for systemd random-seed file
  - Allow tomcat execute cracklib-check with a domain transition
  - Allow sssd watch lib dirs
  - Confine systemd-hibernate-resume
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  - Allow login_pgm read filesystem sysctls
  - Allow gconfd connect to system dbus
  - Allow NetworkManager manage NetworkManager_etc_rw_t symlinks


author: Zdenek Pytela <zpytela@redhat.com> - 41.43-1
changelog:
  - Allow nmbd read network sysctls
  - Allow iio-sensor-proxy sendto to journald over a unix datagram socket
  - Allow logrotate stop all systemd services
  - systemd: rework systemd_manage_random_seed
  - Allow tuned-ppd connect to sssd over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 41.44-1
changelog:
  - virt: allow QEMU use of the qgs daemon for attestation
  - qgs: add contrib module for TDX "qgs" daemon
  - kernel: add interfaces for using SGX enclaves
  - Define file equivalency for /usr/etc
  - Allow mongod to receive pressure stall information
  - Dontaudit systemd_generator read sssd public files
  - Allow plymouthd read/write input event devices
  - Label 99-nvme-nbft-connect.sh with NetworkManager_dispatcher_nvme_script_t
  - Allow systemd-user-runtime-dir sendto to syslogd
  - Remove pcp module
  - Update irqbalance policy for using unconfined scripts
  - Allow utempter use terminal multiplexor
  - Allow virtqemud execute ovs-vsctl with a domain transition
  - Update the files_search_mnt() interface


author: Zdenek Pytela <zpytela@redhat.com> - 41.45-1
changelog:
  - Add fs_write_cgroup_dirs() and fs_setattr_cgroup_dirs() interfaces
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  - Allow openvswitch ioctl vduse devices
  - Label /dev/vduse/control and /dev/vduse/NAME devices
  - Allow virtstoraged the sys_rawio capability
  - Allow virtqemud read insights-core state files
  - Allow virtnodedev create mdevctl config dirs
  - Allow virtqemud additional permissions on scsi generic chr files
  - Allow local login execute gnome keyring daemon
  - Allow virtqemud send a generic signal to passt
  - Allow svirt-tcg read init state
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  - Label /run/opendkim with dkim_milter_data_t
  - Allow sa-update status systemd services
  - Allow updpwd logging send audit messages
  - Temporary dontaudit iio-sensor-proxy sys_admin.
  - Allow iio-sensor-proxy sendto to journald over a unix datagram socket
  - Revert "Allow iio-sensor-proxy sendto to journald over a unix datagram socket"


author: Zdenek Pytela <zpytela@redhat.com> - 41.46-1
changelog:
  - Update systemd-generators policy
  - Allow plymouthd_t read proc files of systemd_passwd_agent (bsc#1245470)
  - Allow insights-client file transition for files in /var/tmp
  - Allow tuned-ppd manage tuned log files
  - Allow systemd-coredump mount on tmpfs filesystems
  - Update sssd_dontaudit_read_public_files()
  - Allow zram-generator raw read fixed disk device


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.15-1
changelog:
  - restorecon.py: exclude more paths
  - Improve disable_ipv6 plugin then_text
  - Update generated configuration files
  - Update translations


author: Martin Osvald <mosvald@redhat.com> - 2.14.6-1
changelog:
  - New version 2.14.6
  - Remove uidgid pair 77:77 for arpwatch
  - Define all hardware groups that systemd needs via sysusers
  - Switch to rpmautospec


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-15
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-4
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 8.16.0-3
changelog:
  - Rely on python-unversioned-command
  - This seems to be the best compromise around portable remote execution


author: Benjamin A. Beasley <code@musicinmybrain.net> - 8.30.0-1
changelog:
  - Update to 8.30.0
  - Add a weak dependency on R-core
  - An asset bundle for offline HTML report generation is now included; this
    has required significant additional “machinery” to package properly, and
    adds many terms to the License field.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.67.1
   - Fix apparmor permissions to allow snaps access to kernel modules
     and firmware on UC24, which also fixes the kernel-modules-control
     interface on UC24
   - AppArmor prompting (experimental): disallow /./ and /../ in path
     patterns
   - Fix 'snap run' getent based user lookup in case of bad PATH
   - Fix snapd using the incorrect AppArmor version during undo of an
     refresh for regenerating snap profiles
   - Add new syscalls to base templates
   - hardware-observe interface: allow riscv_hwprobe syscall
   - mount-observe interface: allow listmount and statmount syscalls


author: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
changelog:
  - The changelog date and author have been modified to maintain linearity.
  - Drop 0001-data-selinux-remove-timedatex.patch - applied upstream.
  - New upstream release 2.67
   - AppArmor prompting (experimental): allow overlapping rules
   - Registry view (experimental): Changes to registry data (from both
     users and snaps) can be validated and saved by custodian snaps
   - Registry view (experimental): Support 'snapctl get --pristine' to
     read the registry data excluding staged transaction changes
   - Registry view (experimental): Put registry commands behind
     experimental feature flag
   - Components: Make modules shipped/created by kernel-modules
     components available right after reboot
   - Components: Add tab completion for local component files
   - Components: Allow installing snaps and components from local files
     jointly on the CLI
   - Components: Allow 'snapctl model' command for gadget and kernel
     snaps
   - Components: Add 'snap components' command
   - Components: Bug fixes
   - eMMC gadget updates (WIP): add syntax support in gadget.yaml for
     eMMC schema
   - Support for ephemeral recovery mode on hybrid systems
   - Support for dm-verity options in snap-bootstrap
   - Support for overlayfs options and allow empty what argument for
     tmpfs
   - Enable ubuntu-image to determine the size of the disk image to
     create
   - Expose 'snap debug' commands 'validate-seed' and 'seeding'
   - Add debug API option to use dedicated snap socket /run/snapd-
     snap.socket
   - Hide experimental features that are no longer required
     (accepted/rejected)
   - Mount ubuntu-save partition with no{exec,dev,suid} at install, run
     and factory-reset
   - Improve memory controller support with cgroup v2
   - Support ssh socket activation configurations (used by ubuntu
     22.10+)
   - Fix generation of AppArmor profile with incorrect revision during
     multi snap refresh
   - Fix refresh app awareness related deadlock edge case
   - Fix not caching delta updated snap download
   - Fix passing non root uid, guid to initial tmpfs mount
   - Fix ignoring snaps in try mode when amending
   - Fix reloading of service activation units to avoid systemd errors
   - Fix snapd snap FIPS build on Launchpad to use Advantage Pro FIPS
     updates PPA
   - Make killing of snap apps best effort to avoid possibility of
     malicious failure loop
   - Alleviate impact of auto-refresh failure loop with progressive
     delay
   - Dropped timedatex in selinux-policy to avoid runtime issue
   - Fix missing syscalls in seccomp profile
   - Modify AppArmor template to allow using SNAP_REEXEC on arch
     systems
   - Modify AppArmor template to allow using vim.tiny (available in
     base snaps)
   - Modify AppArmor template to add read-access to debian_version
   - Modify AppArmor template to allow owner to read
     @{PROC}/@{pid}/sessionid
   - {common,personal,system}-files interface: prohibit trailing @ in
     filepaths
   - {desktop,shutdown,system-observe,upower-observe} interface:
     improve for Ubuntu Core Desktop
   - custom-device interface: allow @ in custom-device filepaths
   - desktop interface: improve launch entry and systray integration
     with session
   - desktop-legacy interface: allow DBus access to
     com.canonical.dbusmenu
   - fwupd interface: allow access to nvmem for thunderbolt plugin
   - mpris interface: add plasmashell as label
   - mount-control interface: add support for nfs mounts
   - network-{control,manager} interface: add missing dbus link rules
   - network-manager-observe interface: add getDevices methods
   - opengl interface: add Kernel Fusion Driver access to opengl
   - screen-inhibit-control interface: improve screen inhibit control
     for use on core
   - udisks2 interface: allow ping of the UDisks2 service
   - u2f-devices interface: add Nitrokey Passkey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68
   - FDE: add support for new and more extensible key format that is
     unified between TPM and FDE hook
   - FDE: add support for adding passphrases during installation
   - FDE: update secboot to 30317622bbbc
   - Snap components: make kernel components available on firstboot
     after either initramfs or ephemeral rootfs style install
   - Snap components: mount drivers tree from initramfs so kernel
     modules are available in early boot stages
   - Snap components: support remodeling to models that contain
     components
   - Snap components: support offline remodeling to models that contain
     components
   - Snap components: support creating new recovery systems with
     components
   - Snap components: support downloading components with 'snap
     download' command
   - Snap components: support sideloading asserted components
   - AppArmor Prompting(experimental): improve version checks and
     handling of listener notification protocol for communication with
     kernel AppArmor
   - AppArmor Prompting(experimental): make prompt replies idempotent,
     and have at most one rule for any given path pattern, with
     potentially mixed outcomes and lifespans
   - AppArmor Prompting(experimental): timeout unresolved prompts after
     a period of client inactivity
   - AppArmor Prompting(experimental): return an error if a patch
     request to the API would result in a rule without any permissions
   - AppArmor Prompting(experimental): warn if there is no prompting
     client present but prompting is enabled, or if a prompting-related
     error occurs during snapd startup
   - AppArmor Prompting(experimental): do not log error when converting
     empty permissions to AppArmor permissions
   - Confdb(experimental): rename registries to confdbs (including API
     /v2/registries => /v2/confdb)
   - Confdb(experimental): support marking confdb schemas as ephemeral
   - Confdb(experimental): add confdb-control assertion and feature
     flag
   - Refresh App Awareness(experimental): LP: #2089195 prevent
     possibility of incorrect notification that snap will quit and
     update
   - Confidential VMs: snap-bootstrap support for loading partition
     information from a manifest file for cloudimg-rootfs mode
   - Confidential VMs: snap-bootstrap support for setting up cloudimg-
     rootfs as an overlayfs with integrity protection
   - dm-verity for essential snaps: add support for snap-integrity
     assertion
   - Interfaces: modify AppArmor template to allow owner read on
     @{PROC}/@{pid}/fdinfo/*
   - Interfaces: LP: #2072987 modify AppArmor template to allow using
     setpriv to run daemon as non-root user
   - Interfaces: add configfiles backend that ensures the state of
     configuration files in the filesystem
   - Interfaces: add ldconfig backend that exposes libraries coming
     from snaps to either the rootfs or to other snaps
   - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when
     inside a container
   - Interfaces: add auditd-support interface that grants audit_control
     capability and required paths for auditd to function
   - Interfaces: add checkbox-support interface that allows
     unrestricted access to all devices
   - Interfaces: fwupd | allow access to dell bios recovery
   - Interfaces: fwupd | allow access to shim and fallback shim
   - Interfaces: mount-control | add mount option validator to detect
     mount option conflicts early
   - Interfaces: cpu-control | add read access to /sys/kernel/irq/
   - Interfaces: locale-control | changed to be implicit on Ubuntu Core
     Desktop
   - Interfaces: microstack-support | support for utilizing of AMD SEV
     capabilities
   - Interfaces: u2f | added missing OneSpan device product IDs
   - Interfaces: auditd-support | grant seccomp setpriority
   - Interfaces: opengl interface | enable parsing of nvidia driver
     information files
   - Allow mksquashfs 'xattrs' when packing snap types os, core, base
     and snapd as part of work to support non-root snap-confine
   - Upstream/downstream packaging changes and build updates
   - Improve error logs for malformed desktop files to also show which
     desktop file is at fault
   - Provide more precise error message when overriding channels with
     grade during seed creation
   - Expose 'snap prepare-image' validation parameter
   - Add snap-seccomp 'dump' command that dumps the filter rules from a
     compiled profile
   - Add fallback release info location /etc/initrd-release
   - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
     initramfs deb builds
   - Remove stale robust-mount-namespace-updates experimental feature
     flag
   - Remove snapd-snap experimental feature (rejected) and it's feature
     flag
   - Changed snap-bootstrap to mount base directly on /sysroot
   - Mount ubuntu-seed mounted as no-{suid,exec,dev}
   - Mapping volumes to disks: add support for volume-assignments in
     gadget
   - Fix silently broken binaries produced by distro patchelf 0.14.3 by
     using locally build patchelf 0.18
   - Fix mismatch between listed refresh candidates and actual refresh
     due to outdated validation sets
   - Fix 'snap get' to produce compact listing for tty
   - Fix missing store-url by keeping it as part of auxiliary store
     info
   - Fix snap-confine attempting to retrieve device cgroup setup inside
     container where it is not available
   - Fix 'snap set' and 'snap get' panic on empty strings with early
     error checking
   - Fix logger debug entries to show correct caller and file
     information
   - Fix issue preventing hybrid systems from being seeded on first
     boot
   - LP: #1966203 remove auto-import udev rules not required by deb
     package to avoid unwanted syslog errors
   - LP: #1886414 fix progress reporting when stdout is on a tty, but
     stdin is not


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.4
   - Snap components: LP: #2104933 workaround for classic 24.04/24.10
     models that incorrectly specify core22 instead of core24
   - Update build dependencies


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 2.5.1-1
changelog:
  - Update to 2.5.1
  - Convert to SPDX license identifier
  - Add compat subpackage for snoopy-disable and snoopy-enable


author: Michel Lind <salimma@fedoraproject.org> - 2.5.1-6
changelog:
  - Remove compat subpackage on Fedora >= 42 and EPEL >= 10
  - Create Packit configuration to automate future updates


author: josef radinger <cheese@nosuchhost.net> - 2.7.0-1
changelog:
  - bump version
  - source is now on github
  - patches 0+1 no lomger needed
  - add/remove/change several %docs
  - switch to SDL2-devel
  - add manpages, icon + metainfo


author: Peter Hanecak <hany@hany.sk> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - build_type_safety_c lowered to work around several "incompatible pointer type"
    errors


author: Robert Scheck <robert@fedoraproject.org> 4.00-4
changelog:
  - Remove retired iXhash blacklists from default configuration
    and provide only example configuration (#2345751, #2346368)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: #2294354 - CVE-2024-37894 squid: Out-of-bounds write error may
    lead to Denial of Service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.12-2
changelog:
  - Disable ESI support since ESI support has been also removed from squid 7
  - Resolves: CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Clark Williams <williams@redhat.com> - 1.19.5
changelog:
  - Makefile:  refactor CFLAGS/LDFLAGS for local and koji builds
  - doc/Releases.md:  Add a note about tagging


author: Clark Williams <williams@redhat.com> - 1.19.6
changelog:
  - systemd: add BE environment variable to select backend
  - Makefile: add uninstall target
  - version bump to 1.19.6


author: Clark Williams <williams@redhat.com> - 1.19.7
changelog:
  - stalld.c: use a more reasonable size for reading /proc/stat
  - systemd/Makefile:  remove typo in uninstall line
  - Makefile:  change modes on throttled and stalld
  - throttlectl: clean up throttling script due to reported CVE-2024-54159


author: Clark Williams <williams@redhat.com> - 1.19.8
changelog:
  - Fix incorrect DAEMON_UMASK value
  - Add 'errexit' to throttlectl.sh
  - Added glibc41 fix to source tree, removed patch
  - stalld.h:  fix prototype mis-match with cleanup_regex()


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - Makefile:  update version to 1.20.1
  - scripts:  add a script for running a local build for debuggin
  - stalld: Automatically switch to log-only mode if DL-server present
  - bpf/stalld: Implement and use find_queued_task helper in dequeue_task
  - bpf/stalld: Introduce and use for_each_task_entry/for_each_queued_task macros
  - build/debug: Control optimization and debug levels via DEBUG variable
  - stalld: sched_attr: Do not define for glibc >= 2.41
  - stalld: Refactor verbose logging with dedicated macros
  - stalld/queue_track: Consolidate print_queued_tasks verbosity control
  - gitignore: Add common build and tag files
  - build/debug: Allow DEBUG_STALLD to be controlled by 'DEBUG' Makefile variable
  - build/bpf/stalld: Pave way for DEBUG_STALLD command-line override
  - bpf/stalld: Introduce generic 'log' macro for BPF debug prints
  - bpf/stalld: Unify and generalize debug macro to DEBUG_STALLD


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Jerry James <loganjerry@gmail.com> - 3.2.1-37
changelog:
  - Add patch to fix ambiguous references to StringTemplate
  - Add patch to avoid using deprecated "new Integer" and "new Boolean"
  - Change license to BSD-3-Clause


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Björn Esser <besser82@fedoraproject.org> - 1.9.17-1.p1
changelog:
  - Rebase to sudo 1.9.17p1
  - sudo-1_9_16p2 is available Resolves: rhbz#2309626
  - sudo: LPE via host option Resolves: CVE-2025-32462
  - Properly apply system buildflags
  - Use new build macros, drop unneeded %%defattr


author: Jerry James <loganjerry@gmail.com> - 9.2.7-1
changelog:
  - Version 9.2.7
  - Change subpackage names to match Debian at upstream's request
  - Build with tcmalloc support
  - Unbundle texinfo.tex
  - Setting LC_ALL is no longer necessary
  - Drop JavaConfig.java in favor of %%{java_home}
  - Tests now pass on all architectures
  - Numerous spec file cleanups and simplifications


author: Jerry James <loganjerry@gmail.com> - 9.2.7-3
changelog:
  - Fix swi-prolog-java FTI (rhbz#2313232)
  - Expose inclpr plugin dependency on the math library
  - Fix a license typo in swi-prolog-core
  - Fix broken links
  - Deduplicate files


author: Jerry James <loganjerry@gmail.com> - 9.2.8-1
changelog:
  - Version 9.2.8
  - Drop upstreamed gettid patch
  - Upstream has relicensed some files; change License tags accordingly


author: Stefan Berger <stefanb@linux.ibm.com> - 0.9.0-4
changelog:
  - Add rules for SELinux policy to allow appending to log (BZ 2306817)
  - Handle unknown swtpm file header version appropriately


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-4
changelog:
  - Tidy up BuildRequires/Requires
  - BR: tzdata, which is not pulled from dependencies on F39+ (RHBZ#2261742)


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.0-1
changelog:
  - Initial release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.1.0


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.1.0-2
changelog:
  - Existing release for SyncStar project
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.0-1
changelog:
  - Second release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.0


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.1-1
changelog:
  - Third release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.1


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.2-1
changelog:
  - Fourth release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.2.2


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.2.2-2
changelog:
  - Temporarily disabled the buildtime checks until an approach is finalized
  - See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/ZSHSHZKVA4XJQBJD7FMMCALKN4UP5SAJ/


author: Peter Czanik <peter@czanik.hu> - 4.8.2-1
changelog:
  - update to 4.8.2, a bug fix release
  - fixes an inproper certificate validation problem (CVE-2024-47619)
  - fixes elasticsearch-http() and other drivers after a backwards
    incompatible fix in format-json
  - reliability and performance improvements in the S3 destination


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.10-1
changelog:
  - Version 256.10
  - Fixes for man pages, shell completion, logging, systemd-networkd,
    systemd-resolved, systemctl edit.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.11-1
changelog:
  - Version 256.11
  - Fixes for assertion crashes and memory access issues in pid1 and systemd-
    machined, and other fixes for systemd-repart, systemd-resolved, systemd-
    stdio-bridge, sd-device, hibernation, and the hardware database.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.11-2
changelog:
  - Move some files into subpackages
  - systemd-ac-power is moved to systemd-udev
  - portablectl and importctl are moved to systemd-container (rhbz#2345551)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.12-1
changelog:
  - Version 256.12
  - Fixes for systemd itself, sd-boot, systemd-resolved, systemd-id128,
    systemd-networkd, systemd-logind, systemd-tmpfiles, systemd-vmspawn,
    systemd-userdb, udev, ukify, systemctl, homectl, fido2 code,
    virtualization detection, internal shared library, shell completions,
    documentation.
  - Hardware database is updated
  - Adds new DNSSEC anchor key for systemd-resolved
  - Adds new Fedora keys for systemd-importd
  - Adds a Georgian mapping to the keymap list


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.15-1
changelog:
  - Version 256.15
  - Fix for local information disclosure in systemd-coredump (CVE-2025-4598)
  - Various other fixes


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.17-1
changelog:
  - Version 256.17
  - Fixes for systemd itself, systemd-networkd, systemd-ssh-generator,
    systemd-fstab-generator, bootctl, systemd-repart, systemd-vmspawn, the
    shared library code, udev rules, resolvectl, shell completions,
    documentation
  - Update of the hardware database


author: Frank Ch. Eigler <fche@redhat.com> - 4.9-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.0-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases
  - migrated to SPDX license


author: Lumír Balhar <lbalhar@redhat.com> - 5.2-pre
changelog:
  - Final split of sdt-dtrace and sdt-devel (rhbz#2296275)
    https://fedoraproject.org/wiki/Changes/Separate_dtrace_package


author: Dominik Mierzejewski <dominik@greysector.net> - 0.99.5-1
changelog:
  - update to 0.99.5
  - avoid using obsolete patchN macro
  - rebase patches and drop unused hunks
  - enumerate licenses and update License: tag
  - use package names instead of file references in BuildRequires


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.14-3
changelog:
  - Fixed SPDX license case, it was according to the SPDX standard, but
    now it should be more easy to validate with some XML validators


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.14-5
changelog:
  - Fixed systemtap probes to be built-in
  - Installed the library as read-only after the debuginfo is extracted
    Related: rhbz#2326296


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-2
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
          CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Rebuild (xorg-x11-server)
    Fixes: CVE-2025-49175 / CVE-2025-49176 / CVE-2025-49177
           CVE-2025-49178 / CVE-2025-49179 / CVE-2025-49180


author: Dominik Mierzejewski <dominik@greysector.net> 2.6.3-4
changelog:
  - enable long article number support
  - drop obsolete/redundant configure options
  - switch to package names in BuildRequires and sort alphabetically
  - use modern macros and drop __foo macro usage
  - more explicit file list to avoid duplicates
  - add missing files


author: Jakub Kadlcik <frostyx@email.cz> 0.6.22-1
changelog:
  - Fix python2 urlretrieve import (frostyx@email.cz)
  - Fixed submodule archives concatenation (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #414 (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #413 (jerzy.drozdz@jdsieci.pl)
  - Revert 45d431ad149cb33e2462a990c4c4f29e6bb2bb7e (nmoumoul@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.23-1
changelog:
  - Replace `submodule--helper list` with `git config --get-regexp`
  - do not overwrite packit.yaml and its variants (msuchy@redhat.com)
  - packit: fixing the Fedora build failures (praiskup@redhat.com)
  - Don't upload patches to the lookaside cache (frostyx@email.cz)
  - use spdx license (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.24-1
changelog:
  - Will now copy both source files and patch files declared in the spec
  - Fix UpstreamBuilder deprecation warning (#461) (frostyx@email.cz)
  - Fix the setup.py license according to tito.spec (#433) (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz>
changelog:
  - Use rpm.ds instead of deprecated hdr.dsFromHeader (frostyx@email.cz)
  - Support branch aliases in releasers (frostyx@email.cz)
  - Document how to automate bodhi updates (msuchy@redhat.com)
  - Use raw strings for regex patterns (frostyx@email.cz)
  - Allow tito build without .tito directory (frostyx@email.cz)
  - Unify README and index.md (msuchy@redhat.com)
  - Fix PEP8 issues found by runtests.py (frostyx@email.cz)
  - Replace egrep with grep -E (frostyx@email.cz)
  - Don't use --cacheonly on DNF5 (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.26-1
changelog:
  - Fix issue with missing version numbers in the changelog (frostyx@email.cz)
  - Tito wrapper for easier development (praiskup@redhat.com)


author: Jakub Kadlčík <frostyx@email.cz>
changelog:
  - Defer submodule detection to git
  - Many improvements to tests and they now run during package build
  - New config option `buildconfig.test_version_suffix`


author: Didier Fabert <didier.fabert@gmail.com> - 0.1-35.20171025gitab9bbbd
changelog:
  - Stop using deprecated py3_build/py3_install macros https://bugzilla.redhat.com/show_bug.cgi?id=2378474
  - migrated to last commit


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-12/13060
  - Security fixes: bz#2248564, bz#2281499, bz#2281500, bz#2281502, bz#2281503
  - switch to sysusers based user provisioning approach - fixes bz#2252618
  - Add legacy openssl build dependency from F41 on - fixes FTBS / bz#2301334
  - since we can now drop EL7 support we can also cleanup systemd handling


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-2
changelog:
  - Re-add systemd-devel as build dependency so the daemon knows how to notify systemd that it was started - fixes bz#2302910


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.13-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/new-tor-stable-release-0-4-8-13/15397 (bz#2211726)
  - reviewed and adjusted SPDX license format


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.14-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-14/17242 (bz#2211726)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.1-1
changelog:
  - new release
    - fixed privileged execution of arbitrary scripts by active local user
      resolves: CVE-2024-52336
    - added sanity checks for API methods parameters
      resolves: CVE-2024-52337
    - tuned-ppd: fixed controller init to correctly set _on_battery


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
      resolves: RHEL-68208
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
      resolves: RHEL-51760
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
      resolves: RHEL-58820
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
      resolves: RHEL-60898
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
      resolves: RHEL-72981
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
      resolves: RHEL-60906
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: Patsy Griffin <patsy@redhat.com> - 2024a-8
changelog:
  - zic now defaults to "-b slim" to control data bloat.
    For now, build with ZFLAGS="-b fat" for backward compatibitliy.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Rebase to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Michel Lind <salimma@fedoraproject.org> - 0.0.27-2
changelog:
  - Use script to generate list of coreutils commands
  - On EPEL 9, reduce the list of obsoletes to packages actually built


author: Mark Wielaard <mjw@fedoraproject.org> - 3.24.0-5
changelog:
  - valgrind-devel now Recommends, instead of Requires, valgrind.
  - valgrind-gdb now Requires valgrind, instead of valgrind-devel.
  - valgrind-scripts now Recommends valgrind-gdb
  - valgrind-gdb now Recommends gdb


author: Mark Wielaard <mjw@fedoraproject.org> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.24.0-8
changelog:
  - Add new VALGRIND_3_24_BRANCH patches
    - 0019-filter_gdb.in-__syscall_cancel_arch-is-just-in-a-sys.patch
    - 0020-Bug-501893-Missing-suppression-for-__wcscat_avx2-str.patch
    - 0021-filter_gdb.in-filter-out-__libc_do_syscall.patch
    - 0022-Handle-top-__syscall_cancel-frames-when-getting-stac.patch
  - Remove valgrind-3.24.0-syscall-cancel.patch (replaced by 0022).


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.5.0-1
changelog:
  - New upstream release
  - Moved somethings around to make the diff from the upstream spec less
  - Upped some memory requirements in some of the tests. Necessary on aarch64 and ppc64le (and ppc32)
  - Reduced number of parallel jobs on s390x builders as builds tend to fail when stressed
  - Retired armv7hl


author: Pavel Raiskup <praiskup@redhat.com> - 5-1
changelog:
  - support for fast "ruff" analyser
  - --linter-tag option added
  - subproject detection by .vcs-diff-lint.yml


author: Pavel Raiskup <praiskup@redhat.com> 6-1
changelog:
  - bugfix: correctly honor file renames
  - bugfix: fix subproject detection for git worktree
  - ruff: do full project scans (since Ruff is fast enough)
  - check the new (changed) code in a side-directory


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - drop unnecessary newline in the output
  - ruff: don't prefix the error locations with absolute path
  - ruff: don't optimize out the full Ruff run
  - print the git sha1 being analyzed
  - bugfix: correct matching filenames with endswith()


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - don't require all the linters, just recommend them
  - use requested linters only if they are available
  - nicer info/debug output


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


author: Alessandro Astone <alessandro.astone@canonical.com> - 1.4.3-1
changelog:
  - new version (rhbz#2303618)
  - fix python 3.12 error (rhbz#2258411)
  - make it clearer that OTA channels must be provided to `waydroid init`


author: Arun Babu Neelicattu <arun.neelicattu@gmail.com> 2.4.0-1
changelog:
  - update to v2.4.0 release (arun.neelicattu@gmail.com)
  - Fix another typo (me@treier.xyz)
  - readme: add firefox instruction for extension (arun.neelicattu@gmail.com)
  - Fix typo in install command (me@treier.xyz)


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Michal Ruprich <mruprich@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Rename package from wget to wget1
  - Add wget1-wget subpackage to allow usage as wget


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 1.0.7-1
changelog:
  - feature added: fontname option, sans-serif would be default
  - feature added: add option to print utf8 hex sequence


author: Sudip Shil <sshil@redhat.com> - 1.0.8-1
changelog:
  - Handling non-printable charcaters
  - Print nicer names for all non-printable characters
  - code rendering


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Sérgio Basto <sergio@serjux.com> - 0.9.16^20230801gita61f364-1
changelog:
  - Update to a61f364e385d98677c04070a994397b287385219 git snapshot from
    2023-08-01 (a support for acquiring a DRM framebuffer with a drm schema
    in -rawfb option)


author: Neal Gompa <ngompa@fedoraproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races (#2319081)
  - Fix minor spec formatting inconsistencies


author: Greg Hellings <greg.hellings@gmail.com> - 4.3.1-1
changelog:
  - New upstream version 4.3.1 which already has editor fixed
  - Updated dependencies
  - Removed all patches


author: José Expósito <jexposit@redhat.com> - 21.1.14-2
changelog:
  - Fix build issues caused by Xorg.wrap
  - Restore quirks for Apple silicon
    Fixes: 422064e45a42 ("Update X11-server to 21.1.13 and ABI numbers of videodrv and xinput")
    Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2326701


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.6-1
changelog:
  - xwayland 24.1.6 (#2343992)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Alisson Bruno <alissonbruno.sa@gmail.com> - 1:1.1.14-29
changelog:
  - Bring back XDM package
  - Update to version 1.1.14
  - Remove unnecessary patches for crypt.h and libdl
  - Add support to systemd notify
  - New patch for version 1.1.14 for audit and systemd unit file
  - Add patch to fix build when auto-identifying the libsystemd
  - Add patch to set -nolisten tcp


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.2.6-1
changelog:
  - "Update to 1.2.6" * Fixed compass outline drawing * Exposed selected text
    to the windowing system Details on [release
    notes](https://github.com/xournalpp/xournalpp/releases/tag/v1.2.6)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.1.8-3
changelog:
  - Do not hardcode the build type
  - Use CMAKE_BUILD_TYPE RelWithDebInfo to avoid -Werror in compiler flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Orion Poplawski <orion@nwra.com> - 1:7.0.11-1
changelog:
  - Update to 7.0.11 (CVE-2024-36465, CVE-2024-36469, CVE-2024-42325,
    CVE-2024-45699, CVE-2024-45700)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.0.0-1
changelog:
  - Update to upstream 7.0.0 (fixes rhbz#2307507)
  - License audit and update to SPDX license expressions (fixes rhbz#2118200)


author: Ian McInerney <ian.s.mcinerney@ieee.org> - 7.1.0-1
changelog:
  - Update to upstream 7.1.0 (fixes rhbz#2330000, rhbz#2331292)
  - Update license string with final SPDX expression


