# changelog

author: José Expósito <jexposit@redhat.com> - 3.01-2
changelog:
  - Use mesa-compat-libOSMesa on Fedora 42 and later
    Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2373991


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 4.0.4-1
changelog:
  - Update to 4.0.4 (rhbz#2426948)
  - Rewrite the spec according to the non-crate Rust project guidelines.


author: Emir Akdag <infraw.linux@proton.me> - 3.1.0-1
changelog:
  - Update to 3.1.0 (Complete rewrite in Rust) - Package transitioned from
    Python to Rust - Vendored Rust dependencies due to missing crates in
    Fedora - Skipped hardcoded file-path doctests in %check


author: Bastien Nocera <bnocera@redhat.com> - 5.86-4
changelog:
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Update audio output patch to be upstream version
  - Fix "bluetoothctl list" empty output (Closes: #2440346)


author: Timothée Ravier <tim@siosm.fr> - 2.26.0-4
changelog:
  - F44+: Ship OpenSSH config file specifying AuthorizedKeysFile
  - Have ignition-edge require the matching main ignition package


author: Steven Presti <spresti@redhat.com> - 2.27.0-1
changelog:
  - New Release
  - Butane config transpiler merged into Ignition repository
  - Butane now follows Ignition version numbering
  - Drop Patch0 (fix merged upstream)
  - Drop legacy fcct/fedora-coreos-config-transpiler provides


author: Paulo Alcantara <paalcant@redhat.com> - 7.6-2
changelog:
  - cifs.upcall: fix regression with kerberos mounts
  - Resolves: rhbz#2497446
  - Resolves: rhbz#2496963
  - Resolves: rhbz#2489808 - CVE-2026-12505


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Packit <hello@packit.dev> - 366-1
changelog:
  - Networkmanager: Don't activate new network connections by default
  - Networkmanager: Navigate to details page after creation
  - Translations and dependency updates


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-5
changelog:
  - totemsrp: Return error if sanity check fails
    (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity
    (fixes CVE-2026-35092)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-8
changelog:
  - totemsrp: Fix int overflow in commit_token_sanity
    (fixes CVE-2026-81666)
  - totempg: Replace assert with check in deliver_fn
    (fixes CVE-2026-81665)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.11-1
changelog:
  - Update to release v1.34.11
  - Resolves: rhbz#2510870
  - Resolves CVE-2026-34986: rhbz#2455652
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.13-1
changelog:
  - Update to release v1.34.13
  - Resolves: rhbz#2527294
  - Upstream fixes
  - Likely the last v1.34 release


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.3-1
changelog:
  - Update to release v1.35.3
  - Resolves: rhbz#2466629
  - Fix CVE-2026-35469
  - Upstream fixes and new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-6
changelog:
  - Document elf exception
  - The elf inspection in rpminspect apparently does not implement the
    'ignore' feature. CRI-O does have TEXTREL which elf marks as bad. The
    --skip-textrel option for annocheck works.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-8
changelog:
  - Add internal/version.buildCommit to GO_LDFLAGS
  - Add the upstream 'internal/version.buildCommit' flag to GO_LDFLAGS using
    %{release} as the value


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.3-1
changelog:
  - Update to release v1.36.3
  - Resolves: rhbz#2510870
  - Resolves  CVE-2026-15809: rhbz#2500983
  - Upstream fixes


author: Packit <hello@packit.dev> - 5.4.4.0-1
changelog:
  - Update to version 5.4.4.0
  - Correct libdnf5-cli license to "GPL-2.0-or-later AND LGPL-2.1-or-later"
  - spec: Fix bcond ordering so plugin_systemd_inhibit is enabled
  - libdnf5: Fix dangling reference bug in is_vendor_change_allowed
  - spec: Mark all /etc configuration files as noreplacible
  - spec: Build-require perl(lib) for tests


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0-1
changelog:
  - Update to release v0.31.0
  - Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.2-1
changelog:
  - Update to release v0.31.2
  - Upstream security fixes (including ones in v0.31.1)
  - GHSA-hw3h-2gp9-cxpv
  - GHSA-qx3x-mv6r-52p6
  - GHSA-32pv-7hq5-qhwq
  - GHSA-g2h8-426c-7976
  - GHSA-388v-wmr2-g2v2
  - GHSA-7236-3392-c5c6
  - GHSA-72x6-4j93-7w86
  - Additional fixes`


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.32.0-1
changelog:
  - Update to release v0.32.0
  - Upstream new features and fixes
  - Resolves CVE-2026-47262 - rhbz#2496456
  - Resolves CVE-2026-53492 - rhbz#2496552


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.35.0-1
changelog:
  - Update to release v0.35.0
  - Resolves: rhbz#2487819
  - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
  - Upstream enhancements, new features, and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.36.0-1
changelog:
  - Update to release v0.36.0
  - Resolves: rhbz#2506339
  - Upstream new features and fixes
  - Resolves CVE-2026-53492 - rhbz#2496553
  - Resolves CVE-2026-47262 - rhbz#2496436


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.1.3-1
changelog:
  - Update to release v5.1.3
  - Resolves rhbz#2458697
  - Resolves CVE-2026-33747: rhbz#2452188, rhbz#2452199
  - Resolves CVE-2026-33748: rhbz#2453089
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.2.0-1
changelog:
  - Update to release v5.2.0
  - Resolves: rhbz#2491751
  - Important upstream note: This version introduces a new reconciliation
    algorithm between the observed state and the expected state. If you
    experience any issues with a Compose workload that was previously
    working, please open an issue with upsteam.
  - Additional upstream enhancements and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.3.0-1
changelog:
  - Update to release v5.3.0
  - Resolves: rhbz#2496535
  - Resolves CVE-2026-53492: rhbz#2496550
  - Resolves CVE-2026-47262: rhbz#2496433
  - Upstream note: This release introduces native support for init
    containers.
  - Additional upstream fixes and new features


author: Pavel Valena <pvalena@redhat.com> - 111-2
changelog:
  - fix(base): escape die() message in emergency hook script
  - fix(base): replace eval with safe variable indirection in splitsep and export_n
  - spec: json support for dracut-install (needed for detecting dlopen dependencies)


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 111-2
changelog:
  - fix(devicetree-firmware): include soc specific firmwares in install_generic()
  - fix(devicetree-firmware): include Qualcomm X2 laptop model specific firmwares


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-aarch64-Recognize-SHT_AARCH64_ATTRIBUTES.patch
    elfutils-0.194-alloc-jobs.patch
    elfutils-0.194-fix-const.patch
    elfutils-0.194-sh_addr-non-zero.patch
  - Add gelf.3 to %files
  - Enable eu-stacktrace on aarch64
  - Rename elfutils-default-yama-scope subpackage to yama-ptrace-enable,
    drop Requires on elfutils-libs, add Recommends on elfutils main
    package for FESCo Change #3569 (rhbz#2448388)


author: Aaron Merey <amerey@redhat.com> - 0.196-1
changelog:
  - Upgrade to upstream elfutils 0.196 (rhbz#2516216)
  - Obsolete all versions of elfutils-default-yama-scope so that the
    package from an older Fedora is removed on upgrade (rhbz#2515161)
  - Add eu-stackprof, a new tool for collecting systemwide stacktrace
    profiles, on x86/ARM
  - Remove the experimental eu-stacktrace tool along with the
    sysprof-capture-devel build dependency
  - Add libpfm-devel build dependency for eu-stackprof


author: Peter Lemenkov <lemenkov@gmail.com> - 27.3.4.16-1
changelog:
  - Ver. 27.3.4.16

  8 Mon Jul 27 2026 Peter Lemenkov <lemenkov@gmail.com> - 27.3.4.15-1
  - Ver. 27.3.4.15


author: psklenar@redhat.com <psklenar@redhat.com> - 2.7.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Vincent Mihalkovic <vmihalko@redhat.com> - 5.48-3
changelog:
  - Allow external decompressors to execute under Landlock
  - Migrate Python bindings to pyproject macros
    Resolves: rhbz#2513643
    Resolves: rhbz#2427330
    Resolves: rhbz#2378541


author: Martin Stransky <stransky@redhat.com> - 154.0-4
changelog:
  - Backported fix for HDR crash when HLG transform is missing
    (and it's always missing!).
  - Backported HDR fix for GL framebuffer (D318191).


author: Ondrej Holy <oholy@redhat.com> - 2:3.27.1-1
changelog:
  - Update to 3.27.1 (CVE-2026-55191, CVE-2026-55192, CVE-2026-55193,
    CVE-2026-55194, CVE-2026-55648, CVE-2026-55827)
    Resolves: rhbz#2488900


author: Ondrej Holy <oholy@redhat.com> - 2.11.7-16
changelog:
  - Backport several CVE fixes (CVE-2026-22852, CVE-2026-22854, CVE-2026-22855,
    CVE-2026-22856, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530,
    CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534,
    CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-23948,
    CVE-2026-24491, CVE-2026-24675, CVE-2026-24676, CVE-2026-24679,
    CVE-2026-24681, CVE-2026-24683, CVE-2026-24684, CVE-2026-25952,
    CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27951,
    CVE-2026-29775, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884,
    CVE-2026-31885, CVE-2026-33983, CVE-2026-33984, CVE-2026-33985,
    CVE-2026-45700, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299 and
    CVE-2026-68580)
    Resolves: rhbz#2430919, rhbz#2430908, rhbz#2430898, rhbz#2430914, rhbz#2430903
    Resolves: rhbz#2430924, rhbz#2430933, rhbz#2429808, rhbz#2429823, rhbz#2429794
    Resolves: rhbz#2443146, rhbz#2442975, rhbz#2429799, rhbz#2429814, rhbz#2429821
    Resolves: rhbz#2438309, rhbz#2438321, rhbz#2438308, rhbz#2438328, rhbz#2438324
    Resolves: rhbz#2438302, rhbz#2438310, rhbz#2438300, rhbz#2447394, rhbz#2453243
    Resolves: rhbz#2453240, rhbz#2442837, rhbz#2442810, rhbz#2447426, rhbz#2447422
    Resolves: rhbz#2447413, rhbz#2447416, rhbz#2453247, rhbz#2442857, rhbz#2491683
    Resolves: rhbz#2510295, rhbz#2510643, rhbz#2503646, rhbz#2510448


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-1
changelog:
  - Bump to 1.5.18
  - Fix Backspace in prediction
  - Update translations
  - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI
  - Delete gnome-themes-extra from Fedora CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-4
changelog:
  - Fix some issues with thumb shift mode
  - return False for thumb-shift release keys
  - Add super key support for thumb shift mode


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.35~alpha2-4
changelog:
  - Fix typo in ibus-compose
  - Merge ibus-2444009-wayland-xkb-lv-tilde.patch
  - Fix CapsLock between focus changes in Wayland


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.35~beta1-1
changelog:
  - Resolves: #2512529 GTK 4.23.3 apps cause SIGSEGV with ibus-gtk4
  - Implement forward-key-event in Wayland input-method V2
  - Fix some issues in ibus-keypress


author: Packit <hello@packit.dev> - 73.0.0-1
changelog:
  Changes with 73.0.0
  ----------------
    - Update dependencies 2026-06-21 (#2451)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Update osbuild dependency commit ID (#2450)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - disk: check all partitions for boot partition requirement (#2459)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - github: drop the reverse dependency check with image-builder-cli (#2454)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - imgtestlib: handle missing sources key in tests (#2447)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - osbuild: ddi mount (#2457)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - rhel-10: reintroduce minimal-raw-xz (#2465)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-06-29


author: Packit <hello@packit.dev> - 74.0.0-1
changelog:
  Changes with 74.0.0
  ----------------
    - Test depsolvednf with dnf5 [HMS-10324] (#2475)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update dependencies 2026-06-28 (#2472)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update dependencies 2026-07-05 (#2490)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - depsolvednf: don't require solver.json in test (#2479)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - distro/eln: use dnf5 and update package lists (#2482)
      - Author: Yaakov Selkowitz, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gen-manifest: optimize checksum calculation (#2382)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - generic/bootc: allow disk.yaml to provide root filesystem type (#2405)
      - Author: Joel Capitao, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - github: remove osbuild-composer reverse dependency test (#2477)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - image-builder/build: add json format option (#2484)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - manifest: add firstboot support (HMS-9187) (#1913)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - many: plumb sdboot options (#2456)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: use `image-builder upload` in tests (HMS-10856) (#2476)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - partition_table: Make AlignUp clearer (#2419)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - pkg/rhsm: match subscription baseurls with wildcards (RHEL-36789) (#2460)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal
    - progress: lock around sub progress (#2487)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - workflows: Add a link to the osbuild-composer API unit test results (#2469)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - workflows: Update old images urls to image-builder (#2468)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-07-08


author: Packit <hello@packit.dev> - 75.0.0-1
changelog:
  Changes with 75.0.0
  ----------------
    - Add hidden pkgsearch subcommand for querying available packages (HMS-11011) (#2515)
      - Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Always use seed argument directly (#2516)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Enable basic bootc-image-builder tests [HMS-10851] (#2467)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Tomáš Koscielniak
    - Enable image-builder container builds [HMS-10851] (#2497)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Simon de Vlieger
    - Fedora ISO Modernization (HMS-9965) (#2533)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Sanne Raymaekers
    - Improve error message for pkgsearch with no packages (#2526)
      - Author: Gianluca Zuccarelli, Reviewers: Brian C. Lane, Lucas Garfield
    - README: update deprecated information in docs (#2498)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Run more bootc-image-builder tests in gitlab [HMS-10854] (#2520)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - Update dependencies 2026-07-12 (#2513)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild dependency commit ID (#2512)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260705 (#2488)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - bootc: support grub2 serial console customization (#2403)
      - Author: Jean-Baptiste Trystram, Reviewers: Brian C. Lane, Joel Capitao, Tomáš Hozza
    - build(deps): bump actions/checkout from 6 to 7 (#2452)
      - Author: dependabot, Reviewers: Anna Vítová, Simon de Vlieger
    - ci: enable allow-unsafe-pr-checkout in checkout/7 (#2523)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - cmd/image-builder: mock simple integration tests (HMS-10857) (#2473)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - disk: systemd-repart compatibility (#2510)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - fedora: drop slirp4netns from the IoT image (#2478)
      - Author: Peter Robinson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - image-builder: add hidden `--with-upload-result` option (#2521)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - pkg/disk: add XFS agcount option in `disk.yaml` (#2496)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: add file progress (HMS-10977) (#2493)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - test: fix build info cache path creation to use correct runner_distro (#2495)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - test: fix vm.py import error [HMS-11012] (#2522)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: go 1.27 compatibility (#2504)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - test: mock cache dir (#2519)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-07-21


author: Packit <hello@packit.dev> - 76.0.0-1
changelog:
  Changes with 76.0.0
  ----------------
    - Restore anaconda-iso/iso type to bootc-image-builder (#2527)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update osbuild dependency commit ID (#2531)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda: enable shell shenanigans for anaconda (#2544)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - build(deps): bump actions/setup-go from 6 to 7 (#2532)
      - Author: dependabot, Reviewers: Achilleas Koutsou, Anna Vítová
    - eln: set runner to eln11 (#2535)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - image-builder: distro detection for `build` and `manifest` (#2542)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Ondřej Budai

  — Somewhere on the Internet, 2026-07-22


author: Packit <hello@packit.dev> - 77.0.0-1
changelog:
  Changes with 77.0.0
  ----------------
    - Generate bootc-image-builder test jobs dynamically and enable all tests [HMS-11073] (#2539)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - Refactor CLI setup (#2503)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update osbuild dependency commit ID (#2555)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda: rectify comment (#2548)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová, Lukáš Zapletal
    - bib: Replace logrus usage with olog (#2543)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - bib_legacy: Use functions from bootc (#2540)
      - Author: Brian C. Lane, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/setup-python from 6 to 7 (#2556)
      - Author: dependabot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - eln: enable `aarch64` for `gce` (HMS-11095) (#2558)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - github: enable building the bootc-image-builder container [HMS-11005] (#2549)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - gitlab: remove setup-show option for pytest (#2551)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - manifest/raw_bootc: support subscription registration on first boot (HMS-10897) (#2528)
      - Author: Lucas Garfield, Reviewers: Brian C. Lane, Simon de Vlieger
    - pkg/koji/upload: session credentials to headers (#2550)
      - Author: Anna Vítová, Reviewers: Florian Schüller, Sanne Raymaekers

  — Somewhere on the Internet, 2026-07-28


author: Packit <hello@packit.dev> - 78.0.0-1
changelog:
  Changes with 78.0.0
  ----------------
    - Simplify early manifest generation code and enable custom seeds for bootc-based images (#2565)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update RHEL 9, 10 OCI image defs to add Oracle as cloud init datasource (#2559)
      - Author: src-up, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update osbuild dependency commit ID (#2576)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260719 (#2530)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - ci: tag containers (#2575)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - cmd/image-builder: drop `images` from version (#2573)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - container: add SetAuthFilePath method to Resolver (#2580)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - disk: align footer to grain by default (#2562)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - disk: take the ESP size from the image type's partition table (RHEL-214147) (#2552)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - distro/generic: pass subscription options to pxe-tar-xz images (HMS-11108) (#2564)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Brian C. Lane
    - fedora: create 46 (#2546)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Florian Schüller
    - imgtestlib: configure setuptools package discovery (#2563)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test/imgtestlib: revert boot.py to old behaviour (#2579)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: remove iot-bootable-container image type (#2569)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-08-10


author: Packit <hello@packit.dev> - 79.0.0-1
changelog:
  Changes with 79.0.0
  ----------------
    - Fix the container resolver tests (#2602)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Sanne Raymaekers
    - Run privileged unit tests on gitlab (#2603)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Start container with repos support for legacy ISO only [HMS-11156] (#2582)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update osbuild dependency commit ID (#2600)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260816 (#2599)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda_installer: platform build packages (#2589)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Sanne Raymaekers
    - distrodefs: Add aliases to Fedora for GCP (HMS-11182) (#2583)
      - Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - fedora: drop explicit `anaconda-widgets` (#2597)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Katerina Koukiou, Lukáš Zapletal
    - image-builder: reuse progress bars for upload (#2592)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - manifest: accept human-readable image sizes (#2571)
      - Author: tomatotomata, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - osbuild/rpm: implement generic env   (#2586)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - ova: set os type and virtual hardware version (HMS-3248) (#2480)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - packit: enable riscv64 (#2595)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - pkg/disk.yaml: add an option to not grow root (#2524)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: add GPG keys to Fedora 44 test repos (#2585)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - test: mock host arch for package search (#2594)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-08-20


author: Packit <hello@packit.dev> - 82.0.0-1
changelog:
  Changes with 82.0.0
  ----------------
    - Enable bootc-image-builder ISO tests on aarch64 [HMS-11073] (#2637)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Lucas Garfield
    - Implement rootless container introspection (#2617)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - Rewrite container handling internals to drop graphdriver and gpgme dependencies [RHEL-56367] (#2607)
      - Author: Achilleas Koutsou, Reviewers: Lucas Garfield, Simon de Vlieger
    - Update osbuild dependency commit ID (#2631)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260830 (#2630)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - client: Respect CONTAINERS_GRAPHROOT and CONTAINERS_RUNROOT (#2645)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cmd/image-builder: only run findDistro once (#2651)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cmd/image-builder: upload messages progress bar (#2654)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Sanne Raymaekers
    - el9/10: parity bits (#2659)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - gce: ensure disk images are GiB-aligned (#2655)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - osbuild: compare Go against JSON (#2529)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - osinfo: never fall back if new prefix exists (#2649)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - osinfo: warn on old-prefix usage (#2648)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Sanne Raymaekers
    - pkg/crypt: add support for yescrypt hashed passwords (#2650)
      - Author: Loris Fauster, Reviewers: Lucas Garfield, Simon de Vlieger
    - pkg/rhsm: use Katello CA as default on Satellite hosts (#2613)
      - Author: Lukáš Zapletal, Reviewers: Lucas Garfield, Simon de Vlieger
    - rm SECURITY.md: fall back to org-wide policy (#2633)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - rootless: Don't disallow --in-vm in rootless non-container (#2626)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-09-04


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 1.8.11-9
changelog:
  - Reapply the change to keep symlinks managed by alternatives under /usr/bin,
    this time with a scriptlet create symlinks if /usr/sbin is unmerged.


author: Kevin Fenzi <kevin@scrye.com> - 1.8.12-1
changelog:
  - Update to 1.8.12. Fixes rhbz#2440980
  - Add patch to revert refuse to run under file capabilities and fix docker.


author: David Howells <dhowells@redhat.com> 0.7-1
changelog:
  - aklog-kafs: Update the cmdline options to be closer to standard aklog.
  - aklog-kafs: Reduce verbosity.
  - aklog-kafs: Allow the destination keyring to be specified.
  - aklog-kafs: Do better default keyring handling.
  - aklog-kafs: Improve error messages.
  - kafs-preload: Add a debug cmdline option and reduce some verbosity.
  - kafs-check-config: Use the kernel's rootcell if no cell specified.
  - Convert most manpages to POD form and supply a generation script.
  - kafs-check-config: Fix a missing inclusion of unistd.h.
  - lib: Fix a modification of a read-only string.
  - Move to using autoconf when building.
  - Generate manpages during the build.
  - kafs-preload: Honour the show_cell setting on each cell.
  - Add SPDX licence tags.
  - Remove the street address from the LICENCE file.


author: David Howells <dhowells@redhat.com> 0.8-1
changelog:
  - Updated cellservdb.
  - spec: Change to new format licence tag.
  - spec: Buildrequire make.
  - spec: Remove dep on filesystem-afs rpm.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.7.0-2
changelog:
  - Patch kamelion-qmk-helper for qmk-via-api 0.8
  - Account for licenses of statically-linked Rust dependencies


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.d58772d8520c.54]
changelog:
  - Clean up unnecessary pending entries (Justin M. Forbes)
  - Turn on CONFIG_CRYPTO_MLDSA for Fedora (Justin M. Forbes)
  - Linux v7.2.0-0.rc7.d58772d8520c


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-60]
changelog:
  - dracut-virt.conf: change systemd-pcrphase to systemd-pcrextend (Vitaly Kuznetsov)
  - redhat/kernel.spec.template: Switch UKI addons to using UKI cert (Vitaly Kuznetsov)
  - Linux v7.2.0


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.2.1-0]
changelog:
  - Initial setup for stable Fedora release (Justin M. Forbes)
  - Reset Makefile.rhelver for the 7.3 cycle (Justin M. Forbes)
  - Merge configs into common for 7.2 (Justin M. Forbes)
  - redhat/configs: automotive: enable RTC_DRV_PL031 (Eric Chanudet)
  - redhat: name the dtb and UKI arch lists (Jan Stancek)
  - redhat: use one spelling for the nobuildarches files guard (Jan Stancek)
  - redhat: drop stale ppc64 from the kabidw-base arch list (Jan Stancek)
  - redhat: document the kabichk force-off as a seasonal toggle (Jan Stancek)
  - redhat: use one spelling for the include and gemini conditionals (Jan Stancek)
  - redhat: remove unused elf_image_install_path and duplicate defines (Jan Stancek)
  - redhat: drop the dead kernel-tools __requires_exclude python filter (Jan Stancek)
  - redhat: drop the Fedora 41 cross-build gdb-index workaround (Jan Stancek)
  - redhat: drop stale build switches from dist-perf and dist-rpm-baseonly (Jan Stancek)
  - redhat: give kernel-automotive its own summary (Jan Stancek)
  - redhat: drop leftover kernel_kvm_post calls for rt-64k (Jan Stancek)
  - redhat: restore missing summary of the kernel-debug variant (Jan Stancek)
  - redhat: fix parse error in baseonly sanity check message (Jan Stancek)
  - Linux v7.2.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.2.3-0]
changelog:
  - Bluetooth: btusb: limit RTL8761B BROKEN_EXT_SCAN quirk to 0bda:a728 (Junjie Cao)
  - ACPI: scan: Do not combine resources that overlap completely (Rafael J. Wysocki)
  - ACPI: scan: Avoid registering platform devices with resource overlaps (Rafael J. Wysocki)
  - page_pool: keep frag_offset aligned for odd-sized requests (Florian Schauer) [2521546 2521847]
  - media: i2c: cvs: Pass link frequency explicitly to csi_set_link_cfg() (Laurent Pinchart)
  - media: i2c: cvs: Add NVL ACPI ID (Arun T)
  - media: i2c: cvs: Add IPU8 PCI device ID (Arun T)
  - random: Drop the extrng module reference when import_ubuf() fails (Junjie Cao) [2524262]
  - Add mechanism to back out the af_alg_restrict sysctl (Justin M. Forbes)
  - crypto: af_alg - Stop after finding name in allowlist (Eric Biggers)
  - crypto: af_alg - Replace 'bool privileged' with flags (Eric Biggers)
  - crypto: af_alg - Make cbc(paes) privileged-only (Eric Biggers)
  - crypto: af_alg - clean up kernel-doc warnings (Randy Dunlap)
  - crypto: af_alg - Allow additional ciphers for cryptsetup (Eric Biggers)
  - crypto: af_alg - Add af_alg_restrict sysctl, defaulting to 1 (Eric Biggers)
  - Linux v7.2.3


author: Steve Cossette <farchord@gmail.com> - 6.27.0-1
changelog:
  - Initial release (Rename/version scheme change from kmime)
  - Removed doc subpackage (It's been empty for a while)
  - Cleaned up dependancies


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.37.0-1
changelog:
  - Add initial Kubernetes 1.37.0 release
  - Initial release for Fedora
  - Urgent (must read) upgrade notes at: https://github.com/kubernetes/kubern
    etes/blob/master/CHANGELOG/CHANGELOG-1.37.md#urgent-upgrade-notes
  - New features, enhancements, and fixes


author: Remi Collet <remi@remirepo.net> - 1.1.4-8
changelog:
  - fix test suite with memcached 1.6.40
    reported as https://github.com/awesomized/libmemcached/issues/161
    using fix from https://github.com/awesomized/libmemcached/pull/162


author: Remi Collet <remi@remirepo.net> - 1.1.4-12
changelog:
  - fix FTBFS #2504281
  - add patch for Sphinx 9 from
    https://github.com/awesomized/libmemcached/pull/159
  - re-license spec file to CECILL-2.1


author: Milan Crha <mcrha@redhat.com> - 3.6.6-6
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Andreas Schneider <asn@redhat.com> - 0.26.10-1
changelog:
  - Update to version 0.26.10
  - https://github.com/tree-sitter/tree-sitter/releases/tag/v0.26.10
  - resolves: rhbz#2479963


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.8-4
changelog:
  - Move the license file to lua-libs, so it is always present if any combination of subpackages is installed
  - Fixes: rhbz#2418960


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.5.3^20220831git2d4ba970-10
changelog:
  - F42+: Add old style pre scriptlet for LXDM user creation so as to make it work
    when upgrading from F41


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-15
changelog:
  - Fix CVE-2026-72694: symlink-following privilege escalation in PID file handling
    Resolves: #2513829


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.2.19-1
changelog:
  - Update to 0.2.19
  - Build with Qt6
  - Convert License tag to SPDX
  - Use xwfb-run for tests instead of xvfb-run


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 3.125.0-2
changelog:
  - fix the nspr version to full expansion
  - affected: https://bugzilla.redhat.com/show_bug.cgi?id=2488324


author: Rostislav Krasny <rostiprodev@gmail.com> - 3.125.0-2
changelog:
  - Reseed the freebl DRBG after fork() so forked children do not replay the
    parent's random stream (Firefox fork server duplicate UUIDs / crypto output)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.10-4
changelog:
  - Fix LDAP initialization does unnecessary resolution of hostname (rhbz#2331728)
  - Convert STI tests to FMF (rhbz#2382998)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:4.0.0~beta1-5
changelog:
  - Mark release as beta1 according to upstream naming.
  - Update requirements for better backward compatibility


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:4.0.1-3
changelog:
  - We use FIPS provider from a separate package and can drop
    FIPS-specific patches and stop building OpenSSL native FIPS provider


author: Pavol Žáčik <pzacik@redhat.com> - 1:4.0.1-5
changelog:
  - Don't raise NOT_ENOUGH_DATA on a clean EOF at an object boundary
    (Backport from https://github.com/openssl/openssl/commit/4360d53)


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Filipe Rosset <filiperosset@fedoraproject.org> - 5.4.3-1
changelog:
  - update to 5.4.3 fixes rhbz#2492868
  - a bunch of other bugs were fixed and will be backported to all supported
    Fedora / EPEL versions


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 4.41-1
changelog:
  - Update to 4.41
    - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
    - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
    - Fix incr_parse single-quote string delimiter (GH#245)
    - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
      truncated input (GH#244)


author: Paul Howarth <paul@city-fan.org> - 4.42-1
changelog:
  - Update to 4.42
    - Ensure encode with a type spec hashref does not change the hashref argument
      (GH#240)
    - Fix -e docs: "written" → "read" (GH#239)
    - Fix Boolean eq overload matching undef (GH#207); Cpanel::JSON::XS::Boolean
      overloaded eq would match undef as equal to false because undef stringifies
      to "" - added defined() guard
    - Fix error messages showing overloaded stringification for blessed objects
      (GH#191); error messages now use ClassName=TYPE(addr) format, bypassing any
      "" overload
    - Fix type_all_string overriding allow_blessed/convert_blessed (GH#175); with
      type_all_string + allow_blessed, blessed objects are now encoded as null
      (not stringified as HASH address)
    - Fix infinite recursion when encode is called from a "" overload (GH#128);
      the recursion guard temporarily clears convert_blessed and allow_stringify
      flags on the JSON object before calling the overload, preventing re-entrant
      encode loops
    - Fix $obj->new creating a broken object (GH#93); when new() is called on an
      existing object (e.g. $json->new->new), the class name is now extracted
      from the object's stash rather than using the stringified reference
    - Change allow_nonref default to true (GH#241, matching JSON::PP and
      JSON::XS 4.0+ and the insecure RFC 7159); encode and decode now accept
      non-reference values by default; decode_json() with an explicit 0/1 second
      argument still works; allow_nonref(0) to disable scalars-only for secure
      JSON
    - Fix minor t/12_blessed.t typo
    - Fix GH#112: encode large whole-number NV values without .0 on 32-bit Perl
      (values exceeding UV_MAX that Perl stores as float)
    - Fix GH#197: prefer IOK over pNOK when encoding values where IV is accurate
      but NV is imprecise (SvNOK not set)


author: Paul Howarth <paul@city-fan.org> - 4.43-1
changelog:
  - Update to 4.43
    - Fix canonical sort: Compare by UTF-16 code units per RFC 8785 (GH#248)
    - Fix canonical sort on Perl 5.8-5.18: utf16_cmp now always attempts UTF-8
      decoding instead of checking SvUTF8 flag, since older Perls may store valid
      UTF-8 hash keys without the flag set
    - Fix quadmath encode dropping ".0" for large floats (GH #246)
      - The .0 guard condition that suppressed appending for NV values > UV_MAX
        was incorrect on high-precision FP (quadmath, 128-bit long double on
        arm64) where %g uses fixed-point notation for values like 1.01e30
      - Guarded with #if NV_DIG < 31 to skip only on double/80-bit-ld where %g
        naturally uses %e for large values


author: Paul Howarth <paul@city-fan.org> - 4.44-1
changelog:
  - Update to 4.44
    - Fix canonical sort infinite loop (GH#252): malformed UTF-8 keys (e.g.
      Latin-1 byte strings mixed with Unicode) made utf16_cmp treat the decoder's
      (STRLEN)-1 malformed sentinel as a length, wrapping the buffer pointer: now
      checked as 0 or > remaining length


author: Paul Howarth <paul@city-fan.org> - 2:1.66-1
changelog:
  - Update to 1.66 (rhbz#2346459)
    - Require Specio 0.50
      - That release has a bug fix for validation of integer values
      - Without the fix, DateTime could accept non-integer values for things like
        nanoseconds (GH#145)


author: Paul Howarth <paul@city-fan.org> - 2:1.67-1
changelog:
  - Update to 1.67 (rhbz#2526041)
    - Documented that the 'truncate' method can throw a fatal error if the
      truncation produces a datetime that doesn't exist in the local time zone,
      which can happen when truncating to a day (or more) in a time zone with a
      DST transition at midnight (GH#155)
    - Documented that 'rfc3339' does not include nanoseconds (GH#150)
    - Fixed docs for 'strftime' to remove the bit that said it returned the same
      values as the POSIX 'strftime'; this hasn't been the case for a long time
      (GH#148)


author: Remi Collet <remi@remirepo.net> - 2.4.0-1
changelog:
  - update to 2.4.0
  - raise dependency on libmongoc 2.4.0 and libmongocrypt 1.20.0
  - run upstream test suite without server


author: Miro Hrončok <mhroncok@redhat.com> - 3.15.0~b2-5
changelog:
  - Restore compatibility with setuptools nspkg.pth files in site module
  - Fixes: rhbz#2486045
  - Fixes: rhbz#2486059
  - Fixes: rhbz#2487621
  - Fixes: rhbz#2488369


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main python package
  - New subpackages: root-graf3d-glad, root-net-curl,
    root-tmva-sofie-parser-python, root-tree-ml, root-histv7util
  - Dropped patches: 2
  - New patches: 7


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-5
changelog:
  - Use the system civetweb library since it now supports web sockets
  - Drop the davix module for Fedora 45+ (davix will soon be retired)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.04-1
changelog:
  - Update to 6.40.04
  - The root-roofit-jsoninterface package was merged with root-roofit-hs3
  - Fix calculation of kerning distances in generated PDF files
  - Dropped patches: 1
  - New patches: 2


author: Dmitry Belyavskiy <beldmit@gmail.com> - 6.11.1-4
changelog:
  - Backport of upstream OpenSSL4 commit
    https://github.com/qt/qtbase/commit/e806630e694d89f567cffa9c982d1f471089ecd8


author: Jan Grulich <jgrulich@redhat.com> - 6.11.1-2
changelog:
  - Upstream backport:
    - QQmlTableInstanceModel: refactor QModelIndex calculation out
      of QQuickTableView


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 261.2-1
changelog:
  - Version 261.2
  - a bugfix release with correctness and security-relevant fixes too. 276
    patches, so too much to describe here.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 262~rc1-1
changelog:
  - Version 262~rc1
  - See https://raw.githubusercontent.com/systemd/systemd/v262-rc1/NEWS. Too
    many changes to list or discuss here.


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Tom Callaway <spot@fedoraproject.org> - 2.1.1-1
changelog:
  - update to 2.1.1
  - bump libtiff to 4.7.2 (the tkimg libtiff library glue still versions at 4.7.1, because I didn't want to break compat when/if upstream makes a similar change)


author: Remi Collet <remi@remirepo.net> - 9.1.1-1
changelog:
  - Valkey 9.1.1 - Released Tue 21 July 2026
  - Upgrade urgency SECURITY: This release includes security fixes
    CVE-2026-56684 CVE-2026-63639
  - own /etc/logrotate.d as its owner is an optional dependency
  - refresh the documentation
  - drop OpenSSL 4 patch merged upstream


author: Remi Collet <remi@remirepo.net> - 9.1.2-1
changelog:
  - Valkey 9.1.2 - Released Mon 31 August 2026
  - Upgrade urgency SECURITY: This release includes security fixes


