# changelog

author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15


author: Julio Faracco <jfaracco@redhat.com> - 3.3.0-1
changelog:
  - Adds improvements related to containerized workflows (3.3)
  - Adds mmap/munmap to resource tracking (3.2)
  - Adds ability to specify multiple comma separated signals (3.1)
  - Adds the new -mc switch which controls what type of memory is included in the core dumps (3.1)
  - Adds resource tracking and reporting feature (3.0)
  - Adds Azure Linux package (2.2)
  - Fixes memory leaks (2.2)


author: Julio Faracco <jfaracco@redhat.com> - 3.4.1-1
changelog:
  - Removes the ':' separator for the date/time section of the generated core dump filename, aligning across operating systems
  - Monitor: remove useless variables


author: Julio Faracco <jfaracco@redhat.com> - 3.5.0-1
changelog:
  - Add logging for missing symbols in restrack callstacks
  - Fix dotnet socket PID matching to prevent conflicts between processes
  - Updating trigger docs and removing unused condition in Monitor
  - Add manual trigger support for restrack snapshots
  - Use prctl syscall to enable ptrace + replace stress-ng with custom stress cpu/mem code


author: Julio Faracco <jfaracco@redhat.com> - 3.5.2-1
changelog:
  - Adds .NET counter integration (3.5.2)
  - Adds a custom core dumper (corex) (3.5.2)
  - Add support for RHEL10, Debian 13, Ubuntu 26.04, Fedora 43 and updated dependencies (3.5.1)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-1
changelog:
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Paul Howarth <paul@city-fan.org> - 1.3.9b-1
changelog:
  - Update to 1.3.9b
    - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
      CVE-2026-44331)
    - Additional fix for session management with OpenSSL 3.2.x or later, when
      using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
    - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
      expected (GH#2098)
    - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
      in mod_sftp (GH#2102)
    - SSH packet with empty payload triggered null pointer dereference in
      mod_sftp (GH#2104)
    - Bad DSA signatures could lead to out-of-bounds read of heap memory in
      mod_sftp (GH#2106)
    - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
      mod_sftp (GH#2108)
    - SFTP request payload length underflow calculation in mod_sftp
      (GH#2115, CVE-2026-53994)
    - Several modules failed to build using OpenSSL 4.0 (GH#2120)
  - Update mod_proxy to 0.9.7
    - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
    - Set the payload_len field before checking its value (GH#292)
    - Keep the SSH packet reading code in mod_proxy more in line with what is
      done in mod_sftp, for legibility (GH#294)
    - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
      (GH#295, GH#296)
    - Correct misspellings noted by codespell (GH#297)
    - Use clang-tidy to start polishing the codebase (GH#298)
    - Disable the Nagle algorithm by default on our TCP connections to back-end
      servers (GH#299)
    - Require OpenSSL for building (GH#249, GH#300)
    - Documentation fixes
    - Implement a limit on the number of EXT_INFO extensions we'll be willing to
      accept (GH#303)
    - Comparison of expected/provided MAC data should be done in a constant-time
      manner
    - Support PKCS11-stored private keys
    - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
      post-quantum SSH key exchange mechanisms (GH#306)
    - Add sanity check for SRV record lengths
    - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
      does not underflow
    - If we detect a bad DSA signature length, properly error out
    - Ensure that RSA/DSA signatures match their expected algorithm types, and
      avoid null pointer dereferences
    - Update to build against OpenSSL 4.x (GH#313)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-1
changelog:
  - Update to 1.3.9c
    - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
    - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
    - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
    - AdminControlsACLs for config, get actions not honored as they should be
      (GH#2163)
    - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
      buffers without bounds checking (GH#2166)
    - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
      to reject illegal characters (GH#2173)
    - SQL group name lookup concatenates client-provided group names without
      escaping (GH#2188)
    - Authenticated SFTP sessions can overflow the SFTP packet buffer
      (GH#2190, CVE-2026-63090)
    - Default Controls socket ACLs unintentionally allow all users access for
      sending Controls requests (GH#2210)
    - Exercise caution when reading the client-provided file size for SCP
      uploads, as it could possibly overflow our size type (CVE-2026-63091)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-3
changelog:
  - Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
    /proc/self/root path prefix); this module disallows file accesses via procfs
    filesystems


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Tom Callaway <spot@fedoraproject.org> - 13.0.4-2
changelog:
  - rebuild for lua 5.5
  - apply upstream fix for configure
  - make a new patch to actually support lua 5.5


author: Tom spot Callaway <spotaws@amazon.com> - 2.9.4-2
changelog:
  - only run the tests on architectures where this app is likely to be
    actually used, due to itenerant failures on the other architectures


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-5
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/fixes_boost.patch.


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-6
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/boost-1.89.patch.


author: Jerry James <loganjerry@gmail.com> - 1.15-1
changelog:
  - Update to 1.15 (rhbz#2241663)
  - Change doc subpackage architecture to noarch
  - Change Source URL to tarball with the tests included
  - Add a %check script
  - Do not glob the library name
  - Minor spec file cleanups


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.3-1
changelog:
  - Recognize wsl2 images produced by koji (lsedlar)
  - Specify data_files with relative paths (lsedlar)
  - Crossreference `koji_cache` from the Koji cache page (ahills)
  - Add documentation for `koji_cache` configuration (ahills)
  - Record exceptions for top level OTel span (lsedlar)
  - Update spec to match current python packaging guidelines


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.0-1
changelog:
  - Add more tracing to kojiwrapper (lsedlar)
  - phases: implement image-builder (supakeen)
  - Add a tracing span around call to skopeo inspect (lsedlar)
  - Add retries to skopeo inspect calls (lsedlar)
  - otel: Explicitly initialize telemetry provider and tracer (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.1-1
changelog:
  - osbuild: Handle wsl2 images (lsedlar)
  - repoclosure: Clean up cache for dnf5 (lsedlar)
  - Ignore errors for rmtree after archive extraction (dhodovsk)
  - imagebuilder: accept `manifest_type` (supakeen)
  - Add a telemetry span over image building threads (lsedlar)
  - Add specific exception for skopeo copy (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.13.0-1
changelog:
  - phase/kiwi, phase/image-builder: xorrisofs (cmdr)
  - phase/kiwi, phase/image-builder: iso fields (cmdr)
  - imagebuilder,kiwibuild: fix failable wildcard arch expansion (lsedlar)
  - Improve Koji task ID discovery and logging (awilliam)
  - phases/buildinstall: remove unused non-lorax paths (awilliam)
  - Correct ostree_installer phase name in log messages (awilliam)
  - phase/imagebuilder: failable arches fix (cmdr)
  - Move image sanity checks from test phase to image-generating phases (lsedlar)
  - Update phase diagram (lsedlar)
  - Remove OSBS and ImageContainer phases (awilliam)
  - Drop size check for ISOs (lsedlar)
  - Support list of URLs for rpm_repo_mapping (hlin)
  - docs: modernize Sphinx conf.py (hlin)
  - kiwi: also include subvariant in failure logging (awilliam)
  - kiwi: include image profile in global logs and watch-task filenames
    (awilliam)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> - 8.10.0-1
changelog:
  - Update to 8.10.0 (fixes rhbz#2291351)
  - Ruby 3.3 regexp incompability bugfix (fixes rhbz#2280109)
  - Ruby 3.4 closedir bugfix (fixes rhbz#2349352)


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.3.0-1
changelog:
  - Update to 25.3.0
  - pyOpenSSL now sets SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER on connections by
    default, matching CPython’s behavior.
  - Added OpenSSL.SSL.Context.clear_mode.
  - Added OpenSSL.SSL.Context.set_tls13_ciphersuites to set the allowed TLS
    1.3 ciphers.
  - Added OpenSSL.SSL.Connection.set_info_callback


author: Jeremy Cline <jeremycline@microsoft.com> - 26.0.0-1
changelog:
  - Update to v26.0.0
  - Added support for using aws-lc instead of OpenSSL.
  - Properly raise an error if a DTLS cookie callback returned a cookie
    longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a
    buffer-overflow. Credit to dark_haxor for reporting the issue.
    CVE-2026-27459
  - Added OpenSSL.SSL.Connection.get_group_name to determine which group name
    was negotiated.
  - Context.set_tlsext_servername_callback now handles exceptions raised in
    the callback by calling sys.excepthook and returning a fatal TLS alert.
    Previously, exceptions were silently swallowed and the handshake would
    proceed as if the callback had succeeded. Credit to Leury Castillo for
    reporting this issue. CVE-2026-27448


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Jos de Kloe <josdekloe@gmail.com> 2.1.8-1
changelog:
  - Update to 2.1.8 (#2406074)
  - Update license following discussion on https://github.com/jswhit/pygrib/issues/275


author: Jerry James <loganjerry@gmail.com> - 2.6.3-1
changelog:
  - Version 2.6.3
  - Use the pyproject declarative buildsystem
  - Drop upstreamed patches: const-vector-typemap, fix-get-avmax, format-
    mismatch


author: Jerry James <loganjerry@gmail.com> - 2.6.4-1
changelog:
  - Version 2.6.4
  - Drop upstreamed remove-redundant-ref patch
  - Drop upstreamed workaround for swig 4.3
  - Add patch for incompatible pointer types
  - Add patch for incompatible format specifiers


author: Charalampos Stratakis <cstratak@redhat.com> - 1.20.0-1
changelog:
  - Add %pyproject_patch_dependency macro for overriding dependency constraints
  - Overrides apply to both BuildRequires and runtime Requires (via METADATA patching)
  - Resolves: rhbz#2386906


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.20.1-1
changelog:
  - Move %pyproject_patch_dependency implementation to pyproject-srpm-macros
  - Make pyproject-rpm-macros depend on pyproject-srpm-macros
  - Resolves: rhbz#2463187


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.21.0-1
changelog:
  - Implement extras validation
  - %pyproject_buildrequires: validates if extras exist in upstream metadata, otherwise ValueError is raised on Fedora >=45 and RHEL >=11. It will emit a warning instead on older releases.
  - Both user-specified extras and metadata extras are normalized following PEP 685 conventions.


author: Miro Hrončok <mhroncok@redhat.com> - 1.22.0-1
changelog:
  - Add long option support for all public parametric macros
  - E.g. %pyproject_buildrequires --no-runtime is equivalent to %pyproject_buildrequires -R
  - %pyproject_save_files: Allow to use --auto instead of +auto
  - %pyproject_patch_dependency: Validate arguments early, in %prep


author: Miro Hrončok <mhroncok@redhat.com> - 1.22.2-1
changelog:
  - %pyproject_buildrequires: Fix "Requirement satisfied/not satisfied" messages to show overridden constraints from %pyproject_patch_dependency
  - %pyproject_buildrequires: Stop using deprecated argparse.FileType


author: Miro Hrončok <mhroncok@redhat.com> - 1.23.1-1
changelog:
  - getopt: Fix global macro clobbering with save/restore stack
  - %pyproject_extras_subpkg: Add long options support
  - %pyproject_extras_subpkg: Make -D/--dist-name mutually exclusive with -i/-f/-F
  - Set PIP_CONFIG_FILE=/dev/null by default when invoking pip to build the wheel


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-7
changelog:
  - Security fix for CVE-2026-25645 in the bundled requests in the bundled
    pip wheel
  - Fixes: rhbz#2452324


author: Filipe Rosset <filiperosset@fedoraproject.org> - 3.5-18
changelog:
  - exclude platform-specific modules from pyproject_check_import
  - spec cleanup and modernization, https url, shebangs, fixes rhbz#2377405


author: Tao Jin <tao-j@outlook.com> - 0.6-15
changelog:
  - Migrate to pyproject macros and fix tests for Python 3.14
  - Modernize spec file to use PEP 517 build process with %pyproject_*
    macros.
  - Use %generate_buildrequires for dynamic dependency resolution.
  - Patch test_asyncio.py to resolve RuntimeError with
    asyncio.get_event_loop() on Python 3.14.
  - Switch to %autorelease and %autochangelog.


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.4-1
changelog:
  - Update to new upstream release 1.26.4 (rhbz#2390816)
  - adjust to mupdf 1.26.7 (and 8)
  - various bugfixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.5-1
changelog:
  - Update to new upstream release 1.26.5 (rhbz#2403129)
  - adjust to mupdf 1.26.9 (and 10)
  - improve the Python type annotations
  - various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - Update to new upstream release 1.27.1 (rhbz#2412929)
  - compatibility with mupdf 1.27.1
  - new method `Document.repair()`
  - various fixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.2.2-1
changelog:
  - Update to new upstream release 1.27.2.2 (rhbz#2446026)
  - Works with mupdf 1.27.2
  - Improved get_textpage_ocr()
  - Various fixes


author: Parag Nemade <pnemade AT redhat DOT com> - 25.8.2-2
changelog:
  - Disable tests as with this release it gives "ImportError while loading
    conftest" as tests need ansible-core version >= 2.20.0


author: Cleber Rosa <crosa@redhat.com> - 92.3-1
changelog:
  - Updated to 92.3
  - Support building and running under Python 3.13 for F42
  - Removed patch from 92.1 as its present in 92.3


author: Cleber Rosa <crosa@redhat.com> - 112.0-1
changelog:
  - Sync with upstream release 112.0
  - Removed python3-elementpath build requirement
  - Made the remote spawner a proper sub package
  - Packaged JSON schema files
  - Introduced new sub package for mail plugin
  - Removed the pinning of markupsafe on Fedora 42 and later
  - Packaged avocado-runner-pip
  - Packaged avocado-runner-vmimage
  - Provide requirements for running the functional test
    nrunner.py:TaskRunStatusService.test_task_status_service_lost
  - Require gcc, gdb and gdb-gdbserver for tests


author: Adam Williamson <awilliam@redhat.com> - 112.0-3
changelog:
  - Backport PR #6295 to fix resultsdb_api dependency (#2452821)
  - Backport PR #6252 to fix build (tests) with recent setuptools (#2434951)


author: Carl George <carlwgeorge@fedoraproject.org> - 0.5.17-1
changelog:
  - Update to version 0.5.17 rhbz#2333482
  - Add missing click dependency
  - Avoid duplicate LICENSE.txt file


author: Michel Lind <salimma@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 upstream release
  - Resolves: rhbz#2229363
  - Resolves: CVE-2026-31899
  - Enable Packit
  - Drop unneeded test shenanigans
  - Enforce that license is preinstalled, stop installing by hand


author: Dan Radez <dradez@redhat.com> - 11.1.1-4
changelog:
  - Skip test_https_over_http_error (upstream cherrypy/cheroot#645):
    Python ssl reports 'wrong version number' where the test expects the
    OpenSSL >=3.1 string 'record layer failure'.


author: Jakub Kadlcik <frostyx@email.cz> 2.2-1
changelog:
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove rhel7 conditions and remove python2 support


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Use correct used HTTP methods for delete and update requests
  - Introduce v3.requests.DELETE method


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Don't traceback new-api-token for default config
  - Bypass anubis challenge by setting copr user agent
  - Use Tito to generate component.__version__


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Specify reason for running createrepo
  - Improve robustness and cooperation between backend and rpmbuild
  - Remove license classifier
  - Modernize specfile using pyproject macro


author: Jakub Kadlcik <frostyx@email.cz> 1.6-1
changelog:
  - Do not traceback in SafeRequest if log= is not set
  - Use SafeRequest.timeout only as a timeout per request
  - use Tito to generate component.__version__


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 46.0.3-1
changelog:
  - Update to v46.0.3
  - Removed the deprecated get_attribute_for_oid method on
    CertificateSigningRequest. Users should use get_attribute_for_oid()
    instead.
  - Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the
    cipher module. These are still available in Decrepit cryptography.
  - In X.509, when performing a PSS signature with a SHA-3 hash, it is now
    encoded with the official NIST SHA3 OID.
  - Added support for free-threaded Python 3.14.


author: Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1
changelog:
  - Update to 46.0.7
  - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be
    passed to APIs that accept Python buffers, which could lead to buffer
    overflow. CVE-2026-39892


author: Michel Lind <salimma@fedoraproject.org> - 65.18.0-1
changelog:
  - Update to version 65.18.0; Resolves RHBZ#2334129
  - Fixes CVE-2026-27982: Open redirect via crafted URL in SAML IdP initiated
    SSO


author: Michel Lind <salimma@fedoraproject.org> - 1.10.0-1
changelog:
  - Update to 1.10.0 upstream release
  - Compatible with Django 6.x; Resolves: rhbz#2464710
  - Drop patch removing changelog, no longer needed
  - Enforce that license is automatically installed
  - Enable Packit


author: Michel Lind <salimma@fedoraproject.org> - 5.2.14-1
changelog:
  - Update to version 5.2.14; Resolves RHBZ#2444117
  - Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
    requests via file upload limit bypass
  - Fixes CVE-2026-35192: Session fixation via public cached pages and
    SESSION_SAVE_EVERY_REQUEST
  - Fixes CVE-2026-6907: Potential exposure of private data due to incorrect
    handling of Vary: * in UpdateCacheMiddleware
  - Fixes CVE-2026-3902: ASGI header spoofing via underscore/hyphen
    conflation
  - Fixes CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
  - Fixes CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
  - Fixes CVE-2026-33033: Potential denial-of-service vulnerability in
    MultiPartParser via base64-encoded file upload
  - Fixes CVE-2026-33034: Potential denial-of-service vulnerability in ASGI
    requests via memory upload limit bypass
  - Fixes CVE-2026-25674: Potential incorrect permissions on newly created
    file system objects


author: Michel Lind <salimma@fedoraproject.org> - 5.2.15-1
changelog:
  - Update to version 5.2.15; Resolves RHBZ#2484354
  - Fixes five low-severity CVEs
  - CVE-2026-6873: Signed cookie salt namespace collision
  - CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in
    the SMTP backend
  - CVE-2026-8404: Potential exposure of private data via case-sensitive
    Cache-Control directives
  - CVE-2026-35193: Potential exposure of private data via missing Vary:
    Authorization
  - CVE-2026-48587: Potential exposure of private data via whitespace padding
    in Vary header


author: Michel Lind <salimma@fedoraproject.org> - 5.2.16-1
changelog:
  - Update to version 5.2.16; Resolves RHBZ#2497734
  - Fixes three low-severity CVEs
  - CVE-2026-48588: Potential exposure of private data via cached Set-Cookie
    response
  - CVE-2026-53877: Heap buffer over-read in GDALRaster
  - CVE-2026-53878: Header injection possibility since DomainNameValidator
    accepted newlines in input


author: Michel Lind <salimma@fedoraproject.org> - 6.0.5-1
changelog:
  - Update to version 6.0.5; Resolves RHBZ#2444118
  - Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
    requests via file upload limit bypass
  - Fixes CVE-2026-35192: Session fixation via public cached pages and
    SESSION_SAVE_EVERY_REQUEST
  - Fixes CVE-2026-6907: Potential exposure of private data due to incorrect
    handling of Vary: * in UpdateCacheMiddleware
  - Fixes CVE-2026-3902: ASGI header spoofing via underscore/hyphen
    conflation
  - Fixes CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
  - Fixes CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
  - Fixes CVE-2026-33033: Potential denial-of-service vulnerability in
    MultiPartParser via base64-encoded file upload
  - Fixes CVE-2026-33034: Potential denial-of-service vulnerability in ASGI
    requests via memory upload limit bypass
  - Fixes CVE-2026-25674: Potential incorrect permissions on newly created
    file system objects


author: Terje Rosten <terje.rosten@ntnu.no> - 4.8.0-1
changelog:
  - 4.8.0
  - Fix doc build
  - Switch to toml based build (based on upstream patch)
  - Remove legacy Python 2 refs


author: Miro Hrončok <miro@hroncok.cz> - 0.3.2-2
changelog:
  - Do not attempt to generate test requirements using tox, there is no tox
    configuration
  - Fixes: rhbz#2354142


author: Eduardo Echeverria <echevemaster@gmail.com> - 0.13.1-1
changelog:
  - Update to 0.13.1
  - Modernize to pyproject macros
  - Drop python3-attrs runtime dependency (now optional upstream)
  - Fix License tag to BSD-3-Clause SPDX identifier


author: Jerry James <loganjerry@gmail.com> - 1.19.1-4
changelog:
  - Update various npm components used in the build
  - Fix CVE-2025-69873: update ajv to 6.15.0/8.20.0
  - Fix CVE-2026-0540 and CVE-2026-41240: update DOMPurify to 3.4.2
  - Fix CVE-2026-3449: update @tootallnate/once to 3.0.1
  - Fix CVE-2026-4800: update lodash to 4.18.1
  - Fix CVE-2026-6321: update fast-uri to 3.1.2


author: Michel Lind <salimma@fedoraproject.org> - 2.1.1-1
changelog:
  - Update to version 2.1.1; Resolves rhbz#2461121
  - Add build requirement on python3-pkg-resources on Python >= 3.15;
    Resolves rhbz#2485885
  - Enable Packit for future builds


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.0-10
changelog:
  - Drop the hypothesmith test dependency (omit fuzz tests)
  - Also drop hypothesis since it is also only used for fuzz tests


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-21
changelog:
  - Drop unused test dependency on deprecated python3-nose
  - Use pytest instead when built with tests
  - The tests still fail (numpy incompatibility, using the imp module, ...)


author: Packit <hello@packit.dev> - 0.56.1-1
changelog:
  - We now use httpx when making requests from our Forgejo implementation. (#941)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.57.0-1
changelog:
  - We have fixed an issue with the new Forgejo version preventing ogr from working. (#949)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.58.0-1
changelog:
  - `PagureService` now accepts an optional `user_agent` argument to set a custom User-Agent header. (#953)
  - It is now possible to pass a `headers` argument in `PagureProject.get_file_content`. The default header is set to `Accept: text/plain`. (#954)
  - Resolves: rhbz#2420049


author: Packit <hello@packit.dev> - 0.59.0-1
changelog:
  - Improved handling of retries after errors to avoid hitting rate limits if possible. (#958)
  - `GithubPullRequest.labels` property is now cached for better performance and to be consistent with other services. (#960, #961)
  - Resolves: rhbz#2422233


author: Packit <hello@packit.dev> - 0.60.0-1
changelog:
  - A new method `get_rate_limit_remaining()` to check rate limit thresholds has been added to the service API. (#970)
  - Resolves: rhbz#2430818


author: Packit <hello@packit.dev> - 0.60.1-1
changelog:
  - The method `get_rate_limit_remaining()` now also supports repository-specific checks for GitHub. (#972)
  - Resolves: rhbz#2435481


author: Packit <hello@packit.dev> - 0.61.1-1
changelog:
  - Force downstream synchronization of upstream configuration to enable side tagging in EPEL 10.
  - Resolves: rhbz#2437993


author: Packit <hello@packit.dev> - 0.61.2-1
changelog:
  - The `ogr` library now correctly handles the Forgejo 'error' commit flag, resolving an issue that previously caused it to fail during internal mapping. (#991)
  - Resolves: rhbz#2502826


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.2.0-1
changelog:
  - Update to 3.2.0 (final); Fixes RHBZ#2435482
  - Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177)


author: Michel Lind <salimma@fedoraproject.org> - 1.3.13-1
changelog:
  - Backport unreleased fix for CVE-2026-44742
  - With 1.3.13 we no longer need to exclude example_project


author: Michel Lind <salimma@fedoraproject.org> - 0.3.2-2
changelog:
  - Disable update_readme_test, brings in additional dependency
  - Ship license text; update doc filenames


author: Michel Lind <salimma@fedoraproject.org> - 0.4.2-2
changelog:
  - Disable more unneeded test dependencies
  - Switch to using pytest directly so we can control verbosity easily


author: Michel Lind <salimma@fedoraproject.org> - 0.5.0-2
changelog:
  - Adjust patches for updated pyproject.toml
  - Adjust for upstream dropping tox.ini
  - Drop conditionals for old setuptools


author: Michel Lind <salimma@fedoraproject.org> - 0.6.1-1
changelog:
  - Update to 0.6.1 upstream release
  - Resolves: rhbz#2461879
  - Rebase patch dropping unneeded dependencies


author: Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
changelog:
  - Update to 0.6.4
  - Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
  - Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
  - Fixed excessive resource use in Real.__float__() (CVE-2026-59886)


author: Jerry James <loganjerry@gmail.com> - 0.25.1-1
changelog:
  - Version 0.25.1
  - Use the pyproject declarative buildsystem
  - Drop all patches
  - Drop pkg_resources workaround


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.15.0-1
changelog:
  - Update to 2.15.0 (close RHBZ#2512471)
  - Add a metapackage for the aws-secrets-manager extra, which previously had
    unsatisfiable dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0.8-10
changelog:
  - Compile as C++14 instead of C++11, for compatibility with eigen3 5.0
  - Use the original upstream for fcl, rather than the ambi-robotics fork


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.30.0-9
changelog:
  - Unretirement request: pagure.io/releng/issue/12892 Revert "Retired: Fails
    to install: https://pagure.io/releng/issue/12871"


author: Miro Hrončok <miro@hroncok.cz> - 2.32.4-2
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337320


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.7.0-15
changelog:
  - Modernize packaging
  - Update License to reflect the presence of public-domain code
  - Add a man page


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.1-1
changelog:
  - Update to version 0.6.1; Fixes RHBZ#2386831
  - Automate patching the path-based safetensors crate dependency
  - A patch fixing several failing tests has been merged upstream


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Packit <hello@packit.dev> - 0.41.0-1
changelog:
  - Fixed an issue where the value of a tag could have been incorrectly expanded if the spec file contained a macro definition shadowing the tag name, e.g.:
  ```
  %global release 12
  %global release_string %{release}%{?dist}
  Release: %{release_string}.2
  ```
  In this case, with `dist` being `.fc44`, `Specfile.expanded_release` returned `12.fc44.fc44` instead of `12.fc44`. (#539)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.0.24-4
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13278 Revert
    "Orphaned for 6+ weeks"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.12.2-4
changelog:
  - Python bindings for manifold are now packaged
  - Introduce a bootstrap bcond for breaking a dep. cycle via manifold


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.23.0-1
changelog:
  - Update to 0.23.0 (close RHBZ#2438834)
  - Drop and Obsolete python3-typer-slim/python3-typer-cli subpackages


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.6.1-1
changelog:
  - Update to 2.6.1 (close RHBZ#2419408)
  - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37
  - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.8.0-1
changelog:
  - Update to 3.8.0 (close RHBZ#2492139)
  - Run tests with pytest, as upstream is gradually adopting it


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Miro Hrončok <mhroncok@redhat.com> - 3.10.20-2
changelog:
  - Explicitly build with OpenSSL 3
  - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Miro Hrončok <mhroncok@redhat.com> - 3.15.0~b2-5
changelog:
  - Restore compatibility with setuptools nspkg.pth files in site module
  - Fixes: rhbz#2486045
  - Fixes: rhbz#2486059
  - Fixes: rhbz#2487621
  - Fixes: rhbz#2488369


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251114git6c77b6b-1
changelog:
  - Update to 0^20251114git6c77b6b
  - `PyConfig_Get()` is also available on Python 3.8
  - Add `PyUnstable_Unicode_GET_CACHED_HASH()` function
  - Add `PyTuple_FromArray()` function


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251015.e510a7b-1
changelog:
  - Update to 0^20251015.e510a7b
  - Add an Epoch since the previous update had the wrong date
  - Switch snapshot info from <date><scm><revision> to <date>.<revision>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251108.11cb80f-1
changelog:
  - Update to 0^20251108.11cb80f
  - Don’t include structmember.h in pythoncapi_compat.h; avoids conflicts due
    to names without "Py" prefixes.


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0
  - Add autoconf-archive as a dependency
  - Remove fix-systemd-path.patch as fix is present on the upstream project
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Jan Grulich <jgrulich@redhat.com> - 6.11.1-2
changelog:
  - Upstream backport:
    - QQmlTableInstanceModel: refactor QModelIndex calculation out
      of QQuickTableView


author: Danny Colin <contact@dannycolin.com> - 0.36.0-1
changelog:
  - New release 0.36.0
  - Update license information. We only need to keep MIT since the GPLed
    widgets have been removed from the repository.
  - Update pyproject_buildrequires declaration.


author: Dominik Mierzejewski <dominik@greysector.net> - 1.18.5-2
changelog:
  - Use generic dependency names
  - Run tests using standard macro and stop ignoring failures
  - Skip test_bsu which requires network connectivity
  - Add missing build dependency on libv4l
  - Drop non-existent CMake option
  - Use SPDX expression in License: tag


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Peter Bieringer <pb@bieringer.de>
changelog:
  - Add missing requirement InfCloud-fontware to InfCloud
  - Extend SELinux policy for access to /run/systemd/userdb/io.systemd.DynamicUser on start


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-11
changelog:
  - Convert License tag to SPDX format
  - Convert to autosetup
  - Use relative symlinks from /usr/bin/* to ../libexec/rancid/*
  - Remove doc files that were duplicated in /usr/share/rancid


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-12
changelog:
  - Enable git as default VCS for new installs
  - Remove extraneous BuildRequires
  - Requires /usr/sbin/sendmail and cronie for crontabs
  - Requires openssh-clients and git
  - Suggests telnet


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-5
changelog:
  - Add dbus-common dependency as xml is installed in dbus-1 directory
  - Cleanup patches into 3 logical changes and update upstream status
  - Add upstream status of RPM lint incorrect-fsf-address error


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-6
changelog:
  - Exclude some architectures that does not have grub2-tools-minimal package
  - Add upstream xml file license issue link


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-7
changelog:
  - Change dbus-common dependency from BuildRequires to Requires
  - Update upstream license issue and update license information
  - Generate docbook for yelp or khelpcenter


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-11
changelog:
  - Don't mark man page as doc
  - Update patches against upstream version
  - Yelp SVG image workaround: Convert SVG to PNG using thorvg
  - thorvg workaround due to command rename in F42/F43


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-12
changelog:
  - Update patch 4 with CC0-1.0.txt and include it in rauc license
  - Add COPYING to rauc-doc license
  - Fix license as LGPL-2.1-or-later not LGPL-2.1-only


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.3.2-1
changelog:
  - Update to 1.3.2 - Closes rhbz#2331229
  - Drop pod file as man page is now included
  - Drop build section as native extension was removed #1428
  - Add packit configuration
  - Enable tests by skipping three failing tests


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: mhorky <mhorky@redhat.com> - 0.3.5-2
changelog:
  - Simplify packaging
  - Disable bcond 'check' by default, reflecting RHEL spec file
  - Drop unnecessary 'BuildRequires' statements, ignore insights-client
  - Set ownership for /etc/rhc/


author: mhorky <mhorky@redhat.com> - 1:0.3.9-2
changelog:
  - Update RPM dependencies
  - insights-client is has never been available in Fedora.
  - yggdrasil-worker-package-manager will not be shipped in RHEL 11, we are
    dropping it from Fedora as well.


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-1
changelog:
  - Modernize BuildRequires and License sections
  - Remove deprecated intltool and dbus-glib-devel
  - Update GTK and other dependencies to modern versions
  - Use SPDX license tag and HTTPS for URLs
  - Add missing build dependencies


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-2
changelog:
  - Modernize %install and %files sections
  - Switch to appstreamcli validate
  - Use more specific file paths in %files
  - Add comments and use modern macros


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-3
changelog:
  - Fix build dependencies and locale directories
  - Replace libmagic-devel with file-devel
  - Fix Armenian locale directory name (hye -> hy)
  - Add empty %check section to satisfy rpmlint


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.14.0-4
changelog:
  - Fix locale directory and add %check section
  - Rename Armenian locale directory from hye to hy
  - Add empty %check section to satisfy rpmlint


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-9
changelog:
  - Update to the upstream v6.17 @ e8da3cdc
  - Handle new radiacode entropy source
  - Handle changes in jitterentropy library
  - Drop older i686 force-PIC fix


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main pyyhon package
  - New subpackages: root-package graf3d-glad, root-package net-curl,
    root-package tmva-sofie-parser-python, root-package tree-ml,
    root-package histv7util
  - Dropped patches: 2
  - New patches: 7


author: Ondřej Nosek <onosek@redhat.com> - 1.69-1
changelog:
  - Only update the progress bar when meaningfully changed (code)
  - Don’t set up upload progress when stdout isn’t a tty (code)
  - Fix unittests for Python 3.14 (onosek)
  - `sources`: set "Accept-Encoding: identity" header on HTTP requests
    (decathorpe)
  - Accept auto-generated sources in pre-push checks (fweimer)
  - Add mock configuration option to build and srpm commands for use along with
    the srpm mock option, same as in mockbuild command. (abobrov)
  - `srpm`: man page generation fixed (onosek)
  - `install`: add rpmbuild arguments `--with` and `--without` - 541 (gleiro)
  - type: fix typo in requirements README. (gleiro)
  - `patch`: Execute subprocess in text mode (ferdnyc)
  - Fix mockbuild --srpm-mock specfile_path (wngtk)
  - `pre-push-check`: bogus error - file wasn't listed - #747 (onosek)
  - Switch to %pyproject_* macros (onosek)
  - Use the spec name to assemble src.rpm name (sergio)
  - Jenkinsfile: use local declaration instead the global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji - 600 (onosek)
  - `mockbuild`: -r argument as shortcut of --root (sergio)
  - `rhpkg mockbuild` won't show a hint with '--target' (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.69-3
changelog:
  - Patch: Check the correct sorting of imports from now on
  - Patch: `update`: interactive editor is broken


author: Ondřej Nosek <onosek@redhat.com> - 1.70-1
changelog:
  - Fix SRPM import for files with a backslash in the name - unittests (onosek)
  - Fixing ruff and flake8 complaints (onosek)
  - Add verrel --json support (onosek)
  - Fix Jenkinsfile for a Jenkins CI triggered from the Forge (onosek)
  - Links to a new documentation at Readthedocs.io (onosek)
  - Web documentation at Readthedocs.io (onosek)
  - Post-migration steps (onosek)
  - Fix SRPM import for files with a backslash in the name (pavel)
  - Remove deprecated 'clean --dry-run' argument - rhbz#2458827 (onosek)
  - Add configurable HTTP version for lookaside transfers (onosek)
  - docs: modernize Sphinx conf.py (onosek)
  - pre_push_check: unset GIT_DIR to fix worktree support - #769 (vashirov)
  - Various code linter issues fixed (onosek)
  - Submitting the module build - duplicate timeout - #766 (onosek)
  - _run_command: timeout is not supported in Python 2 (onosek)
  - Check the correct sorting of imports from now on (onosek)
  - `update`: interactive editor is broken - #762 (onosek)
  - Use ruff code checker instead of bandit (onosek)
  - Execute shell command: Non-interactive stdin (onosek)


author: Aaron Merey <amerey@redhat.com> - 5.9.0-8
changelog:
  - Backport upstream fix for MADV_GUARD_INSTALL/REMOVE (kernel >= 6.13)
    to unbreak recording of multi-threaded programs (upstream commit 34ff3a70).


author: Aaron Merey <amerey@redhat.com> - 5.9.0-9
changelog:
  - Fix FTBFS on rawhide (gcc 16, glibc 2.43+) by including <limits.h>
    in src/test/util.h, which several test files rely on for INT_MAX
    and other limit macros.


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-7
changelog:
  - Fix for CVE-2026-41035
  - Fixing bad time in rsync logs
  - Fixing regression from CVE-2024-12086 fix
  - Fixing improper clearing of DISPLAY env variable


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
  - Harden rsyslog service unit
  - Disable openssl engines support
    Resolves: rhbz#2320050


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-1
changelog:
  - Rebase to 8.2510.0
    Resolves: rhbz#2404131
  - imjournal open error handling fix
    Resolves: rhbz#2375742
  - Add mmleefparse module to base package


author: John Kacur <jkacur@redhat.com> - 3.11-1
changelog:
  - Upgrade to rteval-3.11
  - rteval: cyclictest: Improve handling of truncated histogram output
  - rteval: timerlat: Improve handling of truncated histogram output


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6~20240301git6f6bb13-1
changelog:
  - modernize spec
  - use proper macros
  - BuildRequire make explicitly
  - ensure Fedora CFLAGS and LDFLAGS are used


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6~20240301git6f6bb13-2
changelog:
  - use SourceLicense: tag to describe source license accurately
  - use SPDX expression for -devel subpackage license
  - use build_cflags instead of optflags


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.0.6-36
changelog:
  - Update to Ruby 4.0.6
    Resolves: rhbz#2499884
  - Resolves: CVE-2026-42245 (rhbz#2484324)
  - Resolves: CVE-2026-42246 (rhbz#2492090)
  - Resolves: CVE-2026-42256
  - Resolves: CVE-2026-42257
  - Resolves: CVE-2026-42258 (rhbz#2487319)
  - Resolves: CVE-2026-47240 (rhbz#2498917)
  - Resolves: CVE-2026-47241
  - Resolves: CVE-2026-47242


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-5
changelog:
  - Upstream fix for tests with glycin based gdk-pixbuf2 2.43.x
  - Exclude tests on glycin ppc64le for now (bug 2275913)
  - Exclude animation test on i686 on Fedora 43


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.10.0-35
changelog:
  - Adjust to mesa 24.2.2 change that swrast with dril does not expose
    accum buffers anymore
  - Adjust test result message with recent mesa


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.9.40-2
changelog:
  - Backport 0.9.41 / 0.9.44 fixes for possible path traversal issues
  - https://github.com/lsegal/yard/security/advisories/GHSA-3jfp-46x4-xgfj
  - https://github.com/lsegal/yard/security/advisories/GHSA-pxcc-8665-phx8


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.0-1
changelog:
  - Version 0.7.0
  - linkdupes subpackage is added. It is required by build-reproducibility-
    srpm-macros, so it'll be pulled into buildroots.
  - redhat-rpm-config needs to be updated to call
    %__os_install_post_hardlink in %__os_install_post for the helper to
    actually be used in builds.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.1-1
changelog:
  - Version 0.7.1
  - This implements https://fedoraproject.org/wiki/Changes/Hardlink_identical
    _files_in_packages_by_default.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to verson 1.2.0; Fixes RHBZ#2393793
  - MSRV is now 1.87, edition is 2024
  - The dev-dependency on criterion is now removed via patch rather than
    tomcli


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.3.2-1
changelog:
  - update to 3.3.2 (resolves rhbz#2390293)
  - use tomcli instead of patching Cargo.toml
  - fix build with bitvec_helpers 4.0.0 (resolves rhbz#2387776)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.19.3-2
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13268 Revert
    "Orphaned for 6+ weeks"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.2.4-3
changelog:
  - Initial pathrs release
  - Pathrs v0.2.4
  - Provides libpathrs used by runc and other packages
  - Exclude i686 arch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Jeremy Cline <jeremycline@microsoft.com> - 0.10.0-1
changelog:
  - Update to v0.10.0
  - All requests to sigul are retried, rather than just those that fail due
    to I/O or timeouts


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Andreas Schneider <asn@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - https://github.com/z-galaxy/zlink/releases/tag/zlink-0.2.0
  - resolves: rhbz#2419337


author: Andreas Schneider <asn@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - https://github.com/z-galaxy/zlink/releases/tag/zlink-0.2.0
  - resolves: rhbz#2419341


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:2.37.0-2
changelog:
  - Properly generate Rust BuildRequires on Fedora
  - Update License (for s390utils/s390utils-base) to reflect Rust deps.


author: Dan Horák <dan[at]danny.cz> - 2:2.41.0-2
changelog:
  - rebuilt for rust-openssl CVEs
  - Resolves: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662


author: Günther Deschner <gd@samba.org> - 2:4.24.3-1
changelog:
  - Update to Samba 4.24.3
  - resolves: rhbz#2481468
  - resolves: rhbz#2481447 - Security fix for CVE-2026-4480
  - resolves: rhbz#2481875 - Security fix for CVE-2026-2340
  - resolves: rhbz#2481857 - Security fix for CVE-2026-3012
  - resolves: rhbz#2481876 - Security fix for CVE-2026-1933
  - Security fix for CVE-2026-4408
  - Security fix for CVE-2026-3238


author: Günther Deschner <gd@samba.org> - 2:4.24.5-1
changelog:
  - Update to Samba 4.24.5
  - resolves: rhbz#2509257 - Security fix for CVE-2026-6949
  - resolves: rhbz#2509266 - Security fix for CVE-2026-58218
  - resolves: rhbz#2509280 - Security fix for CVE-2026-58221
  - resolves: rhbz#2509502 - Security fix for CVE-2026-58222
  - resolves: Security fix for CVE-2026-58216
  - resolves: Security fix for CVE-2026-58224


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Add dtoa to License
  - Add patch to fix crashes in SCIPcreateConsBasicSOCNonlinear
  - Add patch to fix floating point output on s390x
  - Workaround float128/long double clash on ppc64le
  - Build with OpenMP support


author: Vit Mojzis <vmojzis@redhat.com> - 44.2-2
changelog:
  - Advertise ownership of DPS-related file paths
  - Remove trigger{in|preun} triggers for binsbin and varrun
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  - Use docdir for documentation data directory
  - Move the awk post-requires to the minimum subpackage
  - Fix disabling modules in "%post minimum"


author: Zdenek Pytela <zpytela@redhat.com> - 44.2-3
changelog:
  - Exclude linuxptp.if, nbdkit.if, passt.if from interfaces list
  - Replace "\_" (backslash underscore) with "_" (just underscore)


author: Zdenek Pytela <zpytela@redhat.com> - 44.3-1
changelog:
  - Allow staff user mounton /var/lib dirs
  - Allow systemd-coredump signull container runtime
  - Allow blueman get the attributes of a tmpfs filesystem
  - Dontaudit virt_driver_domain execmem


author: Zdenek Pytela <zpytela@redhat.com> - 44.4-1
changelog:
  - Allow systemd-coredump signull spc container
  - Allow systemd-logind the sys_ptrace capability in the user namespace
  - Allow systemd-sleep the perfmon capability
  - Allow journald create and use netlink_tcpdiag_socket
  - Allow gpg_pinentry_t to write session dbus socket files
  - Allow aide connect to the GDM userdb provider socket
  - Allow nut/upsmon read nut_conf_t symlinks
  - Allow thumb_t mount proc filesystem
  - Update bootupd policy for running lsblk


author: Zdenek Pytela <zpytela@redhat.com> - 44.5-1
changelog:
  - Allow wireguard read cgroup files
  - Label /usr/local/share/man with man_t
  - Allow pcscd get attributes of a pty filesystem
  - Allow pcscd_t to search cgroup


author: Zdenek Pytela <zpytela@redhat.com> - 44.6-1
changelog:
  - Update qatlib policy
  - Allow rhsmcertd read the file_contexts files
  - rhsmcertd: allow bootc/ostree transient package persistence detection
  - Allow virtproxyd connect to systemd-homed over a unix stream socket
  - Allow haveged (entropyd_t)  create and use its private tmpfs files
  - Remove permissive setting for sshd_auth_t and sshd_session_t
  - Allow system_mail_t read procmail home content
  - Add bcachefs as a SELinux capable filesystem
  - Allow unconfined_service_t nnp_transition to container_runtime_t
  - Allow bootupd read all passwd sources
  - Allow mpd dbus chat with avahi
  - Allow init_t nnp domain transition to mpd_t
  - Update tuned-ppd policy
  - Allow all domains to use inherited sshd-session pipes
  - Dontaudit tlp_t dac_override (bsc#1272935)


author: Peter Robinson <pbrobinson@gmail.com> - 0.2.1-1
changelog:
  - Update to 0.2.1
  - Fixes CVE-2026-1260 (rhbz#2432139 rhbz#2432139)
  - Minor package updates for new rev


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Mikhail Medvedev 1.1.1-1
changelog:
  - Added mutltiplatform translation path
  - I2C driver has been changed
  - Added the option to switch Qt versions
  - Fixed UDEV and LIBUSB pathes, used PKGCONFIG


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-4
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-122982)
  - rescan-scsi-bus.sh: Replace 'which' with built in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix missing output fields in --export format (RHEL-119246)
  - sg_inq: re-add Unit serial number field (RHEL-119246)


author: David Trudgian <dtrudg@sylabs.io> - 4.4.2-1
changelog:
  - Upgrade to 4.4.2 upstream version.
  - Fix rhbz#2453093
  - Fix rhbz#2458933
  - Fix rhbz#2455674
  - Fix CVE-2026-47215


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f44-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.76
   - assertions: add helper for validating integrity data
   - assertions: drop incorrect/non-standard Ed25519 support
   - confdb: allow only API admin read access to confdb secrets
   - confdb: block concurrent confdb accesses
   - confdb: block concurrent snapctl accesses to configuration
     database
   - confdb: check for ephemeral data when missing save-view hook on
     commit
   - confdb: ignore not-found errors in confdb-schema refreshes
   - confdb: support --wait-for timeouts when accessing confdb
   - core-initrd: add group referenced in udev rules
   - core-initrd: add libbpf dependency to initramfs
   - core-initrd: add missing libbpf dependency in 24.04 packaging
   - core-initrd: ensure audio is a system group
   - core-initrd: fix /boot/uboot mount with u-boot env in dedicated
     partition
   - core-initrd: increase mount burst from 5 to 128 for faster boot
   - core-initrd: sync partition udev rules with the ones in core-base
   - core-initrd: sync with latest upload to snappy-dev PPA
   - core-initrd: synchronize changelogs with latest PPA upload
   - core-initrd: update changelog with latest PPA upload
   - LP: #2150773 core-initrd: add nfnetlink module to fix nf netlink
     socket speed regression (Ubuntu Core only)
   - cross-distro: allow snapd to manipulate systemd unit files in
     SELinux policy
   - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch
   - desktop: fix common ID selection with multiple desktop plugs
   - FDE: allow user mode on core in secboot TPM handling
   - FDE: bump go-efilib dependency
   - FDE: bump secboot to rev cdcb64992e54 for FDE fixes
   - FDE: deprecate check-pin/passphrase API endpoints
   - LP: #2147606 FDE: give inactive state on classic
   - FDE: improve tracing for OP-TEE probing
   - FDE: move auto-repair logic to overlord/fdestate and provide state
   - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and
     recovery key parsing
   - FDE: use any primary key matching digest when adding a keyslot
   - FDE: use ignore action for preinstall check in VM
   - interfaces: bluez | drop explicit deny send_destination in D-Bus
     configuration
   - interfaces: conditionally deny /proc/self/mountinfo to suppress Go
     1.25+ denials
   - interfaces: custom-device | fix for-device validation panic on
     non-string value
   - interfaces: disallow auto-connect to parallel installs
   - interfaces: docker | make plug implicit on classic systems
   - interfaces: ignore errors in disconnect hooks during explicit snap
     disconnect
   - interfaces: mediatek-accel | add plug interface base declaration
   - interfaces: microceph-support | suppress noisy sudo denial audit
     logs
   - interfaces: podman | add new interface for podman socket access
   - interfaces: pulseaudio | fix security tag syntax inconsistency
   - interfaces: raw-usb | allow USB device enumeration on Fairphone 5
     with NexDock
   - interfaces: restore auto-connections on failed refresh undo
   - LP: #2148544 interfaces: bool-file | support deep SoC sysfs paths
     for LED brightness
   - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17
     compliant
   - packaging: add cross-distro build script and instructions
   - packaging: add openSUSE 16.0 spread support
   - packaging: Debian build improvements
   - packaging: default openSUSE to /var/lib/snapd/snap and sync from
     downstream
   - packaging: drop transitional packages only for Ubuntu 26.04
     (Resolute)
   - packaging: fix Launchpad FIPS build detection for snapd-fips job
   - packaging: refactor and clean up snapd.mk, standardize test-data
     directories
   - packaging: switch to golang-github-chai2010-gettext-go-dev
   - packaging: update bundled AppArmor 4.1.7 (snapd snap only)
   - prompting: escape paths in prompt constraints
   - prompting: improve API error handling and validation
   - prompting: improve error message when no handler service is
     present
   - prompting: re-enable the prompting notice backend
   - prompting: respond with full user-allowed permission set
   - prompting: validate permissions while unmarshalling
   - remote device management: implement dispatch-mgmt-messages task
     with sequencing support
   - LP: #2125344 snap: avoid empty channel forwarding message
   - LP: #2150683 snap: clarify snap install help text for --classic
     and --devmode
   - LP: #2152908 snap: print complex attributes in snap interface
     --attrs output
   - snap: add run-inhibit hint and inhibit info when a snap is
     disabled
   - snap: allow removing a snap and its base at the same time
   - snap: display detailed component information in snap info
   - snap: extend AlreadyInstalledError to multiple snaps and
     components
   - snap: extend set-quota command options description with accepted
     value formats
   - snap: implement snap delta command for computing snap deltas
   - snap: improve consistency for snap install when some snaps are
     already installed
   - snap: show hint in snap list that a snap has components
   - snap-confine: allow inheriting unix sockets from snaps
   - snap-confine: allow linking to libm in AppArmor profile
   - snap-confine: fix out-of-bounds read in mountinfo parser for
     partial escape sequences
   - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags
   - snap-confine: remove experimental persistent per-user mount
     namespace feature
   - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF
     helpers
   - snap-confine: support transparent_hugepage in AppArmor profile
   - snap-confine: use strchr after NUL-terminating in infofile parser
   - snap-update-ns: switch to a multi-pass process for constructing
     and updating mount namespaces
   - RemoveMountUnitFile now unmounts even if mount unit file is
     missing
   - Add explicit mount phase during single-reboot refresh to fix undo
     of kernel refreshes
   - Add security audit logging subsystem
   - Add base prioritized AppArmmor snippets for strictly confined or
     jailed snaps
   - Allow openshell snap to use experimental daemon-scope: user
   - Allow configuring mount unit options based on filesystem type
   - Allow equals signs in uevent values in netlink parser
   - Also bind-mount directories modified by kmod backend during
     preseed
   - Clean up potentially corrupted files during snap download undo
   - Complete the bootloader environment implementation
   - Copy integrity data files during snap install
   - Create hook for seed refresh mode
   - Create removal tasks for old seed-refresh seeds
   - Dispatch systemctl commands asynchronously when calling Stop()
   - Ensure /tmp/.X11-unix created inside mount namespace has correct
     permissions
   - Ensure exclusive changes conflict with refresh/revert
   - Ensure existing snap confinement flags are not dropped when
     installing or removing components
   - Export ubuntu-boot-state filename constant from bootloader package
   - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin
   - Fix integration between prerequisites task and seed-refresh mode
   - Fix split-refresh overwriting provided lane
   - Fix use of umask in GetListener for socket activation
   - Ignore net.ErrClosed during daemon shutdown
   - Implement ResolveValidationSetsEnforcementError in terms of one
     call
   - Improve snapctl install consistency when components are already
     installed
   - Inject seed creation tasks into snap refresh flow
   - Introduce system options for custom certificates on Ubuntu Core
   - Keep idle services with activation units stopped on reload
   - List snap components in snap-debug-info via debug-tools
   - Look at gadget.yaml instead of marker file to determine ubootpart
     usage
   - LP: #1966067 Skip redundant xdg-settings confirmation prompt when
     setting is already correct
   - LP: #2110368 Fix component installation for private snaps via
     snapctl
   - LP: #2110368 Fix download of private snap components by setting
     UserID
   - LP: #2144666 Fix mount namespace updates with synthetic bind
     mounts on same target paths
   - LP: #2146337 Improve handling of failed downloads and retain
     partial files for resume
   - LP: #2147207 Fix snap enable/disable cycle forgetting components
   - Make run-inhibit hint for kill-snap-apps task based on kill reason
   - Merge content-provider prerequisite updates into seed-refresh
   - Move SortServices into Backend.StartServices
   - Move state to client change conversion to ctlcmd package
   - Omit misleading "try to refresh snapd" suggestion for ISA-related
     errors
   - Only create link-component tasks when needed during refresh to
     existing revision
   - Reconfigure piboot bootloader on gadget refreshes to preserve
     os_prefix
   - Reduce the number of AppArmor profile regenerations during snap
     operations
   - Refactor seed-refresh ownership to devicestate
   - Regenerate certificate database on remodels
   - Remove obsolete FIXME comment in VersionCompare
   - Remove unused GenerateDmVerityData helper from snap/integrity
   - Rename and document error type for ISA assumes flags
   - Restart snapd from daemon.Stop to improve restart reliability
   - Restart stopped services on error in stopSnapServices for
     transactionality
   - Simplify certificate-db updates on model-base refresh/installs
   - Support racing Loop and Stop correctly in overlord
   - Support sending file descriptors to systemd via sd_notify
   - Unroll CPU-heavy recursive function in snap state handlers
   - Update seccomp syscalls list for kernel 7.1.0
   - Use change ID to prevent nested seed-refresh spawned by
     prerequisites
   - Validate content interface plug target directories exist for
     core26+ snaps
   - Validate layout paths exist in snap tree for snaps using bare or
     core26+


author: Martin Osvald <mosvald@redhat.com> - 1.8.0.3-1
changelog:
  - Update to 1.8.0.3 (rhbz#2307725)
  - Resolves: CVE-2024-54661 (rhbz#2330520)
  - Resolves: non-working ipv6-join-group option (rhbz#2352860)
  - Resolves: FTBFS in Fedora (rhbz#2385633)


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.16-1
changelog:
  - update to 1.1.16 (resolves rhbz#2405379)
  - drop obsolete patches
  - apply upstream patch to fix appstream data


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.18-1
changelog:
  - update to 1.1.18 (resolves rhbz#2420854)
  - drop obsolete patch
  - add missing cairo-1.0 and xlib-2.0 typelib dependencies for tests
  - add new icons to file list
  - run GTK3 tests under Xvfb


author: Emir Akdag <infraw.linux@proton.me> - 1.5.3-1
changelog:
  - Update spoofdpi to 1.5.3
  - Update to 1.5.3 to fix CVE-2026-27145
  - Add missing license for go-localereader
  - Fix build directory case sensitivity issue
  - Resolves: rhbz#2494220, rhbz#2494389


author: Carl George <carlwgeorge@fedoraproject.org> - 3.51.2-1
changelog:
  - Update to 3.51.2
  - https://www.sqlite.org/releaselog/3_51_2.html
  - Resolves: rhbz#2417968
  - Include LICENSE.md file
  - Resolves: rhbz#2418961


author: Sumit Bose <sbose@redhat.com> - 2.13.1-2
changelog:
  - CVE fixes: CVE-2026-12610 CVE-2026-14474 CVE-2026-14476
  - rhbz#2494777: CVE-2026-12610 sssd: Use-after-free crash in SSSD'
    'sssd_pam' process
  - rhbz#2497650: CVE-2026-14476 sssd: sssd: GPO cache path traversal via
    unsanitized gPCFileSysPath allows Kerberos authentication bypass
  - rhbz#2497651: CVE-2026-14474 sssd: sssd: sudo LDAP provider searches
    entire directory tree for sudoRole objects by default, enabling privilege
    escalation


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Clark Williams <williams@redhat.com> - 1.27.1-1
changelog:
  - Makefile: version bump to v1.27.1
  - stalld: make syslog logging opt-in by default
  - stalld: die on invalid CPU affinity
  - tests/functional: Fix invalid pidfile test in test_pidfile
  - tests/functional: Fix readiness detection and FIFO fallback in test_force_fifo
  - tests/functional: Accept FIFO fallback in test_fifo_boosting
  - tests/functional: Fix multi-CPU detection in test_starvation_detection
  - tests/helpers: Use pass()/fail() in assert functions
  - tests: Add fail() helper and use for all test failures
  - tests/functional: Use pass() for all test pass reporting
  - tests: Add pass() helper and replace assert_equals hack
  - tests/functional: Use timeout for invalid argument tests
  - tests/functional: Use timeout for error path in test_force_fifo
  - tests/functional: Use wait_for_stalld_ready() in test_backend_selection
  - tests/functional: Use start_stalld_with_log() in test_cpu_selection
  - tests/functional: Use start_stalld_with_log() in test_logging_destinations
  - tests/functional: Use start_stalld_with_log() in test_log_only
  - tests/functional: Add missing -a flag in test_starvation_detection
  - tests/functional: Remove duplicated -a flag in test_fifo_priority_starvation
  - tests/functional: Replace detection sleeps with event-driven helpers
  - tests/functional: Use start_starvation_gen() helper
  - tests/helpers: Add wait_for_starvation_detected() and wait_for_boost_detected()
  - tests/helpers: Add start_starvation_gen() helper function
  - tests/helpers: Flush stdout after starvation_gen startup messages
  - tests/helpers: Fix fractional sleep timeout bugs
  - tests/helpers: Add wait_for_stalld_ready() and use in start_stalld_with_log()
  - tests/helpers: Rewrite wait_for_log_message() with process substitution
  - tests/functional: Fix false positive log matching in test_logging_destinations
  - tests/functional: Remove redundant post-stop_stalld sleeps
  - tests/helpers: Fix relative path in backend detection functions
  - tests/helpers: Fix stop_stalld() timeout and shutdown logic
  - tests/helpers: Replace sleep with poll in start_stalld_with_log()
  - tests/functional: Fix test_logging_destinations.sh path and backend
  - tests/functional: Fix and refactor test_backend_selection.sh
  - tests: Add per-test runtime measurement to run_tests.sh
  - tests/helpers: Remove duplicate log() function
  - tests/helpers: Fix stalld daemon detection in start_stalld()
  - tests: Add pre-test and post-test cleanup of stalld processes


author: Clark Williams <williams@redhat.com> - 1.28.1-1
changelog:
  - stalld: bump version to 1.28.1
  - tests: Fix journal flush race in logging destinations test
  - Merge remote-tracking branch 'wander/dev' into devel
  - stalld: fix format string type mismatch in set_cpu_affinity
  - stalld: fix error return in queue_track_get_cpu
  - stalld: fix snprintf truncation check in is_runnable
  - stalld: fix missing null-termination in is_runnable
  - stalld: guard nextline() returns in sched_debug parsing
  - stalld: remove NULL deref in fill_waiting_task error handler
  - stalld: fix type mismatches in detect_task_format
  - stalld: fix format string type mismatch for time_t
  - stalld: use CLOCK_MONOTONIC for starvation detection
  - stalld: remove async-signal-unsafe calls from signal handler
  - stalld: fix data race on config_buffer_size
  - stalld: fix signed integer overflow in set_reservation
  - stalld: check pthread_create return in conservative_main
  - stalld: check pthread_create return in aggressive_main
  - stalld: fix buffer underflow in sched_debug_get
  - stalld: fix buffer underflow in read_proc_stat
  - stalld: fix uninitialized buffer use in find_debugfs_mount_point
  - stalld: fix inverted DAEMON_UMASK value
  - stalld: fix data race on thread_running
  - bpf: Replace linear task scan with hash map
  - tests: Fix async-signal-unsafe handler
  - tests: Reduce timing and replace sleeps with event waits
  - tests: Remove redundant sleeps after start_stalld
  - tests: Drop redundant sleeps in test_pidfile
  - tests: Replace init sleeps in test_affinity
  - tests: Reduce starvation_gen durations
  - tests: Reduce default wait timeouts
  - tests: Extract wait_for_process_exit helper
  - tests: Introduce and adopt process helpers
  - tests: Remove dead code after making fail() fatal
  - tests: Abort immediately on test failure
  - tests: Remove if-wrappers around assert calls
  - tests: Replace wait conditionals with asserts
  - tests: Introduce and adopt assert_success() helper
  - tests: Remove weak, redundant, and assertion-free test blocks
  - tests: Introduce and adopt assert_log_contains() helper
  - tests: Remove redundant pkill from cleanup
  - tests: Add idle CPU skipping assertion
  - tests: Fix CPU selection grep substring matches
  - tests: Add assertions to SCHED_OTHER restoration test
  - chore: Remove legacy test infrastructure and stale docs
  - tests: Fix repeated log match finding same line
  - tests: Fix subshell swallowing test results
  - tests: Fix boost verification in runtime and duration tests
  - tests: Introduce assert_stalld_rejects() helper
  - tests: Consolidate and adopt init_functional_test()
  - tests: Fix task exit timing in test_boost_restoration
  - tests: Introduce find_starved_child() helper
  - tests: Introduce starvation and boost asserts
  - tests: Introduce cleanup_scenario() helper
  - tests: Introduce test_section() helper
  - stalld: Reject --force_fifo in single-threaded mode


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20260313git904aa67-2
changelog:
  - Fix access/use of uninitialized memory in stb_image
  - This was undefined behavior, and could leak security-relevant information
    from other data structures. See
    https://github.com/nothings/stb/issues/1929.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Jerry James <loganjerry@gmail.com> - 1.4.6-1
changelog:
  - Version 1.4.6
  - Drop upstreamed testtools patch
  - Drop the python3-subunit-test subpackage
  - New gojson2subunit and junitxml2subunit filters


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Jerry James <loganjerry@gmail.com> - 0-0.20.20230627gite6ac3af
changelog:
  - Switch to the cvc5 git branch
  - Drop all patches
  - Package is now header-only and therefore noarch


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Josue Hernandez <josherna@redhat.com> - 6.04-0.36
changelog:
  - Update zlib version to zlib-1.2.11
  - Resolves: CVE-2022-37434 CVE-2018-25032 CVE-2016-9840 CVE-2016-9843


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 259.4-1
changelog:
  - Version 259.4
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 259.8-1
changelog:
  - Version 259.8
  - a bugfix release with correctness and security-relevant fixes too. 205
    patches, so too much to describe here.


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Jonathan Wright <jonathan@almalinux.org> - 1.98.4-1
changelog:
  - update to 1.98.4
  - Allow nftables to satisfy firewall dependency in lieu of iptables rhbz#2453924
  - Fix 45s timeout on shutdowns in certain cases rhbz#2440864
  - Fixes CVE-2026-34165 rhbz#2454571
  - Fixes CVE-2026-33762 rhbz#2454572


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-106
changelog:
  - Add local RPM dependency generator to produce tex(...) Provides
    Full credit to Elliott Sales de Andrade <quantum.analyst@gmail.com>


author: Tom Callaway <spot@fedoraproject.org> - 12:svn72890-6
changelog:
  - Fix knuth & public domain license labels to be correct
  - Fix capitalization on summaries that needed it
  - Flush out unnecessary INSTALL file in enctex


author: Tom Callaway <spot@fedoraproject.org> - 12:svn75480-6
changelog:
  - Update amsrefs apacite authordate biblatex biblatex-chicago biblatex-dw
    biblatex-ext biblatex-juradiss biblatex-publist biblatex-swiss-legal
    biblatex-trad biblatex2bibitem biblist bibtopic bibunits chicago
    citeall collref harvard jmb jurabib multibib nar nmbib notes2bib oscola
    showtags splitbib usebib xcite
  - add cls Provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78803-8
changelog:
  - Update collection from svn75480 to svn78803
  - Add biblatex-abs-annote
  - Add biblatex-ams
  - Update biblatex-gb7714-2015, biblatex-nature, biblatex-oxref


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78246-6
changelog:
  - Update collection from svn77044 to svn78246
  - Add sourcesans
  - Add sourceserif
  - Update 192 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78746-6
changelog:
  - Update collection from svn78456 to svn78746
  - Add cardgame
  - Update crossword, rpgicons
  - Add missing -doc Provides/Obsoletes


author: Tom Callaway <spot@fedoraproject.org> - 12:svn74022-3
changelog:
  - drop drawing-with-metapost (license "OpenPublication" is non-free)
  - fix summaries
  - fix license tags


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78607-6
changelog:
  - Update collection from svn74022 to svn78607
  - Update comprehensive
  - fix missing -doc provides/obsoletes


author: Tom Callaway <spot@fedoraproject.org> - 12:svn73414-5
changelog:
  - Update babel-albanian babel-bosnian babel-croatian babel-danish babel-dutch
    babel-finnish babel-friulan babel-irish babel-norsk babel-romanian
    babel-romansh babel-samin babel-scottish babel-slovenian babel-swedish
    babel-welsh turkmen
  - Add provides for .cls files


author: Tom Callaway <spot@fedoraproject.org> - 12:svn54074-4
changelog:
  - Update babel-polish, hyphen-polish, polski, texlive-pl
  - Fix missing -doc provides/obsoletes
  - use automatic file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn73303-4
changelog:
  - Update babel-portuges, hyphen-portuguese, latex-via-exemplos
  - Fix missing -doc provides/obsoletes
  - Use auto file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn72203-4
changelog:
  - Update babel-spanish, hyphen-catalan, hyphen-galician, hyphen-spanish, texlive-es
  - Fix missing -doc provides/obsoletes
  - use auto file provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77034-3
changelog:
  - update latex2e tools to the latest upstream version as of 2026-02-10 (bz2437303)
    this is mostly longtable, array, and varioref
  - update amscls amsmath atbegshi atveryend auxhook babel-english bigintcalc bitset
    bookmark colortbl epstopdf-pkg etoolbox fancyhdr geometry gettitlestring grfext
    hycolor hypcap hyperref intcalc kvdefinekeys kvoptions kvsetkeys letltxmacro
    ltxcmds mfnfss natbib pagesel pdfescape pdftexcmds psnfss refcount
    rerunfilecheck stringenc uniquecounter url


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78733-4
changelog:
  - Update collection from svn77034 to svn78733
  - Add pdfmanagement
  - Add tagpdf
  - Update 41 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77598-3
changelog:
  - Update to svn77598
  - update tagpdf starray numspell moderncv latex-tagging-status latex-lab-dev jsonparse beamer-reveal amsaddr


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78352-4
changelog:
  - Update to svn78352
  - new packages: aliascnt, beamertheme-westlake, elegantbook, elegantnote,
                  elegantpaper, fixtounicode, fox-listings, memoize-ext,
                  metacapture, milestonetimeline, pyjupyter, realscripts,
                  simplex, spotxcolor, tokglobalstack, tokgroupmark, xstix2
  - lots of existing packages updated
  - fix Obsoletes on newcommand-doc (bz2447035)


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78824-5
changelog:
  - Update collection from svn78352 to svn78824
  - Add booktabstabular
  - Add clawxiv
  - Add cleveref-icelandic
  - Add dirtreex
  - Add infufrgs
  - Add ltmermaid
  - Add metaphor
  - Add simplesystemtex
  - Add smartnotes
  - Add styleitems
  - Add user-persona
  - Add zebra
  - Update 53 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78847-6
changelog:
  - Update collection from svn78824 to svn78847
  - Add lucide-admonitions
  - Update 24 components
  - Remove preview


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78568-3
changelog:
  - Update collection from svn77082 to svn78568
  - Update 57 components
  - Remove pdfmanagement-testphase


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77106-1
changelog:
  - Update to svn77106
  - description fixes
  - licensing fixes
  - manual license handling (be careful with minim)
  - updated components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78670-3
changelog:
  - Update collection from svn77516 to svn78670
  - Add countwords
  - Add lua-list-hyphen
  - Add luahyperbolic
  - Add lualineno
  - Update 50 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78771-2
changelog:
  - Update collection from svn77561 to svn78771
  - Add chempid
  - Add dnsrecord
  - Add fits-astro
  - Add glmatrix
  - Add mohelper
  - Add mystyletau
  - Add query-astro
  - Add quickderivs
  - Add register-transfer-level
  - Add statementsp
  - Update 70 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn76267-2
changelog:
  - Update musicography, piano, xpiano
  - fix latex3 issue with leadsheets (bz2455217)
  - drop explicit provides


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78823-2
changelog:
  - Update collection from svn77389 to svn78823
  - Add corasdiagram
  - Add eurion
  - Add sneaker
  - Add svg-animate
  - Update 45 components


author: Tom Callaway <spot@fedoraproject.org> - 12:svn77587-2
changelog:
  - remove Requires: tex(uarial.sty), it is optional in the code and not provided by texlive (bz437624)
  - update asmeconf asmejour har2nat llncs lni mitthesis novel oup-authoring-template sysuthesis tugboat
    ualberta univie-ling ut-thesis uwa-letterhead uwa-pcf uwa-pif


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78756-3
changelog:
  - Update collection from svn77587 to svn78756
  - Add bibleref-sbl
  - Add delvierre
  - Add deutschesmuseum
  - Add iacrj
  - Add jouthesis
  - Add jyu-chem-thesis
  - Add nxtlatex
  - Add onlinebrief24
  - Add sblarticle
  - Add sblbook
  - Add sblfonts
  - Add sblidx
  - Add sblreport
  - Add uvlhighlight
  - Update 34 components
  - Remove shtthesis


author: Tom Callaway <spot@fedoraproject.org> - 12:svn78834-4
changelog:
  - Update collection from svn71515 to svn78834
  - upstream moved all the xetex dependent packages here...
  - Add ctex
  - Add ctex-faq
  - Add shtthesis
  - Add xecjk
  - Add xetex-devanagari
  - Add xetexref
  - Update 16 components


author: Peter Robinson <pbrobinson@gmail.com> - 2.5.12-1
changelog:
  - Update to 2.5.12
  - Enable aarch64 support
  - Drop (and obsolete) monitor subpackage (removed upstream)
  - Minor associated cleanups


author: Neal Gompa <ngompa@fedoraproject.org> - 2.5.12-2
changelog:
  - Backport fixes to allow thermald to work on "non-mobile platforms"
    (rhbz#2512758)
  - Modernize spec file


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-4
changelog:
  - Rebuild (xorg-x11-server)
    Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259
          CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263
          CVE-2026-50264


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Dominik Mierzejewski <dominik@greysector.net> - 1.8.2-23
changelog:
  - stop using obsolete cmake3 macros
  - specify SONAME in file list explicitly
  - apply upstream patch to fix format truncation


author: Adam Williamson <awilliam@redhat.com> - 1:10.1.46-2
changelog:
  - Drop now-unnecessary version bounds in java requirements
  - Specify java-25-headless, not java-headless (#2398212)


author: Dimitris Soumis <dsoumis@redhat.com> - 1:2.0.14-2
changelog:
  - The old description is from the 1.x era when tomcat-native provided broad
    APR integration. In 2.x it's focused solely on TLS/OpenSSL.


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.11-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-9-11/21786 bz#2483769


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Andreas Schneider <asn@redhat.com> - 0.26.10-1
changelog:
  - Update to version 0.26.10
  - https://github.com/tree-sitter/tree-sitter/releases/tag/v0.26.10
  - resolves: rhbz#2479963


author: John Kacur <jkacur@redhat.com> - 0.20-1
changelog:
  - Update to upstream version 0.20
  - Convert to pyproject-rpm-macros for modern Python packaging
  - Add pyproject.toml for modern Python packaging
  - Remove all patches (now included in upstream 0.20)


author: John Kacur <jkacur@redhat.com> - 0.20-2
changelog:
  - Add python3-pip, python3-setuptools, python3-wheel BuildRequires
  - Delete setup.py in %prep so pyproject.toml build is used
  - Compress man page during %prep similar to rteval
  - Install tuna script and compressed man page explicitly


author: John Kacur <jkacur@redhat.com> - 0.20-4
changelog:
  - Update pyproject.toml license format for modern setuptools
  - Disable the tuna apply functionality
  - Remove tuna apply from the man page
  - Print warning if setting affinity results in EPERM and continue
  - Add testing infrastructure using unittest framework


author: John Kacur <jkacur@redhat.com> - 0.21-1
changelog:
  - Rebased to upstream tuna-0.21
  - Added patch to improve error handling for cpuset save
  - Removed translations (po/ files)


author: Carl George <carlwgeorge@fedoraproject.org> - 5.5.3-1
changelog:
  - Update to version 5.5.3 rhbz#2218490
  - Change runtime dependency from /usr/bin/node to /usr/bin/node-<major>
  - Avoid broken command symlinks that can happen after a nodejs major
    version bump


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


author: Patsy Griffin <patsy@redhat.com> - 2026b-1
changelog:
  Update to tzdata-2026b (#2461119)
    - British Columbia’s 2026-03-08 spring forward is expected
      to be its last transition as it moves to permanent -07.


author: Patsy Griffin <patsy@redhat.com> - 2026c-1
changelog:
  Update to tzdata-2026c (#2498187)
    - Alberta moved to permanent -06 on 2026-06-18.
    - Morocco moves to permanent +00 on 2026-09-20.


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Packit <hello@packit.dev> - 0.19.8-1
changelog:
  - preload: Fix libc name on alpha architecture (Thanks Michael Cree!)
  - preload: Check dlopen(libc) failure
  - ioctl: Fix array.resize(0) to work with gcc 16 static analyzer
  - tests: Fix Gentoo tests, re-enable them in CI


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-5
changelog:
  - Fix usbguard-tmpfiles.conf
  - Remove catch1 dependency
  - Adapt for protobuf api changes
  - Fix regression in specifying IPC privileges using UID
  - selinux subpackage update: unified bin and sbin
  Resolves: rhbz#2297169


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2,
    uninstall-ignore-error, ipc-privileges, protobuf-3.0,
    catch2-support, disable-catch
  - Add SELinux policy fix for systemd-homed stream connect
    Resolves: rhbz#2380396
    Resolves: rhbz#2376283


author: Benjamin A. Beasley <code@musicinmybrain.net> - 26.03-3
changelog:
  - Backport several OpenEXRCore security fixes
  - Fixes CVE-2026-34378 / GHSA-v76p-4qvv-vh4g; closes RHBZ#2455493
  - Fixes CVE-2026-34380 / GHSA-q3v8-hw4m-59w5; closes RHBZ#2455534
  - Fixes CVE-2026-34588 / GHSA-588r-cr5c-w6hf; closes RHBZ#2455505
  - Fixes CVE-2026-34589 / GHSA-p8xc-w3q4-h64x; closes RHBZ#2455501
  - Fixes CVE-2026-34379 / GHSA-w88v-vqhq-5p24; closes RHBZ#2455497


author: Karel Zak <kzak@redhat.com> - 2.41.4-8
changelog:
  - backport lastlog2 fixes from upstream
  - fix pam_lastlog2 libpam linking (rhbz#2453457)
  - wait on busy SQLite connections (rhbz#2419509)


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <remi@remirepo.net> - 9.0.2-1
changelog:
  - Valkey 9.0.2 - February 3, 2026
  - Upgrade urgency HIGH: There are critical bugs that may affect a subset of users.


author: Remi Collet <remi@remirepo.net> - 9.0.4-1
changelog:
  - Valkey 9.0.4 - May 5, 2026
  - Upgrade urgency SECURITY: This release includes security fixes.
    CVE-2026-23479 CVE-2026-25243 CVE-2026-23631


author: Remi Collet <remi@remirepo.net> - 9.0.5-1
changelog:
  - Valkey 9.0.5 - Released Tue 21 July 2026
  - Upgrade urgency SECURITY: This release includes security fixes
    CVE-2026-56684 CVE-2026-63639


author: Martin Gansser <martinkg@fedoraproject.org> - 0.9.0-0.1.beta1
changelog:
  - Update to 0.9.0-0.1.beta1
  - Add python3dist(setuptools-gettext)
  - Fixed icon installation
  - Fixed desktop validation
  - Fixed setuptools discovery warnings


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.7.3-1
changelog:
  - New upstream release: A security release
  - Includes fix for VSV00017 aka CVE-2025-8671, rhbz#2388222


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 8.0.0-1
changelog:
  - New upstream release
  - New pkg-varnish-cache checkout
  - Added cflag -Wno-error=discarded-qualifiers to build on fedora while waiting for upstream


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Jonathan Wright <jonathan@almalinux.org> - 1.36.0-1
changelog:
  - update to 1.36.0 rhbz#2368636
  - Fix bitwarden mobile app not working rhbz#2437599
  - Fix CVE-2025-58160 vaultwarden: Tracing log pollution
  - Fix CVE-2026-25537 vaultwarden: jsonwebtoken has Type Confusion that leads to potential authorization bypass
  - Fix CVE-2026-25727 vaultwarden: time affected by a stack exhaustion denial of service attack
  - Fix CVE-2026-26012 vaultwarden: Information disclosure due to bypassed collection permissions
  - Fix CVE-2026-27898 vaultwarden: Information disclosure via API partial update
  - Fix CVE-2026-27803 vaultwarden: Unauthorized collection management operations due to improper access control
  - Fix CVE-2026-27801 vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion


author: Jonathan Wright <jonathan@almalinux.org> - 1.37.1-1
changelog:
  - update to 1.37.1 rhbz#2510094
  - Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
  - Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities


author: Jonathan Wright <jonathan@almalinux.org> - 2026.4.1-1
changelog:
  - update to 2026.4.1 rhbz#2387335
  - Fixes CVE-2026-27803 Unauthorized collection management operations due to improper access control
  - Fixes CVE-2026-27801 Two-factor authentication bypass allows unauthorized access and data deletion
  - Fixes CVE-2026-27802 Privilege Escalation via Unauthorized Bulk Permission Update
  - Fixes CVE-2026-27898 Information disclosure via API partial update


author: Pavel Raiskup <praiskup@redhat.com> - 5-1
changelog:
  - support for fast "ruff" analyser
  - --linter-tag option added
  - subproject detection by .vcs-diff-lint.yml


author: Pavel Raiskup <praiskup@redhat.com> 6-1
changelog:
  - bugfix: correctly honor file renames
  - bugfix: fix subproject detection for git worktree
  - ruff: do full project scans (since Ruff is fast enough)
  - check the new (changed) code in a side-directory


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - drop unnecessary newline in the output
  - ruff: don't prefix the error locations with absolute path
  - ruff: don't optimize out the full Ruff run
  - print the git sha1 being analyzed
  - bugfix: correct matching filenames with endswith()


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - don't require all the linters, just recommend them
  - use requested linters only if they are available
  - nicer info/debug output


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - Handle (no traceback) "invalid-syntax" code from Ruff
  - log.debug() all git commands
  - do not let "git apply" pollute stderr with whitespace errors


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.18.0-1
changelog:
  - Update to 8.18.0
  - Resolves: rhbz#2423186
  - Build against LibRaw
  - Switch from spng to libpng (preferred upstream)
  - Disable new uhdr feature (lack of libuhdr)


author: Alex Tereschenko <frozen.and.blue@gmail.com> - 7.2.12-1
changelog:
  - Update Virtualbox Guest Additions to 7.2.12 (rhbz#2489301)
  - Switch to building with nasm instead of yasm


author: Alex Tereschenko <frozen.and.blue@gmail.com> - 7.2.14-1
changelog:
  - Update Virtualbox Guest Additions to 7.2.14 (rhbz#2503394)
  - Drop i686 architecture builds as no longer relevant (rhbz#2499679)
  - Correct Bugzilla record number reference in the changelog for 7.2.12 update (rhbz#2499698)


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-1
changelog:
  - update to 1.0.36 (#2246227)
  - drop obsolete patches
  - fix some tests in i686
  - simde-0.8.2 is now required
  - run all tests on aarch64, all issues resolved
  - review skipped tests on i686, ppc64le and s390x


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-3
changelog:
  - use upstream way of running tests
  - run unit tests
  - re-enable most tests on s390x now that they pass
  - skip failing test on ppc64le and s390x with GCC 15


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.37-1
changelog:
  - update to 1.0.37 (resolves rhbz#2349655)
  - skip new failing tests on i686 and ppc64le
  - re-enable wasm2c/spec/float_exprs.txt test, now that GCC 15 is fixed


author: hydai <hydai@hyd.ai> - 0.17.0-1
changelog:
  - Release 0.17.0
  - Bump C API library version (capi_version) to 0.1.1
  - Drop Patch0: Poller context refactor merged upstream in 0.17.0
    (WasmEdge/WasmEdge#4509)


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.0-1
changelog:
  - Toggle ADB secure mode by default
    + ADB will no longer auto-connect on session start
    + You may use the new waydroid adb connect command to connect ADB
    + To connect ADB, you will need to provide authorization on the Android side
  - Rotate and trim waydroid.log file at 5MB
  - Hide system apps from the desktop applications menu
    + To make a system app visible in your apps menu, switch NoDisplay=false in its desktop file
  - Do not hide the main Waydroid launcher after enabling multi-windows mode
  - Add desktop action to stop Waydroid session
    + Right-click the Waydroid entry in your desktop application launcher, then Stop Waydroid
  - Add desktop action to re-initialize Waydroid
    + Right-click the Waydroid entry in your desktop application launcher, then Initialize Waydroid
    + This allows switching between VANILLA and GAPPS
  - Make sure to stop waydroid session on user log-out
  - Add new waydroid command with no arguments, alias for waydroid show-full-ui
  - Add new waydroid bugreport command to gather logs for a bug report
  - Forward Android notifications to the desktop
    + Requires updating the Android system image to a compatible version


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.1-1
changelog:
  - Fix graphical initialization with Python 3.14 and newer (rhbz#2425593)
  - Allow using block device as pre-installed image files


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.2-1
changelog:
  - Attempt to further fix initialization with Python 3.14
  - Fix desktop file update logic for headless apps
  - Add Vulkan support for xe kernel driver
  - Allow passing arguments to "waydroid logcat"


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
    - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    (49699333+dependabot[bot]) - test: iot-qcow2-image does not support
    packages (bcl) - test: qcow2 renamed to server-qcow2 (bcl) - build(deps):
    bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 4 to
    5 (49699333+dependabot[bot]) - tests: Use current host arch in info and
    list tests (bcl)


author: Brian C. Lane <bcl@redhat.com> - 36.2-1
changelog:
  - * Tue Apr 28 2026 Brian C. Lane <bcl@redhat.com> - 36.2-1 - New release:
    36.2 (bcl) - maint: Ran ./tools/prepare-source.sh (bcl) - composer-cli:
    Use new FilterCompose helper for status command (bcl) - composer-cli: Use
    new FilterCompose helper for the list command (bcl) - weldr: Add
    FilterComposes helper function (bcl) - cloud: Add FilterComposes helper
    function (bcl) - workflows: Pin govulncheck at v1.1.4 for use with go
    1.24 (bcl) - Add missing Obsoletes and Provides (bcl) - Add codeowners as
    per security audit (mcorr) - Makefile: Update rpm building to use vendor
    archive (bcl) - spec: Update to use the go-vendor-tools and macros (bcl)
    - ci: modernize golanci-lint GHA (lzap+git) - deps: update to Go 1.24
    (lzap+git) - build(deps): bump github.com/BurntSushi/toml from 1.5.0 to
    1.6.0 (49699333+dependabot[bot]) - build(deps): bump
    github.com/spf13/cobra from 1.10.1 to 1.10.2 (49699333+dependabot[bot]) -
    build(deps): bump actions/checkout from 5 to 6 (49699333+dependabot[bot])


author: Michal Ruprich <mruprich@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Rename package from wget to wget1
  - Add wget1-wget subpackage to allow usage as wget


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Joe Doss <joe@solidadmin.com> - 1.0.20260223-1
changelog:
  - Update to 1.0.20260223
  - syncconf: account for persistent keepalive removed from config file
  - config: preserve const correctness
  - wg-quick@.service: add deps on wg-quick.target
  - wg-quick: linux: do not unnecessarily set sysctl
  - wg-quick: use addconf instead of setconf
  - wg-quick: linux: deal with resolvconf migration more gracefully
  - wg-quick: pass on # comments to {Pre,Post}{Up,Down}
  - syncconf: account for psks removed from config file
  - wg-quick: linux: use smallest mtu, not largest


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 1:1.0.4-1
changelog:
  - Update to 1.0.4 release
  - Add Epoch because the 1.1 release from git was 1.0.1
  - Add Debian patch to port to GTK3


author: Michel Lind <salimma@centosproject.org> - 0.4-1
changelog:
  - Update to version 0.4
  - Apply temporary blazesym workaround to swallow /proc/kcore EPERM when
    querying KASLR


author: Michel Lind <salimma@centosproject.org> - 0.5-1
changelog:
  - Update to version 0.5
  - Apply build flags consistently
  - Update licenses to account for bundled dependencies


author: Michel Lind <salimma@centosproject.org> - 0.5-2
changelog:
  - fix to show SHA commit in help text
  - also ensure `make install` uses the right build flags
  - include all bundled projects' licenses


author: Michel Lind <salimma@fedoraproject.org> - 0.5-3
changelog:
  - Drop rust_arches; no longer needed. But limit builds to the architectures
    strobelight-libs supports


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-1
changelog:
  - update to xen 4.21.0
    rebase mini-os
    use .xz xen tarball instead of .gz
    fix quotes around sed command
    update libxenstore version
    package libxenmanage and xen-watchdog-sleep.sh files
    add a new package for test files
    renumber patches
    use json-c instead of yajl
  - fix bug in xen code when using json-c
  - fix code issues detected by gcc16


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.0-5
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.1-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
  	[XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.1-4
changelog:
  - x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487]
  - domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490]
  - Arm: Completion of memory accesses not guaranteed by completion of a TLBI
  	 [XSA-493, CVE-2025-10263]
  - x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488]


author: Michael Young <m.a.young@durham.ac.uk> - 4.21.2-1
changelog:
  - update to xen 4.21.2
  - includes security fixes
    x86 shadow paging is deprecated [XSA-495, CVE-2026-42493]
    vIRQ event channel binding may break Xenstore [XSA-496, CVE-2026-42492]
    buffer overruns in libfsimage iso9660 handling [XSA-497, CVE-2026-42494,
  	CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425]
    sysctl and platform-op locks open to abuse [XSA-499, CVE-2026-62426,
  	CVE-2026-62427]
    grant-table: type confusion in grant-copy [XSA-500, CVE-2026-62428]
    grant-table: version change racing with other operations [XSA-501,
  	CVE-2026-62435, CVE-2026-62436]
    vNUMA domain cleanup may race other operations [XSA-502, CVE-2026-62429]
    x86: Out-of-bounds read in vRTC emulation [XSA-503, CVE-2026-62430]
    Viridian STIMER division by zero [XSA-504, CVE-2026-62431]
    evtchn: Race between FIFO expand and reset [XSA-505, CVE-2026-62432]
    correct buffer checks for DM_OP hypercalls [XSA-506, CVE-2026-62433]
    PoD: Don't try to reclaim special pages [XSA-507, CVE-2026-62434]
    pygrub is only supported in de-privileged mode [XSA-508]


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.2-1
changelog:
  - Update to 1.1.2 upstream release
  - Resolves: rhbz#2494057
  - Update License and SourceLicense fields


author: Pavel Reichl <preichl@redhat.com> - 7.0.1-1
changelog:
  - Update to upstream v7.0.1
  - Move xfs_healer systemd units from xfsprogs-xfs_scrub to main xfsprogs package
  - Related: rhbz#2467694


author: Jerry James <loganjerry@gmail.com> - 4.33-1
changelog:
  - Version 4.33
  - Drop upstreamed C23 patch
  - Add patch to fix gap binary location in the tests
  - Use the GAP declarative buildsystem


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.23-1
changelog:
  - Update to xserver 21.1.23
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Peter Hutterer <peter.hutterer@redhat.com> - 24.1.12-1
changelog:
  - Update to xwayland 24.1.12
    Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160,
                        ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164,
                        ZDI-CAN-30165, ZDI-CAN-30168


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6.1-1
changelog:
  - Update to 0.10.6.1
  - CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218
  - CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626
  - CVE-2026-55639, CVE-2026-55645


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10-1
changelog:
  - update to 1.10 fixes rhbz#2464731 - fix license GPL-3.0-only - updated /
    reorganize BuildRequires list


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Gabriel Somlo <gsomlo@gmail.com> - 0.67.2.20260713git22c15a7
changelog:
  - update to newer 0.67 snapshot
  - simplify downstream (un-bundling) patch since some upstream support added


author: Maxwell G <maxwell@gtmx.me> - 2026.02.21-1
changelog:
  - Update to 2026.02.21. Fixes rhbz#2441709.
  - Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)


author: Maxwell G <maxwell@gtmx.me> - 2026.06.09-1
changelog:
  - Update to 2026.06.09. Fixes rhbz#2487407.
  - Mitigates CVE-2026-50019, CVE-2026-50023, CVE-2026-50574


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 4.1.5^git20251117.c9a0e98-1
changelog:
  - Removed debug package creation opt-out.
  - Updated to Git revision c9a0e98 (Nov 17, 2025).
  - Updated the SPDX license expression.
  - The examples can now be found in the package documentation directory.
  - All package summaries and descriptions have been updated.
  - The README-file has been removed from the package as it doesn't contain any
    useful information for Fedora users.
  - The license file can now be found in the package license directory.
  - Made the generated project file architecture-independent.


author: Jerry James <loganjerry@gmail.com> - 3.6.2-1
changelog:
  - Version 3.6.2
  - Use zlib-ng directly instead of via the compatibility interface
  - Temporarily disable one failing test on ppc64le


author: Jerry James <loganjerry@gmail.com> - 3.6.2-2
changelog:
  - Work around a test failure
  - The failure appears to be due to changes in bsearch behavior in newer
    glibc builds


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to v1.1.0
  - Upstream bug fixes: out-of-bounds array access, missing unistd.h header,
    localtime prototype, curses header preprocessor guard
  - Upstream build improvements: LDFLAGS support in Makefile
  - Migrate to %autorelease
  - Remove unnecessary %global _hardened_build 1 (default since F23)


