# changelog

author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Dalibor Pospisil <dapospis@redhat.com> - 1.30-1
changelog:
  - prefer yum over direct download mechanism for the rpm downloads
  - a few code cleanups
  - fixed some typos
  - improved full fmf_id processing
  - changed installation prefix from / to /usr


author: Dalibor Pospisil <dapospis@redhat.com> - 1.31.4-1
changelog:
  - fixed getting base arch on Fedora and c10s
  - rlReport support SKIP result, by chuhu
  - fixed rlIsRHELLike on systems without /etc/os-release, e.g. RHEL-6
  - some minor updates


author: Dalibor Pospisil <dapospis@redhat.com> - 1.32
changelog:
  - introduction of the new way to foist the os-relase and thus present
    different system to the tests, including the version, by KwisatzHaderach


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.35-2
changelog:
  - Backport support for OpenSSL provider required for PKCS11 labels
  - Deactivate jemalloc default linking


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Than Ngo <than@redhat.com> - 142.0.14^chromium142.0.7444.175-3
changelog:
  - Enable system libcxx
  - Fix link error when building with system libcxx
  - Apply memory-allocator-dcheck-assert-fix for aarch64


author: Than Ngo <than@redhat.com> - 143.0.9^chromium143.0.7499.40-1
changelog:
  - Update to 143.0.7499.40
  - Hoshino Lina: Update to cef-143.0.9+ge88e818 (rhbz#2420939)
  - * High CVE-2025-13630: Type Confusion in V8
  - * High CVE-2025-13631: Inappropriate implementation in Google Updater
  - * High CVE-2025-13632: Inappropriate implementation in DevTools
  - * High CVE-2025-13633: Use after free in Digital Credentials
  - * Medium CVE-2025-13634: Inappropriate implementation in Downloads
  - * Medium CVE-2025-13720: Bad cast in Loader
  - * Medium CVE-2025-13721: Race in v8
  - * Low CVE-2025-13635: Inappropriate implementation in Downloads
  - * Low CVE-2025-13636: Inappropriate implementation in Split View
  - * Low CVE-2025-13637: Inappropriate implementation in Downloads
  - * Low CVE-2025-13638: Use after free in Media Stream
  - * Low CVE-2025-13639: Inappropriate implementation in WebRTC
  - * Low CVE-2025-13640: Inappropriate implementation in Passwords
  - Drop workaround darkmode-image-policy.patch
  - Fix build error due to Unresolved dependencies
  - Fix swiftshader to compile with llvm-16.0
  - Refresh python-3.9-ftbfs patch for el9
  - Refresh ppc64le patches
  - Refresh chromium.conf


author: Than Ngo <than@redhat.com> - 143.0.10^chromium143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
  - * High: Under coordination
  - * Medium CVE-2025-14372: Use after free in Password Manager
  - * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them
    unreadable
  - Hoshino Lina: Update to cef-143.0.10+g8aed01b (rhbz#2421703)


author: Than Ngo <than@redhat.com> - 143.0.10^chromium143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146 [rhbz#2423482]
  - * High CVE-2025-14765: Use after free in WebGPU
  - * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as
    it's merged


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Florian Weimer <fweimer@redhat.com> - 2.41-3
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 046b33800c3e8c7ac21b48e3ce5dbed8901f7e37:
  - x86: Detect Intel Diamond Rapids
  - x86: Handle unknown Intel processor with default tuning
  - x86: Add ARL/PTL/CWF model detection support
  - x86: Optimize xstate size calculation
  - elf: Fix arm-linux-gnueabihf build break from b861755a84
  - elf: Extend glibc.rtld.execstack tunable to force executable stack (BZ 32653)
  - x86: Link tst-gnu2-tls2-x86-noxsave{,c,xsavec} with libpthread
  - x86: Use separate variable for TLSDESC XSAVE/XSAVEC state size (bug 32810)
  - x86: Skip XSAVE state size reset if ISA level requires XSAVE
  - x86_64: Add atanh with FMA
  - x86_64: Add sinh with FMA
  - x86_64: Add tanh with FMA
  - nptl: Check if thread is already terminated in sigcancel_handler (BZ 32782)


author: Florian Weimer <fweimer@redhat.com> - 2.41-7
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 6e489c17f827317bcf8544efefa65f13b5a079dc:
  - ppc64le: Revert "powerpc: Optimized strcmp for power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc : Add optimized memchr for POWER10" (Bug 33059)
  - ppc64le: Revert "powerpc: Fix performance issues of strcmp power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc: Optimized strncmp for power10" (CVE-2025-5745)
  - elf: Keep using minimal malloc after early DTV resize (bug 32412)
  - nptl: Fix pthread_getattr_np when modules with execstack are allowed (BZ 32897)


author: Florian Weimer <fweimer@redhat.com> - 2.41-9
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit e7c419a2957590fb657900fc92a89708f41abd9d:
  - iconv: iconv -o should not create executable files (bug 33164)
  - CVE-2025-8058: Fix double-free after allocation failure in regcomp (#2383154)


author: Florian Weimer <fweimer@redhat.com> - 2.41-10
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 513629b14d43bffd83985ffb9cf10e5599e649d2:
  - elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
  - elf: Extract rtld_setup_phdr function from dl_main
  - elf: Do not add a copy of _dl_find_object to libc.so
  - stdlib: resolve a double lock init issue after fork [BZ #32994]


author: Florian Weimer <fweimer@redhat.com> - 2.41-11
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit a52c9b75c70124fe4f69e6b0ed288e2c14bd7ce9:
  - Optimize __libc_tsd_* thread variable access
  - i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
  - i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - i386: Update ___tls_get_addr to preserve vector registers
  - elf: Preserve _rtld_global layout for the release branch
  - elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor
  - elf: Fix handling of symbol versions which hash to zero (bug 29190)
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - elf: Compile _dl_debug_state separately (bug 33224)
  - elf: Restore support for _r_debug interpositions and copy relocations
  - elf: Introduce _dl_debug_change_state
  - elf: Introduce separate _r_debug_array variable
  - Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
  - ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483)
  - Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower}
  - Remove <libc-tsd.h>
  - AArch64: Improve codegen SVE log1p helper
  - AArch64: Optimise SVE FP64 Hyperbolics
  - AArch64: Optimize SVE exp functions
  - AArch64: Improve codegen in SVE log1p
  - AArch64: Optimize inverse trig functions
  - AArch64: Optimize algorithm in users of SVE expf helper
  - AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]
  - nptl: Fix SYSCALL_CANCEL for return values larger than INT_MAX (BZ 33245)


author: Frédéric Bérat <fberat@redhat.com> - 2.41-12
changelog:
  - Auto-sync with upstream branch master,
    commit 6a0b8e366520a09722aef6c17ec1b103e82f3c28:
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091) (Sachin Monga)
  - ppc64le: Restore optimized strncmp for power10 (Sachin Monga)
  - ppc64le: Restore optimized strcmp for power10 (Sachin Monga)
  - AArch64: Fix and improve SVE pow(f) special cases (Pierre Blanchard)
  - AArch64: fix SVE tanpi(f) [BZ #33642] (Pierre Blanchard)
  - AArch64: Fix instability in AdvSIMD sinh (Joe Ramsay)
  - AArch64: Fix instability in AdvSIMD tan (Joe Ramsay)
  - AArch64: Optimise SVE scalar callbacks (Joe Ramsay)
  - aarch64: fix includes in SME tests (Yury Khrustalev)
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601) (Florian Weimer)
  - aarch64: fix cfi directives around __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: tests for SME (Yury Khrustalev)
  - aarch64: clear ZA state of SME before clone and clone3 syscalls (Yury Khrustalev)
  - aarch64: define macro for calling __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: update tests for SME (Yury Khrustalev)
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp (Yury Khrustalev)
  - x86: fix wmemset ifunc stray '!' (bug 33542) (Jiamei Xie)
  - x86: Detect Intel Nova Lake Processor (Sunil K Pandey)
  - x86: Detect Intel Wildcat Lake Processor (Sunil K Pandey)
  - nss: Group merge does not react to ERANGE during merge (bug 33361) (Florian Weimer)
  - AArch64: Fix SVE powf routine [BZ #33299] (Pierre Blanchard)


author: Günther Deschner <gd@samba.org> - 2:4.22.2-1
changelog:
  - Update to Samba 4.22.2
  - resolves: rhbz#2370468
  - resolves: rhbz#2370455 - Security fix for CVE-2025-0620


author: Günther Deschner <gd@samba.org> - 2:4.22.5-1
changelog:
  - Update to Samba 4.22.5
  - resolves: rhbz#2391698 - Security fix for CVE-2025-9640
  - resolves: rhbz#2394377 - Security fix for CVE-2025-10230


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.2.1-1
changelog:
  - Release 2.2.1
    * This patch release fixes the BPF to correct capture ICMPv6, a typo in
      the filter had it matching "ip" and not "ip6".
    * Other changes are updates to GitHub workflows and man-pages.
    * Commits:
      ea82cd1 Copyright
      aa14a9f ICMP BPF filter
      6ef17e2 Badges
      6722677 Workflow
      1cb22f0 Man-page opt, Dumper


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.0-1
changelog:
  - Release 2.3.0
    * This release adds support for Linux cooked v2 link-type, a new output
      format, a new plugin and fixes a couple of issues.
    * The new output format `tcpdns` can be used to generate a file with the
      DNS as a TCP stream, first 16bit size (network order) then the DNS
      message, which is compatible with `dnsperf -B`.
    * The new plugin `asudp` can be used to rewrite outgoing packet by taking
      the DNS that's found and construct UDP packets from it.
    * Other changes:
      - Fix #314:
        - man-page: Clarify that `pktsize` is shown before parsing the IP packet
        - `-g`: Quote `,` characters
      - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
      - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
      - Handle extension function pointers better
      - Clarify that `-C` counts uncompressed output
      - Block PCAP output if TCP reassemble is used
      - Increase maximum DNS messages in a reassembled TCP message
      - Add new extension interface for setting output packet
      - Update pcap-thread to v4.1.0
    * Commits:
      e689bc8 pcap-thread v4.1.0
      29d184b DLT_LINUX_SLL2
      ba793a9 Fixes, asudp plugin, tcpdns output format
      6c133d4 Ethernet padding
      420548a Diag output
      8b92a52 SPEC
      a3fb1dd Mailing-list


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.0-1
changelog:
  - Update to release v0.25.0
  - Resolves: rhbz#2399354, rhbz#2399081, rhbz#2398678, rhbz#2398424
  - Upstream feature additions and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.1-3
changelog:
  - Switch to docker-distribution package for 'registry'
  - Switch to docker-distribution as a BuildRequires for registry which
    removes dependency on unsupported golang- packages
  - Adopt gocheck2 and simplify %check


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.2-1
changelog:
  - Update to v0.25.2
  - CVE-2025-58183; Resolves: rhbz#2412529
  - CVE-2025-58188; Resolves: rhbz#2412380, rhbz#2411476, rhbz#2410945
  - CVE-2025-58185; Resolves: rhbz#2410578, rhbz#2410299, rhbz#2410013
  - CVE-2025-61723; Resolves: rhbz#2409627, rhbz#2409349, rhbz#2409065
  - CVE-2025-58189; Resolves: rhbz#2408157, rhbz#2407880, rhbz#2407612
  - Upstream updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.0-1
changelog:
  - Update to release v0.26.0
  - Resolves: rhbz#2412681, rhbz#2412761
  - Upstream new features and fixes
  - dependency override for moby/policy-helper needed for license (default
    version does not a a license file)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.3-1
changelog:
  - Update to release v0.26.3
  - Resolves CVE-2024-25621: rhbz#2419004, rhbz#2419033, rhbz#2419427
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.5.2-1
changelog:
  - Update to release v28.5.2
  - Resolves: rhbz#2412743
  - Incorporates runc v1.3.3
  - Upstream bug fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-1
changelog:
  - Update to release v29.0.0
  - Upstream note: "This release includes several breaking changes and
    deprecations. Review the release notes carefully before upgrading."


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-2
changelog:
  - Amend tests in %check
  - Expand tests found in submodules using -F parameter to gocheck2
  - v29.0.0 changes  Co-authored-by: Maxwell G <maxwell@gtmx.me>


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.2-2
changelog:
  - Remove flaky tests from %check
  - TestSCTP6Proxy is flaky on x86_64 arch - usually working but sometimes
    not
  - TestSCTP6ProxyNoListener often fails on ppc64le (rawhide)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.3-1
changelog:
  - Update to release v29.1.3
  - Resolves: rhbz#2417969
  - Resolves CVE-2024-25621: rhbz#2419019, rhbz#2419046, rhbz#2419442
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-1
changelog:
  - Update to release v2.40.2
  - Resolves: rhbz#2405876
  - Upstream fixes
  - Adopt gocheck2 macro for %check


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-2
changelog:
  - Resolve CVE-2025-62725
  - v2.40.2 resolves CVE-2025-62725.
  - Associated release-specific rhbz will be manually closed: F41 - #2406691
    and F42 - #2406693


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.0.0-1
changelog:
  - Update to release v5.0.0
  - Resolves: rhbz#2414590
  - Upstream notes: 'To avoid confusion with the "v2" and "v3" legacy compose
    file formats, we decided to directly jump to version 5.x'
  - New features and fixes.
  - Major change: 'Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)'


author: Graham White <graham_alton@hotmail.com> - 4.1.3-7
changelog:
  - re-add fish completions with patch (#935)
  - remove Sun AU format support as it's deprecated in Python 3.13 (#936)


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.16.0-1
changelog:
  - Update to 3.16.0
  - Drop upstreamed patches
  - Switch to SDL3 for sdl-freerdp
  - Backport fix for s390x


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.4-1
changelog:
  - New GCT release v6.2.20251212
  - Drop patches included in the release
  - Drop old system V init scripts


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32~rc1-1
changelog:
  - Use gdk_init() instead of gtk_init() in ibus-x11
  - Revert "Do not load en-US compose table by default"
  - Call IBus.init() importing Python IBus module
  - Some bug fixes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32~rc1-2
changelog:
  - Send FocusIn signal again after delayed FocusId property
  - Revert "Add a pad to the cursor height in Wayland"


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32~rc1-4
changelog:
  - Fix time lag of CandidatePanel in X11
  - Fix infinite Return key in xterm with Wayalnd input-method protocol V2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32~rc2-1
changelog:
  - Resolves #2341930 Clear object pointers with task free in engineproxy
  - Update Unicode table with keysym


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32-3
changelog:
  - Resolves: #2237664 Fix mouse position in Emojier category list
  - Resolves: #2326455 Free IBusInputContext in input_method_activate()
  - Resolves: #2346033 Fix SEGV with allocation fail in _Xi18nChangeIC()
  - Resolves: #2392358 Refer QT_IM_MODULES to check Wayland


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.17.4-0]
changelog:
  - Add Fedora 42 and 41 to release_targets (Justin M. Forbes)
  - RHEL_RELEASE should be 0, not 1 (Justin M. Forbes)
  - PCI: vmd: override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Inochi Amaoto)
  - fedora: arm64: Updates for AMD Xilinx devices (Peter Robinson)
  - Fix up config issue due to stable backport (Justin M. Forbes)
  - Linux v6.17.4


author: Augusto Caringi <acaringi@redhat.com> [6.17.8-0]
changelog:
  - rust: kbuild: workaround `rustdoc` doctests modifier bug (Miguel Ojeda)
  - rust: kbuild: treat `build_error` and `rustdoc` as kernel objects (Miguel Ojeda)
  - Linux v6.17.8


author: Augusto Caringi <acaringi@redhat.com> [6.17.10-0]
changelog:
  - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup" (Justin M. Forbes)
  - Linux v6.17.10


author: Augusto Caringi <acaringi@redhat.com> [6.17.11-0]
changelog:
  - Fix up config issue related to CONFIG_SCHED_PROXY_EXEC (Augusto Caringi)
  - Prepare for F41 EOL (Justin M. Forbes)
  - Linux v6.17.11


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.6-1
changelog:
  - Update to release v1.32.6
  - Resolves: rhbz#2373848,rhbz#2373847
  - Resolves: CVE-2025-4563
  - Upstream fixes and cleanups


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.8-1
changelog:
  - Update to release v1.32.7
  - Resolves: rhbz#2388412
  - Resolves: CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-2
changelog:
  - Revise template
  - Remove transition artifacts - from non-versioned kubernetes
  - Remove unneeded network rpms
  - Remove duplicate requires


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
changelog:
  - Update to release v1.32.10
  - Resolves: rhbz#2414539
  - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
  - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
  - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
  - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
  - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
  - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.4-1
changelog:
  - Update to release v1.33.4
  - Resolves: rhbz#2388412
  - Fixes CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-2
changelog:
  - Drop conntrack requirement
  - Resolves: rhbz#2392421
  - Drops conntrack dependency
  - Corrects README version


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-3
changelog:
  - Remove iproute, iproute-tc, ethtool dependencies
  - Resolves: rhbz#2396543
  - Consistent with changes to upstream
  - See also https://github.com/kubernetes/release/pull/4106
  - Update .gitignore to include src rpm.
  - Add kubernetes-cni requirement to kubelet consistent with upstream
  - Change containernetworking-plugins name to kubernetes-cni. There can be
    multiple kubernetes-cni providers


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
changelog:
  - Update to release v1.33.6
  - Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
  - Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
  - Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
  - Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
  - Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
  - Resolves: rhbz#2412804
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-2
changelog:
  - Reorder CRI Recommends
  - Update cri-o recommend with correct version information
  - Reorder CRI as (for example): Recommends:  (cri-o1.34 or containerd)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-3
changelog:
  - Drop deprecated --fail-swap-on=false flag
  - Drop flag from kubeadm systemd drop-in file
  - Remove deprecated flags and comment out EnvironmentFiles


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.0-1
changelog:
  - Release v1.34.0
  - Resolves: rhbz#2391352
  - Urgent Upgrade Notice at https://github.com/kubernetes/kubernetes/blob/ma
    ster/CHANGELOG/CHANGELOG-1.34.md#urgent-upgrade-notes
  - Significant fixes and new features
  - Spec file clean up over v1.33 removing obsolete references
  - gocheck still a work in progress


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1
changelog:
  - Update to release v1.34.2
  - Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
  - Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
  - Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
  - Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
  - Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
  - Resolves: rhbz#2412805
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.3-1
changelog:
  - Update to release v1.34.3
  - Resolves: rhbz#2420902
  - Upstream fixes h Please enter the commit message for your changes. Lines
    starting


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0-1
changelog:
  - Update to 0.7.0 (close RHBZ#2337404)
  - Patch out optional features that would require blosc2-rs or isal-rs
    crates


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.0-1
changelog:
  - Update to 1.23.0
  - Security fixes for CVE-2024-8946, CVE-2024-8947, CVE-2024-8948
  Resolves: rhbz#2312926, rhbz#2312923, rhbz#2312921


author: Charalampos Stratakis <cstratak@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Security fixes for CVE-2023-52353 and CVE-2024-23744 in mbedtls
  - Fix FTBFS with GCC 15
  Resolves: rhbz#2359781, rhbz#2259505, rhbz#2259499, rhbz#2340849


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.6-1
changelog:
  - New upstream stable branch version 1.42.6
  - Contains data integrity fix: "server: Fix .zero fallback path"


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Pavel Raiskup <praiskup@redhat.com> 5.7-1
changelog:
  - hermetic: new mode to do fully-offline builds
  - new --scrub-all-chroots option
  - make "dnf4" equivalent to "dnf"
  - chroot_scan: create result directory with appropriate permissions
  - chain: No need to re-create resultdir
  - de-duplicate the local-repo mountpoint in bootstrap
  - respect `nspawn_args` whenever `doChroot` is called
  - ensure --addrepo option also affects bootstrap
  - de-duplicate two opinionated doChroot() calls
  - show ccache stats at the end of the build (brian@interlinx.bc.ca)
  - add `debug` option to the ccache plugin (belegdol@fedoraproject.org)
  - add runtime dependency on fuse-overlayfs (frostyx@email.cz)
  - skip the "podman pull" for bootstrap when not needed
  - package_state: the installed_pkgs.log file now covers dynamic builddeps
  - don’t ship rpmautospec plugin with main package (nils@redhat.com)
  - clean up of macros referencing rhel7 (msuchy@redhat.com)
  - enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - add hashdir option to ccache plugin (belegdol@fedoraproject.org)
  - own /usr/share/doc/mock (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.6-1
changelog:
  - Make sure to install BuildRequires defined by macros (frostyx@email.cz)
  - unbreq plugin: performs action only when build is taking place (marian.koncek@mailbox.org)
  - simplify forcearch code


author: Jerry James <loganjerry@gmail.com> - 0.9.0-3
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.16-4
changelog:
  - Change private key cipher to aes-256-cbc
  - Remove obsolete system V conditionals in the specfile
  - Move user/group creation logic to sysusers.d fragments


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - Add org.osbuild.dnf4.versionlock stage [HMS-8771] (#2135)
      - Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    - Update images dependency ref to latest (#2142)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - add ssh_pwauth  to org.osbuild.cloud-init (#2138)
      - Author: odra, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/vagrant: add virtualbox support (COMPOSER-2503) (#1136)
      - Author: Jelle van der Waa, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2025-07-07


author: Packit <hello@packit.dev> - 156-1
changelog:
  Changes with 156
  ----------------
    - stages/vagrant: allow configuring synced folders (HMS-6116) (#2143)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-15


author: Packit <hello@packit.dev> - 157-1
changelog:
  Changes with 157
  ----------------
    - Add ability to set grub2 default menu entry (#2156)
      - Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    - Add support for optional fips menu (#2153)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2155)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2157)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - org.osbuild.coreos.live-artifacts.mono: read os name from /usr/lib/os-release (#2148)
      - Author: Bipin B Narayan, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    - stages/ignition: parametrize the path to boot (#2149)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-30


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - New script: update test manifests (#2140)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2162)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2164)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20250730 (#2159)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - stages/tar: add --numeric-owner option [RHEL-102854] (#2144)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2025-08-13


author: Packit <hello@packit.dev> - 159-1
changelog:
  Changes with 159
  ----------------
    - Update images dependency ref to latest (#2166)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20250815 (#2165)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild/solver/dnf.py: Add support for DNF variables for osbuild repos (#2064)
      - Author: Josue David Hernandez, Reviewers: Nobody
    - readme/monitor: add development info / fix monitor and add duration (#2154)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - spec: explicitly buildrequire python-setuptools (#2171)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    - stages/bootc.install-to-filesystem: add more knobs (#2152)
      - Author: Jean-Baptiste Trystram, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/coreos.live-artifacts: rework volume ID handling (#2169)
      - Author: Jonathan Lebon, Reviewers: Michael Vogt, Simon de Vlieger
    - stages: extend test_bootc_install_to_fs test for new options (#2167)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2025-08-27


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update images dependency ref to latest (#2194)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update images dependency ref to latest (#2199)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20250915 (#2193)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - osbuild: add/use new `api.get_exception_from_msg()` helper (#2201)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild: handle exception from the _message() in BaseAPI() (#2197)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/systemd-repart: introduce systemd-repart (#2189)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt

  — Somewhere on the Internet, 2025-09-24


author: Packit <hello@packit.dev> - 163-1
changelog:
  Changes with 163
  ----------------
    - Run tests in Fedora RPM build (#2116)
      - Author: Karolina Surma, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2217)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: document `--cache` flag (#2213)
      - Author: Florian Schüller, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gitlab: build RPMs for Fedora 43 (#2183)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - monitor: collect metadata alongside the result of a stage (#2215)
      - Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger
    - schutzbot/mockbuild: use the global AWS credentials (#2221)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-22


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - Stages: remove `org.osbuild.dnf*.sbom.spdx` (#2234)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support building pipelines in a VM (#2228)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2223)
      - Author: SchutzBot, Reviewers: Ondřej Budai, Simon de Vlieger
    - Update images dependency ref to latest (#2231)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2235)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - move container_mount into library; support mpp-resolve for org.osbuild.containers-storage (#2222)
      - Author: Dusty Mabe, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - org.osbuild.treeinfo: new stage to create .treeinfo files (#2200)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - schutzbot: update terraform ID (#2232)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Sanne Raymaekers
    - stages/dracut.conf: `remove_items` (#2225)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stages/dracut: `remove` (#2224)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stages: add new ln stage (#2226)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test/mod: new test file for the util/containers.py library (#2230)
      - Author: Dusty Mabe, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-05


author: Packit <hello@packit.dev> - 166-1
changelog:
  Changes with 166
  ----------------
    - Refactor Solver API to Support Versioning (HMS-9062) (#2246)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to help support bootc PXE images (#2251)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2255)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2262)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - github: free disk space before running unit tests (#2256)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - manifest-tests-install-deps: make unzip quiet (#2254)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß, Simon de Vlieger
    - monitor: add module options to JSON logger (#2244)
      - Author: Albert Esteve, Reviewers: Achilleas Koutsou, Brian C. Lane
    - org.osbuild.kickstart: add bootc support (HMS-9732) (#2242)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - runner: add new `minimal_passwd()` helper and use in linux (#2260)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - sources: add quoting to librepos "path" component (#2253)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2025-12-03


author: Packit <hello@packit.dev> - 167-1
changelog:
  Changes with 167
  ----------------
    - Fix RHSM podman secrets and rhc configuration (HMS-9811 and HMS-9606) (#2265)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - GHA: update osbuild-ci* container images (#2286)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Move replace and rglob (#2267)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Solver: prepare for V2 API with per-transaction depsolve results (HMS-9062) (#2258)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2273)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2285)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Various fixes for --in-vm (#2271)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chroot: If we're unable to mount devtmpfs, bindmount host /dev (#2277)
      - Author: Alexander Larsson, Reviewers: Michael Vogt, Simon de Vlieger
    - osbuild/solver: replace request.RepositoryConfig with model.Repository (HMS-9062) (#2280)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild/util/rhsm: make Subscriptions.get_secrets() take list of URLs (HMS-9062) (#2278)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - ostree.config: Add some tests (#2268)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ostree.grub2: ostree requires leading / (#2272)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - runners: set up sequoia on RHEL (#2288)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - stages/ostree.{aleph,deploy.container}: support more imgref formats; make aleph stage more reliable (#2270)
      - Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    - stages/xorrisofs: allow setting more fields (#2269)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-17


author: Stefano Brivio <sbrivio@redhat.com> - 0^20250606.g754c6d7-1
changelog:
  - Depend on SELinux tools and policy version, drop circular dependency
  - Call %selinux_modules_* macros only once
  - Separately restore context for /run/user in %posttrans selinux
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_05_12.8ec1341..2025_06_06.754c6d7


author: Stefano Brivio <sbrivio@redhat.com> - 0^20250611.g0293c6f-1
changelog:
  - Hide restorecon(8) errors in post-transaction scriptlet
  - Add container-selinux as dependency for passt-selinux
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_06_06.754c6d7..2025_06_11.0293c6f


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Remi Collet <remi@remirepo.net> - 3.2.2-1
changelog:
  - update to 3.2.2
  - re-license spec file to CECILL-2.1
  - raise dependency on php 7.2
  - switch to phpunit11


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - all templates: Drop wrong variant wrapping from all properties
  - tests: Skip TestNetworkManager::test_one_wifi_with_accesspoints with NM ≥ 1.49.3


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - templates: Add gsd-rfkill (thanks Guido Günther)
  - Allow adding objects derived from DBusMockObject (thanks Sebastian Wick)
  - Drop Python <= 3.7 support (thanks Tomasz Kłoczko)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - modemmanager: Add operator code (thanks Guido Günther)
  - modemmanager: Allow to set CellBroadcast channel list (thanks Guido Günther)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - mockobject: Fix _wrap_in_dbus_variant for Struct and Dict types (thanks Sebastian Wick)
  - Drop setup.{cfg,py} and RHEL 9 support, move to pybuild (rhbz#2377609)
  - Drop iio-sensor-proxy tests, the template is broken (see #241)


author: Packit <hello@packit.dev> - 0.37.0-1
changelog:
  - templates: Drop iio-sensors-proxy (See #241)
  - DBusTestCase: Drop obsolete {start,stop}_dbus() methods
  - Fix dbus-daemon startup race condition (Debian#1109272)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:2.41.1-2
changelog:
  - Migrate to pyproject-rpm-macros (fix RHBZ#2377753)
  - Add missing extras metapackages
  - Run the tests


author: Adam Williamson <awilliam@redhat.com> - 2.0.2-13
changelog:
  - Backport PR #47 to drop use of (and undeclared dep on) six
  - Backport PR #49 to drop unused footgun pam.py


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0
  - Add numactl-devel as a dependency since it is required by qatlib 24.09.0


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0
  - Add autoconf-archive as a dependency
  - Remove fix-systemd-path.patch as fix is present on the upstream project
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-26
changelog:
  - Upgrade to Ruby 3.4.7.
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: rhbz#2396204
    Resolves: CVE-2025-58767


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.16-1
changelog:
  - update to 1.1.16 (resolves rhbz#2405379)
  - drop obsolete patches
  - apply upstream patch to fix appstream data


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.18-1
changelog:
  - update to 1.1.18 (resolves rhbz#2420854)
  - drop obsolete patch
  - add missing cairo-1.0 and xlib-2.0 typelib dependencies for tests
  - add new icons to file list
  - run GTK3 tests under Xvfb


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Dominik Mierzejewski <dominik@greysector.net> - 140.3.0-2
changelog:
  - Drop unused yasm from build dependencies
    See: https://fedoraproject.org/wiki/Changes/DeprecateYASM
    Resolves: rhbz#2390538


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


