# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-5
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Resolves: rhbz#2424132 Upgrade from freeipa-4.12.5-3 and 390-ds-
    base-3.1.3-10 to latest rawhide fails


author: Filipe Rosset <rosset.filipe@gmail.com> - 0.9.5-5
changelog:
  - Modernized spec file for rawhide/epel10 - Removed redundant %%global
    _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
    %%make_build for better compliance - Updated %%install to use more
    idiomatic install commands - Listed binaries explicitly in %%files to
    avoid warnings - Improved man page globs to be compression-neutral -
    Ensured correct directory ownership for logs


author: Michel Lind <salimma@fedoraproject.org> - 25.01-1
changelog:
  - Update to 25.01
  - 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
  - Backport Debian patch to disable echo-ing password; Resolves:
    rhbz#2412315


author: Michel Lind <salimma@fedoraproject.org> - 26.01-1
changelog:
  - Update to 26.01; Resolves: rhbz#2440915
  - Fixes CVE-2026-48092: Information disclosure in 32-bit builds
  - Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler
  - Fixes CVE-2026-48101: Information disclosure in UEFI capsule parser
  - Fixes CVE-2026-48102: Information disclosure and DOS via crafted UDF
    image
  - Fixes CVE-2026-48103: Off-by-one buffer over-read in WIM archive handler
  - Fixes CVE-2026-48104: Uninitialized heap read in SquashFS archive handler
  - Fixes CVE-2026-48111: Off-by-one OOB read in UEFI firmware image parser
  - Fixes CVE-2026-48112: Heap-based buffer over-read in Ar handler BSD
    SYMDEF parser


author: Simone Caronni <negativo17@gmail.com> - 1:1.4.36-1
changelog:
  - All references to 1.4.36.0 have disappeared completely from the git
    repository and 1.4.36 has been released in place. Bump Epoch to point to
    a real release.


author: Jerry James <loganjerry@gmail.com> - 3.3.5-1
changelog:
  - Version 3.3.5
  - Reduce the number of installed texlive packages
  - Run pdflatex in nonstop mode
  - Build with -DNDEBUG


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.48-1
changelog:
  - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4,
    fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.55-1
changelog:
  - Update to 3.1.55: Fixes GHSA-2f96-g7mh-g2hx, GHSA-v396-v7q4-x2qj,
    GHSA-956x-8gvw-wg5v, GHSA-rwj8-pgh3-r573, GHSA-3rp5-jjmw-4wv2,
    GHSA-r9mr-m37c-5fr3, GHSA-fjr4-x663-mwxc, GHSA-6p8h-3wgx-97gf, and
    GHSA-94p4-4cq8-9g67


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.59-1
changelog:
  - Update to 3.1.59 (close RHBZ#2499503)
  - Fixes GHSA-5xxx-qhh7-9287, GHSA-3wxw-xv34-2frg, GHSA-8mcc-hrx5-hvxc,
    GHSA-284h-m62q-gf8w, GHSA-7833-fr7j-v32q, GHSA-hh9p-6wh2-4mfc,
    GHSA-9rj7-rf2p-w77r, GHSA-4gmw-gg2m-w46p, GHSA-wvpp-8hx9-p66j,
    GHSA-jm78-9fvv-mhgr, GHSA-hmq2-w58f-27jc, GHSA-3f7w-8rr8-f37f,
    GHSA-539m-9xh6-q6rr, and GHSA-p538-c434-8v24


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.60-1
changelog:
  - Update to 3.1.60; close RHBZ#2523750
  - Fixes GHSA-g5vv-9gxw-82hx, GHSA-whh4-5q6c-9v3x, and GHSA-239g-whfq-7xj9


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7-2
changelog:
  - Porting to qt6
  - Add %{name}-3.7-qwtconfig.pri.patch
  - Remove "env QT_QPA_PLATFORM=xcb" from GoldenCheetah.desktop


author: Martin Gansser <martinkg@fedoraproject.org> - 1:3.7.1-1
changelog:
  - This is a patch release update for v3.7 to include high priority fixes for
    stability and security and to make new planning and calendar functionality
    available to a wider audience


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:25.0.0-1
changelog:
  - Updated to v25.0.0.
  - Subpackage GtkAda3-devel now requires the GTK+-3.0 and GLib 2.0 development
    files.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.13.3-29
changelog:
  - Use the bundled gtest. GTest 1.17.1 will require C++17, and this version of
    ITK can’t be compiled as C++17.


author: Jerry James <loganjerry@gmail.com> - 1.26.05-1
changelog:
  - Version 1.26.05
  - Update to normaliz 3.11.1
  - Build with jansson support
  - Remove Lmod workaround
  - Unbundle pythoncapi-compat


author: Íñigo Huguet <ihuguet@riseup.net>
changelog:
  - Update to 1.56-rc2 release
  - Fixes CVE-2025-9615. To achieve it, remove normal users' permission to modify system connections.


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.56.0-1
changelog:
  - Update to 1.56.0 release
  - Enable polkit_noauth_group=wheel (rhbz#2437985)
  - Fix bugs related to secrets handling and permissions


author: Douglas Kosovic <doug@uq.edu.au> - 1.20.20-5
changelog:
  - Add README.Fedora for Fedora or README.EPEL for EPEL
  - Use (go-l2tp or xl2tpd) dependency for Fedora 43 to handle upgrades
    from earlier Fedora versions that had xl2tpd installed.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.0-1
changelog:
  - Updated to 1.52.0 release
    Verify file permissions for private connections to prevent unprivileged
    user from using other user's certs (CVE-2025-9615)
  - Ensure NetworkManager dependency has CVE-2025-9615 update.
  - Correct sed example in generated README.Fedora and README.EPEL files.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.2-1
changelog:
  - Updated to 1.52.2 release which has experimental IPv6 support.
  - Update CVE-2025-9615 related Requires and BuildRequires.
  - Fix typos found by codespell.


author: Dan Fruehauf <malkodan@gmail.com> - 1.4.3-1
changelog:
  - Always run autoreconf -fvi
  - Fix file access for private key and known hosts (rhbz#2428396)
  - Fix pkg-config macro
  - Move D-Bus policy file to /usr/share/dbus-1/system.d/


author: John Marshall <jmarshall@hey.com> - 2.4.1-4
changelog:
  - Avoid incorrect "Provides: libhts.so.3" from internal shared library
  - Update description to reflect that 2.4.1 contains HTSlib 1.15.1


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.4-5
changelog:
  - Go back to bundling dr_flac and dr_mp3, since it is not straightforward to
    patch for the current releases


author: Dominik Mierzejewski <dominik@greysector.net> - 2.0.5^20260117git1be041b-1
changelog:
  - update to 20260117 snapshot from stable-2.0 branch
  - fixes CVE-2025-14369 (resolves rhbz#2431177)
  - fixes rpmbuild -bi --short-circuit


author: Dominik Mierzejewski <dominik@greysector.net> - 2.0.6-1
changelog:
  - update to 2.0.6
  - unbundle dr_flac and dr_mp3 and make it conditional
  - drop the playsound binary (it's provided by SDL3_sound)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2.0-2
changelog:
  - Switch from forge-generated tarballs to downloading from upstream homepage
  - Verify source signatures
  - Fold -doc subpackage into -devel


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.0.0~20260117gitb00e4a3-1
changelog:
  - update to 20260117 snapshot from main (3.0) branch
  - fixes CVE-2025-14369 (resolves rhbz#2431178)
  - fixes rpmbuild -bi --short-circuit


author: Jerry James <loganjerry@gmail.com> - 4.4.1p5-1
changelog:
  - Version 4.4.1p5
  - Drop sharutils build dependency
  - Drop upstreamed ntl8 and flint3.3 patches
  - Drop workaround for normaliz 3.10.5
  - Build with C++20


author: Michal Srb <michal@redhat.com> - 2.17.9-1
changelog:
  - Fix journal entry spoofing in journal dump services
  - Resolves: rhbz#2484614
  - Fix symlink following in event handler scripts
  - Resolves: CVE-2026-54230
  - Fix content injection in journal log collection
  - Resolves: CVE-2026-54231
  - Fix TOCTOU in SetElement/DeleteElement
  - Resolves: CVE-2026-54228
  - Fix race condition in ChownProblemDir
  - Resolves: CVE-2026-54229


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.4.0-1
changelog:
  - rebase to v2.4.0 to fix the following CVEs:
    - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions
    - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl


author: Al Stone <ahs3@fedoraproject.org> - 20240322-1
changelog:
  - Update source tree to 20240322 version from upstream.  NB: this update
    is done in conjunction with removing s390x support due to the large
    number of patches that are now rendered obsolete.  Closes BZ#2138250.
  - Note, too, that the upstream version of the tarball is missing two
    commits and has the wrong name; discussed this with upstream and
    included a patch with the two commits to correct this, and renamed
    the tarballs to try to maintain consistency. So, upstream is actually
    named version 20240321, but it should be 20240322 according to their
    own git tree (see tag G20240322 on github).
  - Removed executable bit from all the upstream source files
  - Remove big-endian support, aka s390x.  Closes BZ#2298855.
  - Remove several 32-bit only patches that are also obsolete since they
    are for unsupported architectures (thanks to pbonzini and PR#5).
  - Remove PIE patches since that is currently the default (again, thanks
    to pbonzini and PR#5)


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.15-1
changelog:
  - update to 3.6.2.15 (resolves rhbz#2416531)
  - drop serial ctest call work-around, fixed upstream
    (https://github.com/adventuregamestudio/ags/pull/2910)


author: Björn Persson <Bjorn@Rombobjörn.se> - 2.9-1
changelog:
  - Upgraded to 2.9.
  - Set_Up and Tear_Down procedures are now called for testsuites derived from
    Ahven.Framework.Test_Suite.


author: Adam Williamson <awilliam@redhat.com> - 1.2.15.3-4
changelog:
  - Backport fix for CVE-2026-25068 (buffer overflow) (#2435423)
  - Backports to support new Lenovo laptop models (#2480230)


author: Michal Schorm <mschorm@redhat.com> - 3.3.2-3
changelog:
  - Rebuilt for  https://fedoraproject.org/wiki/Changes/switch_distribution_default_MariaDB_from_10.11_to_11.8


author: Nick Clifton <nickc@redhat.com> - 13.08-1
changelog:
  - Rebase sources and rebuild against the latest version of gcc.  (#2445165)
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)


author: Nick Clifton <nickc@redhat.com> - 13.13-1
changelog:
  - Annocheck: Do not complain about Rust binaries that do not support branch protection.
  - Annocheck: Skip the dynamic-tags test if a GNU Property note is present.
  - Annocheck: Look for compromising characters in pathnames.
  - Require C++17 for building.


author: Maxwell G <maxwell@gtmx.me> - 2.2.1-1
changelog:
  - Update to 2.2.1. Fixes rhbz#2479556.
  - Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.5
    - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.6-1
changelog:
  - Update to version 1.14.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.6
    - Fix CA certificates iteration in ipaclient role


author: Thomas Woerner <twoerner@redhat.com> - 1.14.7-1
changelog:
  - Update to version 1.14.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.7
    - ipaclient: Second hotfix for dns_over_tls


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.15.0
    - DNS over TLS support for ipaserver, ipareplica and ipaclient deployment
      roles
    - ipaidrange: Enforce requirement of baserid and secondarybaserid for ID
      ranges
    - Fix ipaserver and ipareplica deployment roles for use in Mitogen


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.15.0
    - ipaclient: client_dns has new statestore arg with IPA change e6445b8


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    - Add support for passkey management
    - Add support for sysaccount management
    - ipadnsrecord: Allow to set any IP address if create_reverse is false
    - Add support for ansible-core 2.19


author: Thomas Woerner <twoerner@redhat.com> - 1.17.0-1
changelog:
  - Update to version 1.17.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.17.0
    - New ipauser query state
    - New ipagroup query state


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.5.3-4
changelog:
  - moved to jdk25, patched ivy to use pack200 from org.apache.commons.compress
  - spec cleanup and modernization


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 0.12.2-1
changelog:
  - feat: update to 0.12.2
  - Fixes rhbz#2485689
  - Fixes rhbz#2503775
  - Fixes rhbz#2433869
  - Fixes rhbz#2383223
  - Fixes rhbz#2303868


author: Janne Grunau <janne-fdr@jannau.net> - 4.0-1
changelog:
  - Bump to asahi-audio-4.0; Fixes: RHBZ#2488880
  - Add support for M3 series machines
  - Tweak bankstown parameters on various machines
  - Updated FIRs for J314


author: Janne Grunau <janne-fdr@jannau.net> - 4.1-1
changelog:
  - Bump to asahi-audio-4.1; Fixes: RHBZ#2512014
  - M3* Microphone support
  - Fix broken mic node linking
  - Fix quiet mics with workaround


author: Richard W.M. Jones <rjones@redhat.com> - 18.12.1-1.10
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Sébastien Le Roux <sebastien.leroux@ipcms.unistra.fr> - 1.1.17-1
changelog:
  - Bug corrections and improvements (see: https://github.com/Slookeur/atomes-GNU/releases/tag/v1.1.17)


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.6.0-1
changelog:
  - rebase to v2.6.0 to fix the following CVEs:
    - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (rhbz#2494172)


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - Move to fork of Augeas which contains a small number of PRs:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.5
changelog:
  - Rebase our branch on top of Augeas
  - Use patches to make it clearer what we are adding on top of upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Soft fork Augeas, see
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/J7SM6NLIMPU7J4LIRBDPTPWVXOKZWWEH/
  - Add more patches from pull requests that affect Fedora and RHEL


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.10
changelog:
  - Fix parsing /etc/crypttab with link-volume-key (RHBZ#2452937)
    https://github.com/hercules-team/augeas/pull/880
  - Fix miscellaneous GCC 16 errors
    https://github.com/hercules-team/augeas/pull/881


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Björn Persson <Bjorn@Rombobjörn.se> - 2:24.0.0-3
changelog:
  - Fixed to use /dev/urandom instead of a non-cryptographic PRNG.
    Resolves: CVE-2024-41708 (RHBZ#2314766)


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:26.0.0-1
changelog:
  - Updated to v26.0.0.
  - This version adds a time limit to mitigate CVE-2025-52494.
    Resolves: RHBZ#2402593


author: Neal Gompa <ngompa@fedoraproject.org> - 1.37.2-1
changelog:
  - Update to version 1.37.2
  - Resolves: rhbz#2447761
  - Backport fixes for various altarch build failures


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260306-1.eb3ee43
changelog:
  - Update to latest firmware
  - Split out RPi5 bits to a new sub-package
  - Update sub package license details
  - Initial No RTC service for no RTC systems


author: Dalibor Pospisil <dapospis@redhat.com> - 1.31.4-1
changelog:
  - fixed getting base arch on Fedora and c10s
  - rlReport support SKIP result, by chuhu
  - fixed rlIsRHELLike on systems without /etc/os-release, e.g. RHEL-6
  - some minor updates


author: Dalibor Pospisil <dapospis@redhat.com> - 1.32
changelog:
  - introduction of the new way to foist the os-relase and thus present
    different system to the tests, including the version, by KwisatzHaderach


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.50-2
changelog:
  - Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)
  - Key Record using PRIVATEDNS algorithm may lead to exit (CVE-2026-10822)
  - Record ordering based unexpected exit with CNAME or DNAME (CVE-2026-12617)
  - Potential memory usage beyond configured limits (CVE-2026-11622)
  - Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)
  - Incorrect acceptance of NSEC3 records (CVE-2026-10723)
  - Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)
  - DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)


author: Simone Caronni <negativo17@gmail.com> - 0.1-1
changelog:
  - Update to 0.1 for https://fedoraproject.org/wiki/Releases/42/ChangeSet#Unify_/usr/bin_and_/usr/sbin


author: Carl George <carlwgeorge@gmail.com> - 0.15.2-1
changelog:
  - Update to version 0.15.2 rhbz#2487427
  - Add nautilus extension subpackage
  - Fix bug with new tabs losing working directory


author: Paul Howarth <paul@city-fan.org> - 2.2.18-1
changelog:
  - Update to 2.2.18 (rhbz#2407559)
    - Much better CSS language support
    - The color editor now also supports hsl() and rgb() style colors
    - Show colors by just hovering the mouse over a color code
    - Reinstate feature to dynamically change a shortcut key by hovering the
      mouse over a menu item and pressing a new shortcut key again; this feature
      was present in all gtk2 applications and has not been working for bluefish
      gtk3 builds until now
    - Remove the infobrowser from the build since it no longer compiles with new
      libxml versions; this plugin was already deprecated and disabled by default
      for years


author: Paul Howarth <paul@city-fan.org> - 2.2.19-1
changelog:
  - Update to 2.2.19 (rhbz#2416526)
    - Fix a regression in 2.2.18 that could cause a crash when right clicking in
      a document of type Text
    - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
      main menu is now also working in the snippets menu


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0 (rhbz#2435810)
    - Bluefish 2.4.0 has some new features and many small improvements; it is no
      longer  a 2.2 release because backwards compatibility with the 2.0 series
      of Bluefish has been removed
    - If you upgrade from 2.0 straight to 2.4, your config files and project
      files are no longer 100% correctly loaded
    - Starting from 2.4, Bluefish will place config files no longer in ~/.bluefish
      - On Linux it will be ~/.config and ~/.local/
      - On Windows it will be LocalAppData and RoamingAppData
      - On OSX it will be ~/Library/Application Support
    - The biggest new feature, still experimental, is that you can edit two
      documents side-by-side
    - You can change opening and ending tags in XML or HTML simultaneously if you
      hit [ctrl][t]
    - You can more easily save the current contents to a template
    - For new users, and also active in new projects, is a UI selection dialog,
      where you can choose between a UI optimised for web development,
      programming or just have everything enabled or disabled; this will help
      new Bluefish users to customize Bluefish in an easier way
    - There are a few fixes as well:
      - Selecting lines by dragging in the margin works more reliably
      - Paste special works more reliably
      - Line comments in Python are better detected, which is visible in the
        syntax highlighting
      - The toggle comment function is improved
      - The Windows build has better error messages when starting external
        commands fails


author: Paul Howarth <paul@city-fan.org> - 2.4.1-1
changelog:
  - Update to 2.4.1
    - Bluefish 2.4.1 is a minor maintenance release with a few notable changes
    - The experimental "side by side" feature that was introduced in 2.4.0 is no
      longer experimental and is fully stable now
    - A new feature is that Bluefish will automatically adjust the text colours
      for people that use a dark desktop theme
    - Translations for Ελληνικά (Greek) and தமிழ் (Tamiḻ) have been completely
      renewed
    - A critical bug and a regression in the split view function has been fixed
    - The windows build has some minor improvements
    - Several translations are updated


author: Paul Howarth <paul@city-fan.org> - 2.4.2-1
changelog:
  - Update to 2.4.2 (rhbz#2501999)
    - Bluefish 2.4.2 has a few new features and a few fixes
    - The most visible change is that Bluefish detects icon themes, and has
      built-in icon themes for "Breeze" and "Breeze-dark"; this is a big
      improvement for the visual integration of Bluefish on a KDE desktop
    - The most important fix is for a segfault that could occur if a filename on
      disk has a specific broken UTF-8 encoding
    - Some small improvements are reduced memory usage when working with 100+
      files simultaneously, some translation improvements, and the <meta>
      author field is now configurable


author: Bastien Nocera <bnocera@redhat.com> - 5.86-4
changelog:
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Update audio output patch to be upstream version
  - Fix "bluetoothctl list" empty output (Closes: #2440346)


author: Bryn M. Reeves <bmr@redhat.com> - 1.6.6-1
changelog:
  - tests: drop remaining Python2 compat handling
  - boom.config: drop Python2 compat handling for ConfigParser
  - dist: update example boom.conf
  - boom: use correct option names in BoomConfig.__str__()
  - boom: use write_boom_config() in boom.command.create_config()
  - config: add missing [cache] section to boom.config.__make_config()
  - config: add missing [cache] section handling to boom.config._sync_config()
  - config: treat {boom,boot}_root and {boom,boot}_path as synonyms
  - dist: enable check in boom-boot.spec
  - dist: replace license classifier with SPDX expressions
  - boom: replace __make_map_key() function with dictionary comprehension
  - dist: clean up copyright statements and convert to SPDX license headers
  - dist: update GPLv2 text in COPYING
  - boom: use lazy printf formatting when logging
  - boom: fix report argument formatting
  - tests: drop separate coverage runs and split out reporting step
  - tests: switch Fedora tests to fedora:latest
  - tests: bracket test cases with log messages
  - tests: fix duplicate log handlers in test suite
  - report: strip trailing whitespace from report output
  - legacy: use 'is' instead of explicit type comparison
  - boom: clean up new OsProfile if setting uname_pattern fails
  - boom: add CentOS Stream to uname heuristics table
  - boom: fix license headers across tree
  - dist: update spec file changelog and release
  - dist: drop unused systemd-rpm-macros BuildRequires
  - dist: fix Source URL and autosetup invocation


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 3.9.0-6
changelog:
  - Fix security vulnerabilities
    CVE-2026-32877,CVE-2026-32883,CVE-2026-32884,CVE-2026-34580,CVE-2026-
    34582


author: Jose Fernandez <me@jrfernandez.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
  - Update to upstream version 0.7.1
  - Drop patches for dependency version relaxation (no longer needed with new
    upstream)
  - Fixes CVE-2025-58160: fixes RHBZ#2391984, fixes RHBZ#2392018


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.0-3
changelog:
  - Update circular-buffer dependency to version 2
  - Update License field based on a current build in Rawhide


author: Tom Callaway <spot@fedoraproject.org> - 1.34.7-1
changelog:
  - update to 1.34.7
  - fixes CVE-2026-33630 (GHSA-6wfj-rwm7-3542) and GHSA-pjmc-gx33-gc76 and GHSA-jv8r-gqr9-68wj


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-6
changelog:
  - Change: Dropping of cert.pem file (Resolves: rhbz#2360110)
    https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Remove the following symlinks:
  -    # /etc/pki/tls/cert.pem
  -    # /etc/pki/tls/certs/ca-certificates.crt
  -    # /etc/pki/tls/certs/ca-bundle.trust.crt
  -    # /etc/pki/tls/certs/ca-bundle.crt
  -    # /etc/ssl/cert.pem
  -    # /etc/ssl/certs/ca-certificates.crt
  -    # /etc/ssl/certs/ca-bundle.trust.crt
  -    # /etc/ssl/certs/ca-bundle.crt
  - Directory /etc/pki/ca-trust/extracted/openssl is being deprecated,
    it is removed upon updating unless there are files present inside it.


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-8
changelog:
  - update-ca-trust: Added a temporary, compatibility option `--rhbz2387674` to
    the `extract` command. This flag restores legacy certificate
    symlinks (e.g., `/etc/ssl/cert.pem`) to address issues with older software
    that has not yet adapted to their removal. This essentially provides a
    temporary way to revert the "Dropping of cert.pem file".


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.304-2
changelog:
  - Update to CKBI 2.80_v9.0.304 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2025.2.80_v9.0.304-7
changelog:
  - Restore /etc/ssl/certs legacy structure and OpenSSL trusted bundles.
    This brings back certificate bundles in /etc/ssl/certs as they were before
    the "Dropping of cert.pem file" change, ensuring compatibility with software
    expecting the Debian-style file structure.


author: Krenželok František <fkrenzel@redhat.com> - 2026.2.90_v9.0.317-1
changelog:
  - Update to CKBI 2.90_v9.0.317 from NSS 3.126
    Removing:
    - XRamp Global CA Root
    - ePKI Root Certification Authority
    - certSIGN ROOT CA
    - Explicitly Distrust DigiNotar Root CA
    - CommScope Public Trust ECC Root-01
    - CommScope Public Trust ECC Root-02
    - CommScope Public Trust RSA Root-01
    - CommScope Public Trust RSA Root-02
    - FIRMAPROFESIONAL CA ROOT-A WEB
    - SecureSign Root CA12
    
    Adding:
    - OISTE Client Root ECC G1
    - OISTE Client Root RSA G1
    - OISTE Server Root ECC G1
    - OISTE Server Root RSA G1
    - e-Szigno TLS Root CA 2023
    - SecureSign Root CA16
    - SECOM TLS RSA Root CA 2024
    - SECOM TLS ECC Root CA 2024
    - SECOM SMIME RSA Root CA 2024
    - Telia EC Email Root CA v3
    - Telia EC TLS Root CA v3
    - Telia RSA Email Root CA v3
    - Telia RSA TLS Root CA v3
    - certSIGN
    - Chunghwa Telecom Co., Ltd.
    - XRamp Global Certification Authority


author: Carl George <carlwgeorge@gmail.com> - 2.10.2-9
changelog:
  - Port to new golang packaging guidelines
  - Backport upstream fix for CVE-2026-27585
  - Backport upstream fix for CVE-2026-27586
  - Backport upstream fix for CVE-2026-27587
  - Backport upstream fix for CVE-2026-27588
  - Backport upstream fix for CVE-2026-27589
  - Backport upstream fix for CVE-2026-27590
  - Backport upstream fix for CVE-2026-30851
  - Backport upstream fix for CVE-2026-30852
  - Update vendored github.com/quic-go/quic-go to v0.57.0 for CVE-2025-64702
  - Update vendored golang.org/x/crypto to v0.52.0 for CVE-2025-47913,
    CVE-2026-39828, CVE-2026-39829, and CVE-2026-39830
  - Update vendored github.com/smallstep/certificates to v0.30.0 for
    CVE-2025-44005 and CVE-2026-40097
  - Update vendored github.com/go-chi/chi/v5 to v5.2.5 for CVE-2025-69725
  - Update vendored github.com/yuin/goldmark/renderer/html to v1.7.17 for
    CVE-2026-5160


author: Jerry James <loganjerry@gmail.com> - 1:2.2.1-4
changelog:
  - Add patch from the cryptominisat project
  - Build with cmake instead of autotools
  - Both changes needed to update cryptominisat to latest version


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.71-1
changelog:
  - Update to 146.0.7680.71
  - * CVE-2026-3913: Heap buffer overflow in WebML
  - * CVE-2026-3914: Integer overflow in WebML
  - * CVE-2026-3915: Heap buffer overflow in WebML
  - * CVE-2026-3916: Out of bounds read in Web Speech
  - * CVE-2026-3917: Use after free in Agents
  - * CVE-2026-3918: Use after free in WebMCP
  - * CVE-2026-3919: Use after free in Extensions
  - * CVE-2026-3920: Out of bounds memory access in WebML
  - * CVE-2026-3921: Use after free in TextEncoding
  - * CVE-2026-3922: Use after free in MediaStream
  - * CVE-2026-3923: Use after free in WebMIDI
  - * CVE-2026-3924: Use after free in WindowDialog
  - * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  - * CVE-2026-3926: Out of bounds read in V8
  - * CVE-2026-3927: Incorrect security UI in PictureInPicture
  - * CVE-2026-3928: Insufficient policy enforcement in Extensions
  - * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  - * CVE-2026-3930: Unsafe navigation in Navigation
  - * CVE-2026-3931: Heap buffer overflow in Skia
  - * CVE-2026-3932: Insufficient policy enforcement in PDF
  - * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  - * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  - * CVE-2026-3936: Use after free in WebView
  - * CVE-2026-3937: Incorrect security UI in Downloads
  - * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  - * CVE-2026-3939: Insufficient policy enforcement in PDF
  - * CVE-2026-3940: Insufficient policy enforcement in DevTools
  - * CVE-2026-3941: Insufficient policy enforcement in DevTools
  - * CVE-2026-3942: Incorrect security UI in PictureInPicture
  - Fix build errors
  - Refresh patches for new upstream changes
  - Remove patches merged by upstream
  - Hoshino Lina: Update to cef-146.0.6+g68649e2 (rhbz#2450085)


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.75-1
changelog:
  - Update to 146.0.7680.75
  - * CVE-2026-3909: Out of bounds write in Skia
  - * CVE-2026-3910: Inappropriate implementation in V8


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
  - * CVE-2026-4439: Out of bounds memory access in WebGL
  - * CVE-2026-4440: Out of bounds read and write in WebGL
  - * CVE-2026-4441: Use after free in Base
  - * CVE-2026-4442: Heap buffer overflow in CSS
  - * CVE-2026-4443: Heap buffer overflow in WebAudio
  - * CVE-2026-4444: Stack buffer overflow in WebRTC
  - * CVE-2026-4445: Use after free in WebRTC
  - * CVE-2026-4446: Use after free in WebRTC
  - * CVE-2026-4447: Inappropriate implementation in V8
  - * CVE-2026-4448: Heap buffer overflow in ANGLE
  - * CVE-2026-4449: Use after free in Blink
  - * CVE-2026-4450: Out of bounds write in V8
  - * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  - * CVE-2026-4452: Integer overflow in ANGLE
  - * CVE-2026-4453: Integer overflow in Dawn
  - * CVE-2026-4454: Use after free in Network
  - * CVE-2026-4455: Heap buffer overflow in PDFium
  - * CVE-2026-4456: Use after free in Digital Credentials API
  - * CVE-2026-4457: Type Confusion in V8
  - * CVE-2026-4458: Use after free in Extensions
  - * CVE-2026-4459: Out of bounds read and write in WebAudio
  - * CVE-2026-4460: Out of bounds read in Skia
  - * CVE-2026-4461: Inappropriate implementation in V8
  - * CVE-2026-4462: Out of bounds read in Blink
  - * CVE-2026-4463: Heap buffer overflow in WebRTC
  - * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
  - * High CVE-2026-4673: Heap buffer overflow in WebAudio
  - * High CVE-2026-4674: Out of bounds read in CSS
  - * High CVE-2026-4675: Heap buffer overflow in WebGL
  - * High CVE-2026-4676: Use after free in Dawn
  - * High CVE-2026-4677: Out of bounds read in WebAudio
  - * High CVE-2026-4678: Use after free in WebGPU
  - * High CVE-2026-4679: Integer overflow in Fonts
  - * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 146.0.9^chromium146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
  - * High CVE-2026-5273: Use after free in CSS
  - * High CVE-2026-5272: Heap buffer overflow in GPU
  - * High CVE-2026-5274: Integer overflow in Codecs
  - * High CVE-2026-5275: Heap buffer overflow in ANGLE
  - * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
  - * High CVE-2026-5277: Integer overflow in ANGLE
  - * High CVE-2026-5278: Use after free in Web MIDI
  - * High CVE-2026-5279: Object corruption in V8
  - * High CVE-2026-5280: Use after free in WebCodecs
  - * High CVE-2026-5281: Use after free in Dawn
  - * High CVE-2026-5282: Out of bounds read in WebCodecs
  - * High CVE-2026-5283: Inappropriate implementation in ANGLE
  - * High CVE-2026-5284: Use after free in Dawn
  - * High CVE-2026-5285: Use after free in WebGL
  - * High CVE-2026-5286: Use after free in Dawn
  - * High CVE-2026-5287: Use after free in PDF
  - * High CVE-2026-5288: Use after free in WebView
  - * High CVE-2026-5289: Use after free in Navigation
  - * High CVE-2026-5290: Use after free in Compositing
  - * Medium CVE-2026-5291: Inappropriate implementation in WebGL
  - * Medium CVE-2026-5292: Out of bounds read in WebCodecs
  - removed ppc64le-build-error patch that is merged in upstream


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.7.0-20
changelog:
  - Drop serverca in the koji config for https://fedoraproject.org/wiki/Changes/droppingOfCertPemFile
    Fixes: RHBZ#2358273, RHBZ#2483718
  - Add rpmautospec dependency
    Fixes: RHBZ#2414574


author: Troy Dawson <tdawson@redhat.com> - 0.10.1-1
changelog:
  - Determining if package is synced solely on distrobaker config (sgajdosi)
  - Use the authenticated session for PP API (sgallagh)


author: Troy Dawson <tdawson@redhat.com> - 0.10.2-1
changelog:
  - Add support for cXs-aie-partner branches : CS-3294 (michal)
  - Determine_rhel_state: Add check for locked tags: CS-2997 (sgallagh)
  - Fix use-before-assignment (sgallagh)


author: Troy Dawson <tdawson@redhat.com> - 0.11.0-1
changelog:
  - Update the CentOS SIG urls to gitlab (dgilmore)
  - Fix centos version calculation for sig branches (olebaran)
  - Fix various centpkg-sig bugs (dgilmore)
  - Fix --user-config option (dward)


author: Than Ngo <than@redhat.com> - 150.0.7871.128-1
changelog:
  - Update to 150.0.7871.128
    * CVE-2026-15899: Use after free in CameraCapture
    * CVE-2026-15900: Use after free in GPU
    * CVE-2026-15901: Use after free in Network
    * CVE-2026-15902: Use after free in Cast
    * CVE-2026-15903: Out of bounds read and write in V8
    * CVE-2026-15904: Use after free in Ozone
    * CVE-2026-15905: Use after free in Aura
  - Fix rhbz#2501811, Drop AI policy which breaks DoH settings
  - Improve auto darkmode


author: Than Ngo <than@redhat.com> - 150.0.7871.181-1
changelog:
  - Update to 150.0.7871.181
    * CVE-2026-16413: Out of bounds write in ANGLE
    * CVE-2026-16414: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-16415: Insufficient validation of untrusted input in Extensions
    * CVE-2026-16416: Integer overflow in Chromecast
    * CVE-2026-16417: Uninitialized Use in Skia
    * CVE-2026-16418: Stack buffer overflow in V8
    * CVE-2026-16419: Out of bounds read and write in ANGLE
    * CVE-2026-16420: Type Confusion in WebAudio
    * CVE-2026-16421: Inappropriate implementation in WebAudio
    * CVE-2026-16422: Insufficient validation of untrusted input in Certificate
    * CVE-2026-16423: Use after free in UI
    * CVE-2026-16424: Use after free in GPU


author: Than Ngo <than@redhat.com> - 150.0.7871.186-1
changelog:
  - Update to 150.0.7871.186
    * CVE-2026-16807: Out of bounds write in Codecs
    * CVE-2026-16806: Use after free in WebMCP
    * CVE-2026-16805: Use after free in Blink
    * CVE-2026-16804: Use after free in Input


author: Than Ngo <than@redhat.com> - 151.0.7922.71-1
changelog:
  - Update to 151.0.7922.71
    * CVE-2026-17650: Use after free in Compositing
    * CVE-2026-17651: Insufficient validation of untrusted input in Dawn
    * CVE-2026-17652: Use after free in Views
    * CVE-2026-17653: Use after free in Skia
    * CVE-2026-17654: Race in Updater
    * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17656: Use after free in Ozone
    * CVE-2026-17657: Use after free in Navigation
    * CVE-2026-17658: Use after free in V8
    * CVE-2026-17659: Inappropriate implementation in SiteIsolation
    * CVE-2026-17660: Insufficient validation of untrusted input in Network
    * CVE-2026-17661: Use after free in Loader
    * CVE-2026-17662: Insufficient policy enforcement in Prefetch
    * CVE-2026-17663: Insufficient validation of untrusted input in GPU
    * CVE-2026-17664: Insufficient validation of untrusted input in Loader
    * CVE-2026-17665: Use after free in V8
    * CVE-2026-17666: Cryptographic Flaw in Enterprise
    * CVE-2026-17667: Uninitialized Use in ANGLE
    * CVE-2026-17668: Uninitialized Use in ANGLE
    * CVE-2026-17669: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17670: Use after free in Views
    * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast
    * CVE-2026-17673: Integer overflow in QUIC
    * CVE-2026-17674: Inappropriate implementation in HTML
    * CVE-2026-17675: Out of bounds write in ANGLE
    * CVE-2026-17676: Inappropriate implementation in ANGLE
    * CVE-2026-17677: Inappropriate implementation in ANGLE
    * CVE-2026-17678: Out of bounds read in ANGLE
    * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview
    * CVE-2026-17680: Heap buffer overflow in Color
    * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication
    * CVE-2026-17682: Integer overflow in ANGLE
    * CVE-2026-17683: Inappropriate implementation in ANGLE
    * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17685: Use after free in Autofill
    * CVE-2026-17686: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17687: Type Confusion in ANGLE
    * CVE-2026-17688: Use after free in Input
    * CVE-2026-17689: Uninitialized Use in ANGLE
    * CVE-2026-17690: Insufficient validation of untrusted input in PDF
    * CVE-2026-17691: Out of bounds write in ANGLE
    * CVE-2026-17692: Use after free in DataTransfer
    * CVE-2026-17693: Inappropriate implementation in FileSystem
    * CVE-2026-17694: Use after free in DOM
    * CVE-2026-17695: Inappropriate implementation in ANGLE
    * CVE-2026-17696: Side-channel information leakage in Media
    * CVE-2026-17697: Type Confusion in ANGLE
    * CVE-2026-17698: Insufficient validation of untrusted input in UI
    * CVE-2026-17699: Use after free in Views
    * CVE-2026-17700: Insufficient validation of untrusted input in Actor
    * CVE-2026-17701: Out of bounds read in ANGLE
    * CVE-2026-17702: Inappropriate implementation in Skia
    * CVE-2026-17703: Policy bypass in Chrome for iOS
    * CVE-2026-17704: Use after free in ANGLE
    * CVE-2026-17705: Integer overflow in libxml
    * CVE-2026-17706: Insufficient validation of untrusted input in Media
    * CVE-2026-17707: Uninitialized Use in Media
    * CVE-2026-17708: Use after free in Audio
    * CVE-2026-17709: Race in Downloads
    * CVE-2026-17710: Inappropriate implementation in MHTML
    * CVE-2026-17711: Race in Downloads
    * CVE-2026-17712: Race in Skia
    * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility
    * CVE-2026-17714: Uninitialized Use in ANGLE
    * CVE-2026-17715: Inappropriate implementation in Passwords
    * CVE-2026-17716: Use after free in Updater
    * CVE-2026-17717: Integer overflow in ANGLE
    * CVE-2026-17718: Use after free in ANGLE
    * CVE-2026-17719: Use after free in Input
    * CVE-2026-17720: Insufficient policy enforcement in Passwords
    * CVE-2026-17721: Out of bounds write in ANGLE
    * CVE-2026-17722: Object lifecycle issue in WebView
    * CVE-2026-17723: Use after free in Media
    * CVE-2026-17724: Race in Chrome for iOS
    * CVE-2026-17725: Type Confusion in V8
    * CVE-2026-17726: Integer overflow in WebGL
    * CVE-2026-17727: Out of bounds write in WebGL
    * CVE-2026-17728: Inappropriate implementation in Extensions
    * CVE-2026-17758: Heap buffer overflow in Dawn
    * CVE-2026-17732: Inappropriate implementation in SVG
    * CVE-2026-17729: Use after free in V8
    * CVE-2026-17730: Side-channel information leakage in Autofill
    * CVE-2026-17731: Inappropriate implementation in Autofill
    * CVE-2026-17733: Inappropriate implementation in QUIC
    * CVE-2026-17734: Inappropriate implementation in Autofill
    * CVE-2026-17735: Insufficient validation of untrusted input in BFCache
    * CVE-2026-17736: Insufficient validation of untrusted input in WebView
    * CVE-2026-17737: Use after free in Bluetooth
    * CVE-2026-17738: Insufficient validation of untrusted input in Payments
    * CVE-2026-17739: Insufficient policy enforcement in Extensions
    * CVE-2026-17740: Uninitialized Use in ANGLE
    * CVE-2026-17741: Insufficient validation of untrusted input in WebView
    * CVE-2026-17742: Insufficient policy enforcement in Payments
    * CVE-2026-17743: Insufficient policy enforcement in ControlledFrame
    * CVE-2026-17744: Inappropriate implementation in File Input
    * CVE-2026-17745: Out of bounds read in Skia
    * CVE-2026-17746: Use after free in GPU
    * CVE-2026-17747: Insufficient validation of untrusted input in Payments
    * CVE-2026-17748: Inappropriate implementation in Extensions
    * CVE-2026-17749: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17750: Use after free in ANGLE
    * CVE-2026-17751: Inappropriate implementation in AdFilter
    * CVE-2026-17752: Use after free in Views
    * CVE-2026-17753: Inappropriate implementation in Autofill
    * CVE-2026-17754: Inappropriate implementation in Blink
    * CVE-2026-17755: Incorrect security UI in Extensions
    * CVE-2026-17756: Insufficient policy enforcement in Presentation
    * CVE-2026-17757: Uninitialized Use in Skia
    * CVE-2026-17759: Uninitialized Use in Codecs
    * CVE-2026-17760: Side-channel information leakage in NoStatePrefetch
    * CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17762: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17763: Inappropriate implementation in GPU
    * CVE-2026-17764: Inappropriate implementation in FedCM
    * CVE-2026-17765: Inappropriate implementation in WebProtect
    * CVE-2026-17766: Insufficient validation of untrusted input in Clipboard
    * CVE-2026-17767: Insufficient validation of untrusted input in WebView
    * CVE-2026-17768: Insufficient validation of untrusted input in WebSockets
    * CVE-2026-17769: Insufficient validation of untrusted input in Cast
    * CVE-2026-17770: Out of bounds read in Media
    * CVE-2026-17771: Uninitialized Use in Skia
    * CVE-2026-17772: Out of bounds read in WebGL
    * CVE-2026-17773: Insufficient validation of untrusted input in Cast
    * CVE-2026-17774: Insufficient validation of untrusted input in Variations
    * CVE-2026-17775: Inappropriate implementation in PresentationAPI
    * CVE-2026-17776: Policy bypass in Receiver
    * CVE-2026-17777: Inappropriate implementation in Autofill
    * CVE-2026-17778: Use after free in Extensions
    * CVE-2026-17779: Inappropriate implementation in Site Isolation
    * CVE-2026-17780: Inappropriate implementation in Isolated Web Apps
    * CVE-2026-17781: Inappropriate implementation in Extensions
    * CVE-2026-17782: Incorrect security UI in Chrome for iOS
    * CVE-2026-17783: Inappropriate implementation in Loader
    * CVE-2026-17784: Use after free in Audio
    * CVE-2026-17785: Uninitialized Use in ANGLE
    * CVE-2026-17786: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17787: Inappropriate implementation in DevTools
    * CVE-2026-17788: Inappropriate implementation in Blink
    * CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17790: Uninitialized Use in ANGLE
    * CVE-2026-17791: Insufficient validation of untrusted input in Payments
    * CVE-2026-17792: Inappropriate implementation in Credential Management
    * CVE-2026-17793: Inappropriate implementation in Messages
    * CVE-2026-17794: Insufficient validation of untrusted input in Mobile
    * CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia
    * CVE-2026-17796: Side-channel information leakage in WebXR
    * CVE-2026-17797: Inappropriate implementation in CSS
    * CVE-2026-17798: Inappropriate implementation in Cast
    * CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing
    * CVE-2026-17800: Side-channel information leakage in MediaRecording
    * CVE-2026-17801: Out of bounds memory access in ANGLE
    * CVE-2026-17802: Side-channel information leakage in GPU
    * CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive
    * CVE-2026-17804: Use after free in Media
    * CVE-2026-17805: Insufficient policy enforcement in Glic
    * CVE-2026-17806: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17807: Use after free in V8
    * CVE-2026-17808: Uninitialized Use in WebGL
    * CVE-2026-17809: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17810: Uninitialized Use in Dawn
    * CVE-2026-17811: Use after free in ANGLE
    * CVE-2026-17812: Inappropriate implementation in DigitalCredentials
    * CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS
    * CVE-2026-17815: Insufficient policy enforcement in GuestView
    * CVE-2026-17816: Inappropriate implementation in Speech
    * CVE-2026-17817: Inappropriate implementation in ReportingAndNEL
    * CVE-2026-17818: Inappropriate implementation in Network
    * CVE-2026-17819: Inappropriate implementation in WebAppInstalls
    * CVE-2026-17820: Insufficient policy enforcement in Autofill
    * CVE-2026-17821: Insufficient policy enforcement in Extensions
    * CVE-2026-17822: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17823: Insufficient policy enforcement in WebXR
    * CVE-2026-17824: Insufficient policy enforcement in ServiceWorker
    * CVE-2026-17825: Insufficient policy enforcement in Passwords
    * CVE-2026-17826: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17827: Inappropriate implementation in CSS
    * CVE-2026-17828: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17829: Insufficient policy enforcement in Passwords
    * CVE-2026-17830: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17831: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17832: Use after free in ANGLE
    * CVE-2026-17833: Inappropriate implementation in Passwords
    * CVE-2026-17834: Inappropriate implementation in Passwords
    * CVE-2026-17835: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17836: Use after free in V8
    * CVE-2026-17837: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17838: Incorrect security UI in Chrome for iOS
    * CVE-2026-17839: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17840: Incorrect security UI in Passwords
    * CVE-2026-17841: Race in Chrome for iOS
    * CVE-2026-17842: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17843: Inappropriate implementation in CSS
    * CVE-2026-17844: Insufficient validation of untrusted input in Cast
    * CVE-2026-17845: Inappropriate implementation in CSS
    * CVE-2026-17846: Inappropriate implementation in Media
    * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE
    * CVE-2026-17848: Insufficient validation of untrusted input in Codecs
    * CVE-2026-17849: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17850: Inappropriate implementation in Permissions
    * CVE-2026-17851: Side-channel information leakage in Autofill
    * CVE-2026-17852: Inappropriate implementation in Media Router
    * CVE-2026-17853: Inappropriate implementation in DevTools
    * CVE-2026-17854: Insufficient policy enforcement in WebMCP
    * CVE-2026-17855: Race in DevTools
    * CVE-2026-17856: Inappropriate implementation in Network
    * CVE-2026-17857: Inappropriate implementation in Network
    * CVE-2026-17858: Uninitialized Use in WebNN
    * CVE-2026-17859: Side-channel information leakage in Favicons
    * CVE-2026-17860: Insufficient validation of untrusted input in Mobile
    * CVE-2026-17861: Insufficient validation of untrusted input in Updater
    * CVE-2026-17862: Use after free in Tracing
    * CVE-2026-17863: Inappropriate implementation in Browser
    * CVE-2026-17864: Inappropriate implementation in Updater
    * CVE-2026-17865: Inappropriate implementation in Crypto
    * CVE-2026-17866: Type Confusion in Tab
    * CVE-2026-17867: Insufficient validation of untrusted input in Dawn
    * CVE-2026-17868: Insufficient policy enforcement in USB
    * CVE-2026-17869: Out of bounds read in WebXR
    * CVE-2026-17870: Insufficient validation of untrusted input in Cast
    * CVE-2026-17871: Inappropriate implementation in Passwords
    * CVE-2026-17872: Cryptographic Flaw in WebAppInstalls
    * CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-17874: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17875: Use after free in PDFium
    * CVE-2026-17876: Inappropriate implementation in Payments
    * CVE-2026-17877: Inappropriate implementation in Chromoting
    * CVE-2026-17878: Inappropriate implementation in CSS
    * CVE-2026-17879: Inappropriate implementation in Autofill
    * CVE-2026-17880: Inappropriate implementation in Autofill
    * CVE-2026-17881: Use after free in WebXR
    * CVE-2026-17882: Policy bypass in Extensions
    * CVE-2026-17883: Inappropriate implementation in Headless
    * CVE-2026-17884: Object lifecycle issue in WebRTC
    * CVE-2026-17885: Inappropriate implementation in Paint
    * CVE-2026-17886: Use after free in Enterprise
    * CVE-2026-17887: Use after free in TabStrip
    * CVE-2026-17888: Insufficient validation of untrusted input in WebUI
    * CVE-2026-17889: Uninitialized Use in WebXR
    * CVE-2026-17890: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17891: Use after free in ANGLE
    * CVE-2026-17892: Inappropriate implementation in WebXR
    * CVE-2026-17893: Insufficient validation of untrusted input in Updater
    * CVE-2026-17894: Use after free in Views
    * CVE-2026-17895: Inappropriate implementation in DataTransfer
    * CVE-2026-17896: Use after free in DevTools
    * CVE-2026-17897: Inappropriate implementation in ORB
    * CVE-2026-17898: Use after free in DevTools
    * CVE-2026-17899: Insufficient policy enforcement in DevTools
    * CVE-2026-17900: Inappropriate implementation in Enterprise
    * CVE-2026-17901: Inappropriate implementation in Sharing
    * CVE-2026-17902: Inappropriate implementation in Editing
    * CVE-2026-17903: Insufficient policy enforcement in Chromecast
    * CVE-2026-17904: Insufficient policy enforcement in NFC
    * CVE-2026-17905: Inappropriate implementation in SurfaceCapture
    * CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth
    * CVE-2026-17907: Side-channel information leakage in Network
    * CVE-2026-17908: Insufficient validation of untrusted input in Printing
    * CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps
    * CVE-2026-17910: Insufficient policy enforcement in NFC
    * CVE-2026-17911: Insufficient policy enforcement in SVG
    * CVE-2026-17912: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17913: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17914: Side-channel information leakage in Skia
    * CVE-2026-17915: Inappropriate implementation in WebView
    * CVE-2026-17916: Insufficient policy enforcement in Settings
    * CVE-2026-17917: Policy bypass in Chrome for iOS
    * CVE-2026-17918: Use after free in Sync
    * CVE-2026-17919: Insufficient policy enforcement in Enterprise
    * CVE-2026-17920: Use after free in V8
    * CVE-2026-17921: Insufficient validation of untrusted input in Navigation
    * CVE-2026-17922: Inappropriate implementation in Enterprise
    * CVE-2026-17923: Policy bypass in Enterprise
    * CVE-2026-17924: Use after free in DNS
    * CVE-2026-17925: Inappropriate implementation in Cast
    * CVE-2026-17926: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17927: Insufficient policy enforcement in DevTools
    * CVE-2026-17928: Inappropriate implementation in DataTransfer
    * CVE-2026-17929: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17930: Insufficient validation of untrusted input in Extensions
    * CVE-2026-17931: Inappropriate implementation in DevTools
    * CVE-2026-17932: Use after free in DataTransfer
    * CVE-2026-17933: Inappropriate implementation in DOMStorage
    * CVE-2026-17934: Insufficient validation of untrusted input in DevTools
    * CVE-2026-17935: Heap buffer overflow in Codecs
    * CVE-2026-17936: Inappropriate implementation in DevTools
    * CVE-2026-17937: Inappropriate implementation in DevTools
    * CVE-2026-17938: Inappropriate implementation in FullScreen
    * CVE-2026-17939: Inappropriate implementation in Passwords
    * CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture
    * CVE-2026-17941: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17942: Side-channel information leakage in SVG
    * CVE-2026-17943: Inappropriate implementation in Parser
    * CVE-2026-17944: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17945: Inappropriate implementation in Navigation
    * CVE-2026-17946: Uninitialized Use in Dawn
    * CVE-2026-17947: Use after free in WebSockets
    * CVE-2026-17948: Type Confusion in V8
    * CVE-2026-17949: Uninitialized Use in GPU
    * CVE-2026-17950: Policy bypass in Safebrowsing
    * CVE-2026-17951: Heap buffer overflow in WebRTC
    * CVE-2026-17952: Inappropriate implementation in V8
    * CVE-2026-17953: Insufficient policy enforcement in WebView
    * CVE-2026-17954: Policy bypass in MHTML
    * CVE-2026-17955: Insufficient validation of untrusted input in Payments
    * CVE-2026-17956: Inappropriate implementation in Scheduling
    * CVE-2026-17957: Inappropriate implementation in CORS
    * CVE-2026-17958: Inappropriate implementation in Views
    * CVE-2026-17959: Inappropriate implementation in Network
    * CVE-2026-17960: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17961: Inappropriate implementation in Session
    * CVE-2026-17962: Inappropriate implementation in Blink
    * CVE-2026-17963: Inappropriate implementation in SVG
    * CVE-2026-17964: Incorrect security UI in UI
    * CVE-2026-17965: Incorrect security UI in Chrome for iOS
    * CVE-2026-17966: Inappropriate implementation in Views
    * CVE-2026-17967: Use after free in Chrome for iOS
    * CVE-2026-17968: Uninitialized Use in WebXR
    * CVE-2026-17969: Inappropriate implementation in Passwords
    * CVE-2026-17970: Insufficient validation of untrusted input in Passwords
    * CVE-2026-17971: Inappropriate implementation in Frame
    * CVE-2026-17972: Inappropriate implementation in Chrome for iOS
    * CVE-2026-17973: Inappropriate implementation in Views
    * CVE-2026-17974: Insufficient policy enforcement in DevTools
    * CVE-2026-17975: Inappropriate implementation in IME
    * CVE-2026-17976: Policy bypass in Extensions
    * CVE-2026-17977: Policy bypass in CSS
    * CVE-2026-17978: Side-channel information leakage in WebCodecs
    * CVE-2026-17979: Race in V8
    * CVE-2026-17980: Inappropriate implementation in UI
    * CVE-2026-17981: Inappropriate implementation in Blink
    * CVE-2026-17982: Insufficient validation of untrusted input in Cast
    * CVE-2026-17983: Incorrect security UI in Global Media Controls
    * CVE-2026-17984: Inappropriate implementation in Browser
    * CVE-2026-17985: Insufficient policy enforcement in Speech
    * CVE-2026-17986: Insufficient policy enforcement in Bluetooth
    * CVE-2026-17987: Insufficient validation of untrusted input in Notifications
    * CVE-2026-17988: Insufficient validation of untrusted input in Navigation
    * CVE-2026-17989: Type Confusion in V8
    * CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn
    * CVE-2026-17991: Insufficient validation of untrusted input in AI
    * CVE-2026-17992: Uninitialized Use in Skia
    * CVE-2026-17993: Race in Updater
    * CVE-2026-17994: Inappropriate implementation in Media
    * CVE-2026-17995: Out of bounds read in Dawn
    * CVE-2026-17996: Inappropriate implementation in Browser
    * CVE-2026-17997: Inappropriate implementation in Passwords
    * CVE-2026-17998: Incorrect security UI in Extensions
    * CVE-2026-17999: Incorrect security UI in PictureInPicture
    * CVE-2026-18000: Insufficient policy enforcement in USB
    * CVE-2026-18001: Inappropriate implementation in WebGL
    * CVE-2026-18002: Insufficient validation of untrusted input in Google Lens
    * CVE-2026-18003: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18004: Insufficient policy enforcement in Speech
    * CVE-2026-18005: Inappropriate implementation in WebXR
    * CVE-2026-18006: Inappropriate implementation in Google Lens
    * CVE-2026-18007: Inappropriate implementation in Input
    * CVE-2026-18008: Inappropriate implementation in Settings
    * CVE-2026-18009: Insufficient validation of untrusted input in Passwords
    * CVE-2026-18010: Inappropriate implementation in Passwords
    * CVE-2026-18011: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18012: Use after free in PDFium
    * CVE-2026-18013: Inappropriate implementation in Chrome for iOS
    * CVE-2026-18014: Insufficient validation of untrusted input in DevTools
    * CVE-2026-18015: Inappropriate implementation in Tint
    * CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS
    * CVE-2026-18017: Use after free in Dawn
    * CVE-2026-18018: Inappropriate implementation in Updater
    * CVE-2026-18019: Side-channel information leakage in Media


author: Than Ngo <than@redhat.com> - 151.0.7922.108-1
changelog:
  - Update to 151.0.7922.108
    * CVE-2026-19137: Use after free in WebGL
    * CVE-2026-19138: Heap buffer overflow in CrashReporting
    * CVE-2026-19139: Race in CredentialProvider
    * CVE-2026-19140: Use after free in GPU
    * CVE-2026-19141: Use after free in Resources
    * CVE-2026-19142: Use after free in Views
    * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
    * CVE-2026-19144: Use after free in HTML
    * CVE-2026-19145: Use after free in Translate
    * CVE-2026-19146: Uninitialized Use in GPU
    * CVE-2026-19147: Use after free in Aura
    * CVE-2026-19148: Out of bounds write in GPU
    * CVE-2026-19149: Use after free in Aura
    * CVE-2026-19150: Inappropriate implementation in V8
    * CVE-2026-19151: Use after free in V8
    * CVE-2026-19152: Inappropriate implementation in Navigation
    * CVE-2026-19153: Insufficient validation of untrusted input in Workers
    * CVE-2026-19154: Use after free in Skia
    * CVE-2026-19155: Use after free in Payments
    * CVE-2026-19156: Heap buffer overflow in Base
    * CVE-2026-19157: Out of bounds write in ANGLE
    * CVE-2026-19158: Use after free in Views
    * CVE-2026-19159: Use after free in Views
    * CVE-2026-19160: Uninitialized Use in Skia
    * CVE-2026-19161: Uninitialized Use in Skia
    * CVE-2026-19162: Out of bounds write in V8
    * CVE-2026-19163: Use after free in Media
    * CVE-2026-19164: Insufficient validation of untrusted input in Codecs
    * CVE-2026-19165: Use after free in Extensions
    * CVE-2026-19166: Use after free in Web Authentication
    * CVE-2026-19167: Integer overflow in GPU
    * CVE-2026-19168: Inappropriate implementation in V8
    * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
    * CVE-2026-19170: Use after free in WebGL
    * CVE-2026-19171: Use after free in Media
    * CVE-2026-19172: Use after free in Views
    * CVE-2026-19173: Out of bounds write in Skia
    * CVE-2026-19174: Integer overflow in V8
    * CVE-2026-19175: Use after free in Payments
    * CVE-2026-19176: Use after free in Skia
    * CVE-2026-19177: Insufficient validation of untrusted input in UI


author: Than Ngo <than@redhat.com> - 151.0.7922.137-1
changelog:
  - Update to 151.0.7922.137
    * CVE-2026-19556: Use after free in V8
    * CVE-2026-19557: Use after free in TabStrip
    * CVE-2026-19558: Use after free in Extensions
    * CVE-2026-19559: Use after free in HTML
    * CVE-2026-19560: Use after free in Blink


author: Than Ngo <than@redhat.com> - 151.0.7922.169-1
changelog:
  - Update to 151.0.7922.169
    * CVE-2026-76034: Buffer overflow in WebGL
    * CVE-2026-76036: Buffer overflow in Dawn
    * CVE-2026-76033: Inappropriate implementation in CORS
    * CVE-2026-76037: Link following in CredentialProvider
    * CVE-2026-76044: Race condition in USB
    * CVE-2026-76039: Incorrect reference resolution in Core
    * CVE-2026-76040: Use after free in Browser
    * CVE-2026-76035: Inappropriate implementation in Media
    * CVE-2026-76042: Use of uninitialized resource in GPU
    * CVE-2026-76046: Buffer overflow in ANGLE
    * CVE-2026-76043: Incorrect calculation in V8
    * CVE-2026-76041: Information leak in Skia
    * CVE-2026-76047: Type confusion in V8
    * CVE-2026-76038: Type confusion in V8
    * CVE-2026-76045: Use after free in WebGL


author: Than Ngo <than@redhat.com> - 151.0.7922.173-1
changelog:
  - Update to 151.0.7922.173
    * CVE-2026-76017: Use after free in Chromoting
    * CVE-2026-76018: Privilege elevation in Import
    * CVE-2026-76019: Incorrect authorization in Workers
    * CVE-2026-76020: Race condition in V8
    * CVE-2026-76021: Use after free in DOM
    * CVE-2026-76022: Buffer overflow in Network
    * CVE-2026-76023: Improper resource control in Linux Toolkit Theming


author: Than Ngo <than@redhat.com> - 152.0.7977.64-1
changelog:
  - Update to 152.0.7977.64 
    * CVE-2026-79282: Use after free in ANGLE
    * CVE-2026-79290: Use after free in Aura
    * CVE-2026-79054: Use after free in Chromecast
    * CVE-2026-79121: Improper input validation in Chromecast
    * CVE-2026-79224: Use after free in Chromecast
    * CVE-2026-79052: Use after free in Aura
    * CVE-2026-79150: Use after free in Views
    * CVE-2026-78935: Use of uninitialized variable in Mobile
    * CVE-2026-79012: Use after free in Safebrowsing
    * CVE-2026-79200: Use after free in Aura
    * CVE-2026-78989: Out of bounds read in ANGLE
    * CVE-2026-79069: Memory corruption in Tint
    * CVE-2026-79175: Type confusion in Accessibility
    * CVE-2026-79218: Incorrect authorization in Sandbox
    * CVE-2026-79195: Use after free in Script
    * CVE-2026-78939: Use after free in Chromecast
    * CVE-2026-79194: Use after free in Chromoting
    * CVE-2026-79247: Use after free in Chromoting
    * CVE-2026-79219: Use after free in Bluetooth
    * CVE-2026-79047: Use after free in Views
    * CVE-2026-79292: Integer overflow in Chromecast
    * CVE-2026-78986: Uninitialized resource in GPU
    * CVE-2026-79039: Use after free in Mobile
    * CVE-2026-78934: Race condition in ReadAloud
    * CVE-2026-79011: UI misrepresentation in Browser
    * CVE-2026-78911: Incorrect authorization in USB
    * CVE-2026-79257: Use after free in Views
    * CVE-2026-79202: Use after free in Chromecast
    * CVE-2026-79212: Missing authorization in Passwords
    * CVE-2026-79183: Use after free in Accessibility
    * CVE-2026-79155: Race condition in FileSystem
    * CVE-2026-79093: Incorrect authorization in Paint
    * CVE-2026-79019: Out of bounds write in ANGLE
    * CVE-2026-79187: Use after free in WebRTC
    * CVE-2026-79288: Improper input validation in Autofill
    * CVE-2026-79130: Buffer overflow in ANGLE
    * CVE-2026-78965: Uninitialized resource in ANGLE
    * CVE-2026-79117: Race condition in WebAppInstalls
    * CVE-2026-79082: Incorrect authorization in Transactions Platform
    * CVE-2026-79111: Improper input validation in Dawn
    * CVE-2026-79072: Improper state validation in Performance
    * CVE-2026-79142: Buffer overflow in ANGLE
    * CVE-2026-78948: Buffer overflow in WebGL
    * CVE-2026-78908: Information leak in Canvas
    * CVE-2026-78895: Information leak in Paint
    * CVE-2026-79043: Out of bounds write in ANGLE
    * CVE-2026-79235: Use after free in WebGL
    * CVE-2026-79232: Use after free in Aura
    * CVE-2026-79118: Uninitialized resource in ANGLE
    * CVE-2026-79174: Incorrect authorization in Extensions
    * CVE-2026-78900: Improper input validation in Media
    * CVE-2026-79188: Out of bounds write in ANGLE
    * CVE-2026-79189: Out of bounds write in ANGLE
    * CVE-2026-79048: Out of bounds write in ANGLE
    * CVE-2026-79240: Out of bounds write in ANGLE
    * CVE-2026-79014: Race condition in Autofill
    * CVE-2026-79198: Use after free in Platform
    * CVE-2026-79131: Out of bounds write in ANGLE
    * CVE-2026-79149: Use after free in ANGLE
    * CVE-2026-79275: Use after free in ANGLE
    * CVE-2026-79138: Out of bounds write in ANGLE
    * CVE-2026-79026: Use after free in Extensions
    * CVE-2026-79027: Use after free in WebRTC
    * CVE-2026-78904: Type confusion in ANGLE
    * CVE-2026-78899: Use after free in V8
    * CVE-2026-78954: Incorrect authorization in Extensions
    * CVE-2026-79274: Information leak in GPU
    * CVE-2026-78938: Type confusion in V8
    * CVE-2026-78952: Out of bounds write in Crashpad
    * CVE-2026-79236: Type confusion in V8
    * CVE-2026-79078: Use after free in FedCM
    * CVE-2026-79209: Type confusion in Animation
    * CVE-2026-79030: Observable discrepancy in Autofill
    * CVE-2026-79216: Buffer overflow in Blink
    * CVE-2026-79007: Uninitialized resource in GPU
    * CVE-2026-78893: Information leak in QUIC
    * CVE-2026-79222: Incorrect authorization in CustomTabs
    * CVE-2026-79071: Race condition in GPU
    * CVE-2026-79076: Improper input validation in Sync
    * CVE-2026-79088: Incorrect authorization in FileSystem
    * CVE-2026-79104: Missing authorization in Sensor
    * CVE-2026-79044: Missing authorization in WebAppInstalls
    * CVE-2026-78958: Uninitialized resource in Skia
    * CVE-2026-78961: Incorrect authorization in Core
    * CVE-2026-79262: Incorrect authorization in Network
    * CVE-2026-79106: Improper input validation in Input
    * CVE-2026-79176: UI misrepresentation in Extensions
    * CVE-2026-78966: Externally controlled reference in QUIC
    * CVE-2026-79186: Incorrect authorization in Network
    * CVE-2026-79267: Race condition in Workers
    * CVE-2026-79016: Observable discrepancy in SVG
    * CVE-2026-79010: Operation on a resource after expiration or release in Network
    * CVE-2026-79286: Missing authorization in CustomTabs
    * CVE-2026-78945: Use after free in Views
    * CVE-2026-78999: Improper privilege management in Navigation
    * CVE-2026-78941: Information leak in Core
    * CVE-2026-79032: Improper input validation in Network
    * CVE-2026-79109: Improper input validation in Printing
    * CVE-2026-79256: Externally controlled reference in WebView
    * CVE-2026-79237: Incorrect authorization in Navigation
    * CVE-2026-78898: Incorrect authorization in Downloads
    * CVE-2026-78985: Incorrect reference resolution in FileSystem
    * CVE-2026-79028: Observable discrepancy in Network
    * CVE-2026-79210: Use after free in Audio
    * CVE-2026-79046: Race condition in Permissions
    * CVE-2026-79129: Use after free in Sessions
    * CVE-2026-78937: Use after free in Search
    * CVE-2026-78987: Information leak in Canvas
    * CVE-2026-78990: Use after free in Compositing
    * CVE-2026-78909: Use after free in Views
    * CVE-2026-79271: Information leak in DOM
    * CVE-2026-79144: Information leak in Skia
    * CVE-2026-79065: Improper input validation in Network
    * CVE-2026-79192: Improper input validation in Variations
    * CVE-2026-79140: Use after free in Views
    * CVE-2026-79128: Use after free in Views
    * CVE-2026-78942: Incorrect reference resolution in Loader
    * CVE-2026-79116: Missing authorization in Viz
    * CVE-2026-79006: Protection mechanism failure in HttpsUpgrades
    * CVE-2026-79095: Information leak in Payments
    * CVE-2026-79084: Inadequate encryption strength in Notifications
    * CVE-2026-78991: Race condition in WebProtect
    * CVE-2026-79248: Incorrect authorization in Input
    * CVE-2026-78891: Buffer overflow in WebRTC
    * CVE-2026-79031: Improper resource exposure in Preload
    * CVE-2026-79110: Missing authorization in Preload
    * CVE-2026-79136: Incorrect authorization in ServiceWorker
    * CVE-2026-78907: Incorrect authorization in WebProtect
    * CVE-2026-79087: Injection in Chrome Tabs
    * CVE-2026-79231: Buffer overflow in Media
    * CVE-2026-78969: Uninitialized resource in Video
    * CVE-2026-79137: Incorrect authorization in Extensions
    * CVE-2026-79057: Race condition in Start
    * CVE-2026-78894: Race condition in Payments
    * CVE-2026-79264: Incorrect reference resolution in Preload
    * CVE-2026-78910: Buffer overflow in V8
    * CVE-2026-79066: Improper input validation in Navigation
    * CVE-2026-79255: Improper input validation in WebRTC
    * CVE-2026-79086: Missing authorization in CustomTabs
    * CVE-2026-79038: Incorrect authorization in WebProtect
    * CVE-2026-78940: Improper initialization in Network
    * CVE-2026-79107: Incorrect authorization in TabGroups
    * CVE-2026-79120: Uninitialized resource in ANGLE
    * CVE-2026-79270: Uninitialized resource in ANGLE
    * CVE-2026-79067: Missing authorization in Network
    * CVE-2026-79213: Incorrect authorization in WebAppInstalls
    * CVE-2026-78943: Improper input validation in Editing
    * CVE-2026-79259: Improper input validation in Safebrowsing
    * CVE-2026-79208: Missing authorization in HTTP2
    * CVE-2026-79251: Improper input validation in Network
    * CVE-2026-79226: Improper privilege management in Regional Capabilities
    * CVE-2026-79042: Missing authorization in Payments
    * CVE-2026-79122: Information leak in SignIn
    * CVE-2026-79199: Incorrect authorization in Network
    * CVE-2026-79013: Improper input validation in Sync
    * CVE-2026-79074: Information leak in Network
    * CVE-2026-79215: Integer overflow in WebGL
    * CVE-2026-79049: Incorrect reference resolution in Passwords
    * CVE-2026-79132: Improper input validation in Input
    * CVE-2026-79201: Improper access control in Workers
    * CVE-2026-79051: Incorrect authorization in Loader
    * CVE-2026-79053: Missing authorization in Lighthouse
    * CVE-2026-79285: Uninitialized resource in ANGLE
    * CVE-2026-78906: Race condition in ANGLE
    * CVE-2026-79250: UI misrepresentation in Navigation
    * CVE-2026-79020: Out of bounds read in Skia
    * CVE-2026-79217: Incorrect authorization in Mobile
    * CVE-2026-79204: UI misrepresentation in Input
    * CVE-2026-78912: UI misrepresentation in Browser
    * CVE-2026-78955: Observable discrepancy in PerformanceAPIs
    * CVE-2026-79143: Incorrect authorization in FileSystem
    * CVE-2026-79241: Out of bounds read in GPU
    * CVE-2026-78967: Missing authorization in BFCache
    * CVE-2026-79214: Improper input validation in Preload
    * CVE-2026-79228: Incorrect authorization in SiteIsolation
    * CVE-2026-78953: Missing authorization in SiteIsolation
    * CVE-2026-79229: Uninitialized resource in ANGLE
    * CVE-2026-79002: Incorrect authorization in SiteIsolation
    * CVE-2026-79272: Improper input validation in FindInPage
    * CVE-2026-79127: Out of bounds write in ANGLE
    * CVE-2026-79151: Improper input validation in Safebrowsing
    * CVE-2026-78936: Observable discrepancy in CustomTabs
    * CVE-2026-78905: Type confusion in ANGLE
    * CVE-2026-79050: Incorrect authorization in Network
    * CVE-2026-79008: Improper input validation in GPU
    * CVE-2026-78975: Incorrect authorization in DOM
    * CVE-2026-79287: Observable discrepancy in Forms
    * CVE-2026-79094: Race condition in Workers
    * CVE-2026-79173: UI misrepresentation in WebAppInstalls
    * CVE-2026-78976: Improper input validation in StorageAccessAPI
    * CVE-2026-79276: Improper privilege management in FileSystem
    * CVE-2026-79191: Incorrect authorization in SiteIsolation
    * CVE-2026-79099: Missing authorization in Network
    * CVE-2026-79024: Information leak in ServiceWorker
    * CVE-2026-79193: Information leak in Canvas
    * CVE-2026-79242: Observable discrepancy in HTML
    * CVE-2026-79180: UI misrepresentation in CustomTabs
    * CVE-2026-79293: Information leak in Animation
    * CVE-2026-79023: Incorrect authorization in Editing
    * CVE-2026-79146: Information leak in CustomTabs
    * CVE-2026-79238: Incorrect authorization in ServiceWorker
    * CVE-2026-78949: Observable discrepancy in CustomTabs
    * CVE-2026-79291: Information leak in CSS
    * CVE-2026-79283: UI misrepresentation in Geometry
    * CVE-2026-78892: Incorrect authorization in Chromoting
    * CVE-2026-79070: Incorrect reference resolution in Cache
    * CVE-2026-79205: Incorrect authorization in Network
    * CVE-2026-78903: Incomplete cleanup in SiteIsolation
    * CVE-2026-78959: Improper handling of case sensitivity in FileSystem
    * CVE-2026-79234: Injection in CSS
    * CVE-2026-78983: Use after free in Views
    * CVE-2026-79083: Improper enforcement of behavioral workflow in Media
    * CVE-2026-78944: Use after free in DevTools
    * CVE-2026-79178: Incorrect authorization in Web Authentication (Passkeys & Security Keys)
    * CVE-2026-79059: Information leak in BFCache
    * CVE-2026-79245: Use after free in UI
    * CVE-2026-78978: Out of bounds read in ANGLE
    * CVE-2026-79103: Incorrect reference resolution in Speech
    * CVE-2026-79154: Missing authorization in DevTools
    * CVE-2026-79230: Improper input validation in ANGLE
    * CVE-2026-79068: Improper resource exposure in StreamsAPI
    * CVE-2026-79269: Uninitialized resource in ANGLE
    * CVE-2026-79085: Missing authorization in Network
    * CVE-2026-79134: Incorrect authorization in GetUserMedia
    * CVE-2026-79064: Use after free in Network
    * CVE-2026-79003: Incorrect authorization in Device
    * CVE-2026-79220: Information leak in Network
    * CVE-2026-78951: Use after free in ServiceWorker
    * CVE-2026-79249: Code injection in Bisection
    * CVE-2026-79091: Use after free in Bluetooth
    * CVE-2026-79265: Incomplete cleanup in GetUserMedia
    * CVE-2026-78913: Use after free in Chromoting
    * CVE-2026-79258: Incorrect authorization in WebXR
    * CVE-2026-79211: Incorrect authorization in USB
    * CVE-2026-79252: Information leak in ServiceWorker
    * CVE-2026-78962: Uninitialized resource in WebXR
    * CVE-2026-78901: Race condition in V8
    * CVE-2026-79097: Use after free in V8
    * CVE-2026-79227: Type confusion in DevTools
    * CVE-2026-79203: Improper input validation in DevTools
    * CVE-2026-79033: Insufficient control flow management in DevTools
    * CVE-2026-79139: Improper input validation in Media
    * CVE-2026-79221: Uninitialized resource in Dawn
    * CVE-2026-79034: Information leak in CORS
    * CVE-2026-79075: Information leak in Geolocation
    * CVE-2026-78960: Information leak in Extensions
    * CVE-2026-78984: Uninitialized resource in GPU
    * CVE-2026-78963: Improper input validation in Media
    * CVE-2026-79004: Out of bounds read in Media
    * CVE-2026-79182: Improper input validation in Media
    * CVE-2026-79185: Information leak in DOM
    * CVE-2026-79073: Improper state validation in Parser
    * CVE-2026-79266: Use after free in DevTools
    * CVE-2026-79025: Improper input validation in Workers
    * CVE-2026-79141: Incorrect authorization in Browser
    * CVE-2026-78974: UI misrepresentation in Linux Toolkit Theming
    * CVE-2026-79055: Information leak in Sharing
    * CVE-2026-79263: Race condition in Extensions
    * CVE-2026-79124: Information leak in Intents
    * CVE-2026-79184: Missing authorization in Preload
    * CVE-2026-79289: Improper control of a resource through its lifetime in Workers
    * CVE-2026-79001: Information leak in Bluetooth
    * CVE-2026-79077: Incorrect authorization in WebProtect
    * CVE-2026-78950: Integer overflow in WebRTC
    * CVE-2026-79196: Race condition in Editing
    * CVE-2026-79000: Improper input validation in DeviceBoundSessionCredentials
    * CVE-2026-78979: Race condition in Core
    * CVE-2026-79181: Observable discrepancy in Glic
    * CVE-2026-79190: Incorrect authorization in Extensions
    * CVE-2026-79206: Out of bounds read in FileSystem
    * CVE-2026-78897: Missing authorization in BrowserTag
    * CVE-2026-79119: Use after free in PDF
    * CVE-2026-79089: Race condition in Transactions Platform
    * CVE-2026-79147: Information leak in Skia
    * CVE-2026-79098: UI misrepresentation in PermissionElement
    * CVE-2026-79022: UI misrepresentation in Transactions Platform
    * CVE-2026-79233: UI misrepresentation in CustomTabs
    * CVE-2026-79261: Incorrect authorization in Controls
    * CVE-2026-78977: Uninitialized resource in GPU
    * CVE-2026-79040: Uninitialized resource in GPU
    * CVE-2026-79273: Incorrect reference resolution in WebView
    * CVE-2026-79243: Improper input validation in ReadingList
    * CVE-2026-79123: Improper input validation in NTP Footer
    * CVE-2026-79005: Incorrect authorization in StorageAccessAPI
    * CVE-2026-79090: Improper privilege management in Actor
    * CVE-2026-78946: Incorrect authorization in Select
    * CVE-2026-78968: Missing authorization in Core
    * CVE-2026-79041: Missing authorization in Browser
    * CVE-2026-79284: UI misrepresentation in Core
    * CVE-2026-78896: Information leak in StorageAccessAPI
    * CVE-2026-79058: Missing authorization in Passwords
    * CVE-2026-79009: UI misrepresentation in UI
    * CVE-2026-79060: Incorrect authorization in StorageAccessAPI
    * CVE-2026-79177: Incorrect authorization in Media
    * CVE-2026-78956: Type confusion in V8
    * CVE-2026-79239: Out of bounds read in Tint
    * CVE-2026-79015: Improper input validation in ServiceWorker
    * CVE-2026-79108: UI misrepresentation in Web Authentication (Passkeys & Security Keys)
    * CVE-2026-79056: Use after free in ServiceWorker
    * CVE-2026-79018: Information leak in FoldableAPIs
    * CVE-2026-78980: Improper input validation in ReaderMode
    * CVE-2026-78947: Incomplete cleanup in Chromium
    * CVE-2026-79244: Use after free in Animation
    * CVE-2026-79112: Out of bounds read in Skia
    * CVE-2026-79246: Information leak in DataTransfer
    * CVE-2026-79223: Integer overflow in Chromium
    * CVE-2026-79045: Type confusion in V8
    * CVE-2026-79197: Use after free in V8
    * CVE-2026-79148: Off-by-one error in DevTools
    * CVE-2026-79125: Information leak in XR
    * CVE-2026-79207: Information leak in Passwords
    * CVE-2026-79017: Race condition in Extensions
    * CVE-2026-79105: Improper input validation in Mobile
    * CVE-2026-79225: Incorrect authorization in Browser
    * CVE-2026-79021: Missing authorization in InterestGroups
    * CVE-2026-79133: Incorrect authorization in Forms
    * CVE-2026-79179: Incorrect authorization in DOM
    * CVE-2026-79152: Incorrect authorization in CustomTabs
    * CVE-2026-78981: Information leak in Mobile
    * CVE-2026-78957: Information leak in Mobile
    * CVE-2026-79126: Incorrect provision of specified functionality in Proxy
    * CVE-2026-78915: Race condition in Enterprise
    * CVE-2026-79253: Improper input validation in Network
    * CVE-2026-79260: Improper input validation in Cookies
    * CVE-2026-79254: Incorrect reference resolution in CustomTabs
    * CVE-2026-78914: Uninitialized resource in Skia
    * CVE-2026-78964: Use after free in Sync


author: Than Ngo <than@redhat.com> - 152.0.7977.75-1
changelog:
  - Update to 152.0.7977.75
    * CVE-2026-84353: Use after free in Shared Tab Groups
    * CVE-2026-84352: Use after free in WebGL
    * CVE-2026-84354: Incorrect authorization in FileSystem
    * CVE-2026-84359: Information leak in Skia
    * CVE-2026-84357: Improper input validation in Omnibox
    * CVE-2026-84324: Use after free in Proxy
    * CVE-2026-84349: Use after free in Browser
    * CVE-2026-84326: Uninitialized resource in V8
    * CVE-2026-84333: Use after free in Dawn
    * CVE-2026-84351: Buffer overflow in GPU
    * CVE-2026-84325: Improper input validation in DataTransfer
    * CVE-2026-84328: Missing authorization in FileSystem
    * CVE-2026-84347: Use after free in WebRTC
    * CVE-2026-84323: Missing authorization in FileSystem
    * CVE-2026-84355: Incorrect authorization in Navigation
    * CVE-2026-84358: Improper privilege management in Downloads
    * CVE-2026-84332: Incorrect authorization in SiteSettings
    * CVE-2026-84330: UI misrepresentation in FullScreen
    * CVE-2026-84334: Incorrect authorization in Chromoting
    * CVE-2026-84348: Information leak in MediaCapture
    * CVE-2026-84335: Incorrect authorization in TabStrip
    * CVE-2026-84327: Incorrect authorization in Autofill
    * CVE-2026-84329: Confused deputy in CredentialProvider
    * CVE-2026-84356: UI misrepresentation in FullScreen
    * CVE-2026-84350: Use after free in TabStrip
    * CVE-2026-84331: Incorrect authorization in Actor


author: Paulo Alcantara <paalcant@redhat.com> - 7.6-2
changelog:
  - cifs.upcall: fix regression with kerberos mounts
  - Resolves: rhbz#2497446
  - Resolves: rhbz#2496963
  - Resolves: rhbz#2489808 - CVE-2026-12505


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> - 1.16-13
changelog:
  - civetweb 1.16, handle cmake-4 doesn't support cmake < 3.5
  - upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
    don't seem to be any adverse effects building civetweb with that change.
    And someday there might even be a civetweb-1.17.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.16-15
changelog:
  - Add upstream's fix to actually support X_DOM_SOCKET with cmake
  - Enable ZLIB compression support
  - rhbz#2512488


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.16-16
changelog:
  - Link to openssl libraries instead of using runtime dynamic loading
  - Use openssl 3.0 API instead of the default openssl 1.1 API
  - Let the devel package own the cmake subdirectory
  - Run tests in check


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.3.1-2
changelog:
  - Run autopoint before autoreconf, since apparently autoreconf doesn't
    do it automatically, but that breaks badly with gettext 0.25.


author: Jerry James <loganjerry@gmail.com> - 2.49.95-3
changelog:
  - Add patch to fix undefined behavior (rhbz#2339979)
  - Add two patches to fix memory leaks
  - Do not force -O1


author: Jerry James <loganjerry@gmail.com> - 2.49.95-3
changelog:
  - Add patches to fix more undefined behavior
  - Fix misaligned memory accesses on ppc64le
  - Fix mismatched readline function declarations


author: Jerry James <loganjerry@gmail.com> - 2.49.95-8
changelog:
  - Update to latest git snapshot to fix gnulib issue
  - Update the French translation
  - Add patch to update POSIX structure sizes for 64-bit systems
  - Fix a broken file-stat test


author: Stephane Thiell <sthiell@stanford.edu> - 1.9.3-6
changelog:
  - Migrate from deprecated setup.py build/install to pyproject macros
  - Switch Source0 to PyPI archive for canonical tree naming


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Packit <hello@packit.dev> - 366-1
changelog:
  - Networkmanager: Don't activate new network connections by default
  - Networkmanager: Navigate to details page after creation
  - Translations and dependency updates


author: Packit <hello@packit.dev> - 85-1
changelog:
  Changes with 85
  ----------------
    - Remove build_deploy.sh script (HMS-9806) (#3860)
      - Author: Klara Simickova, Reviewers: Anna Vítová
    - Wizard: add AAP documentation (HMS-9757) (#3848)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - Wizard: edit Security review step according to mocks (HMS-9597) (#3850)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - Wizard: refactor ManageButton since it became widely used (#3859)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - actions/BootTests: Add a second Slack notification to frontend (#3867)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova, Simon Steinbeiß
    - blueprints: default to host distro when importing in cockpit (RHEL-123840) (#3831)
      - Author: Sanne Raymaekers, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group across 1 directory with 17 updates (#3869)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - src: Bump smol-toml to 1.5.2 and update export mocks (HMS-9807) (#3865)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - src: Fix rendering validation for `ValidatedInput` (HMS-9797) (#3855)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová

  — Somewhere on the Internet, 2025-11-28


author: Packit <hello@packit.dev> - 86-1
changelog:
  Changes with 86
  ----------------
    - ActivationKeysList: add a proxy on stage (#3907)
      - Author: Ondřej Budai, Reviewers: Michal Gold, Sanne Raymaekers
    - Update API (HMS-9824) (#3881)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Update build-tools digest to ded5385 (#3894)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - Update dependency @types/react to v18.3.27 (#3897)
      - Author: red-hat-konflux[bot], Reviewers: Klara Simickova
    - Wizard/GCP: Accept domains as well as email addresses (HMS-4988) (#3868)
      - Author: Simon Steinbeiß, Reviewers: Klara Simickova
    - Wizard: Add safeguards to disk customization and fix min_size (HMS-9664) (#3835)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update date format in default blueprint name (HMS-9854) (#3888)
      - Author: Klara Simickova, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    - Wizard: add information about firstboot and registration ordering (HMS-8555) (#3906)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - build(deps-dev): bump express from 4.21.2 to 4.22.1 (#3879)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - build(deps-dev): bump vitest-canvas-mock from 0.3.3 to 1.1.3 (#3901)
      - Author: dependabot[bot], Reviewers: Klara Simickova
    - docstrings: Drop references to RPM-DNF (#3873)
      - Author: Simon Steinbeiß, Reviewers: Klara Simickova
    - playwright: Fix tests after OpenSCAP configs regeneration (HMS-9862) (#3899)
      - Author: Klara Simickova, Reviewers: Michal Gold
    - playwright: re-enable the compliance test (#3905)
      - Author: Ondřej Budai, Reviewers: Gianluca Zuccarelli, Klara Simickova

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 90-1
changelog:
  Changes with 90
  ----------------
    - Image mode compose request (HMS-10010) (#4009)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - ImagesTable/Status: fix on-prem error messages (HMS-10099) (#4030)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova, Simon Steinbeiß
    - Move image-mode image type filtering to cockpitApi (HMS-10098) (#4028)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Wizard: Add password validation to inline alert in Users step (HMS-10078) (#4007)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - Wizard: Combine alert and empty state in Additional Packages step (HMS-10126) (#4052)
      - Author: Michal Gold, Reviewers: Gianluca Zuccarelli
    - Wizard: Fix aria issues (HMS-10108) (#4039)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Fix crash when searching for group with repeatable build (HMS-10111) (#4042)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Fix padding of popover button for package groups (HMS-10112) (#4043)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Remove validation for non-required empty input (HMS-10081) (#4011)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update hostname step description (HMS-10138) (#4062)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - build(deps): bump lodash from 4.17.21 to 4.17.23 (#4016)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group with 16 updates (#4040)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group with 7 updates (#4063)
      - Author: {}, Reviewers: Michal Gold
    - build(deps-dev): bump @types/node from 24.10.2 to 25.0.10 (#4041)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update build-tools digest to 7e1d036 (#4058)
      - Author: {}, Reviewers: Michal Gold
    - chore(deps): update konflux references (#4031)
      - Author: {}, Reviewers: Klara Simickova
    - cockpit: Add mountpoint policies for the image mode (HMS-10101) (#4037)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - cockpit: Filter image mode targets and customizations (HMS-10021) (#4008)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - cockpit: Fix crash in edit mode (HMS-10092) (#4023)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - cockpit: Fix useFlag import (HMS-10091) (#4022)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - cockpit: Gate blueprint mode label for on-prem only (HMS-10125) (#4051)
      - Author: Klara Simickova, Reviewers: Michal Gold
    - cockpit: Update validation for required Users step (HMS-9996) (#4034)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Remove redundant next in target select (#4026)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova
    - src: Rename "suffix" to "subpath" (HMS-10109) (#4038)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - vitest.config: remove sourcemap errors (HMS-10120) (#4048)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 94-1
changelog:
  Changes with 94
  ----------------
    - Wizard/Review: fix section visibility for net-installer type (HMS-9568) (#4123)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - cockpit: Re-organize Security step (HMS-10217) (#4125)
      - Author: Klara Simickova, Reviewers: Lucas Garfield

  — Somewhere on the Internet, 2026-02-18


author: Packit <hello@packit.dev> - 98-1
changelog:
  Changes with 98
  ----------------
    - Add widgetRegistry config to decouple widget layout from chrome (#4259)
      - Author: Tahmid Efaz, Reviewers: Klara Simickova
    - Migrate Repositories tests to playwright (#4265)
      - Author: Gianluca Zuccarelli, Reviewers: Anna Vítová, Klara Simickova
    - Update API and tests (#4287)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli, Tomáš Koscielniak
    - Update default bugs epic (#4308)
      - Author: Klara Simickova, Reviewers: Anna Vítová, Michal Gold
    - Wizard: Add allowed characters for kernel arguments (HMS-9508) (#4266)
      - Author: Klara Simickova, Reviewers: Anna Vítová
    - Wizard: Move AAP step to Registration step (HMS-9521) (#4293)
      - Author: Tomáš Koscielniak, Reviewers: Anna Vítová, Gianluca Zuccarelli
    - Wizard: Packages revamp (HMS-9397) (#4261)
      - Author: Klara Simickova, Reviewers: Anna Vítová, Gianluca Zuccarelli
    - Wizard: Packages revamp follow up (HMS-9397) (#4300)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Remove sources integration and revamp AWS step (HMS-9674) (#4289)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova
    - Wizard: Revamp Locale step (HMS-9517) (#4255)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - Wizard: Update Image details (HMS-10494) (#4269)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update footer buttons (HMS-10535) (#4310)
      - Author: Klara Simickova, Reviewers: Tomáš Koscielniak
    - Wizard: Visually gate repositories and packages (HMS-10420) (#4263)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: add image mode on hosted service (HMS-10361) (#4249)
      - Author: Katarína Sieklová, Reviewers: Gianluca Zuccarelli
    - Wizard: make description of target envs clickable (#4264)
      - Author: Anna Vítová, Reviewers: Gianluca Zuccarelli
    - build(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#4309)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump lodash from 4.17.23 to 4.18.1 (#4270)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump lodash-es from 4.17.23 to 4.18.1 (#4268)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group across 1 directory with 6 updates (#4292)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group with 17 updates (#4301)
      - Author: {}, Reviewers: Klara Simickova
    - build(deps): bump vite from 8.0.3 to 8.0.5 (#4281)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update actions/cache action to v5 (#4276)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update actions/setup-node action to v6 (#4279)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update build-tools digest to f982cf6 (#4275)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update dependency node to v24 (#4280)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update konflux references (#4273)
      - Author: {}, Reviewers: Klara Simickova
    - chore(deps): update konflux references (#4298)
      - Author: {}, Reviewers: Klara Simickova
    - devDeps: Bump typescript-eslint (HMS-10495) (#4291)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - devDeps: Manually bump msw from 2.12.14 to 2.13.0 (HMS-10483) (#4285)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - feat: move ImageBuilderWidget source code from landing-page-frontend (#4271)
      - Author: Tahmid Efaz, Reviewers: Klara Simickova
    - playwright: Update boot tests to reflect packages revamp changes (HMS-10536) (#4305)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Use a pre-created template for repeatable build test (HMS-10455) (#4262)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2026-04-15


author: Packit <hello@packit.dev> - 100-1
changelog:
  Changes with 100
  ----------------
    - ImagesTable: show distro for image mode in hosted (#4419)
      - Author: Ondřej Budai, Reviewers: Gianluca Zuccarelli
    - Update build-tools digest to 9a160fc (#4396)
      - Author: {}, Reviewers: Klara Simickova
    - Wizard/ Oscap: Lock FIPS toggle when enabled by compliance profile (HMS-10579) (#4385)
      - Author: Michal Gold, Reviewers: Gianluca Zuccarelli
    - Wizard/FSC: Move volume group to expandable and fix step spacing (HMS-9395) (#4341)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard/FSC: Safeguard disk min size and update width (HMS-9395) (#4400)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard/FSC: Update the filesystem configuration step as per mocks (HMS-9395) (#4340)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard/Hostname: Update description as per revamp SPUR (HMS-10579) (#4397)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard/ImageOutput: filter supported bootc environments by distro (HMS-10618) (#4383)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    - Wizard/Packages: Fix package recommendations tracking (#4403)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard/Repositories: Update as per newest mocks (HMS-10579) (#4348)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Rename "Image details" to "Details" (HMS-10579) (#4398)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Repos and pkgs SPUR (HMS-10579) (#4377)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update guest image description as per revamp SPUR (HMS-10579) (#4401)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: Update spacing on the base settings step (HMS-10579) (#4370)
      - Author: Klara Simickova, Reviewers: Anna Vítová, Gianluca Zuccarelli
    - Wizard: exclude EUS repos from repo search (#4380)
      - Author: Bryttanie, Reviewers: Klara Simickova
    - Wizard: hide all customizations for bootable-container-iso (#4427)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Klara Simickova
    - Wizard: make users optional in Image mode on hosted (HMS-10639) (#4410)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - Wizard: prevent removal of required packages via search (#4394)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Wizard: visually split required and optional packages (#4387)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - api: regenerate api code generation (#4381)
      - Author: SchutzBot, Reviewers: Gianluca Zuccarelli, Michal Gold
    - api: regenerate api code generation (#4390)
      - Author: SchutzBot, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group across 1 directory with 9 updates (#4404)
      - Author: {}, Reviewers: Klara Simickova
    - playwright: Migrate tests to Wizard v3 (HMS-10492) (#4327)
      - Author: Tomáš Koscielniak, Reviewers: Klara Simickova
    - playwright: Update repo filter locator (#4439)
      - Author: Klara Simickova, Reviewers: Simon Steinbeiß
    - playwright: use static repository for RepeatableBuild test (#4411)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova

  — Somewhere on the Internet, 2026-05-13


author: Packit <hello@packit.dev> - 104-1
changelog:
  Changes with 104
  ----------------
    - Cockpit: Add container registry status and login (HMS-10831) (#4540)
      - Author: Simon Steinbeiß, Reviewers: Gianluca Zuccarelli
    - Extract TargetEnvironmentOption to deduplicate radio/checkbox logic (#4593)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Extract cloud and registration sub-slices from wizard (HMS-10885) (#4570)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Extract content subslice from wizard slice (HMS-10884) (#4572)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Extract customization mappers into co-located composable mappers (#4588)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Extract system slice into dedicated submodule (HMS-10913) (#4581)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - ImagesTable: Combine blueprints and images in rows (HMS-10910) (#4591)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - ImagesTable: Set up basic file structure for new table (HMS-10824) (#4551)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Move target environment data transformations into RTK Query derived endpoints (HMS-10955) (#4597)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Prepare store types for request mapper migration (#4585)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Refactor image request mapping into composable store mappers (HMS-10944) (#4592)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Refactor wizard request-to-state parsing into composable slice modules (#4596)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Resolve org ID once at app init instead of per-blueprint (#4577)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova, Simon Steinbeiß
    - Sort cockpit composes by recency (HMS-10135) (#4602)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Update API (HMS-10973) (#4603)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Update Konflux references (#4558)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - Update bugs epic key for new quarter (HMS-10981) (#4606)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard/FSC: Replace deep imports with aliases (HMS-10982) (#4607)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard/Security: Hide selectors conditionally and add empty option (HMS-10983) (#4608)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Wizard: prevent duplicate languages in Locale step (HMS-10599) (#4527)
      - Author: Michal Gold, Reviewers: Gianluca Zuccarelli
    - Wizard: reword FIPS toggle description text (HMS-10795) (#4561)
      - Author: Michal Gold, Reviewers: Klara Simickova
    - actions: Add a check for pinned dependencies (HMS-10932) (#4590)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - chore(deps): update actions/cache action to v6 (#4601)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - chore(deps): update build-tools digest to d07c5e5 (#4599)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - chore(deps): update dependency node to v24.18.0 (#4600)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - chore(deps): update konflux references (#4598)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - cockpit/tsconfig: Add `rootDir` to resolve IDE diagnostics error (HMS-10896) (#4575)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - coverage: Exclude auto-generated API files and declaration files (HMS-10974) (#4604)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - deps: Pin package version to make Dependabot happy (HMS-10931) (#4589)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - deps: Remove more unused dependencies (HMS-10882) (#4571)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - playwright: Fix tsconfig (HMS-10881) (#4569)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - src: Add vitest lint rules to co-locates tests (HMS-10893) (#4574)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - test: Clean up unused fixtures and handlers (HMS-10916) (#4587)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - test: Migrate FSC tests from the old vitest file (HMS-10903) (#4576)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - test: Migrate legacy first boot tests (HMS-10914) (#4583)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - tests: add coverage for PW + vitest (HMS-9550) (#4584)
      - Author: Katarína Sieklová, Reviewers: Gianluca Zuccarelli
    - vitest: Migrate CreatImageWizard.test.tsx to co-located tests (HMS-10907) (#4578)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - vitest: Migrate ImportBluepintModal.test.tsx to co-located tests (HMS-10911) (#4580)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - vitest: Migrate edit tests to co-located vitest mocked tests (HMS-10880) (#4568)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2026-07-08


author: Packit <hello@packit.dev> - 106-1
changelog:
  Changes with 106
  ----------------
    - Clean up redux deps (HMS-11143) (#4699)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Deprecate msw (HMS-11094) (#4671)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Enable `--fileParallelism` for all vitest runs (HMS-11136) (#4677)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Refactor RegistryAuth and optimize login cache update (#4662)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Remove more unused deps (HMS-11137) (#4687)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Replace `moment` with `date-fns` (HMS-11142) (#4694)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - Split on-prem image source into official and custom flows (HMS-11081) (#4664)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Streamline on-prem registry auth UX and extract shared helpers (#4657)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - Update Konflux references (#4673)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - Update build-tools digest to c13c57f (#4676)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - Update build-tools digest to fcbeac5 (#4690)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - Update dependency node to v24.18.1 (#4691)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - Wizard/AAP: Improve validation (HMS-10759) (#4683)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard: Remove unused validators (HMS-11135) (#4686)
      - Author: Klara Simickova, Reviewers: Katarína Sieklová
    - Wizard: add "single target migration" banner on-prem (HMS-11066) (#4682)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - Wizard: add banner with a new announce (#4660)
      - Author: Katarína Sieklová, Reviewers: Klara Simickova
    - Wizard: fix adding LabelInput values (HMS-10877) (#4646)
      - Author: Katarína Sieklová, Reviewers: Anna Vítová
    - build(deps): bump fast-uri from 3.1.2 to 3.1.4 (#4669)
      - Author: dependabot, Reviewers: Klara Simickova
    - build(deps): bump fast-uri from 3.1.4 to 3.1.5 (#4698)
      - Author: dependabot, Reviewers: Klara Simickova
    - build(deps): bump postcss from 8.5.22 to 8.5.25 (#4695)
      - Author: dependabot, Reviewers: Gianluca Zuccarelli
    - build(deps): bump the minor-and-patch group across 1 directory with 10 updates (#4681)
      - Author: dependabot, Reviewers: Klara Simickova
    - build(deps): bump the minor-and-patch group with 5 updates (#4697)
      - Author: dependabot, Reviewers: Gianluca Zuccarelli
    - build(deps-dev): bump @currents/playwright from 1.24.0 to 2.5.0 (#4679)
      - Author: dependabot, Reviewers: Klara Simickova
    - build(deps-dev): bump brace-expansion from 1.1.16 to 1.1.18 (#4696)
      - Author: dependabot, Reviewers: Gianluca Zuccarelli
    - build(deps-dev): bump immutable from 5.1.5 to 5.1.9 (#4666)
      - Author: dependabot, Reviewers: Klara Simickova
    - build(deps-dev): bump ws from 8.19.0 to 8.21.1 (#4668)
      - Author: dependabot, Reviewers: Klara Simickova
    - chore(deps): update konflux references (#4689)
      - Author: red-hat-konflux, Reviewers: Klara Simickova
    - cockpit: use image-builder-cli (#4688)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - deps: Remove uuid (HMS-11145) (#4700)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - store: remove blank line between imports (#4702)
      - Author: Gianluca Zuccarelli, Reviewers: Klara Simickova
    - test: Add comment to false positives (HMS-11084) (#4667)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - test: Clean up test directory (HMS-11091) (#4670)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - test: Migrate Blueprints test to co-located unit tests (HMS-11086) (#4663)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli
    - test: Migrate ImagesTable tests to co-located unit tests (HMS-11085) (#4659)
      - Author: Klara Simickova, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2026-08-05


author: Jerry James <loganjerry@gmail.com> - 0.99850-12
changelog:
  - Rebuild for gfan 0.8beta
  - Remove unused BRs: boost, tex(latex), tex(ulem.sty)
  - Require C++17 until Singular adapts to C++20


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.4.1-2
changelog:
  - Drop aspell-en BuildRequires as it's deprecated
    https://fedoraproject.org/wiki/Changes/AspellDeprecation


author: Jerry James <loganjerry@gmail.com> - 1.14.0-3
changelog:
  - Build with the boost version of pdqsort
  - Run all of the tests
  - BR catch 2.x instead of 3.x
  - Drop unnecessary Requires from the devel subpackage
  - Use the cmake declarative buildsystem


author: Jonathan Wright <jonathan@almalinux.org> - 5.12.0-56
changelog:
  - rebuild for varnish update
  - remove ceph, curl_json, log_logstash, ovs_events, ovs_stats packages
  - prepare spec file for EPEL10


author: Tim Theisen <ttheisen@fedoraproject.org> - 25.13.2-1
changelog:
  - Bring upstream and Fedora spec file in sync to speed updates - rhbz#2316408
  - Also fixes build for f45/rawhide - rhbz#2503824


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-1
changelog:
  - Update to release v2.3.0
  - Refreshed spec file using go2rpm
  - Build now using gobuild macro for most binaries.
  - 'go build' is used for containerd-shim-runc-v2 to emulate makefile static
    build


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-2
changelog:
  - Build shim as static-pie
  - Build shim as static using static-pie to retain pie benefits and static
    build. See https://github.com/containerd/containerd/discussions/13340#dis
    cussioncomment-16883392 for additional information.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.1-1
changelog:
  - Update to release v2.3.1
  - Resolves: rhbz#2464270
  - Upstream feature enhancements and fixes
  - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
  - Resolves CVE-2026-35469: rhbz#2467593


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.2-1
changelog:
  - Update to release v2.3.2
  - Resolves: rhbz#2464270
  - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
  - Resolves CVE-2026-35469: rhbz#2467593
  - Resolves CVE-2026-50195
  - Resolves CVE-2026-53488
  - Resolves CVE-2026-53492
  - Resolves CVE-2026-53489
  - Resolves CVE-2026-47262
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.4-1
changelog:
  - Update to release v2.3.4
  - Resolves: rhbz#2514862
  - Upstream fixes and enhancements and breaking change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.0-1
changelog:
  - Update to release v1.9.0
  - Resolves: rhbz#2420515
  - Resolves CVE-2025-58188: rhbz#2411454, rhbz#2411189, rhbz#2410923
  - Resolves CVE-2025-58185: rhbz#2410556, rhbz#2410277, rhbz#2409991
  - Resolves CVE-2025-61723: rhbz#2409605, rhbz#2409325, rhbz#2409043
  - Resolves CVE-2025-58189: rhbz#2408135, rhbz#2407858, rhbz#2407588
  - Fixes CVE-2025-67499, a bug in the nftables backend for the portmap
    plugin
  - Additional changes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.1-5
changelog:
  - Add explicit unit file permissions during install
  - A note from Petr Sklenar on the fedora developer list shows that this
    package does not explicitly set unit file permissions which can lead to a
    problem
  - Explicit permissions are now set correctly


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - backend: add script to migrate pulp.json to Pulp labels
  - backend: add function to get pulp object based on its href
  - backend: pass build ID to upload_build_results
  - backend: more log "checkpoints" for build worker


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Set pulp_labels at RPM upload time.
  - Wait on add_and_remove task to finish
  - Switches PulpStorage to using the synchronous RPM upload API
  - Specify charset in lighttpd mimetypes
  - Fix waiting for Pulp copr_base repository
  - Create one repository version and publication per chroot
  - Optimize copr_log_hitcounter for memory


author: Jakub Kadlcik <frostyx@email.cz> 2.7-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Improve robustness and cooperation with rpmbuild
  - Don't run createrepo_c for migrated projects
  - Implement Pulp forking
  - Fix Pulp builds for CoprDirs
  - Adds batching to add_content() and delete_content() in Pulp client.
  - Explicitly set home directory and shell for the user
  - Make sure every PULP api call is logged
  - Set retain_package_versions and retain_repo_versions on repositories
  - Fix race condition in BatchedCreaterepo
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove el7 condition
  - Drop the 'Z' suffix from timestamp
  - Switch RPM upload to the synchronous API from pulp_rpm
  - Fix false-positive failures for build deletion
  - Fix ftbfs for deepcopy not able to handle itertools.count


author: Jakub Kadlcik <frostyx@email.cz> 2.8-1
changelog:
  - Don't traceback when trying to run branch action for second time
  - Implement branch-fedora support for Pulp projects
  - Add a helper script to query Pulp results
  - Handle unsuccessful Pulp requests
  - Don't upload results to Pulp in parallel


author: Jakub Kadlcik <frostyx@email.cz> 2.9-1
changelog:
  - Log the error message that we got from Pulp
  - Fix duplicate NEVRA error when migrating projects to Pulp
  - Fix sub-project handling in the copr-change-storage script


author: Jakub Kadlcik <frostyx@email.cz> 2.10-1
changelog:
  - Don't run builds or actions in projects that are migrated to Pulp
  - Log conflicting NEVRAs when uploading
  - Drop support for building modules


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.11-1
changelog:
  - timeout= for requests was missing, use SafeRequest
  - copr_prune_results: bigger file limit
  - Move pulp-redirect.txt to persistent storage
  - Wait until both copr_base and copr_coprdir exist
  - Set user agent for Pulp requests to crc-pulp-client
  - Set longer timeout for Pulp file uploads
  - Fix deleting project from pulp
  - Drop requirement on pytz
  - Add Pagination for PulpClient.get_content
  - Implement chunked uploads to Pulp
  - Add option to migrate all projects for an owner


author: Jakub Kadlcik <frostyx@email.cz> 2.12-1
changelog:
  - Modify pulp label filter for content queries
  - Cleanup backend-side metadata for PULP chroots
  - Don't convert projects with manual createrepo to PULP
  - Add change-storage support for persistent projects
  - Add prns to a repository, not pulp_hrefs
  - Query Pulp content for only 7 builds at a time
  - Better cancel-build logging
  - Initial Sentry integration
  - Don't run createrepo when forking Pulp projects
  - Extract Exclu*Arch/BuildArch for all targets
  - Fix download-build from PULP with --rpms
  - Implement persistent projects in Pulp
  - Dump copr-rpmbuild version in logs
  - Skip projects with comps enabled when migrating to pulp
  - Temporarily retain all repository packages
  - Info about the task that is being processed


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.13-1
changelog:
  - Move HTTP redirect management to PulpStorage class
  - Create HTTP redirect for forked Pulp projects
  - Paginate add_content and delete_content requests to Pulp
  - Dump a backup of files uploaded to Pulp
  - Fix project prefix matching in Pulp repository removal
  - Integrate rpmeta for build time predictions
  - Delay rpmeta HW pools loading to prediction time


author: Jakub Kadlcik <frostyx@email.cz> 2.14-1
changelog:
  - Raise the wait-for-repo timeout
  - Log chroot/arch/pakage info in prmeta predictions
  - Turn on rpmeta
  - Add kafka as new msgbus
  - Fix wait for Pulp publication when creating devel repository
  - Refactor to use PulpRequest and deliver_and_wait
  - Retry failed Pulp background tasks with exponential backoff
  - Move URLs from pagure to forgejo
  - Refactor lock() function into Lock class
  - Fair FIFO locking via Redis queue
  - Add script for reasonably sized chunks of migrated owners
  - Don't check for "None" keywords
  - Fork also empty repositories
  - Allow migrating multiple owners at once
  - Fix create_file_logger guard for pytest >= 9.1 compatibility
  - Move lock/batch orchestration from PulpClient to BatchedAddRemoveContent
  - Fix race in PulpStorage.delete_builds()
  - Move success logging into wait_for_finished_task
  - Consolidate Pulp task error handling in wait_for_finished_task
  - Handle async Pulp distribution updates (202 responses)
  - Wait for Pulp publication tasks to finish
  - Revert "backend: block all actions and builds for @copr/PyPI and @copr/PyPI3"


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.4-1
changelog:
  - Fix copr-cli download for Pulp projects
  - Add API endpoint for generating a new token
  - Add wildcard support for 'Packit allowed forge projects'


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - Fix download-build for manual createrepo Pulp projects
  - Make sure new-api-token updates expiration token
  - Don't traceback new-api-token for default config
  - Fix download-build from PULP with --rpms
  - Fix script-repos not being saved at all for custom pkgs
  - Use a URL that would be available before the Pulp migration
  - Use build_proxy.get_built_packages to figure out package NEVRAs
  - Bypass anubis challenge by setting copr user agent
  - Use Tito to generate component.__version__
  - Colorize build statuses


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Add --chroot-denylist to add/edit-package commands
  - Upload rpm to python and cli
  - Add --with-deps to buildpypi
  - Support unix file pattern matching in --chroot and --exclude-chroot
  - Require the rich package
  - Document permission commands in man page
  - Fix container-based unit test workflow
  - Fix AttributeError: module 'pkgutil' has no attribute 'get_loader'


author: Pavel Raiskup <praiskup@redhat.com> 1.1-1
changelog:
  - add sysusers.d config file to allow rpm to create users/groups automatically
  - remove redundant byte compile lines, these dirs are empty already
  - migrate os.listdir() to os.scandir() to increase performance
  - depend on python3-rpkg >= 1.67-4


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.0-1
changelog:
  - Show Webhook History table under Settings -> Integrations
  - Fix the 500 for racy creation attempts
  - Implement project, build, chroot deletion and creation in Pulp
  - Provide statistics on how many users submitted at least one build in past month
  - Use the same repofile for all CentOS Stream versions


author: Pavel Raiskup <praiskup@redhat.com> 2.2-1
changelog:
  - fix FTBFS when using python below 3.12
  - Add sysusers.d config file to allow rpm to create users/groups automatically
  - fix code formatting test causing FTBFS on F43+
  - Revert "convert eror message to binary text before emitting"
  - fix a few pylint and sqlalchemy warnings
  - we use the standard results URL also for Pulp projects
  - feat: provide log-detective explain integration for failed builds
  - bugfix: use after/with-build-id fields when "rebuilding all"
  - make coprdirs have their repo available in the buildroot
  - isolate PR builds from different packages within one project
  - remove redundant byte compile lines, these dirs are empty already
  - change order of login menu, sign up should be the latest
  - create HTTP redirects for projects migrated to PULP
  - stop using deprecated Query.get method
  - unify error message for rebuild and rebuild all
  - add sponsors of copr project to page footer
  - add API documentation to the copr project useful links
  - migrate os.listdir() to os.scandir() to increase performance
  - assume user has been notified by clicking "Expire now" button
  - fix /build/source-chroot/ endpoint
  - document how to report security issues
  - change default logging level to INFO for check_for_anitya_version_updates
  - add script to migrate existing build results to Pulp
  - pagure events: use text() wrapper around raw queries
  - regenerate devel repository when multiple builds are deleted
  - support build-time dependencies from other storages
  - move repo functions to a separate file
  - builds_initiated_via_hook always passed as a list & doc string update
  - custom webhook handler now adds webhook history record
  - doc: link dnf.conf(5)


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Show coprdirs in the builds table
  - Implement Pulp forking
  - Redirect to the current URL after OIDC login
  - Drop support for OID auth
  - Add symlink to alma family logo from almalinux
  - Fix AI button visibility
  - After edit, redirect to the package
  - Disable network when crearing a new fedora review project
  - Hide excessive CoprDirs under a details tag
  - Fix local builds in Pulp projects
  - Add AlmaLinux logo
  - Update centos logo
  - Fix one pagure-events' traceback
  - Use the new BeautifulSoup find_all() method
  - Drop the duplicit session.commit() call
  - Fix SAWarnings about autoflush
  - pagure-events fail for "dots" in copr.name
  - Treat malformed task_id in backend_general
  - Log the user who removes a project


author: Jakub Kadlcik <frostyx@email.cz> 2.4-1
changelog:
  - Use beginning of the build as reference for timestamp
  - Support both POST and DELETE for deleting a build
  - Print architecture statistics on status page
  - Implement branch-fedora support for Pulp projects
  - Update e-mail on login
  - Drop libravatar url from data dump (GDPR)
  - Delete data signs-out and redirects to homepage (GDPR)
  - Delete also e-mail entry (GDPR)


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - Don't run builds or actions in projects that are migrated to Pulp
  - Drop support for building modules


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.6-1
changelog:
  - Migrate from pytz to zoneinfo
  - Add API endpoint for generating a new token
  - Fix swapped canceled and ended builds
  - Add option to migrate all projects for an owner
  - Add wildcard support for 'Packit allowed forge projects'


author: Jakub Kadlcik <frostyx@email.cz> 2.7-1
changelog:
  - Don't require admin permissions to show the rebuild button
  - Make sure new-api-token updates expiration token
  - Use SafeRequest for pagure-events
  - Make projects clickable in /status/pending/all
  - Initial Sentry integration
  - Extract Exclu*Arch/BuildArch for all targets
  - Improve chroots graph display
  - Implement persistent projects in Pulp
  - Implement global package search for build chroot results
  - Add distgit source and namespace to source_json
  - Preload build.copr to fix the builds page for large projects
  - Add cancel all marked button
  - Fix script-repos not being saved at all for custom pkgs
  - Exclude persistent projects from EOL chroot deletion
  - Disable AI Log Detective and dist-git redirect for non-logged users
  - Add a test for container tags containing dashes
  - Allow dots and dashes in the container regex
  - Allow resubmit for builds that failed during imports
  - Use build.copr instead of copr context for batches builds
  - Preload build.copr_dir to fix the builds page for large projects
  - Improve timestamp printing in the frontend
  - Fix packit_forge_projects_allowed to return list in API
  - Don't use future=True for sqlalchemy create_engine


author: Jakub Kadlcik <frostyx@email.cz> 2.8-1
changelog:
  - Upload rpm to python and cli
  - Add direct RPM upload build type
  - Move URLs from pagure to forgejo
  - Support unix file pattern matching in --chroot and --exclude-chroot
  - Don't check for "None" keywords
  - Fork also empty repositories
  - Don't crash when failing to send a notification email
  - Add logging for the notify_outdated_chroots script
  - Port markdown rendering to markdown-it-py
  - List all owners that still have projects in some storage
  - Cancel pending build chroots when a chroot is EOLed
  - Add tests for build cancel vs pending-jobs race conditions
  - Change the URL to work with the new API
  - Don't fail pending-actions when copr is None
  - Clarify that pruning is based on RPM names, not Copr packages
  - Preload build.pkg_version for detailed monitor
  - Implement custom markdown/html for users and groups
  - Limit the maximum avatar width


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Pavel Raiskup <praiskup@redhat.com> 1.3-1
changelog:
  - ignore unicode errors some commands' output
  - custom method - do not rely on working `/bin/su` in chroot
  - migrate os.listdir() to os.scandir() to increase performance
  - do not build package for i686 architecture
  - skip build only there are no unexpanded macros in ExclusiveArch/ExcludeArch


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Improve robustness and cooperation with backend
  - Pipe errors/warning out to builder-live.log
  - Make sure we use the latest dist-git-client


author: Jakub Kadlcik <frostyx@email.cz> 1.7-1
changelog:
  - Do not require DNF4 packages and instead require DNF5 packages
  - Extract Exclu*Arch/BuildArch for all targets
  - Add dependency on the which command
  - Use Tito to generate component.__version__


author: Jakub Kadlcik <frostyx@email.cz> 1.9-1
changelog:
  - Add direct RPM upload build type
  - Move URLs from pagure to forgejo
  - Do not build-depend on scl-utils
  - Fix typo, redundant mkdir, and file handle leak
  - Fix container-based unit test workflow
  - Improve copr-rpmbuild man page
  - Add markup to copr-rpmbuild man page
  - Avoid ugly traceback for invalid --task-url and -r
  - Open spec file as read-only


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-1
changelog:
  - rebase to the latest upstream release (rhbz#2436690)
  - enable manual URLs in --help
  - use glibc-all-langpacks to make sure that all locale data required by tests
    will be always present


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-2
changelog:
  - enable the execution of the downstream df/direct.sh test
  - temporarily disable test-getaddrinfo on RHEL builds


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.10-3
changelog:
  - fix possible hangups during testsuite execution
  - rewrite (un)expand multibyte support using the mbbuf module (rhbz#2443041)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-5
changelog:
  - totemsrp: Return error if sanity check fails
    (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity
    (fixes CVE-2026-35092)


author: Petr Menšík <pemensik@redhat.com> - 0.37.2-1
changelog:
  - Update to 0.37.2
  - Fixes silent TLS certificate verification bypass on HTTPS Redirect via
    proxy (CVE-2026-32627, rhbz#2448105)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-5
changelog:
  - Add --skip-dynamic-tags for annocheck
  - annocheck test fails on aarch64 for pinns due to changes in binutils not
    handled by annocheck.
  - See https://sourceware.org/bugzilla/show_bug.cgi?id=33963 for more
    informaton
  - Tempory skip. Remove when annocheck 13.07 or newer is deployed in Fedora
    packit CI


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.11-1
changelog:
  - Update to release v1.34.11
  - Resolves: rhbz#2510870
  - Resolves CVE-2026-34986: rhbz#2455652
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.3-1
changelog:
  - Update to release v1.35.3
  - Resolves: rhbz#2466629
  - Fix CVE-2026-35469
  - Upstream fixes and new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-6
changelog:
  - Document elf exception
  - The elf inspection in rpminspect apparently does not implement the
    'ignore' feature. CRI-O does have TEXTREL which elf marks as bad. The
    --skip-textrel option for annocheck works.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-8
changelog:
  - Add internal/version.buildCommit to GO_LDFLAGS
  - Add the upstream 'internal/version.buildCommit' flag to GO_LDFLAGS using
    %{release} as the value


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.3-1
changelog:
  - Update to release v1.36.3
  - Resolves: rhbz#2510870
  - Resolves  CVE-2026-15809: rhbz#2500983
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-2
changelog:
  - Add CGO flags to build
  - Add CGO_CFLAGS and CFO_LDFLAGS to resolve annocheck stack-prot test
    failure
  - Exclude s390x and ppc64le from flags
  - Refresh spec


author: Adrian Reber <adrian@lisas.de> - 4.2-18
changelog:
  - Route veth restore through usernsd for userns mode (upstream PR#3006)
  - Fix rseq01 test for kernel 7.0 rseq changes (upstream PR#3007)
  - Handle UDPLITE removal in kernel 7.1 (upstream PR#3003)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.17-1
changelog:
  - 2.4.17 (fedora#2456363, fedora#2456362, fedora#2454994, fedora#2454993,
    fedora#2454992, fedora#2454990)


author: Jan Macku <jamacku@redhat.com> - 8.18.0-6
changelog:
  - Fix bad reuse of HTTP Negotiate connection (CVE-2026-1965)
  - Fix token leak with redirect and netrc (CVE-2026-3783)
  - Fix wrong proxy connection reuse with credentials (CVE-2026-3784)
  - Fix use after free in SMB connection reuse (CVE-2026-3805)


author: Jan Macku <jamacku@redhat.com> - 8.18.0-8
changelog:
  - Fix trailing dot domain super cookie (CVE-2026-8924)
  - Fix SSH improper host validation (CVE-2026-9547)
  - Fix password leak with netrc and user in URL (CVE-2026-8926)
  - Fix cross-origin Digest auth state leak (CVE-2026-11856)
  - Fix cross-proxy Digest auth state leak (CVE-2026-7168)
  - Fix OCSP stapling bypass with Apple SecTrust (CVE-2026-7009)


author: Jan Macku <jamacku@redhat.com> - 8.18.0-9
changelog:
  - Fix QUIC zero-length UDP datagrams busy-loop (CVE-2026-11352)
  - Fix WS Auto-PONG memory exhaustion (CVE-2026-11586)
  - Fix proto-default skips SSH verification (CVE-2026-12064)
  - Fix wrong STARTTLS connection reuse (CVE-2026-8286)
  - Fix SASL double-free (CVE-2026-8925)
  - Fix env-set cross-proxy Digest auth state leak (CVE-2026-8927)
  - Fix sending old referer (CVE-2026-9546)
  - Fix exposing HTTP/3 early data (CVE-2026-9545)
  - Fix UAF after pause in socket callback (CVE-2026-9080)


author: Martin Osvald <mosvald@redhat.com> - 3.12.1-5
changelog:
  - cyrus-imapd.spec: various small fixes
  - Add comment about source of public key
  - Use gpgverify in accordance with devel guide
  - Download imaptest sources from lookaside cache
  - Disable cld2 dependent tests properly
  - Fix rpminspect failures


author: Martin Osvald <mosvald@redhat.com> - 3.12.1-7
changelog:
  - cyrus-imapd.spec: various small fixes
  - rename patches to conform with devel guide
  - do variable substitution in braced form


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.0.3-3
changelog:
  - Change license tag (GPL-2.0-or-later -> GPL-2.0-only or GPL-3.0-only)
  - Move license texts to -data subpackage so they're always installed
  - Add links to upstream commits for patches


author: Mihai Patrascoiu <mihai.patrascoiu@cern.ch> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Align specfile with upstream (including whitespace from tabs to spaces)


author: Packit <hello@packit.dev> - 19.2.1-1
changelog:
  - Update to version 19.2.1
  - Resolves: rhbz#2370349
  - Re-enable s390x again after the fix of upstream issue #10218


author: Simone Caronni <negativo17@gmail.com> - 2.48-2
changelog:
  - Parse the Architectures field in the Release file to select
    architectures. Fixes mirroring specific architectures from
    ports.ubuntu.com.


author: Mark Wielaard <mjw@fedoraproject.org> - 5.2-3
changelog:
  - Add 0001-Add-debugedit-classify-ar-and-use-it-before-running-.patch
  - Install debugedit-classify-ar and man page


author: Mark Wielaard <mjw@fedoraproject.org> - 5.3-1
changelog:
  - New upstream 5.3 release
  - Drop all local patches
  - Add new release gpg key
  - Add gcc-c++ as BuildRequires


author: Robert Scheck <robert@fedoraproject.org> - 0.7.1-6
changelog:
  - Added missing dehydrated run-time requirements
  - Resolved: rhbz#2279854 dehydrated dependency issue on EL8


author: Petr Menšík <pemensik@redhat.com> - 10.1.0-1
changelog:
  - Update to 10.1.0 (rhbz#2316744)
  - https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.1.0
  - https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0


author: Petr Šplíchal <psplicha@redhat.com> - 0.22-1
changelog:
  - Implement `transition` stats for the `jira` plugin (#352)
  - Fix issue with wrong `until` in GitHub search (#376)
  - List resolved jira by tester and contributor field
  - Fix `zammad` token bug, some minor adjustments
  - Better handling auth max retry in jira plugin
  - Handle JSON decode errors in pagure plugin
  - Reuse bodhi connection instead of opening new ones
  - Properly handle timeout in pagure plugin
  - Complete report even on plugin error
  - Better handling on server errors for pagure plugin
  - Better handling of wrong url in confluence plugin
  - Handle timeout fetching batches in jira plugin
  - Fixed Jira updated issues and support timeout
  - Collect stats in parallel
  - Add stats for updated jira tickets
  - Handle rate limiting in Jira plugin
  - Allow to filter out orgs in GitHub plugin
  - Properly collect comments in GitHub
  - Improve items plugin
  - Enable pagure closed PRs stats collection
  - Add hyperkitty support
  - Handle better the GitLab expired token case
  - Increased test coverage
  - Use pytest-xdist for parallelizing test execution
  - Add collection of comments for Pagure
  - Cover markdown format while testing Koji
  - Use tenacity handling retry connection to GitHub
  - Added stats for modified pages in Confluence
  - Allow to skip SSL verification in bugzilla plugin
  - Added markdown support to google plugin
  - Add token authentication to confluence plugin
  - Add markdown support to koji plugin
  - Fetch all created issues correctly in `pagure` (#379)
  - Use custom `user-agent` in the `public_inbox` plugin (#392)
  - Fix dockerfile executable path, add git to container (#354)
  - Support `user`, `org`, `repo` in the `github` plugin (#373)
  - Handle the GitHub rate limit in a better way (#374)
  - Create a Public Inbox Plugin
  - Implement `did last [monday..sunday]`
  - Correctly handle merge commits in verbose mode
  - Prevent duplicates in github issue stats
  - Retry connecting to GitLab API on error
  - Add a `Toolbelt Catalog` entry for `did`
  - Allow skipping events that are not reportable
  - Add a team report example using login aliases
  - Migrate to the `SPDX` identifier


author: Petr Šplíchal <psplicha@redhat.com> - 0.23-1
changelog:
  - Enable `epel-10` building and testing (#454)
  - Implement initial support for `forgejo` stats (#452)
  - Support `merged` pull requests for `github` and `gitlab` (#311)
  - Improve the Jira Cloud implementation (#453)
  - Support Jira Cloud instance (#448)
  - Fix issues reported by CodeQL security scan
  - Add --full-message flag to show complete commit/PR/MR bodies (#446)
  - Avoid fetching thousands of pages from GitLab API (#377)
  - Upgrade to CodeQL Action v4 (#445)
  - Fix parsing of --config argument with whitespace (#437)
  - Fix `GitHub.commented_in_range` (#444)
  - Add type hints to items plugin (#443)
  - Add type hints to Confluence plugin (#442)
  - Add type hints to Jira plugin (#441)
  - Jira issues with worklogs (#429)
  - Enable Python 3.14 support (#440)
  - Add type hints and error handling to Bugzilla plugin (#433)
  - Add type hints and error handling to Bodhi plugin (#432)
  - Fix error handling in config parsing and CLI (#431)
  - Add typing hints to conftest.py (#430)
  - Add type hints to CLI module (#424)
  - Add type annotations on base.py (#423)
  - Fix typing issues reported by mypy (#422)
  - Fix GitLab plugin 60s default timeout (#421)
  - Add unit tests for utils module (#417)
  - Add unit tests for stats module (#414)
  - Fix missing Optional typing (#411)
  - Fix return type for `get_token` in `base.py` (#412)
  - Avoid using variable names used in exceptions (#413)
  - Handle error responses querying GitHub (#408)
  - Fix Zammad plugin by filtering tickets after search (#328)
  - Add `pyproject.toml` (#409)
  - Support retry while fetching `public-inbox` stats
  - Retry bugzilla search query on connection errors
  - Deal with conflicting period options
  - Fix PageModified stat in Confluence plugin
  - Fix Jira transition to state with multiple projects


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 312-1
changelog:
  - Version 312
  - This and the previuos version contain updates for compatibility with
    newer versions of dependencies.


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Miroslav Suchý <msuchy@redhat.com> 1.115-1
changelog:
  - update copr keys
  - Update for openSUSE 16 keys
  - Update changelog
  - Microsoft: add 2025 & open tech keys
  - alpine-linux: Add loongarch64 key
  - fedora: Update rawhide symlink


author: Pavel Raiskup <pavel@raiskup.cz> 1.116-1
changelog:
  - Add CentOS PQC signing keys
  - Add RHEL PQC signing keys
  - suse: Update RPM-GPG-KEY-SuSE-SLE-12
  - Refresh CentOS SIG Extras key
  - Update CentOS SIG keys downlod script
  - Add missing CentOS SIG keys
  - Add new Slack key used by versions 4.47 and above
  - Add openSUSE Leap SLE imports
  - Add Slack key


author: Miroslav Suchý <msuchy@redhat.com> 1.119-1
changelog:
  - update copr keys
  - add: ultramarine repository keys
  - add: terra repository keys
  - update Google key block


author: Pavel Raiskup <pavel@raiskup.cz> 1.120-1
changelog:
  - Update RPM-GPG-KEY-openSUSE-2022
  - add Teams for Linux repository key
  - add Oracle Linux 10 key
  - Add NetBSD security officer key
  - update copr keys
  - Added EndeavourOS, Tuxedo OS, and Linux Mint keys


author: Xavier Bachelot <xavier@bachelot.org> - 3.5.28-12
changelog:
  - Do not BuildRequires: inkscape on EL10
  - Sort BuildRequires:
  - Use %make_build, %make_install and %license macros
  - Improve %files section


author: Pavel Raiskup <praiskup@redhat.com> - 2.0-1
changelog:
  - new upstream release, with DNF5 support
    https://github.com/praiskup/dnf-plugin-diff/releases/tag/v2.0


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-2
changelog:
  - Fix a crash in dnf5daemon-server when receiving an unknown locale from
    a D-Bus client (CVE-2026-3836) (bug #2445771)


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-3
changelog:
  - Fix a crash when formatting an RPM scriptlet output containing a non-ASCII
    character in C locale (bug #2443774)


author: Sander Hoentjen <shoentjen@antagonist.nl> - 2.0.3-1
changelog:
  - Update to new upstream
  - Fixes #2453419 (CVE-2026-27854)
  - Fixes #2453421 (CVE-2026-27853)
  - Fixes #2453426 (CVE-2026-24030)
  - Fixes #2453427 (CVE-2026-0397)
  - Fixes #2453429 (CVE-2026-24029)
  - Fixes #2453430 (CVE-2026-0396)
  - Fixes #2453431 (CVE-2026-24028)


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves CVE-2026-39984: rhbz#2458929
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0-1
changelog:
  - Update to release v0.31.0
  - Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.2-1
changelog:
  - Update to release v0.31.2
  - Upstream security fixes (including ones in v0.31.1)
  - GHSA-hw3h-2gp9-cxpv
  - GHSA-qx3x-mv6r-52p6
  - GHSA-32pv-7hq5-qhwq
  - GHSA-g2h8-426c-7976
  - GHSA-388v-wmr2-g2v2
  - GHSA-7236-3392-c5c6
  - GHSA-72x6-4j93-7w86
  - Additional fixes`


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.32.0-1
changelog:
  - Update to release v0.32.0
  - Upstream new features and fixes
  - Resolves CVE-2026-47262 - rhbz#2496456
  - Resolves CVE-2026-53492 - rhbz#2496552


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.33.0-2
changelog:
  - Update to new spec file
  - Regenerate spec file using go2rpm
  - Use gocheck2. Current v0.33.0 release will sometimes fail during check
    phase with an https related test. No obvious pattern related to
    architecture. gocheck2 will allow for test to be skipped if needed


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.34.0-1
changelog:
  - Update to release v0.34.0
  - Resolves: rhbz#2467576
  - Resolves CVE-2026-39984: rhbz#2458930
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.35.0-1
changelog:
  - Update to release v0.35.0
  - Resolves: rhbz#2487819
  - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
  - Upstream enhancements, new features, and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.36.0-1
changelog:
  - Update to release v0.36.0
  - Resolves: rhbz#2506339
  - Upstream new features and fixes
  - Resolves CVE-2026-53492 - rhbz#2496553
  - Resolves CVE-2026-47262 - rhbz#2496436


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.1.3-1
changelog:
  - Update to release v5.1.3
  - Resolves rhbz#2458697
  - Resolves CVE-2026-33747: rhbz#2452188, rhbz#2452199
  - Resolves CVE-2026-33748: rhbz#2453089
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.2.0-1
changelog:
  - Update to release v5.2.0
  - Resolves: rhbz#2491751
  - Important upstream note: This version introduces a new reconciliation
    algorithm between the observed state and the expected state. If you
    experience any issues with a Compose workload that was previously
    working, please open an issue with upsteam.
  - Additional upstream enhancements and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.3.0-1
changelog:
  - Update to release v5.3.0
  - Resolves: rhbz#2496535
  - Resolves CVE-2026-53492: rhbz#2496550
  - Resolves CVE-2026-47262: rhbz#2496433
  - Upstream note: This release introduces native support for init
    containers.
  - Additional upstream fixes and new features


author: Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.0-1
changelog:
  - Update to release v3.1.0
  - Resolves: rhbz#2455529, rhbz#2455654
  - Resolves CVE-2026-35172
  - Resolves CVE-2026-33540
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.1-1
changelog:
  - Update to release v3.1.1
  - Resolves: rhbz#2455529
  - Fixes CVE-2026-41888
  - Upstream fixes and updates
  - Temporary annocheck skip test for broken branch protection test on
    aarch64


author: Than Ngo <than@redhat.com> - 7.5.3-1
changelog:
  - Update to 7.5.3
    * Fix: Exit with non-zero code if the conversion is aborted due to a binary file
    * Fix: Exit with zero code when an unicode conversion error occurs in quiet mode
    * Updated translations


author: Christian Krause <chkr@fedoraproject.org> - 1.1.17-6
changelog:
  - Update location of ca bundle according to
    https://fedoraproject.org/wiki/Changes/droppingOfCertPemFile


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-ATOMIC_VAR_INIT.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-more-dwarf5-lang.patch
    elfutils-0.192-fix-zsh-profile.patch
    elfutils-0.192-stacktrace-lto.patch
    elfutils-0.192-imasig-fail-free.patch
    elfutils-0.192-strip-ignore-non-ET_REL.patch


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-aarch64-Recognize-SHT_AARCH64_ATTRIBUTES.patch
    elfutils-0.194-alloc-jobs.patch
    elfutils-0.194-fix-const.patch
    elfutils-0.194-sh_addr-non-zero.patch


author: Aaron Merey <amerey@redhat.com> - 0.196-1
changelog:
  - Upgrade to upstream elfutils 0.196 (rhbz#2516216)
  - Add eu-stackprof, a new tool for collecting systemwide stacktrace
    profiles, on x86/ARM
  - Remove the experimental eu-stacktrace tool along with the
    sysprof-capture-devel build dependency
  - Add libpfm-devel build dependency for eu-stackprof


author: Jerry James <loganjerry@gmail.com> - 14.1.2-1
changelog:
  - Version 14.1.2
  - Merge the doc subpackage into the main package
  - Recommend texlive-mylatex (needed for preview)
  - Add a %check script


author: Ruslan Bekenev <furyinbox@gmail.com> - 1.27.0-1
changelog:
  - Update to 1.27.0
  - Use SPDX License Expression for License
  - Requires: emacs-filesystem for directory ownership


author: Peter Lemenkov <lemenkov@gmail.com> - 26.2.5.21-4
changelog:
  - Backport fix for CVE-2026-48858, CVE-2026-48860, CVE-2026-49759,
    CVE-2026-54886, CVE-2026-54891, CVE-2026-55952


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: psklenar@redhat.com <psklenar@redhat.com> - 2.7.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Pawel Zmarzly <pzmarzly0@gmail.com> - 0^20260107gitdbb4529-4
changelog:
  - Import README from previous repo
  - Renaming package from gitlab-github-facebook-time to facebook-time


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Dr Anirban Mitra <mitra_anirban@yahoo.co.in> - 3.4.2-1
changelog:
  - Added Missing .notdef glyf
  - Added stylistic alternate of i-matra and ii-matra
  - reinstated vertical fraction lookup mistakenly deleted from previous version


author: Jens Petersen <petersen@redhat.com> - 1.7.1-34
changelog:
  - rebuild for haxr xmlrpc to Accept: application/xml
  - use rpmbuild-order 0.4.13
  - [epel] recommends epel-rpm-macros


author: Jens Petersen <petersen@redhat.com> - 1.8-35
changelog:
  - https://hackage.haskell.org/package/fbrnch-1.8/changelog
  - new 'branch-log' command
  - 'build','parallel': can now merge --from a particular branch
  - 'commit': requires -b option to confirm non-rawhide commit
  - 'compare-tarballs': new command to diff source tarballs
  - 'copr --failures': fetches tails of failed build logs
  - new 'repoquery' command which wraps fedora-repoquery
  - 'update-sources': prep in tmpdir; compares tarballs; improved ver-rel logic
  - `FBRNCH_KOJI_PROFILE` provides experimental Koji profile support (eg riscv)
  - merge handling improvements
  - tries to setup git upstream branch tracking


author: Jens Petersen <petersen@redhat.com> - 1.8.1-38
changelog:
  - new native watchtask implementation and command
  - local build.log's now generated with 'script' tool instead of tee pipe
  - some web API calls now retry to help with connection issues
  - update-sources try to take "sources" changes into account now
  - merge tries to rebase if origin ahead
  - more details: https://hackage.haskell.org/package/fbrnch-1.8.1/changelog


author: Jens Petersen <petersen@redhat.com> - 1.8.3-40
changelog:
  - 'autospec': don't switch to rawhide and pass pkg spec file to convert
  - 'compare-tarballs': order tarballs by removal and addition
  - 'copr': filter out canceled builds from existing builds
  - 'mock': add --no-pull and --config-options
  - 'mock': use target branch for srpm and build disttag
  - 'nvr': fix for epel10 disttag with autorelease
  - Branches listOfBranches: do eol/branched checks for all BranchesReq


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.6-6
changelog:
  - Switch to pkg-config style dependency
  - Use SPDX identifier in License: tag and add licensing break-down
  - update build_ldflags instead of messing with LDFLAGS


author: Miroslav Suchý <msuchy@redhat.com> 1.67-1
changelog:
  - add autossh man page ultra permissive dedication
  - add LGPL-2.1-only WITH Digia-Qt-LGPL-exception-1.1
  - add jove license
  - add man2html license
  - add DocBook-DTD license
  - add BSD-2-Clause-pkgconf-disclaimer
  - correct expression of PHP-3.0
  - Add SpacemiT esos.elf license as allowed-firmware
  - Add 7zip public domain headers
  - add Game-Programming-Gems license
  - add LGPL-2.1-or-later WITH polyparse-exception
  - add GPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - enhance BSD-3-Clause-Clear usage text
  - document known exception for kernel for BSD-3-Clause-Clear
  - add LicenseRef-Hauppauge-firmware-eula as not allowed
  - add LicenseRef-Hauppauge as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.68-1
changelog:
  - add CC-SA-1.0 as allowed-content
  - allow golang-x-perf to use CC-BY-4.0 for code as an exception
  - add GPL-3.0-or-later WITH Libtool-exception
  - UltraPermissive: Add a text found in libisds
  - add LicenseRef-Geotrans as not-allowed
  - Add public-domain dedication for jemalloc/rust-tikv-jemalloc-sys
  - add Aspell-RU
  - add ngrep
  - add Unlicense-libwhirlpool
  - add Unlicense-libtelnet
  - add CDLA-Permissive-2.0
  - add BSD-3-Clause WITH AdditionRef-Dart
  - add UltraPermissive dedication of autossh


author: Miroslav Suchý <msuchy@redhat.com> 1.70-1
changelog:
  - add GPL-2.0-only WITH Universal-FOSS-exception-1.0
  - add libpng licenses
  - add UltraPermissive dedication of tolua++
  - add note and link that APSL-1.x can be used as APSL-2.0
  - add LicenseRef-Remix-icon as not-allowed
  - describe how to use LicenseRef-IUPAC-InChI-Trust
  - Add public-domain dedication for dcm2niix
  - add LicenseRef-Aalok-Everfree as not-allowed
  - add public domain dedication of libtommath
  - add public domain dedication of heimdal


author: Miroslav Suchý <msuchy@redhat.com> 1.71-1
changelog:
  - add GPL-2.0-or-later WITH LicenseRef-Fedora-Temporary-kvirc-openssl-exception
  - add GPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-cryptsetup-OpenSSL-
    exception
  - add LGPL-2.1-or-later WITH LicenseRef-Fedora-Temporary-Simple-Library-
    exception
  - add AGPL-3.0-or-later WITH LicenseRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817
  - add LGPL-2.0-only WITH LicenseRef-Fedora-Temporary-Classpath-exception-
    variation
  - add LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib
  - add LicenseRef-Fedora-Temporary-OSSP
  - add LicenseRef-Fedora-Temporary-AZL
  - add LicenseRef-Fedora-Temporary-Python-trace
  - add Advanced-Cryptics-Dictionary license
  - add BSD-Mark-Modifications license
  - Remove deprecated parts from JSON
  - grammar: sort ID alphabetically
  - grammar: do not allow bad license with OR operator
  - add WTFNMFPL license
  - add LicenseRef-HPND-TAES as not-allowed
  - add LGPL-2.0-only WITH Universal-FOSS-exception-1.0
  - OPUBL-1.0: Move packages_with_exceptions into [license]
  - Add public-domain dedication for tinyxml2
  - add WordNet license
  - Extend ISO-8879 exception to dotnet10.0


author: Miroslav Suchý <msuchy@redhat.com> 1.73-1
changelog:
  - add dedications from linux-firmware from qcom/NOTICE.txt
  - add LGPL-2.0-only WITH Classpath-exception-2.0-short
  - add OSSP license
  - add GPL-3.0-or-later WITH GCC-exception-2.0
  - add hyphen-bulgarian license
  - add GPL-2.0-or-later WITH kvirc-openssl-exception
  - add LICENCE.siano from linux-firmware to firmware.txt
  - add HPND-SMC
  - removed LicenseRef-Fedora-Temporary-IJG
  - add LicenseRef-Fedora-Wadalab
  - rename LicenseRef-Fedora-Temporary-* to AdditionRef-Fedora-Temporary-*


author: Miroslav Suchý <msuchy@redhat.com> 1.74-1
changelog:
  - remove LicenseRef-Romio as it equals to SPDX ID mpich2
  - add public domain dedication from gstreamer1-plugins-bad-free
  - add public domain dedication from openmpi
  - add LICENSE.QualcommAtheros_ar3k from linux-firmware to firmware.txt
  - add text to LicenseRef-* licenses
  - add public domain dedication from rb_libtorrent
  - add LicenseRef-BSD-TPM as not-allowed
  - add LicenseRef-Hippocratic-3.0 as not-allowed
  - add LICENSE.i915 from linux-firmware to firmware.txt
  - add LICENCE.IntcSST2 from linux-firmware to firmware.txt
  - add LicenseRef-ECMA-spec license
  - add NPL-1.1 license
  - rename LGPL-2.1-or-later_WITH_AdditionRef-Fedora-Temporary-Simple-Library-
    exception to final LGPL-2.1-or-later_WITH_Simple-Library-Usage-exception
  - rename LicenseRef-Fedora-Temporary-BSD-1-Clause-alglib to ALGLIB-
    Documentation
  - rename AGPL-3.0-or-later_WITH_AdditionRef-Fedora-Temporary-PS-or-PDF-font-
    exception-20170817 to AGPL-3.0-or-later_WITH_PS-or-PDF-font-
    exception-20170817
  - add firmware license from linux-firmware - LICENSE.amdnpu
  - add firmware license from linux-firmware - LICENCE.Marvell
  - add firmware license from linux-firmware - LICENCE.OLPC
  - add firmware license from linux-firmware - LICENCE.ti-connectivity
  - add firmware license from linux-firmware - LICENCE.xc4000
  - add firmware license from linux-firmware - LICENCE.adsp_sst
  - add LICENCE.mediatek from linux-firmware to firmware.txt


author: Miroslav Suchý <msuchy@redhat.com> 1.75-1
changelog:
  - add MIT WITH fmt-exception
  - add LicenseRef-Remix-icon-license-1.0 as not-allowed
  - add LPD-document as allowed-content
  - add public domain dedication from tcputils
  - add GPL-2.0-only WITH eCos-exception-2.0 as allowed
  - rename temporary AdditionRef-WebM-patent-license to Google-Patent-WebM
  - Add public-domain dedication for python-rnc2rng
  - add public domain dedication from enchant
  - Add rocq-doc as known exception to OPUBL-1.0
  - add GPL-3.0-or-later WITH CGAL-linking-exception
  - replace temporary ID with sqlitestudio-OpenSSL-exception
  - add gstreamer1-doc as known exception to OPUBL-1.0
  - add public domain dedication from fcitx5-mozc
  - add public domain dedication from bsd-games


author: Miroslav Suchý <msuchy@redhat.com> 1.76-1
changelog:
  - Add dotnet11.0 to the LicenseRef-ISO-8879 list
  - add atc-game
  - Rename ODbl-1.0 -> ODbL-1.0
  - add LGPL-2.1-or-later WITH Spelling-Provider-LGPL-exception
  - add LicenseRef-Eirene as not allowed
  - add GPL-2.0-or-later_WITH_CLISP-exception-2.0
  - add Informatica
  - update links to new location at forge.fedoraproject.org
  - Add intel_vpu
  - Update to add LICENCE.atheros_firmware
  - add GPL-3.0-or-later WITH Autoconf-exception-3.0 as allowed


author: Jens Petersen <petersen@redhat.com> - 0.8-1
changelog:
  - https://hackage.haskell.org/package/fedora-repoquery-0.8/changelog
  - parsing and completion of all dnf options
  - add generated fish and zsh completion files for fedora-repoquery (frpq
    pending)


author: Miroslav Suchý <msuchy@redhat.com> 41.2-1
changelog:
  - remove-retired-packages: detect removed subpackages
  - no need to check if F41 is prerelease
  - add new line to repoquery to make remove-retired-packages work with dnf5


author: Miroslav Suchý <msuchy@redhat.com> 41.3-1
changelog:
  - correctly detect tmux
  - requires sudo
  - add reverence to `dnf history` in man page
  - add old gpg keys
  - group minimal install does not exist anymore
  - move rawhide version


author: Miroslav Suchý <msuchy@redhat.com> 42.3-1
changelog:
  - add upgrade to Fedora 43
  - remove upgrade to F40 that is EOL
  - typo
  - dnf5 uses /var/cache/libdnf5


author: Miroslav Suchý <msuchy@redhat.com> 42.4-1
changelog:
  - migrate from python3-dnf to python-libdnf5
  - use spdx id as license name
  - update link to documentation
  - add upgrade to F44
  - do not check if F43 is prerelease
  - simplify spec - remove f40- code


author: Ondřej Nosek <onosek@redhat.com> - 1.47-1
changelog:
  - Use ruff code checker instead of bandit (onosek)
  - Clone the API key info into all help messages (mpospisi)
  - README: Documentation link change, and new Jenkins link – `#606`_ (gleiro)
  - `update`: Add unspecified update type (priv.luk@gmail.com)
  - `request-unretirement`: Added a new command (amedvede)
  - `request-repo`: creating project and package in Anitya (amedvede)
  - Switch to %pyproject_* macros (onosek)
  - `retire`: extend the command's console help - `rhbz#2189969`_ (onosek)
  - Jenkinsfile: use local declaration instead of global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji – `#600`_ (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.48-1
changelog:
  - Handle repo-status API errors (artur)
  - Add --package option to fedpkg repo-status (artur)
  - Omit unused repos in repo-status (artur)
  - Separate Fedora and EPEL in repo-status (artur)
  - Add initial version of repo-status command (artur)
  - Migrate SCM requests from Pagure to Forgejo (patrik)
  - Clean up unnecessary Python 2 compatibility code (onosek)
  - Fixing ruff and flake8 complaints (onosek)
  - feat(new-package): add tests (sanjay.ankur)
  - feat(new-package): add util functions (sanjay.ankur)
  - feat(new-package): add new command (sanjay.ankur)
  - Unittests for PR#631 (onosek)
  - Allow detecting release from EPEL minor version feature branches
    (carlwgeorge)
  - Fix Jenkinsfile for a Jenkins CI triggered from the Forge (onosek)
  - Web documentation at Readthedocs.io (onosek)
  - Post-migration steps (onosek)
  - `request_unretirement`: split branches into koji_tags and distgit_branches
    (amedvede)
  - Add lookaside_http_version config option (onosek)
  - docs: modernize Sphinx conf.py (onosek)
  - `update`: Add --notes-file option to read notes from file (onosek)
  - License file without physical address (onosek)
  - Modularity retired - remove corresponding commands (onosek)
  - Various code linter issues fixed (onosek)
  - Check the correct sorting of imports from now on (onosek)
  - `request-unretirement`: fix unittests (onosek)


author: Packit <hello@packit.dev> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: rhbz#2336848


author: Packit <hello@packit.dev> - 0.5.4-1
changelog:
  * packit: drop centos propose downstream and jobs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/743
   * fix: packit: bring back pkg_tool centpkg by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/744
   * Makefile tarball targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/745
   * chore: describe how to release a new version by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/746
   * chore: allow libcryptsetup-rs >= 0.11.2 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/739
   * chore: bump diesel from 2.2.3 to 2.2.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/728
   * Update to latest version of aws-nitro-enclaves-cose by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/724
   * chore: bump reqwest from 0.12.7 to 0.12.9 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/751
   * chore: bump ring from 0.17.8 to 0.17.13 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/754
   * chore: bump futures from 0.3.30 to 0.3.31 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/753
   * chore: prepare 0.5.4 release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/757


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.3...v0.5.4


author: Packit <hello@packit.dev> - 0.5.5-1
changelog:
  * chore: bump openssl from 0.10.70 to 0.10.72 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/758
   * fix: replace default.target with initrd.target by @lbrabec in https://github.com/fdo-rs/fido-device-onboard-rs/pull/762
   * ci(mergify): upgrade configuration to current format by @mergify in https://github.com/fdo-rs/fido-device-onboard-rs/pull/766
   * chore: bump tokio from 1.36.0 to 1.45.1 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/769
   * chore: bump actions/upload-artifact from 3 to 4 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/593
   * chore: bump actions/checkout from 3 to 4 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/551
   * chore: bump regex from 1.10.3 to 1.11.1 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/752
   * chore: bump tss-esapi crate to 7.6 by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/772
   * chore: fix the container deps by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/775
   * chore: bump for 0.5.5 release by @pcdubs in https://github.com/fdo-rs/fido-device-onboard-rs/pull/771

   * @lbrabec made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/762
   * @mergify made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/766

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.4...v0.5.5
  - Resolves: rhbz#2369025


author: Martin Stransky <stransky@redhat.com> - 154.0-4
changelog:
  - Backported fix for HDR crash when HLG transform is missing
    (and it's always missing!).
  - Backported HDR fix for GL framebuffer (D318191).


author: Sayan Paul <saypaul@redhat.com> - 1.9.2-15
changelog:
  - Add Python unit test suite to %check
  - Bring in pytest/numpy build dependencies for the tests
  - Patch: raise cmake_minimum_required to 3.5 for CMake 4+ compatibility
  - Patch UseLATEX.cmake: make html target depend on pdf target (CMake 4)


author: Sudip Shil <sshil@redhat.com> - 1.5.3-1
changelog:
  - Fixed: First font button selects a font even when no fonts are installed.
  - Returns the language name if no Pango sample text is available for the language.
  - Added support for RHEL ZhongYi Song fonts and fonts with special characters like //-.
  - Font button font list and font size now support RHEL ZhongYi Song fonts.


author: Sudip Shil <sshil@redhat.com> - 1.5.4-1
changelog:
  - Started porting fonts-compare to use libadwaita on top of GTK for a modern and responsive UI.
  - Refactored CustomDialog to enhance usability.
  - Fontname of fontbutton has normal fontweight and removed bold weight from name of button.
  - Enhanced language detected language to appear at the top of the language list after text detection in the Edit Label button.


author: Sudip Shil <sshil@redhat.com> - 1.5.5-1
changelog:
  - Added support for multi-script text handling, auto-enable fallback like 안녕하세요 آپکیسہیں? শুভ সকল।
  - add feature in fonts-compare like fonts-compare --text "Hello こんにちは 你好"
  - the text can be ASCII or non-ASCII, it will work for both


author: Sudip Shil <sshil@redhat.com> - 1.6.0-1
changelog:
  - Replace Gtk.AboutDialog with Adw.AboutWindow and add Ctrl+Q/E keybindings for quit/edit]
  - Port to AdwApplicationWindow and ToolbarView, enable label auto-wrap with screen-fit resizing
  - new modern README for users
  - copyright updated


author: Kim B. Heino <b@bbbs.net> - 0.31-1
changelog:
  - Upgrade to 0.31
  - CVE-2025-67603: Add PolicyKit authorization to D-Bus methods
  - CVE-2025-67858: Verify interface input parameter on D-Bus methods


author: Jerry James <loganjerry@gmail.com> - 33.0-1
changelog:
  - Version 33.0
  - Drop unneeded patches
  - Disable testing, which is now completely broken
  - Use the dune declarative buildsystem
  - Fedora RPM builds now deduplicate by default


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-9
changelog:
  - Ensure proper error code return in case MS-PAC generator not yet enabled
  - Resolves: rhbz#2448253
  - Rebuild against Samba 4.24.0 final release
  - Related: rhbz#2448612


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.3-1
changelog:
  - Upstream release 4.13.3
  - Resolves: CVE-2026-11861, CVE-2026-13097, CVE-2026-19550, CVE-2026-73199, CVE-2026-73198, CVE-2026-73197, CVE-2026-73196


author: Ondrej Holy <oholy@redhat.com> - 2:3.27.1-1
changelog:
  - Update to 3.27.1 (CVE-2026-55191, CVE-2026-55192, CVE-2026-55193,
    CVE-2026-55194, CVE-2026-55648, CVE-2026-55827)
    Resolves: rhbz#2488900


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.0.7^20260414-1
changelog:
  - Update to v1.0.7
  - Drop Qt6-related patches (issues fixed upstream)
  - Add patch for missing Qt6-Core5Compat library


author: Jerry James <loganjerry@gmail.com> - 0.9.6-1
changelog:
  - Version 0.9.6
  - Drop unneeded makefile patch
  - Build with cmake
  - Add patch to build shared library instead of static library
  - Use the %license macro


author: Pavol Sloboda <psloboda@redhat.com> - 26.4.25-3
changelog:
  - Added a patch fixing the build with openssl4 by using the opaque
    implementation of the X509_name_st struct as X509_NAME


author: Pavol Sloboda <psloboda@redhat.com> - 26.4.25-4
changelog:
  - Added the mariadb galera centos-stream tests to ensure that galera is
    getting gated on Fedora as well


author: Jerry James <loganjerry@gmail.com> - 4.16.0-1
changelog:
  - Version 4.16.0
  - Drop upstreamed intptr-min and left-shift patches
  - Use the new GAP logo
  - Drop unnecessary BuildRequires
  - Use gap(...) symbols in dependencies
  - Run pdftex in nonstop mode
  - Relicense the metainfo as GPL-2.0-or-later for simplicity


author: Jerry James <loganjerry@gmail.com> - 2.1.9-1
changelog:
  - Version 2.1.9
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude
  - License file now supplied by upstream


author: Jerry James <loganjerry@gmail.com> - 1.2.7-1
changelog:
  - Version 1.2.7
  - Setting LC_ALL is no longer necessary
  - Build documentation with AutoDoc
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 2.8.2-1
changelog:
  - Version 2.8.2
  - Predownloaded ATLAS data is no longer needed for the tests
  - Setting LC_ALL is no longer needed
  - Avoid use of %exclude


author: Jerry James <loganjerry@gmail.com> - 0.4.1-4
changelog:
  - Rebuild for gap 4.16.0
  - Drop unnecessary BuildRequires
  - Use gap(...) symbols in dependencies
  - Add patch to avoid undefined behavior due to signed integer overflow


author: Jerry James <loganjerry@gmail.com> - 1.0.13-1
changelog:
  - Version 1.0.13
  - Add patch to adapt the tests to changed output
  - Setting LC_ALL is no longer necessary
  - Avoid %exclude


author: Jerry James <loganjerry@gmail.com> - 0.3-3
changelog:
  - Update to git HEAD for bug fixes
  - Drop upstreamed documentation patch
  - Use the GAP declarative buildsystem


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/124016, ada/124054, ada/124106, ada/124179, ada/124192,
  	ada/124201, ada/124224, ada/124226, ada/124282, ada/124285,
  	algol68/124028, algol68/124049, algol68/124115, analyzer/108400,
  	analyzer/111099, analyzer/113496, analyzer/117369, analyzer/121928,
  	analyzer/123973, analyzer/123981, analyzer/124055, analyzer/124073,
  	analyzer/124104, analyzer/124116, analyzer/124139, analyzer/124188,
  	analyzer/124195, analyzer/124232, c/87591, c/105555, c/119651,
  	c/123365, c/123472, c/123716, c++/98939, c++/101670, c++/102397,
  	c++/119756, c++/120685, c++/120974, c++/121500, c++/121822,
  	c++/122318, c++/122621, c++/123143, c++/123440, c++/123608,
  	c++/123612, c++/123641, c++/123642, c++/123660, c++/123661,
  	c++/123662, c++/123989, c++/124012, c++/124045, c++/124070,
  	c++/124096, c++/124119, c++/124150, c++/124153, c++/124173,
  	c++/124184, c++/124204, c++/124215, c++/124227, cobol/119455,
  	cobol/121499, cobol/122839, cobol/123238, demangler/106641,
  	diagnostics/122001, diagnostics/124014, fortran/78187, fortran/80012,
  	fortran/88076, fortran/99250, fortran/108663, fortran/120505,
  	fortran/121360, fortran/121429, fortran/122491, fortran/123943,
  	fortran/123947, fortran/123949, fortran/124071, fortran/124080,
  	fortran/124208, fortran/124235, fortran/124286, ipa/122856,
  	ipa/123229, ipa/123629, libfortran/88076, libfortran/123366,
  	libstdc++/105580, libstdc++/113450, libstdc++/119745,
  	libstdc++/121402, libstdc++/121771, libstdc++/123176,
  	libstdc++/123875, libstdc++/123908, libstdc++/123991,
  	libstdc++/124015, libstdc++/124024, libstdc++/124124,
  	middle-end/113436, middle-end/123386, middle-end/124056,
  	middle-end/124250, middle-end/124280, other/88472,
  	rtl-optimization/116053, rtl-optimization/116600,
  	rtl-optimization/120169, rtl-optimization/121191,
  	rtl-optimization/123048, rtl-optimization/123381,
  	rtl-optimization/123994, rtl-optimization/124062,
  	rtl-optimization/124079, target/57261, target/80881, target/112400,
  	target/113453, target/115042, target/119979, target/120233,
  	target/120234, target/120241, target/120888, target/122448,
  	target/123137, target/123195, target/123285, target/123556,
  	target/123624, target/124048, target/124094, target/124098,
  	target/124134, target/124136, target/124138, target/124147,
  	target/124162, target/124167, target/124194, target/124236,
  	target/124294, testsuite/103515, testsuite/115827, testsuite/123191,
  	testsuite/124064, translation/118988, tree-optimization/90036,
  	tree-optimization/95825, tree-optimization/99959,
  	tree-optimization/107690, tree-optimization/110091,
  	tree-optimization/114375, tree-optimization/117935,
  	tree-optimization/121103, tree-optimization/122297,
  	tree-optimization/124038, tree-optimization/124068,
  	tree-optimization/124086, tree-optimization/124099,
  	tree-optimization/124108, tree-optimization/124130,
  	tree-optimization/124132, tree-optimization/124142,
  	tree-optimization/124288


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.9
changelog:
  - update from trunk
    - PRs c/122572, c++/123408, c++/123665, c++/123810, c++/124229, c++/124306,
  	c++/124324, c++/124368, cobol/119456, fortran/124330, ipa/60674,
  	libfortran/124330, libstdc++/117402, libstdc++/119197,
  	libstdc++/122217, libstdc++/124363, middle-end/45273,
  	rtl-optimization/123786, rtl-optimization/124041,
  	rtl-optimization/124351, target/64835, target/124165, target/124315,
  	target/124335, target/124336, target/124341, target/124349,
  	target/124366, target/124367, testsuite/122961, testsuite/124320,
  	testsuite/124359, tree-optimization/119568
    - fix -flto -g handling of aarch64 AEABI attributes
      (#2439677, PR target/124365)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.10
changelog:
  - update from trunk
    - PRs ada/107475, ada/120669, ada/124369, ada/124376, algol68/124322,
  	algol68/124372, analyzer/107646, analyzer/124375, analyzer/124433,
  	analyzer/124451, bootstrap/124406, bootstrap/124547, c/97991,
  	c/122866, c/123461, c/123856, c/124230, c++/39057, c++/109521,
  	c++/115852, c++/118482, c++/120039, c++/120285, c++/122559,
  	c++/122786, c++/123618, c++/123622, c++/124118, c++/124145,
  	c++/124154, c++/124200, c++/124297, c++/124307, c++/124309,
  	c++/124311, c++/124331, c++/124388, c++/124389, c++/124390,
  	c++/124397, c++/124399, c++/124404, c++/124417, c++/124425,
  	c++/124431, c++/124440, c++/124447, c++/124456, c++/124459,
  	c++/124466, c++/124472, c++/124474, c++/124478, c++/124483,
  	c++/124485, c++/124489, c++/124493, c++/124494, c++/124496,
  	c++/124575, d/123202, d/124158, driver/69367, driver/69849,
  	fortran/82721, fortran/84779, fortran/93832, fortran/95338,
  	fortran/97818, fortran/102333, fortran/102459, fortran/102596,
  	fortran/103139, fortran/105168, fortran/106946, fortran/110877,
  	fortran/115316, fortran/120286, fortran/120723, fortran/121043,
  	fortran/121743, fortran/122696, fortran/122902, fortran/124161,
  	fortran/124450, fortran/124482, gcov-profile/123923,
  	gcov-profile/124075, ipa/124291, ipa/124462, libfortran/124371,
  	libstdc++/116110, libstdc++/118030, libstdc++/118341,
  	libstdc++/119794, libstdc++/120527, libstdc++/121790,
  	libstdc++/122300, libstdc++/122567, libstdc++/124268,
  	libstdc++/124290, libstdc++/124443, libstdc++/124444,
  	libstdc++/124463, libstdc++/124513, libstdc++/124568,
  	middle-end/120030, middle-end/121159, middle-end/124435,
  	middle-end/124491, middle-end/124552, objc/124260, other/124508,
  	preprocessor/105412, rtl-optimization/121649, rtl-optimization/123094,
  	rtl-optimization/123822, rtl-optimization/124078,
  	rtl-optimization/124439, rtl-optimization/124452,
  	rtl-optimization/124454, rtl-optimization/124476, target/117182,
  	target/122000, target/122925, target/122953, target/123271,
  	target/123749, target/124044, target/124126, target/124333,
  	target/124403, target/124407, target/124409, target/124436,
  	target/124461, target/124565, target/124566, testsuite/112520,
  	testsuite/119930, testsuite/124066, testsuite/124484,
  	translation/124422, tree-optimization/80006, tree-optimization/98064,
  	tree-optimization/120987, tree-optimization/122380,
  	tree-optimization/124037, tree-optimization/124135,
  	tree-optimization/124358, tree-optimization/124528,
  	tree-optimization/124555, tree-optimization/124578


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.11
changelog:
  - update from trunk
    - PRs ada/77535, ada/87170, ada/95452, ada/105212, ada/124596, ada/124606,
  	ada/124607, ada/124836, c/61896, c/123234, c/123424, c/124635,
  	c++/98930, c++/103901, c++/117133, c++/118630, c++/120338, c++/121643,
  	c++/121961, c++/122632, c++/122884, c++/123087, c++/123237,
  	c++/123346, c++/123529, c++/123566, c++/123613, c++/123700,
  	c++/123726, c++/123783, c++/123975, c++/123998, c++/124120,
  	c++/124177, c++/124198, c++/124246, c++/124457, c++/124477,
  	c++/124487, c++/124488, c++/124531, c++/124544, c++/124573,
  	c++/124614, c++/124617, c++/124645, c++/124646, c++/124648,
  	c++/124689, c++/124735, c++/124755, c++/124768, c++/124771,
  	c++/124773, c++/124781, c++/124785, c++/124790, c++/124792,
  	c++/124824, c++/124831, c++/124835, c++/124842, c++/124844,
  	c++/124850, c++/124862, d/88150, debug/94491, debug/124644,
  	fortran/66973, fortran/79330, fortran/79524, fortran/84245,
  	fortran/85352, fortran/93554, fortran/93715, fortran/93814,
  	fortran/94978, fortran/95163, fortran/95879, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/101281,
  	fortran/101760, fortran/102314, fortran/102430, fortran/102619,
  	fortran/103367, fortran/104827, fortran/107425, fortran/109788,
  	fortran/114021, fortran/115315, fortran/119273, fortran/120140,
  	fortran/121185, fortran/124259, fortran/124512, fortran/124567,
  	fortran/124598, fortran/124631, fortran/124652, fortran/124656,
  	fortran/124661, fortran/124666, fortran/124739, fortran/124751,
  	fortran/124780, fortran/124807, gcov-profile/121074, ipa/124700,
  	ipa/124777, libfortran/124543, libgomp/123177, libgomp/124123,
  	libstdc++/124722, lto/124828, middle-end/123635, middle-end/124634,
  	middle-end/124671, middle-end/124697, middle-end/124827,
  	middle-end/124877, modula2/105408, modula2/124081, modula2/124840,
  	other/94182, other/124784, preprocessor/70917,
  	rtl-optimization/124572, rtl-optimization/124649,
  	rtl-optimization/124696, sanitizer/124170, target/69639,
  	target/102309, target/105192, target/107337, target/109116,
  	target/120839, target/122483, target/123102, target/123210,
  	target/123238, target/123852, target/124597, target/124613,
  	target/124670, target/124674, target/124684, target/124704,
  	target/124705, target/124710, target/124712, target/124759,
  	target/124789, target/124818, target/124876, target/124892,
  	target/124897, testsuite/93080, testsuite/113276, testsuite/123135,
  	testsuite/124326, testsuite/124548, testsuite/124849,
  	tree-optimization/88576, tree-optimization/122976,
  	tree-optimization/124597, tree-optimization/124599,
  	tree-optimization/124627, tree-optimization/124677,
  	tree-optimization/124692, tree-optimization/124742,
  	tree-optimization/124743, tree-optimization/124746,
  	tree-optimization/124754, tree-optimization/124802,
  	tree-optimization/124809, tree-optimization/124810,
  	tree-optimization/124826, tree-optimization/124868,
  	tree-optimization/124875, tree-optimization/124891


author: Jakub Jelinek <jakub@redhat.com> 16.1.1-1
changelog:
  - update from trunk and releases/gcc-16 branch
    - GCC 16.1.0 release
    - PRs ada/107391, ada/107392, ada/124918, ada/125044, c/84717, c++/120502,
  	c++/123879, c++/124582, c++/124632, c++/124706, c++/124756,
  	c++/124855, c++/124910, c++/124926, c++/124927, c++/124944,
  	c++/124950, c++/124953, c++/124973, c++/124981, c++/124989,
  	c++/125035, c++/125096, cobol/119818, d/123411, d/124157, d/124922,
  	fortran/63858, fortran/93329, fortran/93463, fortran/108382,
  	fortran/117077, fortran/120431, ipa/120098, libfortran/120431,
  	libstdc++/112490, libstdc++/119714, libstdc++/124410,
  	libstdc++/124540, libstdc++/124890, libstdc++/125024,
  	libstdc++/125112, middle-end/95551, middle-end/122021,
  	middle-end/124900, middle-end/124971, modula2/120189,
  	preprocessor/124930, rtl-optimization/124643, sanitizer/124248,
  	sanitizer/124969, target/103383, target/124133, target/124933,
  	target/124959, target/124984, target/125117, testsuite/124682,
  	testsuite/124939, tree-optimization/116463, tree-optimization/124909,
  	tree-optimization/124941, tree-optimization/124988,
  	tree-optimization/125019, tree-optimization/125039,
  	tree-optimization/125079


author: Jakub Jelinek <jakub@redhat.com> 16.1.1-2
changelog:
  - update from releases/gcc-16 branch
    - PRs ada/125168, ada/125240, c++/100903, c++/115181, c++/124628,
  	c++/124770, c++/124957, c++/124979, c++/124991, c++/125043,
  	c++/125111, c++/125115, c++/125179, c++/125184, c++/125206,
  	c++/125208, c++/125280, c++/125315, d/125089, fortran/111952,
  	fortran/125059, fortran/125192, fortran/125198, libfortran/125095,
  	libstdc++/109965, libstdc++/121919, middle-end/125146,
  	middle-end/125259, rtl-optimization/123967, target/53929,
  	target/120587, target/124316, target/125049, target/125057,
  	target/125155, target/125180, target/125194, target/125308,
  	tree-optimization/120003, tree-optimization/125025,
  	tree-optimization/125153, tree-optimization/125185
  - create and include ga68.m68 files in gcc-algol68 package (#2463921)


author: Jakub Jelinek <jakub@redhat.com> 16.1.1-4
changelog:
  - update from releases/gcc-16 branch
    - PRs ada/18205, ada/125695, c/124303, c/124532, c/124985, c/125252,
  	c++/65271, c++/113563, c++/115314, c++/117259, c++/121094, c++/123536,
  	c++/124584, c++/124978, c++/125007, c++/125123, c++/125135,
  	c++/125284, c++/125333, c++/125334, c++/125376, c++/125378,
  	c++/125384, c++/125408, c++/125412, c++/125423, c++/125454,
  	c++/125490, c++/125498, c++/125745, c++/125759, c++/125764,
  	c++/125768, c++/125770, c++/125889, c++/125900, c++/125939,
  	fortran/60576, fortran/105582, fortran/106546, fortran/115260,
  	fortran/125021, fortran/125051, fortran/125391, fortran/125393,
  	fortran/125416, fortran/125430, fortran/125481, fortran/125527,
  	fortran/125528, fortran/125529, fortran/125530, fortran/125531,
  	fortran/125534, fortran/125535, fortran/125606, fortran/125650,
  	fortran/125669, fortran/125902, fortran/126018, ipa/125699,
  	libstdc++/71301, libstdc++/78302, libstdc++/118158, libstdc++/125228,
  	libstdc++/125312, libstdc++/125369, libstdc++/125374,
  	libstdc++/125450, libstdc++/125890, libstdc++/125956,
  	middle-end/125156, middle-end/125621, middle-end/125977, other/125348,
  	rtl-optimization/125173, rtl-optimization/125375, target/106895,
  	target/120144, target/120870, target/122665, target/122827,
  	target/124870, target/124895, target/124908, target/125148,
  	target/125215, target/125320, target/125351, target/125355,
  	target/125362, target/125373, target/125409, target/125448,
  	target/125469, target/125478, target/125611, target/125628,
  	target/125670, target/125751, target/125752, target/125795,
  	target/125818, target/125838, target/125883, target/125949,
  	target/125972, target/125992, tree-optimization/124151,
  	tree-optimization/125250, tree-optimization/125291,
  	tree-optimization/125419, tree-optimization/125431,
  	tree-optimization/125477, tree-optimization/125501,
  	tree-optimization/125502, tree-optimization/125545,
  	tree-optimization/125553, tree-optimization/125646,
  	tree-optimization/125652, tree-optimization/125686,
  	tree-optimization/125774, tree-optimization/125776


author: Jakub Jelinek <jakub@redhat.com> 16.2.1-1
changelog:
  - update from releases/gcc-16 branch
    - GCC 16.2.0 release
    - PRs ada/126379, ada/126482, ada/126553, algol68/126330, c/123569,
  	c/125072, c/125604, c/125935, c++/91155, c++/119343, c++/121552,
  	c++/125541, c++/125591, c++/125601, c++/125674, c++/125680,
  	c++/125901, c++/126007, c++/126031, c++/126036, c++/126057,
  	c++/126066, c++/126209, c++/126215, c++/126280, c++/126309,
  	c++/126310, c++/126343, c++/126406, c++/126420, c++/126423,
  	c++/126508, driver/124058, fortran/97592, fortran/125172,
  	fortran/125866, fortran/125998, fortran/126127, fortran/126170,
  	fortran/126210, fortran/126234, fortran/126303, fortran/126386,
  	ipa/124128, ipa/125121, ipa/125207, libfortran/126116, libgcc/123976,
  	libstdc++/122197, libstdc++/123165, libstdc++/124851,
  	libstdc++/124852, libstdc++/124853, libstdc++/124854,
  	libstdc++/125200, libstdc++/126111, lto/125257, middle-end/124637,
  	middle-end/125875, middle-end/126084, middle-end/126341,
  	middle-end/126405, middle-end/126410, middle-end/126447,
  	middle-end/126497, preprocessor/125048, rtl-optimization/125209,
  	rtl-optimization/126184, sanitizer/126307, target/67459, target/96446,
  	target/96530, target/96808, target/97360, target/98872, target/100777,
  	target/101849, target/102976, target/103127, target/104923,
  	target/105116, target/106016, target/106017, target/106833,
  	target/110411, target/119210, target/121957, target/122948,
  	target/123625, target/124364, target/124948, target/126049,
  	target/126054, target/126081, target/126098, target/126148,
  	target/126320, target/126429, target/126438, target/126446,
  	target/126450, target/126484, target/126581, testsuite/112728,
  	testsuite/118407, testsuite/124043, testsuite/124112,
  	testsuite/124361, testsuite/124726, testsuite/126261,
  	tree-optimization/120201, tree-optimization/124663,
  	tree-optimization/125040, tree-optimization/125290,
  	tree-optimization/125296, tree-optimization/125396,
  	tree-optimization/125597, tree-optimization/125668,
  	tree-optimization/125730, tree-optimization/125786,
  	tree-optimization/125953, tree-optimization/126008,
  	tree-optimization/126150, tree-optimization/126171,
  	tree-optimization/126194, tree-optimization/126225,
  	tree-optimization/126257, tree-optimization/126262,
  	tree-optimization/126404, tree-optimization/126457,
  	tree-optimization/126464, tree-optimization/126471,
  	tree-optimization/126476, tree-optimization/126490,
  	tree-optimization/126503, tree-optimization/126504,
  	tree-optimization/126547, tree-optimization/126549,
  	tree-optimization/126564, tree-optimization/126576,
  	tree-optimization/126601
     - fix up s390x ICE on botan (PR target/126667)


author: Jakub Jelinek <jakub@redhat.com> 16.2.1-2
changelog:
  - update from releases/gcc-16 branch
    - PRs c++/124794, c++/124806, c++/125069, c++/126093, c++/126483,
  	c++/126752, c++/126754, c++/126783, c++/126867, c++/126918,
  	fortran/104048, fortran/110626, fortran/125263, fortran/126205,
  	fortran/126872, libstdc++/125981, libstdc++/126452, libstdc++/126849,
  	target/125803, target/126334, target/126454, target/126529,
  	target/126550, target/126676, tree-optimization/126534


author: Jerry James <loganjerry@gmail.com> - 4.0.0-1
changelog:
  - Version 4.0.0
  - License change from LGPL-3.0-or-later to Apache-2.0
  - Drop upstreamed cmake patch
  - Depend on coin-or-HiGHS and jansson


author: Marek Kasik <mkasik@redhat.com> - 3.12.1-4
changelog:
  - Rebuild (poppler)
  - Statically link stdc++ due to undefined references
  -   Assisted-by: Claude Code


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Backport upstream commit c1da013915e from Kevin Buettner to fix
    gcore failures caused by glibc 2.42 guard page changes (RHBZ 2413405).
  - Backport upstream commit d2cc16cd7fc from Jan Vrany to fix
    FAILs in gdb.base/fileio.exp caused by macro expansion of
    path components in OUTDIR.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commits 8bd08ee92c4 and cd289df068e to address
    rhbz2366461.  These backports will not be needed once we rebase to
    GDB 18.


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport upstream commit ef7727ae from Tom de Vries to
    fix the test suite for newer Tcl releases.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport the following upstream commits in order to address RHBZ
    2467251: d980317c7f1, 958d06262a7, 7d1d7386561, 8915de0883c,
    8f65ab7b71f.  These commits will all drop out when we rebase to GDB
    18.


author: Kevin Buettner <kevinb@redhat.com>
changelog:
  - Applied proposed patch "[gdb/testsuite, Tcl 9] Fix EILSEQ problems for
    UTF8 related tests".  This is required in order to complete a build
    with testing.


author: Michal Kolar <mkolar@redhat.com> - 17.2-1
changelog:
  - Rebase to FSF GDB 17.2.
    Deleted: gdb-rhbz2435950-skip-revert.patch
    Backport e492fb22b70, gdb: backport DAP core file support
    Replace manual, multi-file patch inclusion with modern autosetup
    Add rpminspect.yaml to define package-specific testing policy


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Adjust commit message in gdb-backport-dap-core-file-support.patch to
    remove '---' string which confuses git.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit be3a9405ceb4d6d6 to fix and issue with the
    D demangler (RHBZ 2368350).  This commit will drop out when we
    rebase to GDB 18.


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Backport upstream commit 93f536d813c41527 to fix RHBZ 2498034.  This
    commit will drop out when we rebase to GDB 18.


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
  - Backport fixes from upstream to use BeaconDB
  - Use BeaconDB for the default location services source


author: Manish Tiwari <matiwari@redhat.com> - 0.25.1-1
changelog:
  - update to 0.25.1 release
  - Bug fixes:
  - autopoint no longer fails if configure.ac contains no AM_GNU_GETTEXT_VERSION or AM_GNU_GETTEXT_REQUIRE_VERSION invocation.
  - nls.m4 is installed again under $PREFIX/share/aclocal/.


author: Manish Tiwari <matiwari@redhat.com> - 0.26-2
changelog:
  - Add upstream provided patch to fix build failure with glibc 2.42 C23 const-preserving macros
  - https://lists.gnu.org/archive/html/bug-gnulib/2025-11/msg00220.html


author: Manish Tiwari <matiwari@redhat.com> - 0.26-3
changelog:
  - https://lists.gnu.org/archive/html/bug-gnulib/2025-09/msg00095.html
  - Upstream patch to fix implicit declaration error with GCC-16


author: Manish Tiwari <matiwari@redhat.com> - 0.26-5
changelog:
  - Disabled lto flags to avoid lto-wrapper failure when building xgettext
  - https://lists.gnu.org/archive/html/bug-gettext/2026-05/msg00011.html


author: Jerry James <loganjerry@gmail.com> - 0.7-1
changelog:
  - Version 0.7
  - Drop permissive patch
  - Add patch to avoid depending on C++20
  - Add patch to fix Singular FTBFS due to missing gcd function
  - Add patch to fix Singular abort due to empty vector access


author: Jerry James <loganjerry@gmail.com> - 0.8~beta-1
changelog:
  - Version 0.8beta
  - Add patch to avoid calling back() on an empty vector
  - Drop unused BRs: cddlib-devel, gmp-devel, tex(latex), TOPCOM
  - Run latex in nonstop mode


author: Jens Petersen <petersen@redhat.com> - 9.10.1-7
changelog:
  - fix hp2ps failure with gcc15 C23
  - setup llvm compiler for all archs not just those defaulting to llvm backend


author: Jens Petersen <petersen@redhat.com> - 9.10.3-14
changelog:
  - drop --hash-unit-ids like main ghc package
  - f45: fix build with sphinx 9
  - enable Cabal install PATH warning patch


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20250919-9
changelog:
  - update to 9.12.3 RC1
  - https://downloads.haskell.org/ghc/9.12.3-rc1/docs/users_guide/9.12.3-notes.html
  - boot with ghc9.10


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251110-10
changelog:
  - update to 9.12.3 RC2
  - https://downloads.haskell.org/ghc/9.12.3-rc2/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251209-11
changelog:
  - update to 9.12.3 RC3
  - https://downloads.haskell.org/ghc/9.12.3-rc3/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.3-15
changelog:
  - rebuild with ghc-rpm-macros-2.11
  - add ppc64le arch patches for ghc-platform and rts.cabal (#26870)
  - ppc64le NCG: add an upstream patch for the clrrxi instruction


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251007-0.6
changelog:
  - 9.14.1 alpha3
  - https://downloads.haskell.org/ghc/9.14.1-alpha3/docs/users_guide/9.14.1-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251028-0.7
changelog:
  - 9.14.1 rc1
  - https://downloads.haskell.org/ghc/9.14.1-rc1/docs/users_guide/9.14.1-notes.html
  - unix-2.8.8.0
  - adds template-haskell-lift and template-haskell-quasiquoter


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20251128-0.10
changelog:
  - Update to 9.14.1 RC3
  - https://downloads.haskell.org/ghc/9.14.1-rc3/docs/users_guide/9.14.1-notes.html


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.12-1
changelog:
  - Version 0.1.12 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-12-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.13-1
changelog:
  - Version 0.1.13 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-13-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.14-1
changelog:
  - Version 0.1.14 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-14-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.15-1
changelog:
  - Version 0.1.15 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-15-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.16-1
changelog:
  - Version 0.1.16 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-16-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.17-1
changelog:
  - Version 0.1.17 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-17-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.18-1
changelog:
  - Version 0.1.18 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-18-released/


author: Michel Lind <salimma@fedoraproject.org> - 2.5.0-2
changelog:
  - incorporate fixes from #9 by Steve Traylen <steve.traylen@cern.ch>
  - * set PBR_VERSION
  - * simplified git checkout and tarball generation
  - * enforce that license is shipped
  - * add import checks
  - * exclude tests
  - convert the git checkout procedure into a shell script for automation
  - switch tarball to zstd compression
  - automatically apply patches (if any)
  - add rpmlint config


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 7b543dcdf97d07fd4346feb17916e08fe83ad0ae:
  - elf: Ignore LD_PROFILE if LD_PROFILE_OUTPUT is not set (bug 33797) (Florian Weimer)
  - hurd: make __thread_set_pcsptp align stack (Samuel Thibault)
  - Update advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0861 (Siddhesh Poyarekar)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915) (Carlos O'Donell)
  - memalign: reinstate alignment overflow check (CVE-2026-0861) (Siddhesh Poyarekar)
  - malloc: Add tst-mallocfork to tests-exclude-threaded exception list (Arjun Shankar)
  - aarch64: Fix LD_AUDIT with GCS in permissive mode (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for GCS handling (Adhemerval Zanella)
  - aarch64: Add LD_AUDIT tests for BTI handling (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for BTI handling (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_fpclassify for _Float64x/long double" (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_isinf_sign for _Float64x/long double" (Adhemerval Zanella)
  - aarch64: update NEWS for 2.43 release (Yury Khrustalev)
  - aarch64: Add LD_DEBUG=security to log BTI and GCS warnings (Yury Khrustalev)
  - tst-if_nameindex.c: Fix minimum buffer size (Samuel Thibault)
  - ldbl-128ibm-compat: Add local aliases for printf family symbols (Sachin Monga)
  - math: Fix powerpc64le -Os build after 6b7067460f (Adhemerval Zanella)
  - x86: Fix x86_64 build failure with -Os (BZ 33367) (Adhemerval Zanella)
  - math: Sync acosh from CORE-MATH (Adhemerval Zanella)
  - math: Sync atanh from CORE-MATH (Adhemerval Zanella)
  - math: Sync asinh from CORE-MATH (Adhemerval Zanella)
  - aarch64: Fix error messages for GCS and BTI incompatible modules (Yury Khrustalev)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-1
changelog:
  - Auto-sync with upstream branch master,
    commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc:
  - po: Incorporate translatins (nl updated, ar new) (Andreas K. Hüttel)
  - Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling (Aurelien Jarno)
  - NEWS: add new section 2.43.1 (Andreas K. Hüttel)
  - Replace advisories directory with file ADVISORIES (Andreas K. Hüttel)
  - Create ChangeLog.old/ChangeLog.32 (Andreas K. Hüttel)
  - version.h, include/features.h: Increase version number (Andreas K. Hüttel)
  - contrib.texi: Add missing accent (Andreas K. Hüttel)
  - tst-cond23: add <support/test-driver.h> include (Aurelien Jarno)
  - install.texi, INSTALL: update versions (Andreas K. Hüttel)
  - contrib.texi: Updates (Andreas K. Hüttel)
  - NEWS: Insert list of fixed security advisories (Andreas K. Hüttel)
  - NEWS: Mention build issues due to const-preserving macros (Andreas K. Hüttel)
  - NEWS: Insert list of fixed bugs (Andreas K. Hüttel)
  - NEWS: Editorial changes (Andreas K. Hüttel)
  - NEWS: Additional items and minor consolidation (Andreas K. Hüttel)
  - NEWS: Group ISO C23 related changes (Andreas K. Hüttel)
  - po: Incorporate translations (Andreas K. Hüttel)
  - Update advisory text for GLIBC-SA-2026-0003 (Adhemerval Zanella)
  - Add advisory text for CVE-2025-15281 (Carlos O'Donell)
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814) (Adhemerval Zanella)
  - libc.pot: regenerate (Andreas K. Hüttel)
  - Linux: fix tst-copy_file_range-large failure in 32-bit glibc build on 64-bit kernel [BZ 33790] (Xi Ruoyao)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-2
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 48f5a05a7a1eeb9e0567ab429f654648f831307f:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Don't include <bits/openat2.h> directly (bug 33848) (Andreas Schwab)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-3
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit ce1013a197eb4a3b8ff2b07e0672f4d0b976ce7c:
  - tests: fix tst-rseq with Linux 7.0 (Michael Jeanson)
  - riscv: Resolve calls to memcpy using memcpy-generic in early startup (Adhemerval Zanella Netto)
  - elf: Use dl-symbol-redir-ifunc.h instead _dl_strlen (Adhemerval Zanella)
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso (Xi Ruoyao)
  - resolv: Check hostname for validity (CVE-2026-4438) (Carlos O'Donell)
  - resolv: Count records correctly (CVE-2026-4437) (Carlos O'Donell)
  - posix: Run tst-wordexp-reuse-mem test (Florian Weimer)
  - aarch64: Tests for locking GCS (Yury Khrustalev)
  - aarch64: Lock GCS status at startup (Yury Khrustalev)
  - tests: aarch64: fix makefile dependencies for dlopen tests for BTI (Yury Khrustalev)
  - malloc: Avoid accessing /sys/kernel/mm files (Wilco Dijkstra)
  - Add BZ 33904 entry to NEWS (Adhemerval Zanella)
  - debug: Fix build with --enable-fortify-source=1 (BZ 33904) (Adhemerval Zanella)


author: Florian Weimer <fweimer@redhat.com> - 2.43-4
changelog:
  - Add downstream patches with fixes for vulnerabilities.
  - Fix buffer overflow in scanf %mc (CVE-2026-5450)
  - Fix ns_sprintrrf buffer overreads (CVE-2026-6238)
  - Fix ns_sprintrrf buffer overflow in TSIG record processing (CVE-2026-5435)
  - Fix memory corruption in ungetwc (CVE-2026-5928)
  - Auto-sync with upstream branch release/2.43/master,
    commit 8362e8ce10b24068bacc19552c128dd10e082fd9:
  - iconv: Use pending character state in IBM1390, IBM1399 character sets
    (CVE-2026-4046)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-5
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 4070d808bea1c077eb7e7d52b52b91cae98205d5:
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (Rocket Ma)
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (Rocket Ma)
  - abilist.awk: Handle weak unversioned defined symbols (H.J. Lu)
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921) (Florian Weimer)
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h (DJ Delorie)
  - Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046) (Florian Weimer)
  - Remove applied or redundant patches:
    - glibc-RHEL-172420.patch
    - glibc-RHEL-172421.patch


author: Frédéric Bérat <fberat@redhat.com> - 2.43-6
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 18b97b03b7442d8ba0860e43145f8724c9e77b17:
  - Rename __unused fields to __glibc_reserved. (Jakub Jelinek)
  - math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183) (Adhemerval Zanella)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-7
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit dae425b554207f7c4599c7fac707ad4c08545674:
  - posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791) (Adhemerval Zanella)
  - resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069) (Florian Weimer)
  - resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238) (Florian Weimer)
  - resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435) (Florian Weimer)
  - resolv: Check for inet_ntop failure in ns_sprintrrf (Florian Weimer)
  - resolv: Improve formatting of unknown records in ns_sprintrrf (Florian Weimer)
  - resolv: Fix ns_sprintrrf formatting of class, type values (bug 34289) (Florian Weimer)
  - resolv: Declare __p_class_syms, __p_type_syms for internal use (Florian Weimer)
  - hppa: Fix missing call to __feraiseexcept (BZ 34306) (John David Anglin)
  - arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792) (Adhemerval Zanella)
  - iconv: Suppress intermediate errors with //TRANSLIT (bug 34236) (Florian Weimer)
  - Hurd: restore some SIOC ioctls (Samuel Thibault)
  - Hurd: comment ioctls which cannot currently compile (Samuel Thibault)
  - Hurd: comment PF_ROUTE/AF_ROUTE defines (Samuel Thibault)
  - Hurd: comment PF_LINK/AF_LINK defines (Pino Toscano)
  - elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210] (Sam James)
  - Remove applied or redundant patches:
    - glibc-RHEL-172425-1.patch
    - glibc-RHEL-172425-2.patch
    - glibc-RHEL-172425-3.patch
    - glibc-RHEL-172425-4.patch


author: Frédéric Bérat <fberat@redhat.com> - 2.43-8
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit bc95068f5f9d7f57d0f01757fed0900893b122b8:
  - ppc64le: Restore optimized memchr for power10 [BZ #34300] (Sachin Monga)
  - rtld: cache cpuid results on the stack for intel (Fabian Rast)


author: Carl George <carlwgeorge@fedoraproject.org> - 2.1.2-1
changelog:
  - Update to version 2.1.2 rhbz#2457076
  - Update vendored goldmark to 1.7.17 to resolve CVE-2026-5160


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2437^20260630.5223a47630df-1
changelog:
  - Update to version 2437
  - Correct and improve License expressions and license text file handling
  - Deal with upstream vendoring of a header from the Rust cxx crate
  - Invoke ninja via the %ninja_build macro


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:25.0.0-1
changelog:
  - Updated to v25.0.0.
  - The high-level API for manipulating GNAT project files has been split off from
    the set of core components. It is now part of a new subpackage,
    gnatcoll-projects.
  - Project file gnatcoll.gpr is superseded by two new project files:
    gnatcoll_core.gpr and gnatcoll_projects.gpr. The old project file,
    gnatcoll.gpr, is still available from gnatcoll-projects-devel.


author: Carl George <carlwgeorge@fedoraproject.org> - 20.0-1
changelog:
  - Update to version 20.0 rhbz#2484058
  - Adds GNOME 50 compatibility rhbz#2464662
  - Include license file
  - Include locale files
  - Recommend gnome-extensions-app


author: Luya Tshimbalanga <luya@fedoraproject.org> - 24-3
changelog:
  - Switch to [gnome-shell-rpm-generators](https://fedoraproject.org/wiki/Cha
    nges/GnomeShellExtensionDependencyGenerator) for build requirement


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-33.20240904git9491649
changelog:
  - Updated to last upstream commits
  - Drop unused compat.js
  - Use Cogl.Color instead of Clutter.Color
  - Add 47 to supported shell versions
  - Drop debug log


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-35.20250207gitd7f330d
changelog:
  - Updated to last upstream commits
  - Add log level to sm_log
  - schema: Indent
  - util: Move sm_log to util
  - Improve non-existent sensors handling
  - Schema rename - migrating gnome settings as well
  - metadata.json: Update description
  - Make "System Monitor" action customizable
  - Makefile: Add zip-install target
  - Makefile: Clean up the extension reloading stuff
  - Rename schema definition files to match schema IDs
  - metadata.json: Update extension URL
  - Fixed Bug when detecting NVIDIA GPUs
  - Add fallback logic for locale
  - Drop "no migration" message
  - metadata.json: Note about prereqs
  - metadata.json: Tone down the rhetoric regarding update errors
  - Rename archive from git new repository name: gnome-shell-system-monitor-next-applet


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-36.20250319git184bc34
changelog:
  - Updated to last upstream commits
  - Add left-display feature and dynamic settings toggle
  - extension: Add support for max CPU freq
  - extension: More accurate disk usage calculation
  - metadata.json: Add gnome-shell 48 support


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-38.20250916git278b27e
changelog:
  - Updated to last upstream commits
  - extension: Add setting for graph scale reset cooldown period
  - metadata.json: Add gnome-shell 49 support - RHBZ#2395840
  - Makefile: Don't use git rev for version
  - Makefile: Allow user override of VERSION
  - Makefile: Drop gschemas.{clean,uninstall}
  - Makefile: Simplify and clean up
  - Makefile: Don't remove when installing
  - Makefile: Drop all use of sudo
  - Makefile: Add gschemas-install target
  - Makefile: Make build explicitly depend on gschemas
  - Makefile: Add some messages about where build output is going
  - Makefile: Rename the extension rule
  - extension: Drop the old schema file and migration code - RHBZ#2268400
  - Adapt SPEC file to new Makefile


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-40.20251120gitc4969d9
changelog:
  - Updated to last upstream commits
  - Makefile, README: Add gschemas compile target for local installs
  - extension: Add polling logic for battery proxy initialization
  - extension: Add short name for battery label


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-42.20260411gita14b404
changelog:
  - Updated to last upstream commits
  - Add gnome-shell 50 support
  - fix: handle missing system monitor app gracefully


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2.4.8-4
changelog:
  - add a root certificate bundle due to changes in ca-certificates (#2380121)
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile


author: Clemens Lang <cllang@redhat.com> - 2.4.9-1
changelog:
  - New upstream release 2.4.9
  - Fixes CVE-2025-68973 (https://gpg.fail/memcpy)
  - Fixes https://gpg.fail/sha1
  - Fixes https://gpg.fail/detached


author: Eduardo Echeverria <echevemaster@gmail.com> - 1.11-1
changelog:
  - Update to 1.11. Fixes rhbz#2502800
  - Added automatic, crash-safe migration of persisted databases to storage
    format version 3
  - Added configured zlib and AddressSanitizer options to the version output
  - Added fullscreen expand and collapse controls to geolocation maps in the
    HTML report
  - Added Traditional Chinese translation
  - Expanded Debian package builds to Ubuntu 26.04 and additional
    architectures, and updated the packaging workflow actions
  - Fixed a heap buffer overflow when parsing malformed Opera user agents
  - Fixed an infinite loop while writing log parsing errors from multiple
    input files
  - Fixed city lookups ignoring the City database when a Country database was
    listed first
  - Fixed geolocation maps appearing grey after restoring persisted city data
  - Fixed .gz file extensions being interpreted as macros in the man page
  - Fixed iOS version parsing from user-agent strings
  - Fixed unique visitor undercounting caused by collisions between reversed
    data and visitor key pairs
  - Fixed WebSocket payload size checks for large and fragmented messages
  - Grouped Lynx, Links, ELinks, w3m and Chawan under a new "Text-based"
    browser category
  - Reduced storage memory usage by about 20% and parsing time by about 35%


author: Paul Wouters <paul.wouters@aiven.io> - 1.4.2-1
changelog:
  - Update to 1.4.2, support for DNS-persist challenge
  - Resolves: rhbz#2434366 FTBFS in Fedora rawhide/f4
  - Resolves: rhbz#2438330 1.4.2 is available


author: Christian Krause <chkr@fedoraproject.org> - 4.3-1
changelog:
  - Fix FTBFS (#2261207)
  - Update to latest upstream release 4.3
  - Update patch for linking lua dynamically
  - Add patch to avoid using deprecated Python modules


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.5-5
changelog:
  - Handle test issues related to libfpm / perf counters
  - Skip perf counter tests on s390x
  - Serialize the multi-threaded perf counter test


author: Rodolfo Olivieri <rolivier@redhat.com> - 1.36.0-1
changelog:
  - Update to version 1.36.0
  - goose review local code review command
  - /goal command for agent self-evaluation before finishing
  - Hooks system for PreToolUse denial and extensibility
  - Slash commands (built-in, skill, recipe) in ACP server
  - Open-plugins generalization and skills
  - Summon subagent instructions
  - Unified thinking effort control across all providers
  - NEAR AI Cloud provider
  - Scaleway provider
  - Vercel AI Gateway provider
  - Atomic Chat declarative OpenAI-compatible provider
  - Routstr declarative provider
  - FuturMix provider
  - oMLX declarative provider
  - Harbor eval runner
  - MAX_CODE_BLOCK_LINES configurable via env vars
  - Honor GOOSE_FAST_MODEL env var in ModelConfig
  - GPT-5.5 in known models
  - Paginate ACP session list
  - Pass session cwd param to ACP providers
  - Opt-in to Vercel AI gateway leaderboard
  - GOOSE_OAUTH_CALLBACK_PORT for stable OAuth redirect_uri
  - Proactive OAuth token refresh to avoid re-auth on every session
  - Strip chain-of-thought markers from custom provider output
  - Nushell terminal and completion support
  - Optional --parameters flag for scheduled recipes
  - Quarterly option for scheduler
  - GitHub Copilot /responses API support
  - Projects as backend sources with system prompt injection
  - Linux musl CLI builds
  - GOOSE_DISABLE_TOOL_CALL_SUMMARY env var
  - Tolerate missing responses output
  - Serialize per-session agent creation to stop duplicate MCP init
  - Respect GOOSE_MAX_TURNS in gateway sessions
  - Send empty object instead of null for Anthropic tool_use input
  - Preserve thinking content for provider context
  - Mention configurable timeout env vars in Ollama stream stall error
  - Include full recipe parameter details in load/discovery output
  - Use context limit from /model/info for LiteLLM custom models
  - Plain > prompt instead of goose emoji in CLI
  - Emit trace_output as span attribute instead of event
  - Check file fallback when keyring has no entry
  - Use current_exe() instead of PATH lookup when spawning goose
  - Set TCP_USER_TIMEOUT on streamable HTTP clients
  - Activate custom provider after adding via configure
  - Flush OTLP traces reliably on exit with configurable timeout
  - Reduce excessive MISSING_TRANSLATION warnings for fallback locales
  - Improve Telegram gateway error reporting and connection reliability
  - Zero out cost for local providers (ollama, local)
  - Persist accumulated cost in session DB to survive reload
  - Prevent tool-use marker leakage in toolshim output
  - Re-apply canonical limits when delegate overrides model
  - Report cumulative total_tokens in stream-json/json output
  - Refresh GCP metadata server token on expiration
  - Apply request_params to outgoing OpenAI API payload
  - Gemini 3.x known_location Global routing entries
  - Coalesce streaming Thinking deltas and list available tools on not-found
  - Honor Retry-After on 429 responses
  - Preserve user-set session name for recipe-based chats
  - Enforce exp independently of MAX_TOKEN_AGE_SECONDS in OIDC proxy
  - Omit max_tokens for OpenAI-compatible requests when unset
  - Set correct MCP-app host capabilities
  - Normalize nullable schemas for Vertex Gemini compatibility
  - Isolate GitHub recipe temp paths
  - Set X-Initiator header on GitHub Copilot requests
  - Honor dynamic_models: false in declarative provider configs
  - Cache trailing message for stable prefix across Bedrock agent turns
  - Case-insensitive model name lookup for context_limit
  - Handle Bedrock ReasoningContent blocks gracefully
  - Ensure parallel tool image responses don't interleave on Databricks
  - Insert tool pair summaries at chronological position in conversation
  - Enable SQLite foreign key enforcement in session pool
  - Accept null tool_call arguments in OpenAI streaming chunks
  - Synchronously reap ACP child to avoid SIGCHLD race
  - Elicitation fixes
  - Return 400 instead of panicking on invalid CSP header value
  - Keep SSE reconnect loop alive on long disconnects
  - Convert quoted numeric config values to numbers if needed
  - Use appInfo instead of clientInfo in MCP Apps init handshake
  - Use mkdir -p for self-test workspace initialization
  - Exclude preprompt from session title generation
  - Prevent login-shell PATH probe from suspending goose on startup
  - Handle non-interactive terminal in goose configure
  - Use python3 in developer extension instructions
  - Build summon instructions per turn
  - Protocol cleanup
  - Dependency hygiene
  - Prompt injection mitigation: update pattern-based detection to reduce FPs
  - Surface resolved Databricks model metadata
  - Include request URL in provider error messages
  - Flag for login shell PATH
  - Structured per-provider config block, non-destructive provider switching
  - Preserve thinking content for providers that require it
  - Dynamically refresh skill instructions each turn
  - Show tool name in approval prompt
  - Location column in CLI skills table
  - Consolidate logging setup into shared helper
  - Support optional api_key configuration for declarative openai-engine providers
  - Recipe discovery and execution in ACP server
  - Group consecutive tool calls into one summarized chain card
  - Replace artifact heuristics and regexes with protocol messages
  - Improvements to LM Studio declarative provider
  - Parallelize provider resolution and eagerly init SQLite pool
  - ACP streamable HTTP spec compliance
  - Refresh onboarding when provider catalog loads
  - Redesign extensions configuration
  - Redesign skills library backend
  - Mergeable configs cleanup


author: Sam Doran <sdoran@redhat.com> - 1.38.0-1
changelog:
  - Update to version 1.38.0
  - Canonical thinking modes across providers
  - Surface Anthropic stream refusals as visible errors
  - ACP secret key support at goose serve endpoint
  - Unified OTLP logging schema for cross-tool detection
  - Opt-in ACP last message snippets for sessions
  - Custom ACP method to get session info
  - Steering messages with ACP
  - ACP list sessions with keyword and type filter
  - ACP thinking effort config option
  - Image read tool
  - ACP methods for config extensions
  - Custom notifications only when ACP client specifies capability
  - Session import functionality
  - Replay ACP images on session load
  - Raw provider supported models over ACP
  - ACP session system prompt setter
  - Perplexity as declarative OpenAI-compatible provider
  - Alibaba (Qwen via DashScope) declarative provider
  - Configurable tool output size limit via GOOSE_MAX_TOOL_RESPONSE_SIZE
  - /model slash command in CLI for session model switching
  - Databricks AI Gateway provider
  - Expose built-in skills through sources list ACP calls
  - Replace raw config and secret methods in ACP
  - Support Google model inventory refresh
  - Correctly map ollama_cloud to canonical provider and update max tokens
  - Incorrect max tokens values for Groq provider
  - Classify Bedrock ValidationException as ExecutionError
  - Page through all Databricks AI Gateway v2 endpoints when listing models
  - Preserve unparseable extension entries during config refresh
  - Forward ACP server context window size to clients
  - Skip OTLP signals when protocol=grpc to avoid background-thread panic
  - Make Azure api-version query param optional
  - Stricter GGUF requirements, auto detection of tool calling support, fixed thinking output parsing
  - Remove unused fetch-metadata IPC handler (SSRF)
  - Replace Venice custom provider with declarative config
  - Coalesce streaming chunks under one message id in ACP
  - Require extension_name on read_resource
  - Seed provider handoff history in ACP
  - Handle ACP requests concurrently
  - Mark stream decode errors retryable
  - Create goose-providers crate with canonical models and types
  - ACP session setup refactor
  - LRU cache for token counting
  - Replace review subprocess timeout with turn limits
  - Honor blocking Stop hook decisions
  - Forward custom headers through OAuth connect path
  - Prefer goose aliases for Databricks v2 inventory
  - Mount ACP in goosed server for iterative migration
  - Remove threads layer, use sessions directly for ACP
  - Install plugins to ~/.agents/plugins
  - Switch to official new rust-sdk for ACP
  - Install plugins support
  - Deduplicate _goose/providers/list RPC call at startup
  - Translate ACP host capabilities into MCP initialization
  - Prompt injection mitigation enabled by default for internal users
  - Re-adjust pattern-based detection confidence scores
  - Add directionality to egress logging
  - Scheduled recipe session params
  - Unscheduling a recipe should not delete them
  - Read prompted file parameters in recipes


author: Marcin Dulak <marcindulak@fedoraproject.org> - 25.7.0-1
changelog:
  - New upstream release
  - Move away from deprecated setup.py build/install
  - Remove temporary python3 top level dir


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-6
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Sayan Paul <saypaul@redhat.com> - 0.16.4
changelog:
  - Fixed false warning on first time boot
  - Added detection of grub fallback on faulty kernel
  - Fixed red.d script stdout/stderr not logged 
  - Fixed CI tests


author: Leo Sandoval <lsandova@redhat.com> - 2.12-56
changelog:
  - Revert 'verifiers: Allocate EFI pages instead of grub_malloc for verified buffer'
  - Resolves: #2453022
  - Resolves: #2451630
  - Resolves: #2450672
  - Related: #2427945
  - Related: #2263643


author: Rolv Apneseth <rapneset@redhat.com> - 2.12-60
changelog:
  - mdraid: fix metadata 1.0 detection in userspace utilities on IEEE1275
  - grub-install: use search.fs_uuid for RAID1 on IEEE1275


author: Leo Sandoval <lsandova@redhat.com> - 2.12-64
changelog:
  - mm: try allocating regions above defined limit as last resource
  - Related: #2263643
  - Related: #2427945
  - Related: #2422881
  - Related: #2453022
  - Related: #2451630
  - Related: #2450672


author: Milan Crha <mcrha@redhat.com> - 4.22.1-2
changelog:
  - Add a patch "gtkapplication-wayland: Add a missing NULL check when
    forgetting a window"
  - Resolves: rhbz#2450986


author: Paul Howarth <paul@city-fan.org> - 3.3.121-6
changelog:
  - Add dependency on gdk-pixbuf2-modules-extra, needed for XPM support on
    F-41, EL-10 onwards
    (https://github.com/gtkwave/gtkwave/issues/417#issuecomment-2682344768)


author: Paul Howarth <paul@city-fan.org> - 3.3.122-1
changelog:
  - Update to 3.3.122
    - Buffer warning fix in fstVcdIDForFwrite
    - Warning fixes in vzt_read.c and fstapi.c
    - Prototype fixes for port to gcc15
    - Fixes for tcl9 compatibility
    - Added fixes for --saveonexit command line option
    - Fix for convert_real for TR_REAL traces
    - Fix for popen_san() in vcd2fst using fsdb binaries
    - Added fstWriterGetFlushContextPending() to fstapi.c/.h
    - Reenable wayland code for primary and baseline markers in wavewindow.c
    - Unnamed scope fix for fstReader
    - Opaque pointer warning fix for fstapi.c
    - Remove broken pseudo-2D array support in fst.c
    - Fix in fst.c for signals whose MSB/LSB/len mismatch
    - libfst #15: fstReaderOpen should not fail on empty FST file
    - Fix crash introduced in 3.3.120 with legacy VCD loader caused by
      "Fix case of missing newline at EOF for VCD loaders"
    - Fix fstminer not handling string transitions correctly (GH#423)
    - Fix in fst.c for duplicate string values
    - Remove duplicate string values from adjacent value changes
    - libghw: Add from upstream for ghdl_rtik_type_i64
    - Fix inconsistent handling of invalid vector bounds in VCD and FST loaders
      (GH#428)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 3.3.123-1
changelog:
  - Update to 3.3.123
    - Fix broken autocoalesce of bitblasted vectors that fix for GH#428 in
      3.3.122 introduced
    - Fix improper autocoalesce of adjacent duplicate symbols
    - Preserve dimension on integer array element when expanded


author: Paul Howarth <paul@city-fan.org> - 3.3.124-1
changelog:
  - Update to 3.3.124
    - Ensure type name in $var for VCD saver is >0 length
    - Preserve bitblasted vector ordering with VCD saver.
    - Use full type names in VCD saver instead of abbreviations
    - Dump all bits for a bitblasted vector in VCD saver in order to ensure
      stray bit extractions do not cause a failure to reconstruct vectors in
      proper order in the extracted file


author: Paul Howarth <paul@city-fan.org> - 3.3.125-1
changelog:
  - Update to 3.3.125
    - Added json2stems to distribution to support newer versions of Verilator
    - VCD parser fix for colon in VCD variable name
    - Parameter size 0 fix for Vivado: backs out very old fix (for MTI) that
      converts 0 size signals to reals
    - Update vcd2fst so that it handles MTI 0 size conversion


author: Paul Howarth <paul@city-fan.org> - 3.3.126-1
changelog:
  - Update to 3.3.126
    - Added -H --noheader command line option for GTK3
    - Added headerbar rc variable to disable GTK3 headerbars
    - Fix for rendering multiline string constants in dumps
    - Add warning message for missing XPM loader
    - Updated libghw to current version
    - Changed behaviour of X search in pattern search so it is matched by a
      single X bit


author: Paul Howarth <paul@city-fan.org> - 3.3.127-1
changelog:
  - Update to 3.3.127
    - Fix for fixed point shift that does not disable it on the specify value
      change menu option
    - Changed ps2pdf to pstopdf on Mac as ps removed by Sonoma
    - Warnings fix in vcd2fst for missing string.h include
    - Added FST_ST_SV_ARRAY (FST) and "sv_array" (VCD) for arrays
      (gtkwave/libfst#17)
    - Wrote replacement for gdk_pixbuf_new_from_xpm_data
    - Update FSDB to handle FST_ST_SV_ARRAY (VCS emits this),
      FSDB_ST_SV_INTERFACEPORT_REF, and FSDB_VT_STRING
    - Added "SV_ST_ARRAY" to exclude file parsing on init
    - Fix use after free of GLOBALS->entrybox_text in regexp_highlight_generic()
  - Drop dependency on gdk-pixbuf2-modules-extra, XPM support now done locally


author: Parag Nemade <pnemade AT redhat DOT com> - 13.0.0-2
changelog:
  - Upstream added new binary hb-vector
  - Upstream added new pkgconfig files harfbuzz-raster.pc and harfbuzz-vector.pc
  - Added new subpackages harfbuzz-raster and harfbuzz-vector


author: Andrea Musuruane <musuruan@gmail.com> - 2.6.1-3
changelog:
  - Rebuilt for SDL3 >= 3.4.2 (fixes BZ #2434639)
  - Added missing dependency for gobject-introspection


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Michel Lind <salimma@fedoraproject.org> - 3.2.6-57
changelog:
  - Port tclhfs.c and hfswish.c to the Tcl 9 result API
  - Fix pointer-type mismatches with the Tcl 9 API and allocator pairing


author: Daniel Milnes <daniel@daniel-milnes.uk> - 1.0.0-1
changelog:
  - Update to 1.0.0 (rhbz#2457679)
  - Migrate to pyproject-srpm-macros (rhbz#2377284)
  - Fix Fedora 44 FTBFS (rhbz#2429404)


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-2
changelog:
  - Modernize spec: use %make_install and add %check section
  - Use %make_install instead of manual make install
  - Move validation to %check
  - Remove deprecated %ldconfig_scriptlets
  - Fix trailing whitespace in Summary


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-3
changelog:
  - Modernize macros and paths
  - Use %{_metainfodir} for metainfo
  - Sort BuildRequires and change Source0 to Source
  - Clean up %prep chmod calls
  - Add %license to doc subpackage


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-4
changelog:
  - Convert BuildRequires to pkgconfig style
  - Use pkgconfig() for atk, cairo, gtk+-3.0, libofx, and libsoup-3.0


author: Filipe Rosset <rosset.filipe@gmail.com> - 5.10-5
changelog:
  - Final cleanup of spec file
  - Add -p1 to %autosetup
  - Use trailing slashes for directories in %files
  - Consistent use of %{_metainfodir}


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.6-1
changelog:
  - hp-scan command failed to run and gives an error (fedora#2395809)
  - use new GPG key from HP - new key was used as fix for CVE-2025-43023


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.159.0-2
changelog:
  - Update spec
  - Update to go2rpm 1.19.0 template
  - Set `askalono` as license detector
  - Drop invopop/yaml to oasdiff/yaml module change
  - Use GO_BUILDTAGS & GO_LDFLAGS
  - Use gocheck2 and skip individual tests
  - Drop extra documentation


author: Maxwell G <maxwell@gtmx.me> - 0.6.0^git4407164-1
changelog:
  - Update to new upstream https://git.sr.ht/~xenrox/hut
  - Use 0.6.0 post-release snapshot commit 4407164
  - Use vendored dependencies
  - Fixes: rhbz#2368037


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~rc1-1
changelog:
  - Bump to 1.5.34-rc1
  - Update translations
  - Fix "no memory" error with focus changes in Sway
  - Resolves #2444009 Latch key in Latvian(tilde) keymap
  - Fix only GTK3 builds
  - Close leaked keymap fd on early return in ibus-wayland


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34-2
changelog:
  - Backport upstream patches
  - Make an IBusText own an updated IBusAttrList reference
  - Resolves: #2444787 SEGV with wrong anchor in surrounding-text in Wayland
  - Updates: #2480408 IBus callbacks in Wayland to clarify SEGVs


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-1
changelog:
  - Bump to 1.5.18
  - Fix Backspace in prediction
  - Update translations
  - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI
  - Delete gnome-themes-extra from Fedora CI


author: Mike FABIAN <mfabian@redhat.com> - 1.4.34-1
changelog:
  - Update to 1.4.34
  - Add the “S-” prefix to msymbols for non-ASCII characters only if the
    character “is not graph”. “is not graph” is the same as “is space or is
    not printable”. (Resolves: https://github.com/ibus/ibus-m17n/issues/90)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.35-1
changelog:
  - Update to 1.4.35
  - Generate translations into metainfo.xml files with autotools Related:
    https://github.com/mike-fabian/ibus-m17n/issues/2
  - Rename m17n.appdata.xml to org.freedesktop.ibus.engine.m17n.metainfo.xml
    (Resolves: https://github.com/mike-fabian/ibus-m17n/issues/2)
  - Fix match pattern for layout for inscript
  - Fix match pattern for rank for inscript2


author: Mike FABIAN <mfabian@redhat.com> - 1.4.37-1
changelog:
  - Update to 1.4.37
  - Port UI to GTK4 (Resolves: github-issue#99). Configure option for Gtk4
    added: “--with-gtk=2.0|3.0|4.0|no” (default: 4.0)
  - Translation update from Weblate (cs 100%, de 100%, el 100%, es 100%,
    new: fi 100%, fr 100%, ja 100%, ka 100%, kab 100%, lt 100%, pt_BR
    100%, ro 96%, ru 100%, sv 100%, tr 100%, uk 100%, zh_CN 100%,
    zh_TW 28%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.38-1
changelog:
  - Update to 1.4.38
  - Convert png icons from 16-bit to 8-bit color (Resolves:
    https://github.com/ibus/ibus-m17n/issues/107)


author: Manish Tiwari <matiwari@redhat.com> 1.0.0-1
changelog:
  - Update to release 1.0.0
  - Add ibus-stt-1_0_0-backend-notify.patch to support backend notification dialog


author: Mike FABIAN <mfabian@redhat.com> - 1.17.15-1
changelog:
  - Release 1.17.15
  - Log all unhandled exceptions, makes debugging a lot easier When Python
    code runs in an environment like IBus, unhandled exceptions inside
    callbacks are usually caught and swallowed by the framework, often with
    no logging. That’s why one sees “silent” failures: the event handler
    stops executing at the exception, but IBus continues running, and you get
    no clue unless you manually log something.
  - Stop calling IBus.init(), Python code no longer needs to call that
  - Don't take index of the string returned by get_goucima() if it is too
    short (Resolves: https://github.com/mike-fabian/ibus-table/pull/201)
  - Translation update from Weblate (el 22.2%, es 100%, ka 61.4%, pt_BR
    100%


author: Mike FABIAN <mfabian@redhat.com> - 1.17.17-1
changelog:
  - Release 1.17.17
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py for
    Unicode 17.0.0 release
  - Translation update from Weblate (ca 100%, cz 97.3%, el 28.7%, fa
    15.0%, hu 22.8%, ja 49.6%, ka 69.3%, kab 37.2%, pt_PT 75.8%, ro
    100%, si 11.1%, zh_HK 20.9%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.18-1
changelog:
  - Release 1.17.18
  - Enhance TabEngine key handling cancelling logic when suggestion mode is
    active. (Resolves: https://github.com/mike-fabian/ibus-table/pull/215)
  - Translation update from Weblate (cz 100%, el 39.8%, ka 100%, pt_PT
    100%, zh_TW 100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0
  - Require Python 3.9+ from now on
  - [Optimization] Drop the ESCAPE clause when unneeded and add a tabkeys
    index (Resolves: https://github.com/mike-fabian/ibus-table/pull/235)
  - Stop rewriting the phrases cache every 30s while idle (Resolves:
    https://github.com/mike-fabian/ibus-table/pull/234)
  - Fill the lookup table completely instead of one page at a time (Resolves:
    https://github.com/mike-fabian/ibus-table/pull/232)
  - Translation update from Weblate (de 100%, es 100%, el 40.5%, hu
    50.9%, ja 54.9%, ka 69.9%, kab 41.1%, ko 100%, ru 100%, si 15.0%,
    zh_HK 21.5%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.2-1
changelog:
  - Update to 2.30.2
  - Add `Control+Left` to the default for `commit_and_forward_key` for the
    `tb:*` engines (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/879)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.3-1
changelog:
  - Update to 2.30.3
  - Add `Mod1+Left` to the default for `commit_and_forward_key` for the
    `tb:*` engines (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/879#issuecomment-3844807216)
  - Translation update from Weblate (kab 71.4%, ro 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.4-1
changelog:
  - Update to 2.30.4
  - emoji-picker: key handling improvments: Show selected emoji clearly, Fix
    Control+f and Escape issue, Navigation with arrow keys in the flowboxes
    (See: See: https://github.com/mike-fabian/ibus-typing-
    booster/issues/883#issuecomment-3901653686)
  - emoji-picker: Don’t show popover when autoselecting first search result
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/883)
  - Translation update from Weblate (kab 73.8%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.6-1
changelog:
  - Update to 2.30.6
  - Split itb_util.py into itb_util_core.py and itb_util_gui.py and use only
    itb_util_core for `ibus-typing-booster --xml` (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/888)
  - Don’t check for gnome and gnome version in a loop over all input methods!
    Check only once! (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/889)
  - Translation update from Weblate (cs 100%, es 100%, ru 100%, zh_CN
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.9-1
changelog:
  - Update to 2.30.9
  - More fine grained control of whether digits can be used in the preedit
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/905)
  - Translation update from Weblate (new: ca 100%, el 29.6%, es 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.10-1
changelog:
  - Update to 2.30.10
  - Run doctests requiring `regex` only when `regex` is available (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/909)
  - Translation update from Weblate (fa 4.7%, lt 8.5%, or 34.1%, si 1%)
  - Add `BuildRequires: gobject-introspection`, see: https://github.com/mike-
    fabian/ibus-typing-booster/issues/909#issuecomment-4679627321


author: Mike FABIAN <mfabian@redhat.com> - 2.30.11-1
changelog:
  - Update to 2.30.11
  - Make values for spellchecking suggestions not depend on whether hunspell
    suggests the input word as its own correction (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/918)
  - Translation update from Weblate (ko 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.31.0-1
changelog:
  - Update to 2.31.0
  - Require Python 3.9+
  - Modernize code for Python 3.9
  - Fix problem when typing `BackSpace` at the left side of the preedit
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/923)


author: Timothée Ravier <tim@siosm.fr> - 2.26.0-4
changelog:
  - F44+: Ship OpenSSH config file specifying AuthorizedKeysFile
  - Have ignition-edge require the matching main ignition package


author: Steven Presti <spresti@redhat.com> - 2.27.0-1
changelog:
  - New Release
  - Butane config transpiler merged into Ignition repository
  - Butane now follows Ignition version numbering
  - Drop Patch0 (fix merged upstream)
  - Drop legacy fcct/fedora-coreos-config-transpiler provides


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.2-1
changelog:
  - Update to 2.2
  - Close: rhbz#2352408
  - Refresh license field (analysed with scancode-toolkit and manually reviewed)


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.3-4
changelog:
  - Panthor lacks big-endian support and has no Meson toggle, strip it from
    build files for BE archs


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.4-1
changelog:
  - update igt-gpu-tools to 2.4 - removed json-c old dependency - added
    jansson and pciutils-devel new dependencies - disabled tests/amdgpu for
    unsupported arches s390x ppc64 ppc64le aarch64 - updated upstream bug
    with current details at [1] [1] https://gitlab.freedesktop.org/drm/igt-
    gpu-tools/-/work_items/171


author: Packit <hello@packit.dev> - 66-1
changelog:
  Changes with 66
  ----------------
    - cmd: introduce profiling options (#516)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: bump osbuild/images dependency (#524)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - packit: enable ELN (HMS-10701) (#521)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  osbuild/images changes (v0.266.0 -> v0.267.0):

    - Add osbuild stages for mounting erofs and squashfs compressed filesystems (#2348)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - arch: map OCI platform architecture to GOARCH (#2315)
      - Author: Zephyr Lykos, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - bootloaders: Move the iso bootloader setup into its own struct (#2347)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - container: resolve containers using skopeo [RHEL-56367] (#2346)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Tomáš Hozza
    - fedora: Update IoT arm images with newer RPi dtbs (#2358)
      - Author: Peter Robinson, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Koscielniak
    - many: upgrade deps with deprecated APIs (HMS-10702) (#2356)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-25


author: Packit <hello@packit.dev> - 68-1
changelog:
  Changes with 68
  ----------------
    - Containerfile*: correct base image reference in tag (#531)
      - Author: Zephyr Lykos, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: bump osbuild/images dependency (#533)
      - Author: SchutzBot, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: bump osbuild/images dependency (#538)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: mention additional requirements (#530)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: `--force-defs-dir` (#534)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: `bootc inspect` (#529)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - pr-best-practices: Update authentication scheme for Jira Cloud (HMS-10749) (#535)
      - Author: Florian Schüller, Reviewers: Lukáš Zapletal, Simon de Vlieger

  osbuild/images changes (v0.267.0 -> v0.270.0):

    - Break down imgtestlib module and  use log sections (#2383)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - CI: run tests on Fedora 44 (#2343)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Make EFIPartitionTable function public, move it into disk (#2354)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Repos: Add/update AlmaLinux repository definitions (#2376)
      - Author: Eduard Abdullin, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update dependencies 2026-05-25 (#2368)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc: assert non-nil kernel info (#2370)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - cicd: run gobump per commit (#2352)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - container: guess at mime type (#2372)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - depsolver: catch all errors from the child process (#2365)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - distro/loader: expand installerConfig template by copying (HMS-10718) (#2373)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal
    - distro: Make isoCustomizations usable by bootcImageType (#2360)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - fedora: drop no_timer_check leftover (#2282)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - gitlab: exit with error code when manifests fail to validate (#2374)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Lukáš Zapletal
    - install-dependencies: Add a note about it being used by image-builder-cli workflows (#2353)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - loader: allow custom path (#2378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - many: fix non-determistic manifest generation (#2381)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - pr-best-practices: Update authentication scheme for Jira Cloud (HMS-10749) (#2386)
      - Author: Florian Schüller, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stage/grub2: allow VFAT for boot fs (#2371)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-06-04


author: Packit <hello@packit.dev> - 69-1
changelog:
  Changes with 69
  ----------------
    - deps: bump osbuild/images dependency (#548)
      - Author: SchutzBot, Reviewers: Nobody
    - deps: bump osbuild/images dependency (#551)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: bump osbuild/images dependency (#552)
      - Author: SchutzBot, Reviewers: Simon de Vlieger
    - deps: images 0.273.0 (#549)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lucas Garfield
    - main: `system` subcommand (#537)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane

  osbuild/images changes (v0.270.0 -> v0.274.0):

    - Add BootcRootFS pipeline and use it for bootc pxe-tar-xz (#2361)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Add Custom menus to X86 and PPC64 ISO bootloaders (#2394)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test: stop testing EOL RHEL releases (#2415)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Update dependencies 2026-05-31 (#2391)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - Update dependencies 2026-06-07 (#2402)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - config-list: narrow down the matrix (#2366)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - data/repositories: add PQC keys to rolling distros (#2411)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: drop `golang.org/x/exp/slices` (#2399)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - distro/eln: clean up part 1 (HMS-10764) (#2384)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - distro/eln: installers use erofs (HMS-10634) (#2398)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - fedora-42: eol (#2385)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - imgtestlib: support bootc-foundry image types (#2393)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - manifest: use boot root for fix bls (#2412)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    - many: copy boot files from build (#2410)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - many: initial `systemd-boot` support (#2392)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - oscap: drop dead code (#2409)
      - Author: Simon de Vlieger, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - test/imgtestlib: boot test network installer on RHEL 10.2 (#2387)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2026-06-17


author: Packit <hello@packit.dev> - 73.0.0-1
changelog:
  Changes with 73.0.0
  ----------------
    - Update dependencies 2026-06-21 (#2451)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Update osbuild dependency commit ID (#2450)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - disk: check all partitions for boot partition requirement (#2459)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - github: drop the reverse dependency check with image-builder-cli (#2454)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - imgtestlib: handle missing sources key in tests (#2447)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - osbuild: ddi mount (#2457)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - rhel-10: reintroduce minimal-raw-xz (#2465)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-06-29


author: Packit <hello@packit.dev> - 74.0.0-1
changelog:
  Changes with 74.0.0
  ----------------
    - Test depsolvednf with dnf5 [HMS-10324] (#2475)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update dependencies 2026-06-28 (#2472)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update dependencies 2026-07-05 (#2490)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - depsolvednf: don't require solver.json in test (#2479)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - distro/eln: use dnf5 and update package lists (#2482)
      - Author: Yaakov Selkowitz, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gen-manifest: optimize checksum calculation (#2382)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - generic/bootc: allow disk.yaml to provide root filesystem type (#2405)
      - Author: Joel Capitao, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - github: remove osbuild-composer reverse dependency test (#2477)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - image-builder/build: add json format option (#2484)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - manifest: add firstboot support (HMS-9187) (#1913)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - many: plumb sdboot options (#2456)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: use `image-builder upload` in tests (HMS-10856) (#2476)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - partition_table: Make AlignUp clearer (#2419)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - pkg/rhsm: match subscription baseurls with wildcards (RHEL-36789) (#2460)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal
    - progress: lock around sub progress (#2487)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - workflows: Add a link to the osbuild-composer API unit test results (#2469)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - workflows: Update old images urls to image-builder (#2468)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-07-08


author: Packit <hello@packit.dev> - 75.0.0-1
changelog:
  Changes with 75.0.0
  ----------------
    - Add hidden pkgsearch subcommand for querying available packages (HMS-11011) (#2515)
      - Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Always use seed argument directly (#2516)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Enable basic bootc-image-builder tests [HMS-10851] (#2467)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Tomáš Koscielniak
    - Enable image-builder container builds [HMS-10851] (#2497)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Simon de Vlieger
    - Fedora ISO Modernization (HMS-9965) (#2533)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Sanne Raymaekers
    - Improve error message for pkgsearch with no packages (#2526)
      - Author: Gianluca Zuccarelli, Reviewers: Brian C. Lane, Lucas Garfield
    - README: update deprecated information in docs (#2498)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Run more bootc-image-builder tests in gitlab [HMS-10854] (#2520)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - Update dependencies 2026-07-12 (#2513)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild dependency commit ID (#2512)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260705 (#2488)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - bootc: support grub2 serial console customization (#2403)
      - Author: Jean-Baptiste Trystram, Reviewers: Brian C. Lane, Joel Capitao, Tomáš Hozza
    - build(deps): bump actions/checkout from 6 to 7 (#2452)
      - Author: dependabot, Reviewers: Anna Vítová, Simon de Vlieger
    - ci: enable allow-unsafe-pr-checkout in checkout/7 (#2523)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - cmd/image-builder: mock simple integration tests (HMS-10857) (#2473)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - disk: systemd-repart compatibility (#2510)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - fedora: drop slirp4netns from the IoT image (#2478)
      - Author: Peter Robinson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - image-builder: add hidden `--with-upload-result` option (#2521)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - pkg/disk: add XFS agcount option in `disk.yaml` (#2496)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: add file progress (HMS-10977) (#2493)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Simon de Vlieger
    - test: fix build info cache path creation to use correct runner_distro (#2495)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - test: fix vm.py import error [HMS-11012] (#2522)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: go 1.27 compatibility (#2504)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - test: mock cache dir (#2519)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-07-21


author: Packit <hello@packit.dev> - 76.0.0-1
changelog:
  Changes with 76.0.0
  ----------------
    - Restore anaconda-iso/iso type to bootc-image-builder (#2527)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update osbuild dependency commit ID (#2531)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda: enable shell shenanigans for anaconda (#2544)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - build(deps): bump actions/setup-go from 6 to 7 (#2532)
      - Author: dependabot, Reviewers: Achilleas Koutsou, Anna Vítová
    - eln: set runner to eln11 (#2535)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - image-builder: distro detection for `build` and `manifest` (#2542)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Ondřej Budai

  — Somewhere on the Internet, 2026-07-22


author: Packit <hello@packit.dev> - 77.0.0-1
changelog:
  Changes with 77.0.0
  ----------------
    - Generate bootc-image-builder test jobs dynamically and enable all tests [HMS-11073] (#2539)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - Refactor CLI setup (#2503)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update osbuild dependency commit ID (#2555)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda: rectify comment (#2548)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová, Lukáš Zapletal
    - bib: Replace logrus usage with olog (#2543)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - bib_legacy: Use functions from bootc (#2540)
      - Author: Brian C. Lane, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/setup-python from 6 to 7 (#2556)
      - Author: dependabot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - eln: enable `aarch64` for `gce` (HMS-11095) (#2558)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
    - github: enable building the bootc-image-builder container [HMS-11005] (#2549)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - gitlab: remove setup-show option for pytest (#2551)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane
    - manifest/raw_bootc: support subscription registration on first boot (HMS-10897) (#2528)
      - Author: Lucas Garfield, Reviewers: Brian C. Lane, Simon de Vlieger
    - pkg/koji/upload: session credentials to headers (#2550)
      - Author: Anna Vítová, Reviewers: Florian Schüller, Sanne Raymaekers

  — Somewhere on the Internet, 2026-07-28


author: Packit <hello@packit.dev> - 78.0.0-1
changelog:
  Changes with 78.0.0
  ----------------
    - Simplify early manifest generation code and enable custom seeds for bootc-based images (#2565)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update RHEL 9, 10 OCI image defs to add Oracle as cloud init datasource (#2559)
      - Author: src-up, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update osbuild dependency commit ID (#2576)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260719 (#2530)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - ci: tag containers (#2575)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - cmd/image-builder: drop `images` from version (#2573)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - container: add SetAuthFilePath method to Resolver (#2580)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - disk: align footer to grain by default (#2562)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - disk: take the ESP size from the image type's partition table (RHEL-214147) (#2552)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - distro/generic: pass subscription options to pxe-tar-xz images (HMS-11108) (#2564)
      - Author: Lucas Garfield, Reviewers: Achilleas Koutsou, Brian C. Lane
    - fedora: create 46 (#2546)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Florian Schüller
    - imgtestlib: configure setuptools package discovery (#2563)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test/imgtestlib: revert boot.py to old behaviour (#2579)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: remove iot-bootable-container image type (#2569)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-08-10


author: Packit <hello@packit.dev> - 79.0.0-1
changelog:
  Changes with 79.0.0
  ----------------
    - Fix the container resolver tests (#2602)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Sanne Raymaekers
    - Run privileged unit tests on gitlab (#2603)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Start container with repos support for legacy ISO only [HMS-11156] (#2582)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update osbuild dependency commit ID (#2600)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260816 (#2599)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - anaconda_installer: platform build packages (#2589)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Sanne Raymaekers
    - distrodefs: Add aliases to Fedora for GCP (HMS-11182) (#2583)
      - Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - fedora: drop explicit `anaconda-widgets` (#2597)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Katerina Koukiou, Lukáš Zapletal
    - image-builder: reuse progress bars for upload (#2592)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - manifest: accept human-readable image sizes (#2571)
      - Author: tomatotomata, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - osbuild/rpm: implement generic env   (#2586)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová
    - ova: set os type and virtual hardware version (HMS-3248) (#2480)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - packit: enable riscv64 (#2595)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - pkg/disk.yaml: add an option to not grow root (#2524)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test: add GPG keys to Fedora 44 test repos (#2585)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Simon de Vlieger
    - test: mock host arch for package search (#2594)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2026-08-20


author: Mikhail Medvedev 1.7.1-1
changelog:
  - Fix: pressing the Stop key did not stop auto operations
  - Added support for SPI NAND flash
  - Added traditional chinese translation
  - New chips added to database


author: Mikhail Medvedev 1.7.2-1
changelog:
  - Fix: NAND Flash information form freeze
  - Added new images for CH341A v1.7
  - Added programmer type menu
  - Added support for the AT24CM02 chip


author: Mikhail Medvedev 1.7.3-1
changelog:
  - Fix: Incorrect HexEdit size when starting the program
  - Added: saving program settings to an ini file


author: Mikhail Medvedev 1.8.1-1
changelog:
  - Fix: increased interface speed
  - Fix: increased SPI NOR Flash operations speed
  - Fix: incorrect chip page sizes values removed
  - Fix: unused files removed
  - Added: support for the CH347T programmer


author: Mikhail Medvedev 1.8.2-1
changelog:
  - Fix: error reading/writing data from I2C chips on the CH347T version 5.44
  - Fix: bit error during NOR/NAND operations in the CH347V1.1 programmer
  - Added: showing the programmer revision function
  - Added: erase check function
  - Added: filling code function


author: Mikhail Medvedev 1.8.3-1
changelog:
  - Fixed: If no chip is selected, the programmer was not detected
  - Fixed: MACOS library compatibility
  - Fixed: MACOS invalid pathes
  - Fixed: libusb detection
  - Fixed: udev rules install
  - Added: 2.5v VCC item
  - SPI NOR FLASH writing speed increased
  - Changed chip database update bash script to Qt app
  - The Zenity package is no longer used


author: Mikhail Medvedev 1.8.4-1
changelog:
  - Fixed: segmentation fault in Qt6
  - Fixed: incorrect interface display on macOS
  - Fixed: write error to sector 0 in Windows
  - Fixed: incorrect saving of the database file in the chip editor
  - Fixed: Unable to erase the 93C66, 93C76 and 93C86 chips
  - Fixed: the font is too large in Qt6
  - Added: migration to Qt6
  - Added: specification file for Fedora
  - Added: universal Qt5/Qt6 CmakeLists.txt
  - Added: support for the spare area for NAND flash memory.


author: Mikhail Medvedev 1.8.5-1
changelog:
  - Fixed: the first highlighted area in HexEdit was not being cleared
  - Fixed: combobox Operations was not reset if chip type changed
  - Fixed: program crashed if current chip is nothing and combobox Operation changed
  - Fixed: Operations label showed for all chip types
  - Added: I2C 5v0 images on info form
  - Added: support for I2C and SPI FeRAM chips


author: Mikhail Medvedev 1.8.6-1
changelog:
  - Removed unused files
  - Copyright added/changed
  - Fixed: if an error was detected, the sequence of operations was not interrupted
  - Fixed: when erasing I2C or SPI Flash, the STOP button did not stop the chip erasing
  - Fixed: the programmer version is not displayed after any chip operation
  - Fixed: chip database updater crashed when the internet connection was lost
  - Fixed: issues on macOS when using file selection dialogs
  - Added: support for 24LC515, 24LC1025


author: Alexander Ploumistos <alexpl@fedoraproject.org> - 2.1.1-1
changelog:
  - Update to v2.1.1
  - Disable tests
  - Remove explicit glib2 dependencies
  - Clean up spec files
  - Remove shebang lines from non-executable files


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-1
changelog:
  - New upstream snapshot.
  - Fixes CVEs 2025-11494, 2025-11495, 2026-2341, 2026-3441, 2026-3442.
    https://bugzilla.redhat.com/show_bug.cgi?id=2402843
    https://bugzilla.redhat.com/show_bug.cgi?id=2402846
    https://bugzilla.redhat.com/show_bug.cgi?id=2438918
    https://bugzilla.redhat.com/show_bug.cgi?id=2443834
  - Fixes CVEs 2025-69644, 2025-69645, 2025-69646.
    https://bugzilla.redhat.com/show_bug.cgi?id=2445281
    https://bugzilla.redhat.com/show_bug.cgi?id=2445284
    https://bugzilla.redhat.com/show_bug.cgi?id=2446276
  - Fixes FTBFS.
    https://bugzilla.redhat.com/show_bug.cgi?id=2434680
  - Relax BR of itcl/itk/iwidgets.
  - Patch "libtool_tag" to force C++ language tagging in libtool.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-3
changelog:
  - Fix CVE-2026-6846.
    https://sourceware.org/bugzilla/show_bug.cgi?id=34049
    https://bugzilla.redhat.com/show_bug.cgi?id=2460525


author: Aaron Chan <aaron.chun.yew.chan@intel.com> - 1.32.0-1
changelog:
  - Update intel-npu-driver to v1.32.0 (rhbz #2463156)
  - update sources level-zero-npu-extensions, npu_compiler_elf
  - update checksum source file
  - remove 3rd party oneapi-level-zero
  - rename thirdparty to third_party
  - Fix debugsource ELF files
  - Remove unnecessary fw excludes and description macro
  - Change build to release


author: Vladislav Dronov <vdronov@redhat.com> - 1.9.0-2
changelog:
  - Enable Intel CET support and install tests
  - Enable Intel CET support in assembler sources
    (https://github.com/intel/qpl/pull/56)
  - Make tests installable as intel-qpl-tests package
    (https://github.com/intel/qpl/pull/57)
  - Fix accel_conf.sh warning
  - Adjust the package description
  - Adjust a test set run in a check stage
  - Adjust the package files layout


author: Patrick Monnerat <patrick@monnerat.net> 4.2.3-1
changelog:
  - New upstream release.
    https://bugzilla.redhat.com/show_bug.cgi?id=2405003
    https://bugzilla.redhat.com/show_bug.cgi?id=2434688
  - New URL.
  - New source URL.
  - Use Tcl/Tk version 9.
  - Patch "tclsize" to retain Tcl8 compatibility.


author: Rénich Bon Ćirić <renich@woralelandia.com> - 1.4.1-3
changelog:
  - Final audit remediation fixes
  - Fixed macro-in-comment warning by escaping %license
  - Corrected .gitignore to include sources file
  - Moved bundled provides to specific plugin subpackages (audiobridge and
    duktape)
  - Verified build with autoreconf -vfi (macro %autoreconf is unexpanded in
    this env)
  - Retained legacy sources format for better compatibility with dist-git
    tools


author: Rénich Bon Ćirić <renich@evalinux.com> - 1.4.1-4
changelog:
  - Fix FTI due to libwebsockets SONAME bump
  - Resolves rhbz#2507496
  - Wrap long line in audiobridge description


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.104.1-1
changelog:
  - update to 2.104.1 (resolves rhbz#2463822)
  - exclude uv_test.go, which requires an Artifactory instance


author: David Howells <dhowells@redhat.com> 0.7-1
changelog:
  - aklog-kafs: Update the cmdline options to be closer to standard aklog.
  - aklog-kafs: Reduce verbosity.
  - aklog-kafs: Allow the destination keyring to be specified.
  - aklog-kafs: Do better default keyring handling.
  - aklog-kafs: Improve error messages.
  - kafs-preload: Add a debug cmdline option and reduce some verbosity.
  - kafs-check-config: Use the kernel's rootcell if no cell specified.
  - Convert most manpages to POD form and supply a generation script.
  - kafs-check-config: Fix a missing inclusion of unistd.h.
  - lib: Fix a modification of a read-only string.
  - Move to using autoconf when building.
  - Generate manpages during the build.
  - kafs-preload: Honour the show_cell setting on each cell.
  - Add SPDX licence tags.
  - Remove the street address from the LICENCE file.


author: David Howells <dhowells@redhat.com> 0.8-1
changelog:
  - Updated cellservdb.
  - spec: Change to new format licence tag.
  - spec: Buildrequire make.
  - spec: Remove dep on filesystem-afs rpm.


author: Neal Gompa <ngompa@fedoraproject.org> - 44.0-1
changelog:
  - Ship plasmoidsetupscripts as regular files in fedoradark and fedoralight
    Resolves: rhbz#2444046
  - kde-openssh-askpass: Only set SSH_ASKPASS if ksshaskpass is installed
    Resolves: rhbz#2433736


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.7.0-2
changelog:
  - Patch kamelion-qmk-helper for qmk-via-api 0.8
  - Account for licenses of statically-linked Rust dependencies


author: Martin Osvald <mosvald@redhat.com> - 3.0.2-5
changelog:
  - Do not set environmental variables to prevent clashes with compilation
    time settings (rhbz#2428214)


author: Augusto Caringi <acaringi@redhat.com> [7.1.6-0]
changelog:
  - New config for stable (Justin M. Forbes)
  - acpi: battery: Sanitise model_number by dropping unprintable characters (Kate Hsuan)
  - redhat: configs: Enable AMD ISP4 MIPI camera solution (Kate Hsuan)
  - media: platform: amd: add DRM_AMDGPU dependency (Arnd Bergmann)
  - media: platform: amd: isp4: drop stale list reinit before free (Bin Du)
  - media: platform: amd: isp4 debug fs logging and more descriptive errors (Bin Du)
  - media: platform: amd: isp4 video node and buffers handling added (Bin Du)
  - media: platform: amd: isp4 subdev and firmware loading handling added (Bin Du)
  - media: platform: amd: Add isp4 fw and hw interface (Bin Du)
  - media: platform: amd: low level support for isp4 firmware (Bin Du)
  - media: platform: amd: Introduce amd isp4 capture driver (Bin Du)
  - serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms (Jiangshan Yi)
  - Linux v7.1.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.1.8-0]
changelog:
  - Config updates for 7.1.8 (Justin M. Forbes)
  - Add to BugsFixed (Justin M. Forbes)
  - smb/client: return EOPNOTSUPP for unsupported O_TMPFILE (ChenXiaoSong)
  - Linux v7.1.8


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.1.9-0]
changelog:
  - packet: use consistent hard_header_len in non-ring send paths (Qihang Tang)
  - platform/x86: int3472: Increase handshake GPIO delay to 200 ms (Hans de Goede)
  - drm/xe: Fix DPT allocation paths. (Junjie Cao) [2488751]
  - Turn on CONFIG_CRYPTO_MLDSA for Fedora (Justin M. Forbes)
  - Linux v7.1.9


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.1.13-0]
changelog:
  - New config item for 7.1.13 stable update (Justin M. Forbes)
  - Add more bugs to BugsFixed (Justin M. Forbes)
  - page_pool: keep frag_offset aligned for odd-sized requests (Florian Schauer) [2521546 2521847]
  - ACPI: scan: Do not combine resources that overlap completely (Rafael J. Wysocki) [2514390]
  - ACPI: scan: Avoid registering platform devices with resource overlaps (Rafael J. Wysocki) [2514390]
  - Bluetooth: btusb: limit RTL8761B BROKEN_EXT_SCAN quirk to 0bda:a728 (Junjie Cao) [2521504]
  - redhat: configs: fedora: Enable Intel CVS (Kate Hsuan)
  - media: i2c: cvs: Pass link frequency explicitly to csi_set_link_cfg() (Laurent Pinchart)
  - media: i2c: cvs: Add NVL ACPI ID (Arun T)
  - media: i2c: cvs: Add IPU8 PCI device ID (Arun T)
  - media: i2c: cvs: Add driver of Intel Computer Vision Sensing Controller(CVS) (Miguel Vadillo)
  - Add bugs to BugsFixed for 7.1.13 (Justin M. Forbes)
  - random: Drop the extrng module reference when import_ubuf() fails (Junjie Cao) [2524262]
  - Linux v7.1.13


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.14.2-1
changelog:
  - Updating for Keylime release v7.14.2
  - This includes the fix for CVE-2026-6420.
  - Update keylime-selinux policy to the latest version 44.1.0


author: Steve Cossette <farchord@gmail.com> - 6.27.0-1
changelog:
  - Initial release (Rename/version scheme change from kmime)
  - Removed doc subpackage (It's been empty for a while)
  - Cleaned up dependancies


author: Kevin Fenzi <kevin@scrye.com> - 1.35.3-3
changelog:
  - Add patch from Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> with sysusers.d handling
  - Fixes rhbz#2364015


author: Packit <hello@packit.dev> - 4-1
changelog:
  Changes with 4
  ----------------
    * ci: pull osbuild from COPR (#3)
      * Author: Simon de Vlieger, Reviewers: Nobody

  — Somewhere on the Internet, 2025-04-09


author: Packit <hello@packit.dev> - 5-1
changelog:
  Changes with 5
  ----------------
    * Fixed cli pkg name in README.md (#8)
      * Author: Fabian Arrotin, Reviewers: Simon de Vlieger
    * ci: enable epel8 in packit (#6)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * many: replace `$arch` and `$buildarch` variable manually (COMPOSER-2507) (#10)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * readme updates (#7)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane

  — Somewhere on the Internet, 2025-04-16


author: Packit <hello@packit.dev> - 6-1
changelog:
  Changes with 6
  ----------------
    * build: include `arch` in artifact names (#12)
      * Author: Simon de Vlieger, Reviewers: Nobody

  — Somewhere on the Internet, 2025-04-17


author: Packit <hello@packit.dev> - 8-1
changelog:
  Changes with 8
  ----------------
    * builder: return `release` in results (#14)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-07-24


author: Packit <hello@packit.dev> - 11-1
changelog:
  Changes with 11
  ----------------
    - ci: fix integration test (#24)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Sanne Raymaekers
    - doc/installation: topleveltasks (#19)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt
    - doc: version requirement (#22)
      - Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    - many: accept `preview` option (HMS-9969) (#20)
      - Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    - many: allow `bootc` (#18)
      - Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    - many: failable arch propagation (#21)
      - Author: Simon de Vlieger, Reviewers: Sanne Raymaekers

  — Somewhere on the Internet, 2026-07-13


author: Packit <hello@packit.dev> - 12-1
changelog:
  Changes with 12
  ----------------
    - builder: fix preview argument construction (#25)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Sanne Raymaekers

  — Somewhere on the Internet, 2026-08-14


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Julien Rische <jrische@redhat.com> - 1.22.2-4
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  - resolves: rhbz#2463398
  - resolves: rhbz#2463395
  - Add upstream patches to build against openssl 4.0
  - Make configure.ac work with autoconf 2.73


author: Than Ngo <than@redhat.com> - 6.0.2.1-1
changelog:
  - Fix rhbz#2481429, Update to 6.0.2.1
  - Fix rhbz#2476570, CVE-2026-42144: integer overflow in PNM size check bypasses memory guard


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.31-1
changelog:
  - New upstream release
  - Fix lzo1x decompress call to use safe version of the API
  - Lower log levels of messages generated for each packet


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.32-1
changelog:
  - New upstream release
  - IMPORTANT: sctp support is now officially deprecated. It is disabled by default and it will be removed in knet 2.x.
  - Fix potential thread race condition in libnozzle close.
  - Fix wrong pointer in libknet RX thread, only triggered by old gcc (< 11).
  - Libnozzle: different fixes for BSD to deal with new tap driver changes and don´t leak interfaces.
  - New API call in libknet to allow configuring a dscp value for KNET_LINK_FLAG_TRAFFICHIPRIO.
  - Bump soname to reflect new API call.
  - Improve OpenSSL error handling.
  - Add support for OpenIndiana.
  - Documentation updates.
  - Fix several tests to better deal with execution timing.
  - Handle some new coverity errors.
  - Create and refine STYLE_GUIDE.md for project contributions.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.33-1
changelog:
  - New upstream release
  - Build fixes for gcc-15
  - Build fixes for rust coreutils
  - Coverity tests cleanup
  - Release: ship all files for completeness


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.34-1
changelog:
  - New upstream release (Resolves rhbz#2494753)
  - Important bugfixes:
    Fix critical defragmentation buffer reclamation logic
    Fix sequence number wraparound calculation in defragmentation
    Add decompression buffer size validation
    Fix SCTP reconnect thread race condition
    Build fixes for int_decompress_bufsize without zlib
  - New features:
    Add unique names to all threads for better debugging
    Add Wireshark dissector plugin for kronosnet protocol analysis
    Add API to enumerate supported cipher modes and hash algorithms
    libnozzle: Platform-specific refactoring and native ioctl implementations
    libnozzle: Add input validation for network prefixes
    libnozzle: Portable type and macro abstractions for BSD/Solaris
    Improve OpenSSL error logging to print entire error stack
    Add CLAUDE.md documentation for AI-assisted development
  - Test suite improvements:
    Add comprehensive defragmentation and sequence wraparound test suites
    Improve test infrastructure with unified logging and injection helpers
    libnozzle: Introduce test macros similar to libknet
    Comprehensive test suite improvements and C99 compliance fixes
    Test suite now supports parallel execution with "make -j check" on systems with sufficient resources


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.35-1
changelog:
  - New upstream release
  - CVE-2026-15811 (LOW): encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicit_bzero() before freeing to prevent exposure through memory disclosure vulnerabilities. (Resolves rhbz#2500850)
  - CVE-2026-15812 (LOW): access control list bypass via link ID spoofing on unencrypted dynamic links. Validate source address against claimed link_id and enable ACL by default. (Resolves rhbz#2500852)
  - CVE-2026-15813 (MEDIUM): memory corruption and out-of-bounds access via malformed network packet defragmentation. Validate fragment sequence numbers before accessing defragmentation buffers. (Resolves rhbz#2500864)
  - tests: add coverage for connected named AF_UNIX SOCK_STREAM sockets
  - libnozzle: Introduce test macros similar to libknet
  - docs: convert README to markdown format


author: Chris Adams <linux@cmadams.net> - 0-0.13
changelog:
  - restructure some things to make it easer/cleaner
  - update for newer libvirt/qemu things
  - add ability to disable graphics console (also disables sound)
  - handle any number of disks rather than just 1 or 2


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-2
changelog:
  - Skip unicode test in annocheck
  - unicode test fails in packit ci rpminspect on kubectl and kubeadm
  - failing symbol is 'go:(*struct { io.Reader; io.WriterTo }).Read' but
    looks correct


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.5-1
changelog:
  - Update to release v1.34.5
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.11-1
changelog:
  - Update to release v1.34.11
  - Upstream fixes
  - Adopts go 1.26 so not available for F43 at this time


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.11-2
changelog:
  - Add fdupes to eliminate rpmlint warning
  - With current releases kubernetes, rpmlint is flagging multiple duplicate
    license related files
  - Added fdupes macro to eliminate these warnings


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.2-1
changelog:
  - Update to release v1.35.2
  - Resolves: rhbz#2443248
  - Upstream no code change
  - Upstream golang requirement change


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.8-1
changelog:
  - Update to release v1.35.8
  - Upstream fixes
  - Built with go 1.26.5 which currently excludes Fedora 43


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.2-2
changelog:
  - Fix flaky TestWaitForAllPodsUnmount test
  - TestWaitForAllPodsUnmount will work sometimes but not always irrespective
    of arch
  - Skip on all arches


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.2-4
changelog:
  - Add flake test exceptions
  - Flake tests that fail in koji but not on mockbuilds or on different
    architectures


author: Richard Berger <richard.berger@outlook.com> - 20250612-1
changelog:
  - Version bump to 20250612
  - disable kim-api (orphaned package)
  - add patch to avoid segfault in Fortran interface


author: Richard Berger <richard.berger@outlook.com> - 20260330-1
changelog:
  - Version bump to 20260330
  - Add patches to avoid unit test failures
  - Bump Kokkos requirement to 5.0


author: Richard Berger <richard.berger@outlook.com> - 20260704-1
changelog:
  - Version bump to 20260704
  - Bump Kokkos requirement to 5.1
  - Remove patches that have been upstreamed
  - Disable Random test due to failures with OpenMPI
  - Disable MolPairStyle:e3b test due to aarch64 failures


author: Mike FABIAN <mfabian@redhat.com> - 0.0.69-1
changelog:
  - Update to 0.0.69
  - Add Georgian console fonts
  - Add Adlm script to SN
  - Add dra, Tutg, ath, cmc, Cham, tai
  - Remove License classifier (license tag with SPDX license expression is
    already there)
  - Remove 0001-Georgian-add-georgian-console-fonts.patch (included upstream)
  - Stop using deprecated %py3_build/%py3_install macros Resolves:
    rhbz#2377304


author: Mike FABIAN <mfabian@redhat.com> - 0.0.70-1
changelog:
  - Update to 0.0.70
  - Add a few dz keyboards (Resolves: https://github.com/mike-
    fabian/langtable/issues/25)
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Add GS, ady, bqi, isv, kbd, kek, lzz, mww, oka, pi, pms, suz, Suni,
    si_ID.UTF-8 zgh_MA.UTF-8
  - Add mdf_RU.UTF-8 to RU


author: Mike FABIAN <mfabian@redhat.com> - 0.0.71-1
changelog:
  - Update to 0.0.71
  - Add xdq, sus, mrh, hrx, brh, ary, en_SE.UTF-8
  - Get new translations and translation changes from CLDR
  - setup.py: use open() instead of deprecated codecs.open(), declare minimum
    Python version >= 3.8
  - Add Yangon timezone id part
  - languages.xml: Rename Asia/Rangoon to Asia/Yangon
  - territories.xml: Rename Asia/Rangoon to Asia/Yangon


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.0-1
changelog:
  - Update to v4.0
  - Drop Patch1 (crash in lazbuild) - issue fixed upstream
  - Drop Patch2 (Qt5 segfault) - backport from this release
  - Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -> "LGPL-2.0-only WITH Independent-modules-exception")


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 0.10.11-1
changelog:
  - update to 0.10.11 (resolves rhbz#2348998)
  - fix FTBFS due to missing tox.ini (resolves rhbz#2354084)


author: Michal Hlavinka <mhlavink@redhat.com> - 692-4
changelog:
  - update lesspipe to 2.23
  - dont use html to process xml files, the result isnt usable (rhbz#2451451)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.13-15
changelog:
  - use proper SPDX identifier for LGPLv2+ (verified against sources)
  - use modern spec macros where applicable
  - make -devel subpackage dependency on main package archful


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.0.8-3
changelog:
  - Disable X fontserver support. Deprecated for decades and this rules out a set
    of potential vulnerabilities.


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Add xxhash-devel as BuildRequires
  - Update library to libabigail.so.5.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Do not build with by default XXH_INLINE_ALL anymore
  - Drop xxhash-static dependency
  - Add xz-devel >= 5.2.0 dependency to support reading xz-compressed binaries
  - Support new libabigail.so.6.0.0 SONAME


author: Dodji Seketeli <dodji@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Support new libabigail.so.8.0.0 SONAME
  - Run 'make check check-self-compare' instead of two separate make invocations.


author: Viktor Malik <vmalik@redhat.com> - 2:1.6.2-2
changelog:
  - Add libbpf-usdt-devel subpackage containing the usdt.h single-header library
    for creating USDTs (User Statically-Defined Tracepoints).


author: Hans de Goede <hdegoede@redhat.com> - 0.5.2-4
changelog:
  - Add upstream patch to enable IPU7 (Lunar Lake) support (rhbz#2333383)
  - Add upstream patches to fix AGC oscillation (rhbz#2368538)
  - Add upstream patches to fix various swstats problems including
    a reproducable divide by zero crash in the AGC code


author: Milan Zamazal <mzamazal@redhat.com> - 1.10.1-1
changelog:
  - Update to 1.10.1
  - -Werror no longer disabled.
  - RPi features disabled to get it compiled, as libcamera package doesn't enable
    RPi pipelines.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.25-4
changelog:
  - In F45+/EL11+, don’t build programs, only libraries, on MinGW
  - Works around and closes RHBZ#2481005


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Dominik Mierzejewski <dominik@greysector.net> - 0.7.5-2
changelog:
  - fixed duplicate files warning
  - made file lists more explicit
  - corrected License tag
  - added missing Provides: for bundled parson
  - added executable bit to fwfetcher.py script and fixed shebang
  - avoid timestamps in generated docs for reproducibility


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Susi Lehtola <jussilehtola@fedoraproject.org> 2.9.0-1
changelog:
  - Disable build on i386 architecture where the build runs out of memory.
  - Update license tag to LGPL-3.0-only (generated library).
  - Update to 2.9.0.


author: Susi Lehtola <jussilehtola@fedoraproject.org> 2.9.0-2
changelog:
  - Devel package now pulls in boost, eigen3, gmp, and mpfr development
    packages that are needed to build against libint2.


author: Michel Lind <salimma@fedoraproject.org> - 0.5.5-1
changelog:
  - Update to version 0.5.5; Fixes: RHBZ#2334136
  - Drop deprecated Python bindings on Fedora >= 42 and EL >= 10


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.3.5-30
changelog:
  - Fix FTBFS with gcc14 -Werror=int-conversion (bug 2300903)
  - Fix invalid escape on json file (bug 2306455)


author: Richard W.M. Jones <rjones@redhat.com> - 6.0.2-3
changelog:
  - Enable the multithreading API
    (https://github.com/sahlberg/libnfs/blob/master/README.multithreading)


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> 7.2-4
changelog:
  - ntirpc-7.2, ntirpc did not tag/release required updates for
    ganesha-8.1 and later (nfs-ganesha-9.15)


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> 7.2-5
changelog:
  - ntirpc-7.2, ntirpc did not tag/release required updates for
    ganesha-8.1 and later (nfs-ganesha-9.16)


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Stephen Kitt <skitt@redhat.com> - 5.3-2
changelog:
  - Move the nss-tools requirement to libreswan-minimal for certutils. The
    unbound-libs requirement is also carried by the Libreswan binaries; since
    those are in -minimal, this moves the unbound-libs versioned requirement
    there as well.


author: Michel Lind <salimma@fedoraproject.org> - 2.6.1-1
changelog:
  - Update to version 2.6.1; Resolves: rhbz#2341880
  - Build Python bindings; Resolves: rhbz#2437438
  - Enable Packit
  - Support disabling tests for iterating on spec changes


author: Jerry James <loganjerry@gmail.com> - 3.5.2-1
changelog:
  - Version 3.5.2
  - Drop all patches
  - Add MIT to license due to rx-ranges and magic_enum
  - Drop the doc subpackage due to unavailable dependencies
  - Use HPCombi on aarch64


author: Remi Collet <remi@remirepo.net> - 1.0.21-1
changelog:
  - update to 1.0.21
  - open https://github.com/jedisct1/libsodium/discussions/1503 build failure on aarch64
  - workaround build failure using -flax-vector-conversions on aarch64


author: Petr Písař <ppisar@redhat.com> - 0.7.36-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (upstream GH#616)


author: Milan Crha <mcrha@redhat.com> - 3.6.6-6
changelog:
  - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
    cross origin redirect)
  - Resolves: rhbz#2433867


author: Jakub Jelen <jjelen@redhat.com> - 0.11.3-1
changelog:
  - New upstream release fixing the following security weaknesses:
    - CVE-2025-8114: Fix NULL pointer dereference after allocation failure
    - CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX


author: Jakub Jelen <jjelen@redhat.com> - 0.12.0-1
changelog:
  - New upstream release fixing following security issues:
    - CVE-2025-14821: libssh loads configuration files from the C:\etc directory on Windows
    - CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request()
    - CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files
    - CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input
    - CVE-2026-0967: Specially crafted patterns could cause DoS
    - CVE-2026-0968: OOB Read in sftp_parse_longname()


author: Paul Howarth <paul@city-fan.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (rhbz#2319104)
    - This is an enhancement and bugfix release - see RELEASE_NOTES for details
    - Note also that various algorithms are now deprecated and not built by
      default, which affects this package


author: Paul Howarth <paul@city-fan.org> - 1.11.1-6
changelog:
  - Fix CVE-2026-7598: integer overflow via large username or password arguments
    (https://github.com/libssh2/libssh2/pull/1858)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-5
changelog:
  - fix CVE-2025-8177: buffer oveflow in thumbnail setrow when processing malformed TIFF (rhbz#2383827)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
changelog:
  - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
  - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.7.0-5
changelog:
  - Install the Fortran modules into %{_fmoddir} via CMake instead of moving
    them after the fact, fixing the non-existent include directory in the
    exported wignernj::wignernj_f03 target and in libwignernj_f03.pc.


author: Miroslav Suchý <msuchy@redhat.com> 26-1
changelog:
  - in verbose mode always print the text of license
  - finally make transformer work
  - fixes and more tests
  - add test for BSD-3-Clause-Clear
  - add tests
  - rework handling not-allowed licensing with exception
  - do not print the long traceback with -v on mismatch


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251021-1
changelog:
  - Update to 20251021
  - Revert "update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: DMC Xe2LPD v2.29 / Xe3LPD v2.32 / Xe3LPD_3002 v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - Add ISH firmware file for Intel Pather Lake platform
  - Update firmware file for Intel Magnetar/BlazarU/BlazarI core


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251111-1
changelog:
  - Update to 20251111
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - Update firmware file for Intel BlazarI/BlazarU core
  - Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - Update AMD cpu microcode
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - update firmware for MT7920/MT7922/MT7925 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20251125-1
changelog:
  - Update to 20251125
  - Revert "amdgpu: update GC 11.0.1 firmware"
  - QCA: Add Bluetooth firmware for WCN685x uart interface
  - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
  - qcom: venus-5.4: update firmware binary for v5.4
  - qcom: venus-5.4: remove unused firmware file
  - iwlwifi: add Sc/Wh FW for core98-181 release
  - amdgpu: DMCUB updates for various ASICs
  - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
  - ASoC: tas2781: Add more symbol links on SPI devices
  - amdgpu: update numerous firmware
  - amdgpu: add vce1 firmware
  - mediatek MT7922: update bluetooth firmware to 20251118163447
  - update firmware for MT7922 WiFi device
  - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
  - qcom: add ADSP, CDSP firmware for sm8750 platform
  - rtl_nic: add firmware rtl9151a-1
  - qcom: Update aic100 firmware files
  - mt76: add firmware for MT7990
  - mt76: update firmware for MT7992/MT7996
  - cirrus: cs35l57: Add firmware for a few Dell products
  - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
  - qcom: Add sdx35 Foxconn vendor firmware image file
  - Update AMD cpu microcode


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260110-1
changelog:
  - Update to 20260110
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20260106153314
  - mediatek MT7920: update bluetooth firmware to 20260105151350
  - mediatek MT7922: update bluetooth firmware to 20260106153735
  - update firmware for MT7922 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
  - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
  - qcom: Update DSP firmware for sa8775 platform
  - QCA: Add Bluetooth firmware for QCC2072 uart interface
  - i915: Xe3p_LPD DMC v2.33
  - qcom: Update DSP firmware for qcs8300 platform
  - update firmware for MT7920 WiFi device
  - qcom: Update aic100 firmware files
  - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
  - firmware: Revert kernel_boot.elf due to license compliance issue
  - add firmware for an8811hb 2.5G ethernet phy
  - i915: Xe3LPD_3002 DMC v2.28
  - i915: Xe3LPD DMC v2.33
  - intel_vpu: Add firmware for 50xx NPUs and update older ones
  - Update AMD SEV firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: venus-5.4: fix ELF segment alignment to 4 bytes
  - mediatek MT7925: update bluetooth firmware to 20251210093205
  - update firmware for MT7925 WiFi device
  - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
  - qcom: Update CDSP firmware for qcm6490 platform
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
  - iwlwifi: Add firmware file for Intel Scorpius core
  - rtw89: 8852b: update fw to v0.29.29.15
  - cirrus: cs35l41: Update firmware and tuning for various HP laptops
  - cirrus: cs35l41: Add support for new HP Clipper laptop
  - qcom: drop compatibility a640_zap.mdt symlink
  - qcom: add version for a530v3_gpmu.fw2
  - xe: Update GUC to v70.55.3 for BMG, PTL
  - iwlwifi: add Bz/Sc FW for core101-82 release
  - iwlwifi: Add Sc/Gf firmware for core101-82 release
  - iwlwifi: update ty/So/Ma firmwares for core101-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Add firmwares for sm8150/sm8450/sm8550/sm8650/sm8750 GPUs
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - cirrus: cs35l41: Add support for new HP laptops
  - Revert "amdgpu: update GC 11.5.0 firmware"
  - Update amd-ucode copyright information
  - Update AMD cpu microcode
  - Update firmware file for Intel Scorpius core
  - Update firmware file for Intel BlazarIGfP core
  - Update firmware file for Intel BlazarI core
  - Update firmware file for Intel BlazarU-HrPGfP core
  - Update firmware file for Intel BlazarU core
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: update ADSP firmware for x1e80100 platform, change the license
  - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
  - Reapply "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update GC 10.3.6 firmware"
  - Revert "amdgpu: update GC 11.5.1 firmware"
  - update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251124093155
  - intel_vpu: Update NPU firmware
  - qcom: vpu: update video firmware binary for SM8250
  - xe: Update GUC to v70.54.0 for BMG, PTL


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260221-1
changelog:
  - Update to 20260221
  - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Update DSP firmware for qcs8300 platform
  - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
  - qcom: Update DSP firmware for sa8775p platform
  - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
  - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
  - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
  - rtw89: 8852b: update txpwr element to R43
  - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
  - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
  - xe: Update GUC to v70.58.0 for LNL, BMG, PTL
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - qcom: Add gpu firmwares for Glymur chipset
  - qcom: vpu: add video firmware for Glymur
  - qcom: add QUPv3 firmware for x1e80100 platform
  - Bluetooth: Add symbolic links for Intel Solar JfP2/1, Solar, Pulsar, AX201 firmware variants
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - qcom: add ADSP, CDSP firmware for glymur platform
  - ASoC: tas2783: Add Firmware files for tas2783A
  - Update firmware file for Intel Solar core
  - mediatek MT7921: update bluetooth firmware to 20251223091725
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - Add firmware for airoha-npu-7581 driver used for MT7990 offloading
  - Add Dell ISH firmware for Intel panther lake systems
  - update Aeonsemi AS21x1x firmware to 1.9.1
  - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
  - ice: update DDP LAG package to 1.3.2.0
  - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
  - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
  - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
  - Update firmware for NPU PHX, STX and STX HALO
  - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
  - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
  - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
  - Intel IPU7: Update firmware binary for Panther Lake
  - update firmware for MT7921 WiFi device
  - Add firmware file for Intel ScorpiusGfp2 core
  - Update firmware file for Intel Scorpius/BlazarIGfP/BlazarI/BlazarU-HrPGfP/BlazarU core
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
  - Add firmware for airoha-npu-7583 driver
  - iwlwifi: add Bz/Sc, Hr/Gf FW for core102-56 release
  - iwlwifi: update ty/So/Ma firmwares for core102-56 release
  - xe: Add GSC 105.0.2.1301 for PTL
  - mediatek: rename MT8188 SCP firmware
  - qcom: Update DSP firmware for QCM6490 platform
  - qcom: sync audioreach firmwares from v1.0.1 build


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260309-1
changelog:
  - Update to 20260309
  - mediatek MT7922: update bluetooth firmware to 20260224103448
  - update firmware for MT7922 WiFi device
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
  - Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
  - amdgpu: updates for various GPUs/ASICs
  - Add firmware file for Intel BlazarIGfp2 core
  - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
  - qcom: Update CDSP firmware for QCM6490 platform
  - add firmware for Lontium LT8713SX DP hub
  - qcom: sync audioreach firmwares from v1.0.2 build
  - qcom: update ADSP, CDSP firmware for sm8750  platform
  - qcom: update ADSP dtb.mbn for glymur platform
  - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
  - Renaming the file back for HP EliteBook X Flip G1i
  - amdnpu: Restore old NPU firmware for compatibility
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
  - update firmware for MT7902 BT device
  - update firmware for MT7902 WiFi device


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260410-1
changelog:
  - Update to 20260410
  - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
  - qcom: sync audioreach firmwares from v1.0.3 build
  - intel_vpu: Update NPU firmware
  - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
  - nvidia: add acr/bl symlink for booting GSP-RM on GA100
  - qcom: add QUPv3 firmware for shikra
  - xe: Update GUC to v70.60.0 for LNL, BMG, PTL
  - qcom: update ADSP firmware for sm8750 platform
  - qcom: update CDSP firmware for glymur platform
  - cirrus: cs35l41: Add support for new HP laptops
  - cirrus: cs35l41: Add support for new ASUS laptops
  - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
  - qcom: vpu: add video firmware for SM8450
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - iwlwifi: add Bz/Sc/Hr/Gf FW for core103-40 release
  - iwlwifi: update ty/So/Ma firmwares for core103-40 release
  - amdgpu: DMCUB updates for various ASICs
  - xe: Update PTL GSC to v105.0.2.1397
  - add firmware for Moxa mux50u devices
  - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
  - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - update firmware for qat_4xxx/qat_402xx/qat_420xx devices
  - update firmware for an8811hb 2.5G ethernet phy
  - qcom: Add FW blobs for DELL XPS13 9345
  - amdgpu: DMCUB updates for various ASICs
  - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
  - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
  - Add firmware file for Intel BlazarIW/BlazarIGfp2
  - iwlwifi: add Bz/Wh FW for core102-56 release
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
  - mediatek MT7921: update bluetooth firmware to 20260224111243
  - mediatek MT7920: update bluetooth firmware to 20260224111231
  - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
  - Add ISH firmware file for Intel Wildcat Lake platform
  - Update firmware for MT7920/MT7921 WiFi device
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Add firmware file for Intel ScorpiusGfp2 core
  - iwlwifi: Update firmware file for Intel Quasar/Scorpius/BlazarIGfP/BlazarI/BlazarU-HrPGfP/BlazarU core
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS615 platform
  - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260519-1
changelog:
  - Update to 20260519
  - ASoC: tas2783: Add Firmware files for tas2783A projects
  - add firmware for MT7927 WiFi device
  - Add HP ISH firmware for Intel Panther Lake systems
  - ti: Add PCM6240 firmware with multiple audio profiles support
  - qcom: add CDSP firmware for shikra platform
  - amdgpu: updates for various ASICs
  - qcom: update ADSP firmware for x1e80100 platform
  - qcom: Add cdsp1r.jsn for sa8775p platform
  - Add firmware for Lontium LT9611C
  - xe: Update GUC to v70.65.0 for LNL, BMG, PTL
  - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
  - Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
  - qcom: update ADSP firmware for x1e80100 platform
  - linux-firmware:Add firmware for Lontium LT7911EXC bridge
  - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
  - qcom: Update CDSP firmware for Kaanapali platform
  - qcom: vpu: add Gen2 firmware binary for Agatti
  - amdgpu: DMCUB updates for various ASICs
  - Add firmware file for Intel BlazarIGfp2/BlazarIW/ScorpiusGfp2
  - Update firmware file for Intel BlazarI/BlazarU/BlazarU-HrPGfP/Scorpius core
  - qcom: Update ADSP firmware for Glymur platform
  - mediatek MT7925: update bluetooth firmware to 20260414153243
  - update firmware for MT7925 WiFi device
  - Revert "Update firmware file for Intel Quasar core"
  - qcom: Add gpdspr.jsn for qcs8300 platform
  - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
  - ath12k: QCC2072 hw1.0: add board-2.bin
  - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
  - ath12k: IPQ5424 hw1.0: add board-2.bin
  - qcom: Update ADSP firmware for Kaanapali platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
  - amdgpu: DMCUB updates for DCN36
  - Update AMD cpu microcode
  - powervr: update Imagination Rogue firmware images
  - qcom: Update ADSP firmware for Kaanapali platform
  - i915: Xe3LPD DMC v2.34
  - i915: Xe3LPD_3002 DMC v2.29
  - qcom: Update ADSP firmware for QCM6490 platform
  - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
  - mediatek: vpu: drop old sym link


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260622-1
changelog:
  - Update to 20260622
  - Update LICENSE locations
  - Move Intel XE firmware to intel-gpu subpackage
  - nxp: add firmware for IW61x WiFi device
  - mediatek MT7922: update bluetooth firmware to 20260605203811
  - mediatek MT7925: update bluetooth firmware to 20260605184935
  - update firmware for MT7922/MT7925 WiFi device
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add LPAICP/qdsp6sw firmware for shikra platform
  - update firmware for MT7986/MT7981/MT7996/MT7992/MT7990
  - qcom: Update ADSP firmware for Kaanapali platform
  - qcom: update CDSP/ADSP firmware for glymur platform
  - QCA: Add bluetooth firmware nvm files for USI/NFA725B
  - Add firmware file for Intel BlazarIW
  - Update firmware file for Intel BlazarI/BlazarU/Scorpius core
  - qcom: update ADSP firmware for qcs615 platform
  - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
  - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
  - realtek: rt1321: Update the patch code to v1.10
  - amdgpu: DMCUB updates for various ASICs
  - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
  - qcom: update CDSP firmware for shikra platform
  - qcom: Update ADSP firmware for Glymur platform
  - Remove a number of firmwares with unknown licenses
  - LICENSES: update GPL-2.0 text and references
  - LICENSES: rename GPL-3 to GPL-3.0-only
  - LICENSES: rename Apache-2 to Apache-2.0
  - Move firmware licenses to a LICENSES/ directory
  - qcom: update ADSP firmware for sm8750 platform
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
  - qcom: Update DSP firmware for sa8775p/qcs8300 platform
  - amdgpu: Update DMCUB fw for DCN314
  - amdgpu: revert yellow carp/vangogh/sienna cichlid/navy flounder/dimgrey cavefish/beige_goby VCN firmware
  - qcom: update CDSP firmware for x1e80100 platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
  - Add RCA firmware files for tas257x projects
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
  - cirrus: cs35l56: Add/Update firmware for Cirrus Amps for a couple of Lenovo laptops
  - QCA: Add BCS calibration binary for QCC2072
  - QCA: Update Bluetooth firmware for QCC2072 UART interface
  - amdgpu: DMCUB updates for various ASICs
  - rtl_nic: add firmware rtl8261c.bin for RTL8261c
  - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
  - i915: Xe3LPD DMC v2.36/Xe3LPD_3002 DMC v2.31/Xe3p_LPD DMC v2.37
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs42l45: Add/Update CS42L45 SDCA codec firmware for Lenovo laptops
  - qcom: Add gpu firmwares for Shikra chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - rtw89: 8852b: update fw to v0.29.29.18
  - rtw89: 8852bt: update fw to v0.29.122.2
  - amdgpu: Update gc 11.0.1 microcode


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20260810-1
changelog:
  - Update to 20260810
  - amdgpu: numerous firmware updates
  - update firmware for MT7922 WiFi device
  - morsemicro: add firmware for mm8108 support
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - Update firmware for an8811hb 2.5G ethernet phy
  - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S
  - mediatek MT7922: update bluetooth firmware to 20260724143815
  - airoha: update AN7583 NPU firmwares to version 0.5
  - qcom: Add gpu firmwares for Eliza chipset
  - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
  - rtw89: 8922d: add fw 0.35.113.2
  - qcom: venus-5.4: fix vp9 decoder assertion failure
  - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
  - qcom: Update qdsp6sw firmware for shikra platform
  - amdgpu: DMCUB updates for various ASICs
  - intel_vpu: Update NPU firmware
  - qcom: Update DSP firmware for qcs8300 platform
  - tas2783: Add firmware for new soundwire devices
  - rtw88: add firmware v41.0.0 for RTL8723B
  - Update AMD cpu microcode
  - Add firmware file for Intel BlazarIW
  - Update firmware file for Intel BlazarI/BlazarU/Scorpius core
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add ADSP firmware for hawi platform
  - powervr: add firmware for Imagination Technologies BXM-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform
  - xe: Release GuC firmware for NVL-S
  - cirrus: cs35l56: Update firmware for the ASUS UX5406SA
  - qcom: vpu: add Gen2 firmware binary for Purwa
  - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
  - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
  - iwlwifi: add Bz/Sc/Hr/Gf FW for core24.60-33 release
  - iwlwifi: update ty/So/Ma/cc/Qu/QuZ firmwares for core24.60-33 release
  - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
  - ueagle-atm: sadly drop unlicensed files
  - qcom: sync audioreach firmwares from v1.0.4 build
  - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
  - amdgpu: DMCUB updates for various ASICs
  - tas2781: Add firmware for new HP projects
  - rtw89: 8852a: add TX power track R34
  - Update AMD SEV firmware


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.01.12-1
changelog:
  - update to 2026.01.12 (resolves rhbz#2428676)
  - switch Source URL to https newly provided by upstream


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.02.26-1
changelog:
  - update to 2026.02.26 (resolves rhbz#2442890)
  - add strict dependency on main package to -tools subpackage


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.13-4
changelog:
  - Ignore virtual filesystem nsfs in zz-disk-space (BZ2322773)
  - Suppress extra blank line from dovecot when no other output generate


author: Brian C. Lane <bcl@redhat.com> 43.10-1
changelog:
  - executils: Remove binary_output flag (bcl@redhat.com)
  - logging: Set encoding=UTF-8 on FileHandler (bcl@redhat.com)
  - executils: Set encoding to UTF-8 for _run_program (bcl@redhat.com)
  - tests: Add template runcmd unicode test (bcl@redhat.com)
  - tests: Add some unicode to the executils tests (bcl@redhat.com)
  - templates: Remove explicit installation of anaconda-widgets (k.koukiou@gmail.com)


author: Brian C. Lane <bcl@redhat.com> 44.0-1
changelog:
  - maint: Switch default platform to F44 (bcl@redhat.com)
  - Drop all installs of shim-ia32 (it no longer exists) (awilliam@redhat.com)
  - templates: Support product version to contain blank character in
    templates.d/99-generic (songmingliang@uniontech.com)


author: Brian C. Lane <bcl@redhat.com> 44.1-1
changelog:
  - runtime-install: skip qcom-accel-firmware (awilliam@redhat.com)
  - executils: decoding after deserialization (oleg.sviridov@red-soft.ru)
  - mkksiso: make ISO reproducible with SOURCE_DATE_EPOCH (e.champetier@ateme.com)


author: Brian C. Lane <bcl@redhat.com> 44.2-1
changelog:
  - Add mac80211_hwsim for wifi testing to installer image (rvykydal@redhat.com)
  - runtime-install: drop tigervnc (awilliam@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 44.4-1
changelog:
  - Exclude build on the i686 architecture (berrange@redhat.com)
  - runtime-cleanup: mesa no longer includes gallium-pipe drivers (yselkowi@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 44.5-1
changelog:
  - runtime-cleanup: don't strip /usr/share from gdb-headless (awilliam@redhat.com)
  - runtime-cleanup: keep policycoreutils /usr/bin for load_policy and setfiles (k.koukiou@gmail.com)
  - executils: Ignore utf-8 decode errors (bcl@redhat.com)
  - mkksiso: Add a --tmp argument to set temporary directory (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 44.7-1
changelog:
  - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)
  - creator: Use safe_joinpaths in make_livecd (bcl@redhat.com)
  - creator: Use safe_joinpaths in make_live_images (bcl@redhat.com)
  - ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl@redhat.com)
  - sysutils: Add safe_joinpaths function (bcl@redhat.com)
  - ltmpl: Add tests for access outside outroot (bcl@redhat.com)
  - treebuilder: Check for symlink when writing module-info (bcl@redhat.com)
  - findkernels: Exclude kernel symlinks pointing outside root (bcl@redhat.com)
  - novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl@redhat.com)
  - sysutils: Add a test for remove and symlinked directories (bcl@redhat.com)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.8-1
changelog:
  - Update to 1.8.8
  - bn-probhat.mim: Sync with the "in(ben_probhat)" layout in xkeyboard-
    config
  - sa-vedic-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - sa-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - hi-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - hu-rovas-post.mim: Sync with the improvements in hu-old-hungarian-
    rovas.txt in ibus-table-others. Also make it possible to use non-ASCII
    accented characters like ü as input.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.9-1
changelog:
  - Update to 1.8.9
  - mr-gamabhana.mim: Update by Shantanu Oak <shantanu.oak@gmail.com>
  - ar-translit.mim: Use Shift+t (T) in ar-translit.mim to input the Arabic
    tatweel (by Benjamin Westphal <benjamin.westphal@riseup.net>)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - ml-poorna-remington.mim: New input method by Mujeeb Rahman K
    <mujeebcpy@gmail.com>


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - ta-tamil99.mim:  Various fixes by thesupertechie
    <thesupertechie1@gmail.com>
  - kn-kgp.mim: Update by the original author Sridhar M A
    <alaymari@gmail.com>


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - New input method bn-khipro.mim by Nafee Bishan <abdunnafialif@gmail.com>
    from https://github.com/rank-coder/khipro-m17n/blob/main/bn-khipro.mim


author: Mike FABIAN <mfabian@redhat.com> - 1.8.13-1
changelog:
  - Update to 1.8.13
  - mr-krutidev.mim: New Marathi input method for Remington (Godrej)
    typewriter layout. By Aniruddha Purushottamrao Mohod
    <aniruddha.mohod@gmail.com>
  - bn-unijoy.mim: Update to modern Unijoy layout (by Md. Rifat Hasan Jihan
    <rhjihan@outlook.com>)
  - bn-khipro.mim: Updates by the author: Nafee <abdunnafialif@gmail.com>


author: Mike FABIAN <mfabian@redhat.com> - 1.8.14-1
changelog:
  - Update to 1.8.14
  - am-sera.mim: Fix Ethiopic Swap between ፙ and ፘ, and Add ጟ (Resolves:
    https://savannah.nongnu.org/bugs/index.php?item_id=67879)


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.287-3
changelog:
  - Add explicit folder definitions for cases where XDG Base Directory spec
    variables are not defined


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.15-100
changelog:
  - Disable the 'distribution default' in MariaDB 10.11 in this package
  - Enable the 'distribution default' in MariaDB 11.8 (package 'mariadb11.8')


author: Michal Schorm <mschorm@redhat.com> - 3:11.8.5-100
changelog:
  - Disable the 'distribution default' in MariaDB 10.11 (package 'mariadb10.11')
  - Enable the 'distribution default' in MariaDB 11.8 in this package


author: Michal Schorm <mschorm@redhat.com> - 3:12.3.1-2
changelog:
  - Drop multilib-rpm-config usage on RHEL
    Related: RHEL-178013
    Related: https://github.com/fedora-eln/eln/issues/525


author: Michal Schorm <mschorm@redhat.com> - 3:12.3.2-1
changelog:
  - Rebase to 12.3.2 (first GA release of the 12.3 series)
  - CVEs fixed: CVE-2026-44168, CVE-2026-44169, CVE-2026-44170,
                CVE-2026-44171, CVE-2026-44172, CVE-2026-44173
  - Drop 'mark-RISC-V64-as-64-bit-architecture.patch' (upstreamed in connector-c PR#295)
  - Drop 'upstream_87309d3d4bb8f48910d05b0ca5ee989bcdd6b053.patch' (upstreamed in MDEV-38811)
  - Rebase 'mariadb-libfmt.patch' for FMT 12.1.0
  - Remove PAM module install path workaround (fixed upstream in MDEV-37197)
  - Move wsrep scripts from server to server-galera subpackage (MDEV-30953)
  - Remove upstream 'galera.conf' systemd drop-in (conflicts with downstream service files)


author: Michal Schorm <mschorm@redhat.com> - 3:12.3.2-2
changelog:
  - Remove downstream 'wsrep_sst_rsync_tunnel' script (breaking change)
    MariaDB's own 'wsrep_sst_rsync' now provides TLS capability via stunnel,
    making the downstream socat-based tunnel script obsolete.
    Users with 'wsrep_sst_method=rsync_tunnel' must switch to 'rsync' with
    native TLS configuration.


author: Frédéric Bérat <fberat@redhat.com> - 1.6.1-1
changelog:
  - Update to version 1.6.1
  - Import new upstream tarball
  - Switched to autorelease and autochangelog
  - Remove obsolete patches
  - Drop several build and runtime dependencies
  - Refine summary description
  - Clean up build definitions and file manifest


author: Frédéric Bérat <fberat@redhat.com> - 1.6.1-2
changelog:
  - Refine spec file configuration and dependencies
  - Remove python3-pip from BuildRequires
  - Use %make_build macro in %build section
  - Mark conf.d directory as noreplace config


author: Frédéric Bérat <fberat@redhat.com> - 1.7.0-2
changelog:
  - Apply upstream patches for repository and error handling
  - Refactor CentOS Stream repo definitions to use metalink
  - Add CentOS Stream repositories to EPEL config
  - Improve error handling for unknown distributions
  - Enhance DNF query distribution context


author: Frédéric Bérat <fberat@redhat.com> - 1.8.0-1
changelog:
  - Update to version 1.8.0
  - Remove upstreamed patches
  - Update source checksum
  - Add v1.8.0 tarball to .gitignore


author: Frédéric Bérat <fberat@redhat.com> - 1.8.0-2
changelog:
  - Apply patch to improve package committish resolution logic
  - Centralize and correct package committish determination
  - Correct EPEL chroot string format to 'epel{release}'
  - Pass `is_revdep` to `get_last_build` for reverse dependencies
  - Refine `@last_build` handling for last build found status
  - Consistently apply `releasever` to `revdep_branch` formatting
  - Update CI regression tests for branch resolution logic


author: Frédéric Bérat <fberat@redhat.com> - 1.8.0-4
changelog:
  - Update ELN compose configuration - Update base URLs for ELN composes -
    Remove references to ResilientStorage variant


author: Charalampos Stratakis <cstratak@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Security fixes for CVE-2023-52353 and CVE-2024-23744 in mbedtls
  - Fix FTBFS with GCC 15
  Resolves: rhbz#2359781, rhbz#2259505, rhbz#2259499, rhbz#2340849


author: Lumír Balhar <lbalhar@redhat.com> - 1.28.0-1
changelog:
  - Update to 1.28.0
  - Security fix for CVE-2026-1998
  - Update mbedtls submodule to 3.6.6
  - mbedtls security fixes for CVE-2026-25834, CVE-2026-34871, CVE-2026-25833
  - CVE-2025-52496, CVE-2025-52497, CVE-2025-49087, CVE-2025-54764, CVE-2025-59438
   Resolves: rhbz#2455368, rhbz#2376688, rhbz#2376701, rhbz#2382261, rhbz#2405245,
   rhbz#2405374, rhbz#2437327, rhbz#2454032, rhbz#2454086, rhbz#2454213


author: Charalampos Stratakis <cstratak@redhat.com> - 1.28.0-2
changelog:
  - Add the mpy-cross bycode cross-compiler subpackage
  - Add micropython-tools subpackage (mpremote, pyboard, DFU/UF2 utilities)
  Resolves: rhbz#2483610


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Stefan Becker <chemobejk@gmail.com> - 2.10-1
changelog:
  - Rebase to upstream version 2.10 (rhbz#2208236)
  - Add patch to fix baudrate setting on F43+ (rhbz#2407160)


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.0-1
changelog:
  - Update to release v29.6.0
  - Resolves: rhbz#2490590
  - Resolves CVE-2026-39828: rhbz#2489945
  - Resolves CVE-2026-39829: rhbz#2490099
  - Resolves CVE-2026-39830: rhbz#2490466
  - Upstream fixes and enhancements


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.1-1
changelog:
  - Update to release v29.6.1
  - Resolves: rhbz#2493405
  - Upstream security fixes for: GHSA-mjcv-p78q-w5fw GHSA-jpcc-p29g-p8mq
    GHSA-72x6-4j93-7w86 GHSA-7236-3392-c5c6


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.2-1
changelog:
  - Update to release v29.6.2
  - Resolves: rhbz#2496437
  - Upstream security fixes
  - - GHSA-hw3h-2gp9-cxpv
  - - GHSA-qx3x-mv6r-52p6
  - - GHSA-32pv-7hq5-qhwq
  - - GHSA-g2h8-426c-7976
  - - GHSA-388v-wmr2-g2v2


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.7.0~rc.1-1
changelog:
  - Update to release v29.7.0
  - Upstream fixes and enhancements
  - Resolve CVE-2026-17106 (GHSA-hfg8-hc9c-6c3h)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.7.2-1
changelog:
  - Update to release v29.7.2
  - Resolves: rhbz#2501491
  - Upstream fixes
  - Drop go 1.27 json patch - no longer required


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.6-1
changelog:
  - Make sure to install BuildRequires defined by macros (frostyx@email.cz)
  - unbreq plugin: performs action only when build is taking place (marian.koncek@mailbox.org)
  - simplify forcearch code


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - mock: Use umask 0022 instead of 0002 to avoid strange permissions (ngompa@velocitylimitless.com)
  - expand_spec plugin: generating expanded-spec.txt in postdeps hook (yzhu@redhat.com)
  - do not fail (not just) hermetic builds for missing resolv.conf
  - use skopeo for hermetic bootstrap images (tkopecek@redhat.com)
  - support yum for hermetic build (tkopecek@redhat.com)
  - allow access to the buildroot binary RPMs even in hermetic builds (tkopecek@redhat.com)
  - adapt mock to Changes/droppingOfCertPemFile
  - file_util: improve rmtree performance (#1672) (Gerasimov.N.V)
  - disable traceLog() wrapper (will be removed)
  - `mock --scrub=all` now correctly backs up successful builds from the buildroot (sergio@serjux.com)
  - update subscription-manager instructions (msuchy@redhat.com)
  - configs: Switch openSUSE Tumbleweed to DNF5 (ngompa@opensuse.org)
  - depend on DNF5 for EL11+ distributions (ngompa@centosproject.org)
  - depend on DNF5 for Mageia 10+ and Cauldron (ngompa@mageia.org)
  - select personality for RISC-V DNF transactions
  - document --scrub=bootstrap (negativo17@gmail.com)
  - unbreq supports `--isolation=simple` and `--no-bootstrap-chroot` (marian.koncek@mailbox.org)
  - unbreq plugin no longer crashes for `(foo if bar)` build deps (marian.koncek@mailbox.org)
  - unbreq performance has been significantly improved through caching (marian.koncek@mailbox.org)
  - unbreq logs standard outputs of failed commands (mkoncek@users.noreply.github.com)


author: Pavel Raiskup <pavel@raiskup.cz> 6.8-1
changelog:
  - bump Conflicts to mock-core-configs < 45.1
  - Document oci_platform_map as a temporary workaround
  - Allow --disable-plugin buildroot_lock with --calculate-build-dependencies
  - buildroot_lock: don't inspect bootstrap image when not used
  - No --allowerasing for `dnf5 list`
  - Include support for polkit (rajibade@amazon.com)
  - Add support for isolated %check phase
  - Add pivot_root_chroot option to enable user namespaces (tkopecek@redhat.com)
  - fix: add HTTP 503 to retry status_forcelist in mock-hermetic-repo (scoheb@gmail.com)
  - unbreq plugin: disable SRPM caching (marian.koncek@mailbox.org)
  - unbreq plugin: do not treat not installed packages as unused (marian.koncek@mailbox.org)
  - Add system monitor plugin  (#1748) (yaneti@declera.com)
  - fix: reload uidManager with chrootuid/chrootgid from config
  - Don't use --allowerasing with 'dnf download' (logans@cottsay.net)
  - fix: add newline at the end of each line of available_pkgs.log (msuchy@redhat.com)
  - feat: remove pkgid from package_state plugin output (msuchy@redhat.com)
  - add rpm as deps to tox tests (msuchy@redhat.com)
  - fix: preserve readable permissions when copying spec files into chroot (#1300) (msuchy@redhat.com)
  - fix: add timeout to podman pull to prevent indefinite hangs (#1680) (msuchy@redhat.com)
  - bash-completion: localrepo takes a directory arg (linux@cmadams.net)
  - bash-completion: chain doesn't take an config arg (linux@cmadams.net)
  - fix: --verbose no longer duplicates build log into root log (#1302) (msuchy@redhat.com)
  - shadow_utils: useradd --root for newer systems (praiskup@redhat.com)
  - generate available_pkgs.log for dnf5/dnf4 package managers (msuchy@redhat.com)
  - fix: preserve dnf.conf/yum.conf timestamps when content is unchanged (msuchy@redhat.com)
  - feat: add OCI platform support for x86_64 sub-architecture containers (andrew.lukoshko@gmail.com)
  - Decode file:// repo paths before bootstrap bind mount (lukas.lipinsky@oracle.com)
  - Fix the tool check (tkopecek@redhat.com)
  - Refactor NS resolver logic for clarity and consistency


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Pavel Raiskup <pavel@raiskup.cz> 43.5-1
changelog:
  - add PQ keys to rhel9 (msuchy@redhat.com)
  - Switch Mageia 10+ and Cauldron to DNF5 (ngompa@mageia.org)
  - EOL Fedora 41


author: Pavel Raiskup <pavel@raiskup.cz> 44.3-1
changelog:
  - the fedora-release-eln renamed to fedora-eln-release
  - Add config for Fedora 44 version of RISC-V port (marcin@juszkiewicz.com.pl)
  - set bootstrap_image_ready=True for AlmaLinux configs (andrew.lukoshko@gmail.com)
  - re-enable bootstrap images for x86_64_v2 AlmaLinux configs (andrew.lukoshko@gmail.com)
  - remove dependency on python3-dnf (msuchy@redhat.com)


author: Pavel Raiskup <pavel@raiskup.cz> 44.4-1
changelog:
  - Fixes #1761: Add Fedora Rawhide RISC-V (jmontleo@redhat.com)
  - configs: add Azure Linux 4.0 beta configuration (tobiasb@microsoft.com)


author: Pavel Raiskup <pavel@raiskup.cz> 45.1-1
changelog:
  - branch Fedora 45 from Rawhide
  - Document oci_platform_map as a temporary workaround
  - update openEuler 24.03 LTS chroot to SP4 and fix source metalink (pkwarcraft@gmail.com)
  - add Extensions repos to ELN (yselkowi@redhat.com)
  - Add missing fedora-45-riscv64.cfg (abologna@redhat.com)
  - Use cdn.opensuse.org for openSUSE baseurls. (negativo17@gmail.com)
  - update Mageia configs (wally@mageia.org)


author: Remi Collet <remi@remirepo.net> - 1.30.6-2
changelog:
  - temporarily drop man pages on Fedora 44 as FTBFS
    reported as https://jira.mongodb.org/browse/CDRIVER-6210


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 6.12.0-20
changelog:
  - Change the certificate bundle used to popule Mono certificate store
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile


author: Tobias Girstmair <t-fedora@girst.at> - 4.0.0~a4-1
changelog:
  - Update to 4.0.0a4 for Python 3.14 compatibility (RHBZ#2367738) and fix gstreamer 1.26 compatibility


author: Tom Callaway <spot@fedoraproject.org> - 2.1.2-2
changelog:
  - add explicit Requires on cjson-devel to mosquitto-devel (header assumes the cjson headers are also present)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.1-1
changelog:
  - 0cabc75 fix: Translate job-group properly (David Pascual)
  - 70e07c1 fix: Return empty list when there is no content in res_ks_list (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - cee2f5b fix : Not try to login beaker hub unless needed (David Pascual)
  - 75eb8ea chore: Release version 1.23.3 (github-actions)
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.4-1
changelog:
  - 75d8c3b chore: Enable epel-10 builds in Packit (David Pascual)
  - 4a98123 fix: Support pass fetch_url to task (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.5-1
changelog:
  - b46c7c4 chore: Bump python-semantic-release to fix release issue (David Pascual)
  - 033e1f7 chore(packit): Update epel spec for fedora propose upstream (David Pascual)
  - aeb12fe fix: Enforce beaker-client 29.2 to fix fetch_url error (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.24.0-1
changelog:
  - 39e9d79 feat: Add support to pass watchdog panic="ignore" in Beaker recipe (David Pascual)
  - 801ef4b fix: Fix nested and/or issue (David Pascual)
  - fad14c2 test: Add _translate_constraint test (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.25.0-1
changelog:
  - 8ed12e7 feat: Add support for Beaker group key (David Pascual)
  - 8e6ab07 fix: Revert commit 0cabc75 (David Pascual)


author: - 1.26.0-1
changelog:
  - a702da2 fix: Pin setuptools<82 to restore pkg_resources for beaker-client (Rizwan Shaikh)
  - cf48126 feat: add EC2 UserData support for AWS provider (Rizwan Shaikh)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-14
changelog:
  - Fix CVE-2026-72694: symlink-following privilege escalation in PID file handling
    Resolves: #2513829


author: Carl George <carlwgeorge@fedoraproject.org> - 1.4.287-8
changelog:
  - Add patch for building with GCC 15
  - Rebuilt for poco 1.14.1 rhbz#2335663
  - Exclude self signed certificate tests rhbz#2340894


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - rebase to 1.27.1 (rhbz#2412002)
  - changes to mutool run to bring it into sync with WASM library
  - improvements for text extraction
  - improved HTML+CSS support
  - mutool grep: new tool to search for text in documents
  - various bugfixes


author: Michael J Gruber <mjg@fedoraproject.org> - 1.28.2-1
changelog:
  - rebase to 1.28.2 (rhbz#2493555)
  - Markdown document format support
  - HTML and EPUB improvements
  - PDF write option "decrypt" is deprecated; use "encrypt=none" instead
  - New mutool audit command to analyze PDF structure and generate report
  - Various fixes and improvements


author: Jerry James <loganjerry@gmail.com> - 4.7.2-1
changelog:
  - Version 4.7.2
  - Use the cmake declarative buildsystem
  - Drop upstreamed patches: ffmpeg8, qt6.10, tinyxml2-11
  - Give the subpackages individual release numbers


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.4.3-5
changelog:
  - move two shared libraries from -devel to main package
  - add missing SONAME to libMyGUI.OpenGLPlatform.so


author: Chapien <inquiries@chapien.net> - 3.4.4-5
changelog:
  - Removed libMyGui.OpenGLPlatform.so and libMyGUICommon.so, as they are no
    longer necessary with opengl being the only supported backend.


author: David Abdurachmanov <davidlt@rivosinc.com> - 8.4.7-5
changelog:
  - Disable numactrl and libquadmath on risc-v
  - Disable ld.gold on risc-v
  - Add list of skipped tests for risc-v


author: josef radinger <cheese@nosuchhost.net> - 2.6.0-1
changelog:
  - bump version
  - add basic_passwords.txt and vulnerabilities.csv
  - cleanup spec-file
  - remove patch1


author: josef radinger <cheese@nosuchhost.net> - 2.8.45-1
changelog:
  - bump version
  - modfy Requires/Conflicts to be version-independant; 
    thanks go to Michal Schorm <mschorm at redhat.com>
    rhbz#2494542, rhbz#2494543, rhbz#2494544
  - add all *.md files to docs


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.7-1
changelog:
  - require only git-core which is already sufficient for %autosetup -S git_am
  - rebase to latest upstream release (rhbz#2414527)


author: Mark McKinstry <mmckinst@fedoraproject.org> - 20240728-1
changelog:
  - upgrade to 20240728
  - include work from Xose Perez https://src.fedoraproject.org/rpms/nawk/pull-request/7


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Richard Russon <rich@flatcap.org> - 20260406-1
changelog:
  - Features
    - #4799 Add IMAP connection monitoring, timeouts, and reconnection backoff
  - Bug Fixes
    - #4755 Fix off-by-one in ARRAY_RESERVE()
    - #4819 Fix IMAP crash when changing folders
    - Fix freeze in IMAP with OpenSSL
    - Fix blocking IMAP pipeline drain with many mailboxes
    - Fix crash on threaded index update
    - Fix crash on NULL thread in display subject
    - Fix menu half-down when data fits in one page
    - Fix alias search prompt
    - Fix index tag colours
    - Protect hooks against unhook during execution
    - Fix leak in pattern alias search
    - Consistently convert headers to LF EOL convention
  - Changed Config
    - Changed: `compose_show_preview = yes`
    Display a preview of the message body in the Compose window
  - Docs
    - `$message_id_format`: mention Base64Url encoding
    - Fix descriptions of deprecated config options
  - Build
    - #4826 Use optreset on Solaris too
    - #4827 Avoid function name clash on Solaris
    - #4828 Allow Solaris to use qsort_s
    - Check docs requirements in configure
  - Code
    - Fix graphviz debug output


author: Richard Russon <rich@flatcap.org> - 20260504-1
changelog:
  - Security
    - Fix GSSAPI buffer underflow on short unwrapped tokens
    - Reject percent-encoded NUL bytes in URL decoding
    - Skip CN fallback when SAN dNSName entries exist (RFC6125)
    - Cap POP3 UIDL responses to prevent OOM from a malicious server
    - Harden POP host URL copy
  - Bug Fixes
    - #4836 imap: fix memory leak in `msg_parse_flags`
    - #4849 Fix memmove in `mutt_str_expand_tabs`
    - #4850 IMAP: enhance stability with re-entrancy protection and reconnection fixes
    - #4852 Say which mailcap field we are looking for
    - #4853 Don't overwrite content_type
    - pager: fix crash on `uncolor *`
    - pager: fix wrong line index in signature syntax realloc
    - pager: fix OOB read on short log lines in `display_line()`
    - pager: fix off-by-one in newline restoration
    - imap: fix sort for missing emails
    - imap: fix crash when syncing mailbox on exit
    - Fix crash in `cmd_parse_fetch()` when edata is NULL
    - log: fix missing errors on startup
    - Force cursor to be visible on exit


author: Richard Russon <rich@flatcap.org> - 20260616-1
changelog:
  - Security
    - #4900 bcache: sanitize mailbox names that escape the cache dir
    - #4901 auth_gss: fix out-of-bounds read of GSS security token
  - Bug Fixes
    - #4866 Fix broken message-hook in the pager
    - #4869 Fix duplicate "no mail" message
    - #4874 Restore the `-C` command-line flag
    - #4882 Refresh notmuch tag completion cache, and fix a tag completion crash
    - #4893 Fix index-format-hook parsing
    - #4897 Allow `<entire-thread>` from any mailbox type, and fix a related crash
    - email: fix header rewind after mbox separator
    - imap: retry login after a failure
    - maildir/notmuch: fix memory leak
    - config: fix inherited has_been_set
    - main: fix inverted condition in init_nntp
  - Code
    - test: fix conddate after 2038


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:4.2.1-1
changelog:
  - 4.2.1 release
  - disable doc subpackage due to missing cmark-gfm dependency for htmldocs
  - update with-lockfile-path fixes RHBZ#2360947


author: Steve Dickson <steved@redhat.com> 2.8.7-4
changelog:
  - libnfsidmap: avoid malloc(0) for empty Local-Realms
  - Removed warnings in nfs_sockaddr2universal()


author: Steve Dickson <steved@redhat.com> 2.8.7-6
changelog:
  - rpc.gssd: Decrement client referece count on error paths
  - Pass ignore_hosts to export_create() in export_read()


author: Steve Dickson <steved@redhat.com> 2.8.7-7
changelog:
  - nfsd: fix memory overflow for haddr
  - gssd: fix memory leak in gssd_free_client
  - statd: fix memory leak in sm_mon_1_svc() when existing host re-monitors
  - getport: fix missing stddef.h inclusion


author: Jan Macku <jamacku@redhat.com> - 1.68.0-4
changelog:
  - add missing build dependency on systemd-devel (#2460065)
  - install missing sample configuration file for nghttpx service (#2460064)


author: Jan Macku <jamacku@redhat.com> - 1.68.0-5
changelog:
  - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-9
changelog:
  - Spec file and macro cleanups
  - move some files into the packages that have the dependencies they rely on
    (e.g. systemd, logrotate are not present in nginx-core, so don't install
    files pertaining to them there)
  - remove unused LDFLAGS and DESTDIR overrides, for perl we patch the
    Makefile.PL already
  - use zlib-ng-devel dependency also in nginx-mod-devel
  - improve macro consistency
  - sync configure command in macros.nginxmods.in with main package


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.0-1
changelog:
  - update to 1.30.0
  - drop upstreamed manpage patch - https://github.com/nginx/nginx/pull/1089
  - refresh other patches


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.1-1
changelog:
  - update to 1.30.1
  - fixes CVE-2026-42926, CVE-2026-42945, CVE-2026-42946, CVE-2026-42934,
    CVE-2026-40460 and CVE-2026-40701


author: Jens Petersen <petersen@redhat.com> - 2.34.7-1
changelog:
  - update to 2.34.7 (rhbz#2457630) fixes GHSA-vh5x-56v6-4368
  - https://discourse.nixos.org/t/security-advisory-local-privilege-
    escalation-in-lix-and-nix/77407
  - https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368


author: Rostislav Krasny <rostiprodev@gmail.com> - 3.125.0-2
changelog:
  - Reseed the freebl DRBG after fork() so forked children do not replay the
    parent's random stream (Firefox fork server duplicate UUIDs / crypto output)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.4-4
changelog:
  - based on PR#18 by Orion Poplawski
  - Build NUT-Monitor and ship in separate nut-monitor package (rhbz#2359149)
  - Move UPS drivers into /usr/libexec/nut


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 16.11.0-1
changelog:
  - Update to latest version (#2335692)
  - Drop webservice subpackage as we don't have streamlit packaged


author: Pat Riehecky <riehecky@fnal.gov> - 2.10.5-2
changelog:
  - Fix incorrect permissions on /usr/libexec/ocsinventory-agent/ocsinventory-agent.cron
  - Correct manpages not tagged as doc


author: Martin Gansser <martinkg@fedoraproject.org> - 0.2.0^20241204git8ac191c-1
changelog:
  - Update to last git commit
  - Add 0001-fix-qt6-arg-format.patch
  - Add 0002-fix-qt6-arg-sampleformat.patch


author: Simone Caronni <negativo17@gmail.com> - 9.12-8
changelog:
  - Clean up SPEC file, drop EOL distro conditionals and macros.
  - Fix Source URL, the old one is no longer valid.
  - Use macros everywhere.
  - Sort BuildRequires, files, configure parameters, etc.
  - Be consistent with macros and variables.
  - Trim changelog.


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Update to 3.25.0
  - Drop patches which are included in upstream
  - Adapt p11sak patch
  - Fix RPM build warnings
  - Add jq and openssl in Build Requirement, required for testcases


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Require openssl >= 3.5.1
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
  - Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.27.0-1
changelog:
  - Update to 3.27.0
    * Add base support for PKCS#11 v3.2
    * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final]
    * Add support for PKCS#11 v3.2 C_EncapsulateKey/C_DecapsulateKey
    * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with RSA-PKCS and RSA-OAEP mechanisms
    * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with the ECDH mechanism
    * Soft/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with the DH-PKCS mechanism
    * Soft: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types
      and mechanisms (requires OpenSSL 3.5 or later, or the OQS-provider must be configured)
    * CCA: Add support for PKCS#11 v3.2 ML-DSA key type and mechanisms (requires CCA v8.4 or later)
    * EP11: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types and mechanisms
      (requires an EP11 host library v4.2 or later, and a CEX8P crypto card with firmware v9.6 or
      later on IBM z17, and v8.39 or later on IBM z16)
    * p11sak: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types
    * Soft/ICA: Add support for PKCS#11 v3.2 mechanisms CKM_ECDH_X_AES_KEY_WRAP and CKM_ECDH_COF_AES_KEY_WRAP
    * p11sak: Add support for key wrapping with PKCS#11 v3.2 mechanisms
      CKM_ECDH_X_AES_KEY_WRAP and CKM_ECDH_COF_AES_KEY_WRAP
    * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 mechanism CKM_PUB_KEY_FROM_PRIV_KEY
    * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.0 Edwards and Montgomery key types and mechanisms
    * Soft/ICA: Support CKM_ECDH_AES_KEY_WRAP also for Montgomery keys
    * p11sak: Add support for PKCS#11 v3.0 Edwards and Montgomery key types
    * Soft: Add support for CKM_ECDH1_COFACTOR_DERIVE
    * CCA: Add support for additional RSA public exponent values 5, 17, or 257
    * p11sak: Add option to list-key command to show EP11 session IDs
    * Make the maximum number of token objects supported configurable
    * Fixes for CVE-2026-40253, CVE-2026-23893, and CVE-2026-22791
    * Bug fixes
  - Drop %{ix86} build


author: Simon Pichugin <spichugi@redhat.com> - 2.6.10-4
changelog:
  - Fix LDAP initialization does unnecessary resolution of hostname (rhbz#2331728)
  - Convert STI tests to FMF (rhbz#2382998)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.0-1
changelog:
  - New upstream release (#2311896)
  - Separate OpenSC into libraries and binaries
  - Change expected test failures in FIPS mode
  - Do not build with OpenPACE on RHEL


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - New upstream release (#2442363) fixing various security issues:
    - CVE-2025-66038 Memory corruption via improper compact-TLV length validation
    - CVE-2025-66215 Stack-buffer-overflow with physical access via crafted smart card or USB device
    - CVE-2025-49010 Stack-buffer-overflow via crafted smart card or USB device responses
    - CVE-2025-66037 Out-of-bounds read via crafted input
    - CVE-2025-13763 Several uses of potentially uninitialized memory detected by fuzzers


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-6
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-8
changelog:
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: rhbz#2454941
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: rhbz#2454951
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: rhbz#2454944
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: rhbz#2454943
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: rhbz#2454961


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-11
changelog:
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding
  - Remove duplicate manpage entries from ssh(1)
    Resolves: rhbz#2442505


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 10.2p1-12
changelog:
  - Improve GSS KEX algorithms documentation
    Patches are submitted by xspielinbox+redhat@protonmail.com
    Resolves: rhbz#2241564


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-13
changelog:
  - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
    in unintended parent directories when scp performs remote-to-remote copy
    via the local host
    Resolves: rhbz#2498027
  - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
    Resolves: rhbz#2497966


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 10.0p1-14
changelog:
  - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded
    file location
  - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect
    handling of forwarding and tunneling options
  - Fix CVE-2026-73282: avoid potential realloc use-after-free in the client if a
    remote forwarding is added via the local session multiplexing socket while a
    remote forwarding open request is pending with the server.


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5, resolving CVE-2025-15467, CVE-2025-15468,
    CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420,
    CVE-2025-69421, CVE-2025-69419, CVE-2026-22795, CVE-2026-22796, CVE-2025-11187


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.5-2
changelog:
  - Backport security patches from OpenSSL 3.5.6
    Resolves: CVE-2026-2673
    Resolves: CVE-2026-28387
    Resolves: CVE-2026-28388
    Resolves: CVE-2026-28389
    Resolves: CVE-2026-28390
    Resolves: CVE-2026-31789
    Resolves: CVE-2026-31790


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.7-2
changelog:
  - Don't raise NOT_ENOUGH_DATA on a clean EOF at an object boundary
    (Backport from https://github.com/openssl/openssl/commit/3687ff7)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.8-1
changelog:
  - Rebase to OpenSSL 3.5.8
    Resolves: CVE-2026-14456
    Resolves: CVE-2026-14457
    Resolves: CVE-2026-18798
    Resolves: CVE-2026-54874
    Resolves: CVE-2026-63072
    Resolves: CVE-2026-63073
    Resolves: CVE-2026-63074
    Resolves: CVE-2026-63075
    Resolves: CVE-2026-63076
    Resolves: CVE-2026-75803


author: Frank Lichtenheld <frank@lichtenheld.com> - 2.7.6-1
changelog:
  - Update to upstream 2.7.6 release
  - Drop obsolete patch 0001-test_tls_crypt-Fix-issue-with-temp-file-name-on-big-.patch


author: Michal Schorm <mschorm@redhat.com> - 4.16.7-2
changelog:
  - Correct License tag from 'LicenseRef-Callaway-BSD' to '0BSD' per
    upstream 'COPYRIGHT.orafce' (SPDX tag correction, not a license change)


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - CI: run tests on 9.7+10.1 GA and 9.8+10.2 nightly (HMS-9794) (#2351)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Revert "schutzbot: update libsemanage before installing osbuild" (#2378)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Solver: fix `repo_ids` to restrict all dependency resolution, not just top-level packages (HMS-10314) (#2379)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Solver: implement per-transaction package excludes in the DNF5 solver (HMS-10318) (#2381)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2383)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - Update osbuild-ci container images (#2367)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - Update snapshots to 20260308 (#2382)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: shift manifest guide headings one level down (#2385)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - solver: add cost field to Repository model (#2380)
      - Author: Mark Kemel, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/rpm: add nodeps option for `rpm install --nodeps` (#2387)
      - Author: Dusty Mabe, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages: add coreos.bfb for NVIDIA BlueField DPUs (#2349)
      - Author: Sagi Zigmon, Reviewers: Nobody

  — Somewhere on the Internet, 2026-03-11


author: Packit <hello@packit.dev> - 177-1
changelog:
  Changes with 177
  ----------------
    - Add stages used for building s390x isos (HMS-9967) (#2390)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: default to using DNF5 depsolver on Fedora 45+ (current Rawhide) (HMS-10343) (#2389)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to support building ppc64le isos (HMS-9968) (#2377)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2394)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2392)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260315 (#2393)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260322 (#2397)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - buildroot: Use bwrap's --drop-cap ALL (#2395)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Alexander Larsson
    - chore: clean up team ssh keys (#2391)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Anna Vítová, Tomáš Hozza
    - cli: Print checkpoint cache status (#2388)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - stages/aleph: make path parametrizable (#2384)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - tools/osbuild-store: do stuff with sources and store (HMS-10238) (#2364)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-26


author: Packit <hello@packit.dev> - 178-1
changelog:
  Changes with 178
  ----------------
    - Packit: disable s390x builds in COPR (#2406)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Simon de Vlieger
    - Support uri encoded urls (#2405)
      - Author: Justin Sherrill, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild-ci container images (#2408)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260329 (#2403)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stage: flatpak.build-import-bundle.oci (HMS-10170) (#2400)
      - Author: Simon de Vlieger, Reviewers: Dusty Mabe, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-02


author: Packit <hello@packit.dev> - 181-1
changelog:
  Changes with 181
  ----------------
    - stages/bootc.install-to-fs: remount /dev (#2440)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-11


author: Packit <hello@packit.dev> - 183-1
changelog:
  Changes with 183
  ----------------
    - .gitlab-ci.yml: add 9.8-ga and 10.2-ga (#2457)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    - Optimize osbuild-depsolve-dnf memory and runtime performance (HMS-10526) (#2456)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Lukáš Zapletal
    - Update images dependency ref to latest (#2461)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - mounts/ddi: mounting of DDIs (#2459)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - runners: `eln11` (HMS-10652, HMS-10652) (#2453)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - test: update container IDs for manifest-list-test (#2455)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-27


author: Packit <hello@packit.dev> - 185-1
changelog:
  Changes with 185
  ----------------
    - Update snapshots to 20260531 (#2466)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal, Simon de Vlieger
    - ci: fix `test_qemu` (#2483)
      - Author: Simon de Vlieger, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - org.osbuild.ovf: support setting virtual hardware version (HMS-3248) (#2468)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - runners: Add Oracle Linux 9 runner symlinked to CentOS9 (#2476)
      - Author: Laurence Rochfort, Reviewers: Brian C. Lane, Simon de Vlieger
    - sources/librepo: accept SHA1 (#2477)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-06-17


author: Packit <hello@packit.dev> - 187-1
changelog:
  Changes with 187
  ----------------
    - Update images dependency ref to latest (#2497)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update osbuild-ci container images (#2493)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260705 (#2496)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - containers-storage: Handle missing `storage.conf` values (#2501)
      - Author: Joel Capitao, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/bootc.install-to-fs: remount /dev/shm in addition to /dev/shm (#2494)
      - Author: Alexander Larsson, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/org.osbuild.bfb: BFB boot grub shims (#2471)
      - Author: Eli Elgaev, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages: add org.osbuild.grub2.d (#2473)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - utils: add utils.makeefi library (#2499)
      - Author: Dusty Mabe, Reviewers: Achilleas Koutsou, Renata Ravanelli, Simon de Vlieger

  — Somewhere on the Internet, 2026-07-10


author: Packit <hello@packit.dev> - 189-1
changelog:
  Changes with 189
  ----------------
    - Added new stage org.osbuild.idmap to enable shifting UIDs/GIDs (#2495)
      - Author: Michael Engel, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2517)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild-ci container images (#2508)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260712 (#2505)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - Update snapshots to 20260719 (#2511)
      - Author: SchutzBot, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update snapshots to 20260726 (#2516)
      - Author: SchutzBot, Reviewers: Anna Vítová, Simon de Vlieger
    - add Oracle as datasource to cloud init (#2519)
      - Author: src-up, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ci: enable allow-unsafe-pr-checkout (#2515)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Brian C. Lane, Simon de Vlieger
    - stage/rpm: include additional header digests (#2478)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Brian C. Lane
    - test: adapt to image-builder cache new layout (HMS-10855) (#2514)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2026-07-29


author: Packit <hello@packit.dev> - 190-1
changelog:
  Changes with 190
  ----------------
    - Update images dependency ref to latest (#2523)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update images dependency ref to latest (#2529)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update osbuild-ci container images (#2521)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Update snapshots to 20260802 (#2522)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260809 (#2528)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - stage/rpm: general env options (#2524)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - stage/rpm: query only supported metadata tags (HMS-11174) (#2526)
      - Author: Anna Vítová, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-08-11


author: Packit <hello@packit.dev> - 191-1
changelog:
  Changes with 191
  ----------------
    - Add SECURITY.md file (#2536)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Add a manifest for buiding a Fedora riscv64 container in an x86_64 buildroot (#2539)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Schutzfile: update Fedora 43 repo snapshots (#2535)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Support rootless osbuild runs without container (#2546)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2543)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Update osbuild-ci container images (#2540)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - Update snapshots to 20260816 (#2541)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - main: Make rootless work when using the /usr/bin/osbuild wrapper (#2547)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - rhsm: prefer Katello CA on Satellite-registered hosts (SAT-37848) (#2537)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - spec: update osbuild-initrd dependency to 0.2 (#2545)
      - Author: Achilleas Koutsou, Reviewers: Alexander Larsson, Simon de Vlieger
    - stages/dd: create `dd` stage (#2533)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: fix missing mock_run (#2534)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-08-23


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Packit <hello@packit.dev> - 168-1
changelog:
  Changes with 168
  ----------------
    - Add DequeueAnyChannel to enable multi-tenant BootcPreManifest processing (HMS-10445) (#5084)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Ondřej Budai
    - Fail bootc composes on composer build version mismatch (HMS-10378) (#5082)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Ondřej Budai
    - Make bootc container source type configurable (HMS-10262) (#5087)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Replace monolithic bootc-manifest worker job with multi-stage server-orchestrated job graph (HMS-10378) (#5069)
      - Author: Tomáš Hozza, Reviewers: Nobody
    - Update snapshots to 20260405 (#5080)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5070)
      - Author: {}, Reviewers: Anna Vítová, Lukáš Zapletal
    - chore(deps): update konflux references (#5089)
      - Author: {}, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - chore: add .gitattributes file (#5078)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Simon de Vlieger, Tomáš Hozza
    - cloudapi: Add fedora names for network-installer (#5079)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - cmd/osbuild-worker: cleanup jobimpl-osbuild.go (#5083)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Tomáš Hozza
    - templates/packer: add container registries init script (#5086)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - worker: use slices.EqualFunc to compare dependency modules (#5085)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-15


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - Schutzfile: drop minor versions from bootc-foundry (#5134)
      - Author: Lukáš Zapletal, Reviewers: Simon Steinbeiß, Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add default target for bootc iso (#5125)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - go.mod: update osbuild/images to v0.261.0 (#5115)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Lukáš Zapletal, Sanne Raymaekers
    - test/repositories: switch RHEL 9.7 and 10.1 test repos to GA (#5122)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: drop ubi-wsl.sh test (#5130)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-05-13


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - Update import paths for image-builder [HMS-10853] (#5185)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Update snapshots to 20260705 (#5197)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test/data/repositories/rhel-9.9: disable gpg check (HMS-10929) (#5192)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Simon Steinbeiß

  — Somewhere on the Internet, 2026-07-08


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-1
changelog:
  - Updated the OVN sources to the upstream release v25.09.2 with the
    commit e3e0587865d8f02d0a8f72de53b82e464c5029d8.


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-82
changelog:
  - Updated the OVN sources to pick up the commits from v25.09.2 till the
    tip of branch-25.09 (c7066edbc3985f06c6bfa45e3724088baa97c4bd).
  - Updated the OVS sources to the branch-25.09 OVS submodule
    commit da6b84d691593e57951bcc5f2f916336c6e0d5cc.


author: Dumitru Ceara <dceara@redhat.com> - 26.03.3-10
changelog:
  - Updated the OVN sources to upstream release v26.03.1 with the
    commit 0cc1ea5bb71d29b91244f5368ecbbda8837bc542 and picked up
    the commits from v26.03.1 till the tip of branch-26.03
    a1482006410f09dfe471c6aec76de3902327f1ad (2 commits) in
    ovn.patch.
  - Updated the OVS sources to the branch-26.03 ovs submodule
    commit bdb95cc1920d4ab66fe062a9470eeb33a51d33e2


author: Dumitru Ceara <dceara@redhat.com> - 26.03.1-50
changelog:
  - Updated the OVN sources to pick up the commits from v26.03.1 till
    the tip of branch-26.03 (9f04b8c5086a74db299daeea4908518bbb27d139).


author: Nicholas Hubbard <nhubbard@redhat.com> - 26.03.1-51
changelog:
  - Configure OVN with --with-version-suffix=-52.fc44 so OVN binaries
    report the full RPM version-release string.


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-8
changelog:
  - needing to install the builddeps on top might be critical as the test should
    show that the content of the rpms + requirements is enough


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.2-1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.2


author: Frédéric Bérat <fberat@redhat.com> - 0.5-16
changelog:
  - Use a `%{!r: ... }` guard around package notes LDFLAGS to prevent double
    inclusion when performing a relocatable link (`-r`). Relates to
    RHBZ#2362272.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 0.17-1
changelog:
  - Version 0.17
  - This is a major version upgrade that allows automatic generation of
    Requires/Recommends/Suggests from package dlopen notes. See the new macro
    file for details of use.
  - The new fileattr plugin is in the package-notes subpackage, so that needs
    to be installed to activate the feature.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 0.18-1
changelog:
  - Version 0.18
  - This significantly reworks how rpm attributes are generated based on
    dlopen notes. For example use of how this is done, see
    https://src.fedoraproject.org/rpms/systemd/pull-request/246.
  - No changes to package note handling.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 0.19-1
changelog:
  - Version 0.19
  - Fixes a bug where dlopen output was dependent on binary sort order when
    multiple binaries used notes.


author: Packit <hello@packit.dev> - 1.15.0-1
changelog:
  - The `version_suffix` configuration option is now supported in Packit. This option is meant for appending information to the Version field in RPM spec files. This is useful for post-release snapshots following RPM versioning conventions. The `version_suffix` behaves similarly to the already existing `release_suffix` and also supports expansion of environment variables. (#2664)
  - Packit now supports `bodhi_extra_params` configuration option to customize creating Bodhi updates. (#2682)
  - Resolves: rhbz#2439424


author: Packit <hello@packit.dev> - 1.15.1-1
changelog:
  - We have fixed a bug that prevented running `sync_release()` on a `PackitAPI` instance initialized with `non_git_upstream=True` repeatedly due to an improper clean-up. (#2691)
  - Resolves: rhbz#2445195


author: Packit <hello@packit.dev> - 1.15.2-1
changelog:
  - Packit now uses the specfile library's sanitization when parsing spec files.
  - Resolves: rhbz#2450841


author: Packit <hello@packit.dev> - 1.15.3-1
changelog:
  - We've fixed the formatting of the strings Packit appends to the changelog. Now there will be at most one blank line before or after the Packit comment. (#2707)
  - Resolves: rhbz#2453842


author: Packit <hello@packit.dev> - 1.16.0-1
changelog:
  - Packit CLI has a new option `--[no-]update-release` that, by default, follows the value of the option set in the config, and also allows you to override manually, if necessary. (#2713)
  - In addition to `version_update_mask`, users can now use a new `version_update_specifiers` configuration option to control the upstream versions allowed to be release-synced. The option accepts [PEP440 version specifier sets](https://packaging.pypa.io/en/stable/specifiers.html), for example `version_update_specifiers: >=1.0,~=1.0`. (#2710)
  - Resolves: rhbz#2461103


author: Packit <hello@packit.dev> - 1.16.2-1
changelog:
  - Add HTTP timeouts and make `get_monitoring_metadata()` unauthenticated which should improve the UX of `packit validate`. (#2730)
  - Resolves: rhbz#2502899


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.1-2
changelog:
  - FSWC: Migrate to lastlog2
    Link: <https://fedoraproject.org/wiki/Changes/Migrate_to_lastlog2>
    Resolves: #2361594


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.2-1
changelog:
  - Rebase to release 1.7.2. Resolves: #2321512
  - Rebase to pam-redhat-1.3.1
  - Drop unused linuxdoc-tools dependency


author: Jerry James <loganjerry@gmail.com> - 3.0.0-5
changelog:
  - Use the boost version of pdqsort
  - Drop Zlib from the License field
  - Build with the cmake buildsystem
  - Support soplex and scip in a non-bootstrap build


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260507.g1afd4ed-1
changelog:
  - Install pesto, its SELinux policy, and the man page from the spec file
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_01_20.386b5f5..2026_05_07.1afd4ed


author: Stefano Brivio <sbrivio@redhat.com> - 0^20260728.gf8df3f1-1
changelog:
  - qrap(1) is no longer shipped upstream as it has been obsoleted a
    while ago and presumably nobody is using it anymore (not needed
    starting from QEMU 7.2): drop it from the package as well
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2026_07_16.090d739..2026_07_28.f8df3f1


author: Carl Byington <carl@five-ten-sg.com> - 1.24.0-4
changelog:
  - Include fixes after the official 1.24.0 release.
  - Add context menu to copy the custom field values.
  - The report files are now always bom-less utf-8 encoded.
  - Text input for custom fields value is now resizeable.
  - Allow import from Gorilla password safe V2 files including URL fields.
  - Add browse + autotype feature.
  - Add 1.24.0 changelog entries from upstream.
  - Custom fields can now be added to each entry. That is, fields with
    user-defined names and values.
  - Changing the height of the Add/Edit dialog will cause a vertical
    scrollbar to be added.
  - In the "Flattened List" view, sorting by time columns (e.g., entry
    creation time) now works correctly.


author: Carl Byington <carl@five-ten-sg.com> - 1.25.0-1
changelog:
  - update to 1.25.0
  - (regression) Clicking on a row in the "conflicting items" grid in the
    comparison dialog no longer hangs the app.
  - Don't clear a non-recurring expiry when the password is changed.


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.0-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
    Resolves: rhbz#2341012
  - New subpackage pcs-web-ui - enables standalone web UI when the subpackage is installed on the system (default), uninstall the subpackage to disable the web UI
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.22
  - Fixes for compatibility with Ruby 3.4
    Resolves: rhbz#2331005


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.1-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
    Resolves: rhbz#2371770
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.23 (see CHANGELOG_WUI.md)
  - There is now a changelog for the HA Cluster Management Cockpit application and the standalone web UI in both packages
  - The upstream version of pcs-web-ui can now be queried through RPM in both packages - see bundled(pcs-web-ui)
  - Updated bundled Python dependency dacite
  - Compatibility with rubygem-rack >= 3
    Resolves: rhbz#2372462


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.2-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.2 (see CHANGELOG_WUI.md)
    Resolves: rhbz#2432985, rhbz#2433035
  - Fixed FTBFS with Python 3.15
    Resolves: rhbz#2440684
  - Fixed issues with installing pcs on Fedora 43+, upgrade and uninstall


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.2-2
changelog:
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 (see CHANGELOG_WUI.md)
    Resolves: rhbz#2454042
  - Fixed a crash when running pcs resource|stonith list
    Resolves: rhbz#2458608
  - Fixed order of resources in sets when listing configuration of constraints
    Resolves: rhbz#2461143


author: Filipe Rosset <filiperosset@fedoraproject.org> - 5.4.3-1
changelog:
  - update to 5.4.3 fixes rhbz#2492868
  - a bunch of other bugs were fixed and will be backported to all supported
    Fedora / EPEL versions


author: Paul Wouters <paul.wouters@aiven.io> - 2.10.0-1
changelog:
  - Initial vendor version of pebble
  - Resolves: rhbz#2453110 Review Request: pebble - A miniature version of
    Boulder, a small RFC 8555 ACME test


author: Michal Josef Špaček <mspacek@redhat.com> - 0.2.2-14
changelog:
  - Fix building in interactive mode. Thanks ppisar
  - Do not build-require removed Alien::cmake3 (bug #2440104). Thanks ppisar.


author: Paul Howarth <paul@city-fan.org> - 1.3.15-1
changelog:
  - Update to 1.3.15
    - Improve Redis driver performance
    - Implement searchOn/deleteIfLowerThan into Redis
    - Prefer Redis::Fast


author: Paul Howarth <paul@city-fan.org> - 1.3.19-1
changelog:
  - Update to 1.3.19 (rhbz#2477392)
    - Apache::Session::Generate::SHA256 used a low-entropy seed (time, PID, rand,
      stringified hash ref) to derive session identifiers; use Crypt::URandom to
      generate session ids from a cryptographically secure source, falling back
      to the previous hashing method only if Crypt::URandom is unavailable
      (CVE-2026-8503, similar in scope to CVE-2025-40931 and CVE-2025-40932)
    - Fix Redis indexes: never cleaned before
    - Improve resilience and reliability of Patroni driver


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.10024-1
changelog:
  - Update to 0.10024
  - Overhaul dependecies
  - Drop -test subpackage
  - Use %{make_build} and %{make_install} where appropriate
  - Drop use of %{__perl}
  - Use %license tag


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Paul Howarth <paul@city-fan.org> - 4.41-1
changelog:
  - Update to 4.41
    - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
    - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
    - Fix incr_parse single-quote string delimiter (GH#245)
    - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
      truncated input (GH#244)


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - New maintainer
    - This release resolves CVE-2011-3599
    - Added a statement to recommend against using DSA
    - Fixed a few long standing bugs
    - The build process is moved to Dist::Zilla
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
    - This module is now marked as deprecated: Crypt-DSA-GMP is a possible
      replacement
    - Improve the call to IPC::Open3::open3
    - Replace two arg open (CVE-2026-8704)
    - Replace rand() (CVE-2026-8700)
    - Add a security policy
    - Add use warnings
    - Typo fix (CPAN RT#86424)


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Fixed key material reuse for multiple signing events (CVE-2026-12205,
      CWE-323)
      - sign() reused the DSA nonce k across signatures (r and k^-1 were cached
        on the key and not regenerated), allowing private-key recovery from two
        signatures over different messages
      - Now generates a fresh nonce per signature
      - Keys used to sign more than once with an affected version should be
        considered compromised


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Hardening: Use a fresh, independent CSPRNG witness every round
    - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
      with hundreds of signatures could lead to full private-key compromise;
      keys should be considered compromised and new keys should be generated


author: Paul Howarth <paul@city-fan.org> - 0.261630-1
changelog:
  - Update to 0.261630 (rhbz#2488228)
    - Change the default hash algorithm to HMAC-SHA256, and increase the default
      number of iterations to 600,000, in line with current OWASP recommendations
      (CVE-2026-9641)
    - Generate salts using Crypt::URandom (a strong system RNG) instead of perl's
      builtin rand(), which is not cryptographically secure (CVE-2026-9638)
    - Use a constant-time comparison in 'validate' to avoid timing attacks
      (CVE-2017-20240)
  - Switch to Module::Build::Tiny flow
  - Package new README file


author: Paul Howarth <paul@city-fan.org> - 1.4.3-1
changelog:
  - Update to 1.43
    - Replace use of the cryptographically weak rand() function with the much
      stronger Crypt::URandom::urandom() (GH#3, CVE-2026-6659, rhbz#2479575)
    - Add Encode, Exporter, ExtUtils::MakeMaker to Makefile.PL
    - Add files AI_POLICY.md and SECURITY.md


author: Paul Howarth <paul@city-fan.org> - 0.62-1
changelog:
  - Update to 0.62 (rhbz#2337361)
    - It's 2025
    - Replace "use vars" with "our" (GH#9)
    - Specify recommended versions based on known CVE's
    - Update documentation for groff-1.24
    - Tested with perl-5.40.0
    - Add SECURITY.md


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.651-1
changelog:
  - 1.651 bump (rhbz#2499925) - Fix CVE-2026-15043, CVE-2026-15392,
    CVE-2026-60082 and CVE-2026-60081


author: Charles R. Anderson <cra@alum.wpi.edu> 0.020-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(Config)
  - Remove duplicate explicit Requires:
    perl(Exporter)
    perl(ExtUtils::Builder::Planner)
    perl(ExtUtils::Helpers)
    perl(Getopt::Long)
    perl(List::Util)
  - Add missing Requires:
    perl(CPAN::Meta::Merge)
    perl(Perl::OSType)
    perl(Pod::Man)
    perl(TAP::Harness::Env)
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.017-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(blib) instead of perl-blib
  - Remove duplicate explicit Requires:
    perl(Exporter)
    perl(ExtUtils::MakeMaker)
    perl(List::Util)
  - Add missing Requires:
    perl(Data::Dumper)
    perl(Perl::OSType)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.020-1
changelog:
  - Update to 0.020
  - add scan-perl-buildrequires.sh which uses scan-perl-prereqs
    from Perl::PrereqScanner
  - Update BR


author: Charles R. Anderson <cra@alum.wpi.edu> 0.031-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(Config)
  - Remove duplicate explicit Requires:
    perl(ExtUtils::Config)
    perl(ExtUtils::Helpers)
  - Add missing Requires: perl(DynaLoader)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


