# changelog

author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Neal Gompa <ngompa@fedoraproject.org> - 1.35.0-1
changelog:
  - Update to version 1.35.0
    Resolves: rhbz#2419155
  - Add patch to fix build with Linux 6.19+ headers


author: Neal Gompa <ngompa@fedoraproject.org> - 1.37.2-1
changelog:
  - Update to version 1.37.2
  - Resolves: rhbz#2447761
  - Backport fixes for various altarch build failures


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Björn Esser <besser82@fedoraproject.org> - 3.31.1-1
changelog:
  - cmake-3.31.1
    Fixes rhbz#2324190
  - macros: Fix handling of double-dash without argument for ctest


author: Petr Menšík <pemensik@redhat.com> - 0.37.0-1
changelog:
  - Update to 0.37.0 (rhbz#2441656)
  - Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076)


author: Petr Menšík <pemensik@redhat.com> - 0.37.1-1
changelog:
  - Update to 0.37.1 (rhbz#2445943)
  - Fixes Denial of Service via malformed Content-Length header
    (CVE-2026-31870)
  - https://github.com/yhirose/cpp-
    httplib/security/advisories/GHSA-39q5-hh6x-jpxx
  - https://github.com/yhirose/cpp-httplib/releases/tag/v0.37.1


author: Petr Menšík <pemensik@redhat.com> - 0.37.2-1
changelog:
  - Update to 0.37.2
  - Fixes silent TLS certificate verification bypass on HTTPS Redirect via
    proxy (CVE-2026-32627, rhbz#2448105)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.3-1
changelog:
  - Update to release v0.26.3
  - Resolves CVE-2024-25621: rhbz#2419004, rhbz#2419033, rhbz#2419427
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.5-2
changelog:
  - Add rpminspect.yaml with temporary skip
  - the stack-prot annocheck test is failing on ppc64le and s390x but not
    other arch. Normally should skip
  - skip: stack-prot test because function fatalf is part of the CGO runtime
    library which is compiled without stack protection


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.3.1-1
changelog:
  - Update to release v29.3.1
  - Resolves: rhbz#2451425
  - Upstream notes that this release resolves: CVE-2026-34040,
    CVE-2026-33997, CVE-2026-33748, CVE-2026-33747
  - Upstream fixes


author: Jens Petersen <petersen@redhat.com> - 1.7.1-29
changelog:
  - merging now prompts even with --merge (--no-prompt) when branch unmergeable
  - parallel: restore package header output for merge
  - parallel: fix error for -F/-E when run outside dist-git
  - createKojiSidetag: needs krbTicket


author: Jens Petersen <petersen@redhat.com> - 1.7.1-34
changelog:
  - rebuild for haxr xmlrpc to Accept: application/xml
  - use rpmbuild-order 0.4.13
  - [epel] recommends epel-rpm-macros


author: Jens Petersen <petersen@redhat.com> - 1.8-35
changelog:
  - https://hackage.haskell.org/package/fbrnch-1.8/changelog
  - new 'branch-log' command
  - 'build','parallel': can now merge --from a particular branch
  - 'commit': requires -b option to confirm non-rawhide commit
  - 'compare-tarballs': new command to diff source tarballs
  - 'copr --failures': fetches tails of failed build logs
  - new 'repoquery' command which wraps fedora-repoquery
  - 'update-sources': prep in tmpdir; compares tarballs; improved ver-rel logic
  - `FBRNCH_KOJI_PROFILE` provides experimental Koji profile support (eg riscv)
  - merge handling improvements
  - tries to setup git upstream branch tracking


author: Jens Petersen <petersen@redhat.com> - 1.8.1-38
changelog:
  - new native watchtask implementation and command
  - local build.log's now generated with 'script' tool instead of tee pipe
  - some web API calls now retry to help with connection issues
  - update-sources try to take "sources" changes into account now
  - merge tries to rebase if origin ahead
  - more details: https://hackage.haskell.org/package/fbrnch-1.8.1/changelog


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.23.0-1
changelog:
  - Update to 3.23.0 (CVE-2026-26965, CVE-2026-26955, CVE-2026-26271,
    CVE-2026-25997, CVE-2026-25959, CVE-2026-25955, CVE-2026-25954,
    CVE-2026-25953, CVE-2026-25952, CVE-2026-25942, CVE-2026-25941)
    Resolves: rhbz#2442589
  - Small spec cleanups
  - Enable rdp2tcp channel support


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.0-1
changelog:
  - Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
    CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885,
    CVE-2026-31897)
    Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415
    Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428
    Resolves: rhbz#2447431


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.2-1
changelog:
  - Update to 3.24.2 (CVE-2026-33952, CVE-2026-33977, CVE-2026-33982,
    CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-33986,
    CVE-2026-33987, CVE-2026-33995)
    Resolves: rhbz#2448592


author: Mosaab Alzoubi <mosaab[AT]ruya[DOT]systems> - 0-55.20251223git
changelog:
  - Update on 2025-12-23
  - Use stable branch instead of master
  - Add next generation of Gnulib the python release of Gnulib
  - Fix building tests
  - Re-struct for gnulib ng with python base
  - Update dependencies


author: Sérgio Basto <sergio@serjux.com> - 0-78.20260302git4a3650d
changelog:
  - Update to git4a3650d branch stable-202601 with ISO C23 fixes
  - The git-merge-changelog binary has been removed from the source and is now maintained in a separate repository.


author: Paul Wouters <paul.wouters@aiven.io> - 1.4.2-1
changelog:
  - Update to 1.4.2, support for DNS-persist challenge
  - Resolves: rhbz#2434366 FTBFS in Fedora rawhide/f4
  - Resolves: rhbz#2438330 1.4.2 is available


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-16
changelog:
  - Patch "C++20" to fix a language deprecation (FTBFS).
    https://bugzilla.redhat.com/show_bug.cgi?id=2272908


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-1
changelog:
  - New upstream snapshot.
  - Fixes CVEs 2025-11494, 2025-11495, 2026-2341, 2026-3441, 2026-3442.
    https://bugzilla.redhat.com/show_bug.cgi?id=2402843
    https://bugzilla.redhat.com/show_bug.cgi?id=2402846
    https://bugzilla.redhat.com/show_bug.cgi?id=2438918
    https://bugzilla.redhat.com/show_bug.cgi?id=2443834
  - Fixes CVEs 2025-69644, 2025-69645, 2025-69646.
    https://bugzilla.redhat.com/show_bug.cgi?id=2445281
    https://bugzilla.redhat.com/show_bug.cgi?id=2445284
    https://bugzilla.redhat.com/show_bug.cgi?id=2446276
  - Fixes FTBFS.
    https://bugzilla.redhat.com/show_bug.cgi?id=2434680
  - Relax BR of itcl/itk/iwidgets.
  - Patch "libtool_tag" to force C++ language tagging in libtool.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-2
changelog:
  - Patch "cve-2026-4647" to fix CVE-2026-4647.
    https://bugzilla.redhat.com/show_bug.cgi?id=2450318
  - Always use Tcl/Tk version 9.


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.4-0]
changelog:
  - media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and XPS 14 9440 (Hans de Goede)
  - Linux v6.19.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.6-0]
changelog:
  - net: macb: Fix tx/rx malfunction after phy link down and up (Kevin Hao)
  - net: macb: Replace open-coded device config retrieval with of_device_get_match_data() (Kevin Hao)
  - net: macb: convert to use .get_rx_ring_count (Breno Leitao)
  - net: cadence: macb: Discard pm_runtime_put() return value (Rafael J. Wysocki)
  - arm64: dts: broadcom: bcm2712: Add watchdog DT node (Stanimir Varbanov)
  - arm64: dts: broadcom: bcm2712: Enable RNG (Peter Robinson)
  - fedora: minor beeper cleanups (Peter Robinson)
  - Add config introduced in 6.19.4 (Justin M. Forbes)
  - Linux v6.19.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.7-0]
changelog:
  - Add some BugsFixed by 6.19.7 (Justin M. Forbes)
  - drm/i915/psr: Compute psr_entry_setup_frames into intel_crtc_state (Jouni Högander)
  - drm/i915/psr: Disable PSR on update_m_n and update_lrr (Jouni Högander)
  - Turn on GPIB for Fedora (Justin M. Forbes)
  - drm/i915/psr: Fix for Panel Replay X granularity DPCD register handling (Jouni Högander)
  - drm/dp: Add definition for Panel Replay full-line granularity (Jouni Högander)
  - drm/i915/display: Allow async flip when Selective Fetch is enabled (Jouni Högander)
  - drm/i915/psr: Perform full frame update on async flip (Jouni Högander)
  - drm/i915/psr: Set plane id bit in crtc_state->async_flip_planes for PSR (Jouni Högander)
  - drm/i915/psr: Move sink_sync_latency to intel_connector (Jouni Högander)
  - drm/i915/psr: Move sink PSR and Panel Replay booleans to intel_connector (Jouni Högander)
  - drm/i915/psr: Move Panel Replay DSC sink support data to intel_connector (Jouni Högander)
  - drm/i915/psr: Clear pr_dpcd as well on disconnect (Jouni Högander)
  - drm/i915/psr: Move pr_dpcd and psr_dpcd to intel_connector (Jouni Högander)
  - drm/i915/psr: Compute Panel Replay/Adaptive Sync coexistence behavior (Jouni Högander)
  - drm/i915/psr: Use SU granularity information available in intel_connector (Jouni Högander)
  - drm/i915/psr: Add panel granularity information into intel_connector (Jouni Högander)
  - Work around binutils update in s390x perf (Justin M. Forbes)
  - iommu: Fix mapping check for 0x0 to avoid re-mapping it (Antheas Kapenekakis)
  - Revert the UKI dtbloader for F42 (Justin M. Forbes)
  - Turn on release_targets for F43/F42 (Justin M. Forbes)
  - Linux v6.19.7


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.8-0]
changelog:
  - Fix mute LED on HP OmniBook 7 Laptop 16 (Justin M. Forbes)
  - Add Lenovo bug to BugsFixed for 6.19.8 (Justin M. Forbes)
  - Turn on Uniwill x86 platform driver (Justin M. Forbes)
  - ASoC: SDCA: Add ASoC jack hookup in class driver (Charles Keepax)
  - Linux v6.19.8


author: Augusto Caringi <acaringi@redhat.com> [6.19.9-0]
changelog:
  - arm64: dts: broadcom: bcm2712-rpi: Move the firmware node down 1 level (Rob Herring (Arm))
  - arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712-rpi-5-b: add pinctrl properties for csi i2cs (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712: add camera backend node pispbe (Gregor Herburger)
  - arm64: dts: broadcom: rp1: add csi nodes (Gregor Herburger)
  - arm64: dts: broadcom: rp1: add i2c controller (Gregor Herburger)
  - mfd: bcm2835-pm: Add BCM2712 PM device support (Phil Elwell)
  - mfd: bcm2835-pm: Introduce SoC-specific type identifier (Phil Elwell)
  - arm64: dts: broadcom: bcm2712: Add V3D device node (Maíra Canal)
  - pmdomain: bcm: bcm2835-power: Fix broken reset status read (Maíra Canal)
  - arm64: dts: imx93-11x11-frdm: enable additional devices (Francesco Valla)
  - arm64: dts: imx93-11x11-frdm: Add MQS audio support (Daniel Baluta)
  - arm64: dts: freescale: add support for NXP i.MX93 FRDM (Fabian Pflug)
  - Revert "Fix mute LED on HP OmniBook 7 Laptop 16" (Justin M. Forbes)
  - Linux v6.19.9


author: Augusto Caringi <acaringi@redhat.com> [6.19.10-0]
changelog:
  - Add entries for 6.19.10 to BugsFixed (Justin M. Forbes)
  - Documentation: hid: intel-ish-hid: Document PRODUCT_FAMILY firmware matching (Vishnu Sankar)
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Vishnu Sankar)
  - Add BugsFixed for 6.19.10 (Justin M. Forbes)
  - drm/amdgpu: rework how we handle TLB fences (Alex Deucher)
  - Linux v6.19.10


author: Augusto Caringi <acaringi@redhat.com> [6.19.10-100]
changelog:
  - Revert "redhat/kernel.spec.template: Fix indentation of uki-virt generation code" (Justin M. Forbes)
  - Revert "redhat/kernel.spec.template: Simplify uki-virt signing" (Justin M. Forbes)
  - Revert "redhat/kernel.spec.template: Add kernel-uki-dtbloader sub-package" (Justin M. Forbes)
  - Revert "redhat/kernel.spec.template: Make -uki-dtbloader provide kernel-core-uname-r" (Justin M. Forbes)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.5-1
changelog:
  - Update to version 6.5.5
  - Drop soname patch, use new configure option --enable-librelease instead
  - Unbundle yaml-cpp, using new configure option --with-yaml-cpp
  - EPEL 7 EOL specfile cleanup


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Sandro Mani <manisandro@gmail.com> - 2.43.1-6
changelog:
  - Backport fixes for CVE-2025-11081, CVE-2025-11839, CVE-2025-11840,
    CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647,
    CVE-2025-69648, CVE-2025-69649, CVE-2025-69650, CVE-2025-69651,
    CVE-2025-69652, CVE-2026-4647


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.0-1
changelog:
  - 64a84db feat: Add support for translanting job-owner of kickstart (David Pascual)
  - 868523c feat: Add translantion for kernel_options and kernel_options_post (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.1-1
changelog:
  - 0cabc75 fix: Translate job-group properly (David Pascual)
  - 70e07c1 fix: Return empty list when there is no content in res_ks_list (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - cee2f5b fix : Not try to login beaker hub unless needed (David Pascual)
  - 75eb8ea chore: Release version 1.23.3 (github-actions)
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.4-1
changelog:
  - 75d8c3b chore: Enable epel-10 builds in Packit (David Pascual)
  - 4a98123 fix: Support pass fetch_url to task (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.5-1
changelog:
  - b46c7c4 chore: Bump python-semantic-release to fix release issue (David Pascual)
  - 033e1f7 chore(packit): Update epel spec for fedora propose upstream (David Pascual)
  - aeb12fe fix: Enforce beaker-client 29.2 to fix fetch_url error (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.24.0-1
changelog:
  - 39e9d79 feat: Add support to pass watchdog panic="ignore" in Beaker recipe (David Pascual)
  - 801ef4b fix: Fix nested and/or issue (David Pascual)
  - fad14c2 test: Add _translate_constraint test (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.25.0-1
changelog:
  - 8ed12e7 feat: Add support for Beaker group key (David Pascual)
  - 8e6ab07 fix: Revert commit 0cabc75 (David Pascual)


author: - 1.26.0-1
changelog:
  - a702da2 fix: Pin setuptools<82 to restore pkg_resources for beaker-client (Rizwan Shaikh)
  - cf48126 feat: add EC2 UserData support for AWS provider (Rizwan Shaikh)


author: Jerry James <loganjerry@gmail.com> - 0.9.0-3
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Debarshi Ray <rishi@fedoraproject.org> - 48.6-2
changelog:
  - Move the Bash completion from /etc to /usr/share because the former is
    reserved for system administrators and the latter for the operating
    system.


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-1
changelog:
  - Update to 1.28.2
  - fixes CVE-2026-1642
  - move log directory to nginx-filesystem subpackage (PR#20)
  - delete Maxim Dounin's key, it's no longer listed on the nginx website


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-4
changelog:
  - Fix RHEL 8 & 9 compatibility
  - Fix SSL passphrase dialog patch when used with OpenSSL < 3 (EL8 w/o EPEL)
  - Build now works with and without EPEL enabled


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-9
changelog:
  - Spec file and macro cleanups
  - move some files into the packages that have the dependencies they rely on
    (e.g. systemd, logrotate are not present in nginx-core, so don't install
    files pertaining to them there)
  - remove unused LDFLAGS and DESTDIR overrides, for perl we patch the
    Makefile.PL already
  - use zlib-ng-devel dependency also in nginx-mod-devel
  - improve macro consistency
  - sync configure command in macros.nginxmods.in with main package


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-5
changelog:
  - Clean up spec file so it's aligned with c10s
  - Remove UPGRADE_INSTRUCTIONS for openldap-server upgrade (rhbz#2133526)


author: Packit <hello@packit.dev> - 166-1
changelog:
  Changes with 166
  ----------------
    - Refactor Solver API to Support Versioning (HMS-9062) (#2246)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to help support bootc PXE images (#2251)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2255)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2262)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - github: free disk space before running unit tests (#2256)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - manifest-tests-install-deps: make unzip quiet (#2254)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß, Simon de Vlieger
    - monitor: add module options to JSON logger (#2244)
      - Author: Albert Esteve, Reviewers: Achilleas Koutsou, Brian C. Lane
    - org.osbuild.kickstart: add bootc support (HMS-9732) (#2242)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - runner: add new `minimal_passwd()` helper and use in linux (#2260)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - sources: add quoting to librepos "path" component (#2253)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2025-12-03


author: Packit <hello@packit.dev> - 167-1
changelog:
  Changes with 167
  ----------------
    - Fix RHSM podman secrets and rhc configuration (HMS-9811 and HMS-9606) (#2265)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - GHA: update osbuild-ci* container images (#2286)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Move replace and rglob (#2267)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Solver: prepare for V2 API with per-transaction depsolve results (HMS-9062) (#2258)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2273)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2285)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Various fixes for --in-vm (#2271)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chroot: If we're unable to mount devtmpfs, bindmount host /dev (#2277)
      - Author: Alexander Larsson, Reviewers: Michael Vogt, Simon de Vlieger
    - osbuild/solver: replace request.RepositoryConfig with model.Repository (HMS-9062) (#2280)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild/util/rhsm: make Subscriptions.get_secrets() take list of URLs (HMS-9062) (#2278)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - ostree.config: Add some tests (#2268)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ostree.grub2: ostree requires leading / (#2272)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - runners: set up sequoia on RHEL (#2288)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - stages/ostree.{aleph,deploy.container}: support more imgref formats; make aleph stage more reliable (#2270)
      - Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    - stages/xorrisofs: allow setting more fields (#2269)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-17


author: Packit <hello@packit.dev> - 169-1
changelog:
  Changes with 169
  ----------------
    - Update images dependency ref to latest (#2299)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2305)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2296)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260101 (#2297)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260112 (#2306)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: introduce manifest guide (#2175)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - monitor: deep copy stage options in JSONSeqMonitor (#2293)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai, Simon Steinbeiß, Tomáš Hozza
    - stages/kickstart: support containers-storage transport (#2264)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/rpm: add option to ignore key import errors (HMS-9986) (#2301)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - stages/rpm: add support for setting the rpmkeys binary (#2303)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    - stages: add force option to org.osbuild.groups (#2304)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-14


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add V2 Solver API with complete package metadata, per-transaction results, and RHSM secrets discovery (HMS-10029) (#2287)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    - Add tests for PQC key handling in osbuild [HMS-10057] (#2310)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Makefile: new target: rpm-nocheck (#2309)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2308)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260118 (#2312)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Add RHEL10 x86 and ARM COPR builds (#2311)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - stages: fix org.osbuild.ostree.grub2 permissions (#2307)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Brian C. Lane
    - test: add a wait to mitigate race condition (#2314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: add one-block tolerance to fscache test (#2316)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: increase sendmsg test size (#2315)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 171-1
changelog:
  Changes with 171
  ----------------
    - Improve robustness of --in-vm support (#2292)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support running bootc-image-builder with --in-vm (#2328)
      - Author: Alexander Larsson, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc.install.config: add ostree.bls-append-except-default option (#2319)
      - Author: Joel Capitao, Reviewers: Brian C. Lane, Simon de Vlieger
    - grub2.iso: configurable entries (HMS-10018, HMS-10015) (#2317)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Ondřej Budai
    - mockbuild: fix PQC builds on RHEL 10 (#2327)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - monitor: Report if the runner is running in a vm (#2320)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-27


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - SPEC: initrd sub-package fixups and exclude i686 arch on el (#2334)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2333)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260201 (#2330)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild-mpp: Refactor to use osbuild.solver module (#2331)
      - Author: Mark Kemel, Reviewers: Nobody
    - test_objectstore: add time.sleep(0.1) to solve flaky tests (#2318)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-06


author: Packit <hello@packit.dev> - 173-1
changelog:
  Changes with 173
  ----------------
    - Revert "test_objectstore: add time.sleep(0.1) to solve flaky tests" (#2340)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: disable tests that tend to fail during rpmbuild in Koji (HMS-9796) (#2338)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2341)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260208 (#2335)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/module-config: postfix with `.module` (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 174-1
changelog:
  * Fix packaging conflict in initrd directory causing downgrade failures by @thozza in https://github.com/osbuild/osbuild/pull/2347
   * stages/bootc.install-to-fs: add bootupd-skip-boot-uuid option by @jbtrystram in https://github.com/osbuild/osbuild/pull/2345
   * qemu: Don't always pass -cpu host by @alexlarsson in https://github.com/osbuild/osbuild/pull/2356
   * spec: drop typer-slim dependency and use only python3-typer by @achilleas-k in https://github.com/osbuild/osbuild/pull/2358
   * qemu: Handle container storage.conf not listing graphroot by @alexlarsson in https://github.com/osbuild/osbuild/pull/2357
   * stages/erofs: quiet stdout by @supakeen in https://github.com/osbuild/osbuild/pull/2359
   * qemu: Default to 3GB vm instead of 4GB by @alexlarsson in https://github.com/osbuild/osbuild/pull/2361


   **Full Changelog**: https://github.com/osbuild/osbuild/compare/v173...v174


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - CI: run tests on 9.7+10.1 GA and 9.8+10.2 nightly (HMS-9794) (#2351)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Revert "schutzbot: update libsemanage before installing osbuild" (#2378)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Solver: fix `repo_ids` to restrict all dependency resolution, not just top-level packages (HMS-10314) (#2379)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Solver: implement per-transaction package excludes in the DNF5 solver (HMS-10318) (#2381)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2383)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - Update osbuild-ci container images (#2367)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - Update snapshots to 20260308 (#2382)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: shift manifest guide headings one level down (#2385)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - solver: add cost field to Repository model (#2380)
      - Author: Mark Kemel, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/rpm: add nodeps option for `rpm install --nodeps` (#2387)
      - Author: Dusty Mabe, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages: add coreos.bfb for NVIDIA BlueField DPUs (#2349)
      - Author: Sagi Zigmon, Reviewers: Nobody

  — Somewhere on the Internet, 2026-03-11


author: Packit <hello@packit.dev> - 177-1
changelog:
  Changes with 177
  ----------------
    - Add stages used for building s390x isos (HMS-9967) (#2390)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: default to using DNF5 depsolver on Fedora 45+ (current Rawhide) (HMS-10343) (#2389)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to support building ppc64le isos (HMS-9968) (#2377)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2394)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2392)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260315 (#2393)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260322 (#2397)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - buildroot: Use bwrap's --drop-cap ALL (#2395)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Alexander Larsson
    - chore: clean up team ssh keys (#2391)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Anna Vítová, Tomáš Hozza
    - cli: Print checkpoint cache status (#2388)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - stages/aleph: make path parametrizable (#2384)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - tools/osbuild-store: do stuff with sources and store (HMS-10238) (#2364)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-26


author: Packit <hello@packit.dev> - 1.11.0-1
changelog:
  - `packit test` now supports running and validating TMT tests locally without requiring a PR or a release, including result parsing and basic failure reporting. (#2632)
  - Resolves: rhbz#2383891


author: Packit <hello@packit.dev> - 1.12.0-1
changelog:
  - Packit now automatically invokes an rpm build in mock when no rpm test is passed using `--rpm_paths` before running local tests with `packit test`. (#2636)
  - Fixed an issue where the upstream spec file was synchronized without applying packit's patches. (#2637)
    This happened when syncing a folder that contains the specfile, e.g.:
  ```yaml
  files_to_sync:
    - src: distro/
      dest: ./
  specfile_path: distro/my_pkg.spec
  ```
  - `packit init` now automatically adds a packit-specific pre-commit hook to user's pre-commit configuration file if present. Two new flags were added, which modify this behavior. (#2641)
  - Resolves: rhbz#2396659


author: Packit <hello@packit.dev> - 1.13.0-1
changelog:
  - `packit init` now automatically retrieves the latest version of the pre-commit hook to be added to the user's pre-commit configuration file. (#2651)
  - Resolves: rhbz#2420553


author: Packit <hello@packit.dev> - 1.14.0-1
changelog:
  - We have added the `--preserve-spec` flag to the `prepare-sources` and `srpm` commands. When used, Packit will not change the spec file in any way (e.g., release is not bumped, Source0 is not changed). When enabled, it implies `--no-update-release`. (#2653)
  - Resolves: rhbz#2427944


author: Packit <hello@packit.dev> - 1.15.0-1
changelog:
  - The `version_suffix` configuration option is now supported in Packit. This option is meant for appending information to the Version field in RPM spec files. This is useful for post-release snapshots following RPM versioning conventions. The `version_suffix` behaves similarly to the already existing `release_suffix` and also supports expansion of environment variables. (#2664)
  - Packit now supports `bodhi_extra_params` configuration option to customize creating Bodhi updates. (#2682)
  - Resolves: rhbz#2439424


author: Packit <hello@packit.dev> - 1.15.1-1
changelog:
  - We have fixed a bug that prevented running `sync_release()` on a `PackitAPI` instance initialized with `non_git_upstream=True` repeatedly due to an improper clean-up. (#2691)
  - Resolves: rhbz#2445195


author: Packit <hello@packit.dev> - 1.15.2-1
changelog:
  - Packit now uses the specfile library's sanitization when parsing spec files.
  - Resolves: rhbz#2450841


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Jan Rybar <jrybar@redhat.com> - 124-4
changelog:
  - pkla-compat is now recommends: pkla is obsolete and binaries are run every time
  - polkitbackend watches only session changes to reduce cpu usage
  - PolkitPermission: only sessions that really changed state send CheckAuthorization


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Adam Williamson <awilliam@redhat.com> - 2.4.0-2
changelog:
  - Backport PR #1377 to fix tests with Python 3.13
  - Run tests with -n auto to avoid hang (GH #1369)
  - Rebuilt for Python 3.13


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.2-4
changelog:
  - Support rebuilding YAML test data from original sources
  - Don’t do it for now since it brings in extra Perl dependencies, and
    there’s no obvious benefit.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.7.0-15
changelog:
  - Modernize packaging
  - Update License to reflect the presence of public-domain code
  - Add a man page


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-4
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.73


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74
  - Remove /usr/bin/python3 from BuildRequires


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.75


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.6-1
changelog:
  - Version 257.6
  - Fix for local information disclosure in systemd-coredump (CVE-2025-4598)
  - Fixes for systemd itself, run0, systemd-networkd, "secure" pager, man
    pages, shell completions, sd-boot, sd-varlink
  - Hardware database update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.7-1
changelog:
  - Version 257.7
  - Fixes for systemd itself, systemd-repart, systemd-resolved, systemd-
    vmspawn, systemd-networkd, resolvectl, bootctl, the shared library code,
    man pages, shell completions, and tests.
  - Hardware database is updated.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 257.13-1
changelog:
  - Version 257.13
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.2-2
changelog:
  - update to xen-4.19.2
    remove patches now included or superceded upstream
    remove xen*.efi.elf files to avoid debuginfo failure


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-2
changelog:
  - update to xen-4.19.3
    remove patches now included or superceded upstream
    includes patches for
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
   	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-4
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
          CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
          CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-6
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
          CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.4-2
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434045)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434047)


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.4-3
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


