# changelog

author: Tim Semeijn <tim@goat.re> - 0.9.4-2
changelog:
  - Fix failing builds with *_poll build patch (3proxy-0.9.4-poll-build.patch)
  - Convert license to SPDX


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.0-1
changelog:
  - Update to version 3.3.0
  - Soname bump for libHepMC3 (3 to 4)
  - Additional build dependencies for tests
  - Fix an uninitialized value issue found by valgrind
  - Drop EPEL7 build (soon to be EOL)
  - Avoid assert due to implicit narrowing cast on 32 bit architectures
  - Suppress a valgrind error on Fedora 39 ppc64le


author: Petr Pisar <ppisar@redhat.com> - 1.3.0-1
changelog:
  - 1.3.0 bump (CVE-2023-29415, CVE-2023-29416, CVE-2023-29417, CVE-2023-29418,
    CVE-2023-29419, CVE-2023-29420, CVE-2023-29421)


author: Petr Pisar <ppisar@redhat.com> - 1.3.1-2
changelog:
  - Fix a memory allocation in bz3_compress() (upstream bug #120)
  - Fix bz3grep error message on an invalid argument (upstream bug #127)
  - Fix a decoding failure on specific sizes (upstream bug #131)
  - Do not create an output file in case an input argument is a directory
    (upstream bug #138)


author: Pavel Raiskup <praiskup@redhat.com> 0.69-1
changelog:
  - require python-specfile (in new enough) version, and use it for specfile
    parsing instead of parsing the metadata from SRPMs
  - make sure we have (also) the latest DNF5 on builders
  - override disttag macro to None
  - make sure detected epoch is int() or None
  - build RPMs in one Mock step, instead of two (SRPM and then RPM)
  - use Mock's bootstrap_image_ready for the custom build (Mock 5.0+ required)
  - store review.json generated by fedora-review into the result directory
  - better/more verbose logging in the results.json generator
  - drop dependency on simplejson
  - repeatedly try to download files from lookaside cache
  - moving the package NEVRA parsing to from backend here into copr-rpmbuild
  - priority=X support added for the Copr repository itself
  - query exclusivearch and excludearch from the specfile, and store into results.json


author: Pavel Raiskup <praiskup@redhat.com> 0.70-1
changelog:
  - collect and compress fedora-review logs after run
  - use Copr custom macros when parsing the specfile


author: Pavel Raiskup <praiskup@redhat.com> 0.71-1
changelog:
  - don't set bootstrap_image_ready for rawhide
  - no Jinja-vars in config_opts keys (mock-core-configs 40.2 compat)
  - allow user SSH to builders
  - fix copr-rpmbuild --dump-configs
  - install copr-distgit-client with copr-rpmbuild


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Pavel Raiskup <praiskup@redhat.com> 1.3-1
changelog:
  - ignore unicode errors some commands' output
  - custom method - do not rely on working `/bin/su` in chroot
  - migrate os.listdir() to os.scandir() to increase performance
  - do not build package for i686 architecture
  - skip build only there are no unexpanded macros in ExclusiveArch/ExcludeArch


author: Jakub Kadlcik <frostyx@email.cz> 1.109-1
changelog:
  - Show CHROOT in help output instead of CHROOTS
  - More readable errors related to implicit ownername
  - General check if it makes sense to upload SRPM
  - Describe add-package-custom and edit-package-custom in the manpage
  - Sync --timeout manpage docs with --help output


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - priority=X support for copr DNF repositories added
  - new 'copr-cli download-build --logs' option added
  - make the pyp2spec tool the default PyPI spec generator


author: Pavel Raiskup <praiskup@redhat.com> 1.111-1
changelog:
  - correctly check CoprDir name before uploading large SRPM
  - assign fallback value from self.username
  - fix `copr build` +args --help output
  - typo in --namespace help output


author: Sérgio Basto <sergio@serjux.com> - 1.5.87-2
changelog:
  - Drop debconf-gnome on epel 10 because we don't have perl-GTK3 package
    and I don't know if we'll ever have or want have it (perl-GTK3 on epel 10)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.5.87-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix sbin merge for all releases


author: Dominik Wombacher <dominik@wombacher.cc> - 1.0.9-4
changelog:
  - Include upstream Patch to ensure swapon with maximum priority before hibernation
  - Resolves rhbz#2322884


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1
changelog:
  - New version
    Resolves: rhbz#2256145
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51766


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98-1
changelog:
  - New version
    Resolves: rhbz#2297124
  - Fixed incorrect parsing of multiline rfc2231 header filename
    Resolves: CVE-2024-39929
  - Enabled SRS support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Miroslav Suchý <msuchy@redhat.com> 1.57-1
changelog:
  - add filedrop public domain dedication
  - add ddate public domain dedication
  - Add wgrib license text
  - add zork public domain dedication
  - add AGPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - allow CC-BY-SA 3.0 for fonts
  - add Boehm-GC-without-fee license
  - add LicenseRef-Julius as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.58-1
changelog:
  - add Ultra permissive dedication of docbook5-schemas
  - add public domain dedication for clc
  - add Sendmail-Open-Source-1.1 license
  - add public domain dedication for biblesync
  - add public domain dedication for BareBonesBrowserLaunch
  - add public domain dedication for astronomy-menus
  - add LGPL-2.1-only WITH OCCT-exception-1.0
  - add CERN-OHL-P-2.0
  - add Jam license
  - add public domain dedication for ants


author: Miroslav Suchý <msuchy@redhat.com> 1.59-1
changelog:
  - add public domain findings for sdl-telnet
  - add public domain findings for libmodplug
  - add public domain findings for mb2md
  - add public domain findings for perl-DateTime-Precise
  - add public domain findings for gimpfx-foundry
  - add public domain findings for gnome-valgrind-session
  - add public domain findings for sqlite2
  - Blessing.toml -> blessing.toml
  - add public domain findings for surfraw
  - add GPL-3.0-or-later WITH GPL-3.0-389-ds-base-exception
  - add public domain findings for klt
  - add public domain findings for libb64
  - add public domain dedication of emacs-slime
  - add public domain dedication of cproto
  - add public domain dedication for cockatrice
  - add LGPL-2.1-or-later WITH Independent-modules-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.60-1
changelog:
  - add LicenseRef-Intel-firmware
  - add public domain dedication for oflb-goudy-bookletter-1911-fonts
  - add public domain dedication for nacl
  - add Apache-2.0 WITH mxml-exception
  - add public domain dedication for nec2c
  - add any-OSI-perl-modules
  - add public domain dedication for ogre
  - add text of Unsplash license
  - add LicenseRef-Intel-firmware
  - add SGI-B-1.1 as not-allowed
  - add public domain dedication for libgenht
  - add ultra permissive findings for lyx
  - add public domain findings for golang-github-xi2-xz
  - add UltraPermissive dedication of package samcoupe-rom
  - add UltraPermissive dedication of package radial
  - add LicenseRef-MIT-CRL-Xim license as not-allowed
  - add public domain findings for icon
  - add public domain findings for jhead
  - add public domain findings for mingw-pdcurses
  - add LicenseRef-BASS (beneath a steel sky) as not-allowed
  - add public domain and ultra permissive findings for rubygem-ruby-shadow


author: Miroslav Suchý <msuchy@redhat.com> 1.62-1
changelog:
  - add Avasys public license as allowed-firmware
  - add public domain dedication for python-hexdump
  - add public domain dedication for allegro (loadpng addon)
  - add LicenseRef-soundfont as not-allowed
  - add broadcom firmware license
  - Reclassify LicenseRef-qmail as allowed (deprecated)
  - add GPL-2.0-only WITH CGAL-linking-exception
  - add firmware licensing terms for atmel-firmware
  - add wwl license
  - add generic-xts license
  - add LicenseRef-Mod-Archive as not-allowed
  - add public domain dedication for perl-Math-Expression-Evaluator
  - add public domain dedication for perl-MaxMind-DB-Reader-XS
  - add public domain dedication for python-django-pdb
  - add UltraPermissive dedication of package python-utmp
  - add public domain dedication for re2c
  - add public domain dedication for python-nine
  - add public domain dedication for perl-Devel-Trace
  - add LGPL-3.0-or-later WITH LGPL-3.0-linking-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.63-1
changelog:
  - add LICENSE.Sigma from sigrok-firmware
  - Add public-domain text for python-zmq
  - add public domain for mg


author: Miroslav Suchý <msuchy@redhat.com> 1.64-1
changelog:
  - add copyleft-next-0.3.1 license
  - Add public-domain text for llvm-test-suite
  - document usage exception for fedora-remix-logos
  - add MIPS and ThirdEye licenses
  - add libcsv UltraPermissive dedication
  - Add public-domain text for stb


author: Miroslav Suchý <msuchy@redhat.com> 1.65-1
changelog:
  - Add BSD-3-Clause WITH AdditionRef-WebM-patent license
  - add public domain dedication in desktop-backgrouds
  - mark OFL-1.1-RFN and OFL-1.1-no-RFN as equal
  - ultrapermissive dedication of broda from crosswords package


author: Miroslav Suchý <msuchy@redhat.com> 1.66-1
changelog:
  - Mark LicenseRef-CRC32 as deprecated
  - allow packages that includes or bundle ccan as an exception
  - add LicenseRef-Julius-dictation-kit as not allowed
  - add Seiko-Epson license to firmware
  - add public domain findings for sc
  - add ultra permissive dedication of perl-Math-FFT
  - add aastr ultra permissive dedication
  - add GPL-2.0-or-later WITH mif-exception
  - add public domain dedication for libtelnet
  - Add PHP-3.0
  - LicenseRef-Fedora-Public-Domain: Add zpaqfranz


author: Simone Caronni <negativo17@gmail.com> - 1.2.6-12
changelog:
  - Drop ldconfig scriptlets.
  - Be more explicit for files.
  - Use cmake macros everywhere.
  - Small cleanups.
  - Trim changelog.
  - Adjust tests properly.


author: Remi Collet <remi@remirepo.net> - 0.8.4-1
changelog:
  - initial package
  - open https://github.com/rnpgp/sexp/issues/32 build as shared
  - open https://github.com/rnpgp/sexp/issues/33 clarify license


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20241108git259b7b7-1
changelog:
  - Update to 0.0.13 snapshot
  - Allow building from snapshots.
  - Adjust build requirements.
  - Adjust architectures, ppc64le is gone.


author: David Pascual Hernandez <davherna@redhat.com> - 1.19.0-1
changelog:
  - 6f81e37 test: speed-up tests by mocking gethostbyaddr (Petr Vobornik)
  - 587a9c7 fix(beaker): supress 10_avc_check restraint plugin (Petr Vobornik)
  - 2c0c2bb test: Add add_dict_to_node test (Petr Vobornik)
  - f4324bf feat: handle list value for add_dict_to_node function (Petr Vobornik)
  - f1e7590 fix: make delete_host function more robust (Petr Vobornik)
  - 784d24b chore: bump black in pre-commit (David Pascual)
  - f6f9131 chore(deps): bump black from 22.3.0 to 24.3.0 (David Pascual)
  - a7db867 test: Add test for _get_recipe_info function (Petr Vobornik)
  - aa25ff3 feat: Provide beaker log links (Petr Vobornik)


author: David Pascual Hernandez <davherna@redhat.com> - 1.20.0-1
changelog:
  - feeae04 feat: Add support for translanting %pre and main body part of kickstart (David Pascual)
  - 236393c chore: Update deprecated actions (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.22.0-1
changelog:
  - f43d20f style: Reformat by black (David Pascual)
  - 768bba5 fix: podman: set podman connection information for ansible (David Pascual)
  - 4d0b63c chore: setup: package seccomp filter (David Pascual)
  - 9b2d980 docs: Update seccomp configuration example (David Pascual)
  - f3deca1 feat: podman: handle custom network configuration (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.0-1
changelog:
  - 64a84db feat: Add support for translanting job-owner of kickstart (David Pascual)
  - 868523c feat: Add translantion for kernel_options and kernel_options_post (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.1-1
changelog:
  - 0cabc75 fix: Translate job-group properly (David Pascual)
  - 70e07c1 fix: Return empty list when there is no content in res_ks_list (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.127-1
changelog:
  - Explicitly ask which user checks the permissions
  - Make sure user can build in the project before uploading


author: Pavel Raiskup <praiskup@redhat.com> 1.130-1
changelog:
  - priority=X support added for copr project repositories
  - several forward/backward compat fixes with libs/tooling


author: Jakub Kadlcik <frostyx@email.cz> 1.132-1
changelog:
  - Discourage from deleting objects while paginating over them
  - Suggest pagination only when a GET request timeouts


author: Pavel Raiskup <praiskup@redhat.com> 0.22-1
changelog:
  - fix misleading warning for non-copr library consumers
  - add `contextlib.nullcontext` function as EL8 compat
  - limit stdout/stderr of ssh.run_expensive() commands
  - use 'copr-common/<version>' as http user agent identifier
  - changes needed to allow user SSH to builders


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - Explicitly invalidate the global parse hash when a SpecParser instance is created to prevent this issue. (#409)


author: Packit <hello@packit.dev> - 0.32.3-1
changelog:
  - specfile can now handle multi-line tag values (enclosed in a macro body, e.g. `%shrink`). (#412)
  - Resolves: rhbz#2299289


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - There is a new convenience method `Sections.get_or_create()` that allows you to manipulate a section
    without checking if it exists first. If a section doesn't exist, it will be appended to the end. (#441)
    For example, this will work properly even on spec files without `%changelog`:

    ```
    with spec.sections() as sections:
        changelog = sections.get_or_create("changelog")
        changelog[:] = ["%autochangelog"]
    ```
  - Resolves: rhbz#2332288


author: Packit <hello@packit.dev> - 0.34.2-1
changelog:
  - context_management: add a type stub override to fix typing. Type checkers like mypy and pyright can now correctly determine the types for `.sources()`, `.sections()`, and the other `Specfile` methods that return context managers. (#457)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.1-2
changelog:
  - Workaround doxygen non-reproducibility - make doc package noarch again
  - Increase client timeouts for XRootD server tests


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.7.20231006git8d00acdc
changelog:
  - Remove require of libpng12.so.0, lsb-desktop already require libpng
  - redhat-lsb now provides lsb_release, in future maybe we can remove the rest since LSB 5.0 is out of date
  - more cleanups
  - Report that is not LSB compliance, because various components are missing from Fedora, so compliance is not possible


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.10.20231006git8d00acdc
changelog:
  - The packages are architecture-specific, but do not contain any ELF
    binaries with debuginfo to extract, so we need disable debuginfo.


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.13.20231006git8d00acdc
changelog:
  - Remove sub-pacakges: redhat-lsb-core, redhat-lsb-cxx, redhat-lsb-desktop,
    redhat-lsb-languages and redhat-lsb-printing aren't useful for a long time
  - Switch to a noarch package


author: Zygmunt Krynicki <me@zygoon.pl>
changelog:
  - Re-cherry pick fix for SELinux timedatex problem from upstream
    as it was not released in 2.66.1, sorry.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.67.1
   - Fix apparmor permissions to allow snaps access to kernel modules
     and firmware on UC24, which also fixes the kernel-modules-control
     interface on UC24
   - AppArmor prompting (experimental): disallow /./ and /../ in path
     patterns
   - Fix 'snap run' getent based user lookup in case of bad PATH
   - Fix snapd using the incorrect AppArmor version during undo of an
     refresh for regenerating snap profiles
   - Add new syscalls to base templates
   - hardware-observe interface: allow riscv_hwprobe syscall
   - mount-observe interface: allow listmount and statmount syscalls


author: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
changelog:
  - The changelog date and author have been modified to maintain linearity.
  - Drop 0001-data-selinux-remove-timedatex.patch - applied upstream.
  - New upstream release 2.67
   - AppArmor prompting (experimental): allow overlapping rules
   - Registry view (experimental): Changes to registry data (from both
     users and snaps) can be validated and saved by custodian snaps
   - Registry view (experimental): Support 'snapctl get --pristine' to
     read the registry data excluding staged transaction changes
   - Registry view (experimental): Put registry commands behind
     experimental feature flag
   - Components: Make modules shipped/created by kernel-modules
     components available right after reboot
   - Components: Add tab completion for local component files
   - Components: Allow installing snaps and components from local files
     jointly on the CLI
   - Components: Allow 'snapctl model' command for gadget and kernel
     snaps
   - Components: Add 'snap components' command
   - Components: Bug fixes
   - eMMC gadget updates (WIP): add syntax support in gadget.yaml for
     eMMC schema
   - Support for ephemeral recovery mode on hybrid systems
   - Support for dm-verity options in snap-bootstrap
   - Support for overlayfs options and allow empty what argument for
     tmpfs
   - Enable ubuntu-image to determine the size of the disk image to
     create
   - Expose 'snap debug' commands 'validate-seed' and 'seeding'
   - Add debug API option to use dedicated snap socket /run/snapd-
     snap.socket
   - Hide experimental features that are no longer required
     (accepted/rejected)
   - Mount ubuntu-save partition with no{exec,dev,suid} at install, run
     and factory-reset
   - Improve memory controller support with cgroup v2
   - Support ssh socket activation configurations (used by ubuntu
     22.10+)
   - Fix generation of AppArmor profile with incorrect revision during
     multi snap refresh
   - Fix refresh app awareness related deadlock edge case
   - Fix not caching delta updated snap download
   - Fix passing non root uid, guid to initial tmpfs mount
   - Fix ignoring snaps in try mode when amending
   - Fix reloading of service activation units to avoid systemd errors
   - Fix snapd snap FIPS build on Launchpad to use Advantage Pro FIPS
     updates PPA
   - Make killing of snap apps best effort to avoid possibility of
     malicious failure loop
   - Alleviate impact of auto-refresh failure loop with progressive
     delay
   - Dropped timedatex in selinux-policy to avoid runtime issue
   - Fix missing syscalls in seccomp profile
   - Modify AppArmor template to allow using SNAP_REEXEC on arch
     systems
   - Modify AppArmor template to allow using vim.tiny (available in
     base snaps)
   - Modify AppArmor template to add read-access to debian_version
   - Modify AppArmor template to allow owner to read
     @{PROC}/@{pid}/sessionid
   - {common,personal,system}-files interface: prohibit trailing @ in
     filepaths
   - {desktop,shutdown,system-observe,upower-observe} interface:
     improve for Ubuntu Core Desktop
   - custom-device interface: allow @ in custom-device filepaths
   - desktop interface: improve launch entry and systray integration
     with session
   - desktop-legacy interface: allow DBus access to
     com.canonical.dbusmenu
   - fwupd interface: allow access to nvmem for thunderbolt plugin
   - mpris interface: add plasmashell as label
   - mount-control interface: add support for nfs mounts
   - network-{control,manager} interface: add missing dbus link rules
   - network-manager-observe interface: add getDevices methods
   - opengl interface: add Kernel Fusion Driver access to opengl
   - screen-inhibit-control interface: improve screen inhibit control
     for use on core
   - udisks2 interface: allow ping of the UDisks2 service
   - u2f-devices interface: add Nitrokey Passkey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68
   - FDE: add support for new and more extensible key format that is
     unified between TPM and FDE hook
   - FDE: add support for adding passphrases during installation
   - FDE: update secboot to 30317622bbbc
   - Snap components: make kernel components available on firstboot
     after either initramfs or ephemeral rootfs style install
   - Snap components: mount drivers tree from initramfs so kernel
     modules are available in early boot stages
   - Snap components: support remodeling to models that contain
     components
   - Snap components: support offline remodeling to models that contain
     components
   - Snap components: support creating new recovery systems with
     components
   - Snap components: support downloading components with 'snap
     download' command
   - Snap components: support sideloading asserted components
   - AppArmor Prompting(experimental): improve version checks and
     handling of listener notification protocol for communication with
     kernel AppArmor
   - AppArmor Prompting(experimental): make prompt replies idempotent,
     and have at most one rule for any given path pattern, with
     potentially mixed outcomes and lifespans
   - AppArmor Prompting(experimental): timeout unresolved prompts after
     a period of client inactivity
   - AppArmor Prompting(experimental): return an error if a patch
     request to the API would result in a rule without any permissions
   - AppArmor Prompting(experimental): warn if there is no prompting
     client present but prompting is enabled, or if a prompting-related
     error occurs during snapd startup
   - AppArmor Prompting(experimental): do not log error when converting
     empty permissions to AppArmor permissions
   - Confdb(experimental): rename registries to confdbs (including API
     /v2/registries => /v2/confdb)
   - Confdb(experimental): support marking confdb schemas as ephemeral
   - Confdb(experimental): add confdb-control assertion and feature
     flag
   - Refresh App Awareness(experimental): LP: #2089195 prevent
     possibility of incorrect notification that snap will quit and
     update
   - Confidential VMs: snap-bootstrap support for loading partition
     information from a manifest file for cloudimg-rootfs mode
   - Confidential VMs: snap-bootstrap support for setting up cloudimg-
     rootfs as an overlayfs with integrity protection
   - dm-verity for essential snaps: add support for snap-integrity
     assertion
   - Interfaces: modify AppArmor template to allow owner read on
     @{PROC}/@{pid}/fdinfo/*
   - Interfaces: LP: #2072987 modify AppArmor template to allow using
     setpriv to run daemon as non-root user
   - Interfaces: add configfiles backend that ensures the state of
     configuration files in the filesystem
   - Interfaces: add ldconfig backend that exposes libraries coming
     from snaps to either the rootfs or to other snaps
   - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when
     inside a container
   - Interfaces: add auditd-support interface that grants audit_control
     capability and required paths for auditd to function
   - Interfaces: add checkbox-support interface that allows
     unrestricted access to all devices
   - Interfaces: fwupd | allow access to dell bios recovery
   - Interfaces: fwupd | allow access to shim and fallback shim
   - Interfaces: mount-control | add mount option validator to detect
     mount option conflicts early
   - Interfaces: cpu-control | add read access to /sys/kernel/irq/
   - Interfaces: locale-control | changed to be implicit on Ubuntu Core
     Desktop
   - Interfaces: microstack-support | support for utilizing of AMD SEV
     capabilities
   - Interfaces: u2f | added missing OneSpan device product IDs
   - Interfaces: auditd-support | grant seccomp setpriority
   - Interfaces: opengl interface | enable parsing of nvidia driver
     information files
   - Allow mksquashfs 'xattrs' when packing snap types os, core, base
     and snapd as part of work to support non-root snap-confine
   - Upstream/downstream packaging changes and build updates
   - Improve error logs for malformed desktop files to also show which
     desktop file is at fault
   - Provide more precise error message when overriding channels with
     grade during seed creation
   - Expose 'snap prepare-image' validation parameter
   - Add snap-seccomp 'dump' command that dumps the filter rules from a
     compiled profile
   - Add fallback release info location /etc/initrd-release
   - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
     initramfs deb builds
   - Remove stale robust-mount-namespace-updates experimental feature
     flag
   - Remove snapd-snap experimental feature (rejected) and it's feature
     flag
   - Changed snap-bootstrap to mount base directly on /sysroot
   - Mount ubuntu-seed mounted as no-{suid,exec,dev}
   - Mapping volumes to disks: add support for volume-assignments in
     gadget
   - Fix silently broken binaries produced by distro patchelf 0.14.3 by
     using locally build patchelf 0.18
   - Fix mismatch between listed refresh candidates and actual refresh
     due to outdated validation sets
   - Fix 'snap get' to produce compact listing for tty
   - Fix missing store-url by keeping it as part of auxiliary store
     info
   - Fix snap-confine attempting to retrieve device cgroup setup inside
     container where it is not available
   - Fix 'snap set' and 'snap get' panic on empty strings with early
     error checking
   - Fix logger debug entries to show correct caller and file
     information
   - Fix issue preventing hybrid systems from being seeded on first
     boot
   - LP: #1966203 remove auto-import udev rules not required by deb
     package to avoid unwanted syslog errors
   - LP: #1886414 fix progress reporting when stdout is on a tty, but
     stdin is not


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Than Ngo <than@redhat.com> - 20200406-35
changelog:
  - fixed rhbz#2284575, add texlive-mdframed
  - fixed rhbz#2275109, add texlive-picinpar
  - add texlive-selinput, texlive-lipsum, texlive-picture, texlive-kantlipsum, texlive-ntheorem


author: Adrien Vergé <adrienverge@gmail.com> - 1.31.0-1
changelog:
  - Update to latest upstream version
  - Temporarily restore setup.py/setup.cfg since setuptools ≥ 61 is not available


