# changelog

author: Dominik Wombacher <dominik@wombacher.cc> - 0.9.17-3
changelog:
  - Run cmake tests during package build
  - Include missing file and directories because of version bump


author: Xavier Bachelot <xavier@bachelot.org> - 3.2.2-12
changelog:
  - Add patch7:
    - fix ldap anonymous bind
    - sync distro signatures
    - support older anaconda boot line options


author: Jakub Kadlcik <frostyx@email.cz> 0.67-1
changelog:
  - Add loggs to python-backoff decorator
  - Set git.safe_directory as repo rootdir
  - Explain how to reproduce the build locally
  - Retry only git clone without checkouting
  - Use git checkout instead of switch but ignore files


author: Pavel Raiskup <praiskup@redhat.com> 0.69-1
changelog:
  - require python-specfile (in new enough) version, and use it for specfile
    parsing instead of parsing the metadata from SRPMs
  - make sure we have (also) the latest DNF5 on builders
  - override disttag macro to None
  - make sure detected epoch is int() or None
  - build RPMs in one Mock step, instead of two (SRPM and then RPM)
  - use Mock's bootstrap_image_ready for the custom build (Mock 5.0+ required)
  - store review.json generated by fedora-review into the result directory
  - better/more verbose logging in the results.json generator
  - drop dependency on simplejson
  - repeatedly try to download files from lookaside cache
  - moving the package NEVRA parsing to from backend here into copr-rpmbuild
  - priority=X support added for the Copr repository itself
  - query exclusivearch and excludearch from the specfile, and store into results.json


author: Pavel Raiskup <praiskup@redhat.com> 0.70-1
changelog:
  - collect and compress fedora-review logs after run
  - use Copr custom macros when parsing the specfile


author: Pavel Raiskup <praiskup@redhat.com> 0.71-1
changelog:
  - don't set bootstrap_image_ready for rawhide
  - no Jinja-vars in config_opts keys (mock-core-configs 40.2 compat)
  - allow user SSH to builders
  - fix copr-rpmbuild --dump-configs
  - install copr-distgit-client with copr-rpmbuild


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.5.1-4
changelog:
  - Do not run exhaustive tests by default
  - We can always manually run scratch builds with them enabled, especially
    after significant upstream changes.


author: Miroslav Suchý <msuchy@redhat.com> 1.53-1
changelog:
  - add HPND-Netrek license
  - Add license text for py-sdl2 Public Domain license
  - remove LicenseRef-framed as ulem license was extended to allow LicenseRef-
    framed variation
  - add HIDAPI license
  - add Ruby-pty license
  - add LicenseRef-OASIS-spec


author: Miroslav Suchý <msuchy@redhat.com> 1.54-1
changelog:
  - public domain dedication found in mailcap
  - public domain dedications found in web server icons
  - replaced obsolescent command with modern equivalent
  - add LicenseRef-compface
  - Add rijndael from sdl-crypto to public domain
  - add public domain dedication for xz
  - Add sha1 from sdl-crypto to public domain
  - correct location of HPND-Netrek.toml


author: Miroslav Suchý <msuchy@redhat.com> 1.55-1
changelog:
  - Split rpmlint-fedora-license-data-legacy from rpmlint-fedora-license-
    data
  - add LicenseRef-IUPAC-InChI-Trust as not allowed
  - add TrustedQSL
  - add TU-Berlin-1.0 license
  - add DocBook-XML license
  - add DocBook-Schema license
  - add AGPL-3.0-or-later WITH PS-or-PDF-font-exception-20170817
  - Extend ISO-8879 exception to dotnet9.0


author: Miroslav Suchý <msuchy@redhat.com> 1.56-1
changelog:
  - add public domain dedication in package calf
  - add public domain dedication for btop
  - add public domain dedication for upx
  - add DocBook-Stylesheet
  - add LGPL-2.1-only WITH WxWindows-exception-3.1
  - add public domain dedication for bsh
  - Add vim into OPUBL-1.0 exceptions
  - add GPL-1.0-or-later WITH Autoconf-exception-generic
  - LicenseRef-Fedora-Public-Domain: Add perlmulticore.h
  - add MIT-Click


author: Miroslav Suchý <msuchy@redhat.com> 1.57-1
changelog:
  - add filedrop public domain dedication
  - add ddate public domain dedication
  - Add wgrib license text
  - add zork public domain dedication
  - add AGPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - allow CC-BY-SA 3.0 for fonts
  - add Boehm-GC-without-fee license
  - add LicenseRef-Julius as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.58-1
changelog:
  - add Ultra permissive dedication of docbook5-schemas
  - add public domain dedication for clc
  - add Sendmail-Open-Source-1.1 license
  - add public domain dedication for biblesync
  - add public domain dedication for BareBonesBrowserLaunch
  - add public domain dedication for astronomy-menus
  - add LGPL-2.1-only WITH OCCT-exception-1.0
  - add CERN-OHL-P-2.0
  - add Jam license
  - add public domain dedication for ants


author: Miroslav Suchý <msuchy@redhat.com> 1.59-1
changelog:
  - add public domain findings for sdl-telnet
  - add public domain findings for libmodplug
  - add public domain findings for mb2md
  - add public domain findings for perl-DateTime-Precise
  - add public domain findings for gimpfx-foundry
  - add public domain findings for gnome-valgrind-session
  - add public domain findings for sqlite2
  - Blessing.toml -> blessing.toml
  - add public domain findings for surfraw
  - add GPL-3.0-or-later WITH GPL-3.0-389-ds-base-exception
  - add public domain findings for klt
  - add public domain findings for libb64
  - add public domain dedication of emacs-slime
  - add public domain dedication of cproto
  - add public domain dedication for cockatrice
  - add LGPL-2.1-or-later WITH Independent-modules-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.60-1
changelog:
  - add LicenseRef-Intel-firmware
  - add public domain dedication for oflb-goudy-bookletter-1911-fonts
  - add public domain dedication for nacl
  - add Apache-2.0 WITH mxml-exception
  - add public domain dedication for nec2c
  - add any-OSI-perl-modules
  - add public domain dedication for ogre
  - add text of Unsplash license
  - add LicenseRef-Intel-firmware
  - add SGI-B-1.1 as not-allowed
  - add public domain dedication for libgenht
  - add ultra permissive findings for lyx
  - add public domain findings for golang-github-xi2-xz
  - add UltraPermissive dedication of package samcoupe-rom
  - add UltraPermissive dedication of package radial
  - add LicenseRef-MIT-CRL-Xim license as not-allowed
  - add public domain findings for icon
  - add public domain findings for jhead
  - add public domain findings for mingw-pdcurses
  - add LicenseRef-BASS (beneath a steel sky) as not-allowed
  - add public domain and ultra permissive findings for rubygem-ruby-shadow


author: Miroslav Suchý <msuchy@redhat.com> 1.62-1
changelog:
  - add Avasys public license as allowed-firmware
  - add public domain dedication for python-hexdump
  - add public domain dedication for allegro (loadpng addon)
  - add LicenseRef-soundfont as not-allowed
  - add broadcom firmware license
  - Reclassify LicenseRef-qmail as allowed (deprecated)
  - add GPL-2.0-only WITH CGAL-linking-exception
  - add firmware licensing terms for atmel-firmware
  - add wwl license
  - add generic-xts license
  - add LicenseRef-Mod-Archive as not-allowed
  - add public domain dedication for perl-Math-Expression-Evaluator
  - add public domain dedication for perl-MaxMind-DB-Reader-XS
  - add public domain dedication for python-django-pdb
  - add UltraPermissive dedication of package python-utmp
  - add public domain dedication for re2c
  - add public domain dedication for python-nine
  - add public domain dedication for perl-Devel-Trace
  - add LGPL-3.0-or-later WITH LGPL-3.0-linking-exception


author: Paul Howarth <paul@city-fan.org> - 1.3.6d-1
changelog:
  - Update to 1.3.6d
    - Fixed issue with FTPS uploads of large files using TLSv1.3
      (https://github.com/proftpd/proftpd/issues/959)
    - Fixed regression in the handling of '%{env:...}' configuration variables
      when the environment variable is not present
      (https://github.com/proftpd/proftpd/issues/857)
    - Second LIST of the same symlink shows different results
      (https://github.com/proftpd/proftpd/issues/940)
    - mod_sftp sends broken response when CREATETIME attribute is requested
      (https://github.com/proftpd/proftpd/issues/980)
    - Handle zero-length SFTP WRITE requests without error
      (http://bugs.proftpd.org/show_bug.cgi?id=4398)
    - PidFile should not be world-writable
      (https://github.com/proftpd/proftpd/issues/1018)
    - TLSv1.3 handshake fails due to missing session ticket key on some systems
      (https://github.com/proftpd/proftpd/issues/1014)
    - Lowercased FTP commands not properly identified
      (https://github.com/proftpd/proftpd/issues/1023)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-1
changelog:
  - Update to 1.3.6e
    - Fixed null pointer dereference in mod_sftp when using SCP incorrectly
      (https://github.com/proftpd/proftpd/issues/1043)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-3
changelog:
  - Avoid segfaults with TLSv1.3
    https://github.com/proftpd/proftpd/issues/1063
    https://github.com/proftpd/proftpd/commit/adf43dd4ddaab0332e74abc86bbcef9cf27ee54a
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-4
changelog:
  - Fix memory disclosure to RADIUS servers by mod_radius (#2001690)
    https://github.com/proftpd/proftpd/issues/1284
    https://github.com/proftpd/proftpd/pull/1285


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-6
changelog:
  - Fix one-byte out-of-bounds read, and daemon crash, because of mishandling of
    quote/backslash semantics (#2255609, GH#1683, CVE-2023-51713)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-7
changelog:
  - Fix slow reading of passwd/group files in mod_auth_file (#2270686, GH#1134,
    GH#1192, GH#1195, GH#1213)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-8
changelog:
  - Add fix for slow accesses in large directory trees (rhbz#2310341)
    - http://bugs.proftpd.org/show_bug.cgi?id=4307
    - https://github.com/proftpd/proftpd/pull/525


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-9
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Michel Lind <salimma@fedoraproject.org> - 3.2.25-1
changelog:
  - Update to 3.2.25
  - Mark as deprecated due to EOL
  - Update list of bundled dependencies
  - Declare licenses of bundled dependencies
  - Add virtual Provides and Conflicts to allow swapping Django stacks
  - Drop unneeded patches


author: Packit <hello@packit.dev> - 0.28.3-1
changelog:
  - Fixed several minor issues such as processing seemingly commented-out macro definitions (e.g. `#%global prerel rc1`) and treating `SourceLicense` tag as a source. (#374, #376)
  - Made `EVR`, `NEVR` and `NEVRA` objects comparable. (#379)


author: Packit <hello@packit.dev> - 0.30.0-1
changelog:
  - Fixed an exception that occured when accessing the `Specfile.has_autochangelog` property while having unparseable lines (e.g. lines ending with unescaped `%`) in `%changelog`. (#387)


author: Packit <hello@packit.dev> - 0.31.0-1
changelog:
  - Value of a `Tag` no longer includes trailing whitespace (if any). (#393)
  - specfile now tries to expand macros before processing conditions to be able to resolve conditional expressions defined by macros, for example OpenSUSE Tumbleweed defines `%ifpython3` macro as `%if "%{python_flavor}" == "python3"`. (#394)
  - Resolves: rhbz#2294393


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - Explicitly invalidate the global parse hash when a SpecParser instance is created to prevent this issue. (#409)


author: Packit <hello@packit.dev> - 0.32.3-1
changelog:
  - specfile can now handle multi-line tag values (enclosed in a macro body, e.g. `%shrink`). (#412)
  - Resolves: rhbz#2299289


author: Benjamin A. Beasley <code@musicinmybrain.net> - 19.0.0-8
changelog:
  - Tidy up %prep
  - “Cythonize” in %build, not %prep
  - Since we remove unwanted shebangs, don’t adjust them in %install


author: Benjamin A. Beasley <code@musicinmybrain.net> - 19.0.0-12
changelog:
  - Correct License and update to SPDX
  - Ship an Apache-2.0 license file, and report its absence upstream


author: Peter Bieringer <pb@bieringer.de> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - EL8: update bundled vobject to 0.9.7
  - EL8: update to Python 3.9 (requires update with option --allowerasing)
  - EL8: reenable bundled dateutil (required by Python 3.9)


author: Peter Bieringer <pb@bieringer.de> - 3.2.0-4
changelog:
  - EL8: blacklist "pika" (required for 'rabbitmq' hook)
  - EL8: fix require-exclude for bundled dateutil


author: Peter Bieringer <pb@bieringer.de> - 3.2.2-1
changelog:
  - Update to 3.2.2
  - Obsolete radicale-config-storage-hooks-SELinux-note.patch by inject inside spec file
  - Obsolete radicale-httpd by contrib config from upstream
  - Fix group+permissions of /etc/radicale/rights
  - Create an empty file /etc/radicale/users with proper permissions


author: Peter Bieringer <pb@bieringer.de> - 3.3.0-1
changelog:
  - Update to 3.3.0
  - EL8: update bundled defusedxml to 2.8.1 (align with EL9)
  - EL8: update bundled passlib to 1.7.4 (align with EL9)


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.1
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix snapd riscv64 build
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.2
   - Bump squashfuse from version 0.5.0 to 0.5.2 (used in snapd deb
     only)


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66
   - AppArmor prompting (experimental): expand kernel support checks
   - AppArmor prompting (experimental): consolidate error messages and
     add error kinds
   - AppArmor prompting (experimental): grant /v2/snaps/{name} via
     snap-interfaces-requests-control
   - AppArmor prompting (experimental): add checks for duplicate
     pattern variants
   - Registry views (experimental): add handlers that commit (and
     cleanup) registry transactions
   - Registry views (experimental): add a snapctl fail command for
     rejecting registry transactions
   - Registry views (experimental): allow custodian snaps to implement
     registry hooks that modify and save registry data
   - Registry views (experimental): run view-changed hooks only for
     snaps plugging views affected by modified paths
   - Registry views (experimental): make registry transactions
     serialisable
   - Snap components: handle refreshing components to revisions that
     have been on the system before
   - Snap components: enable creating Ubuntu Core images that contain
     components
   - Snap components: handle refreshing components independently of
     snaps
   - Snap components: handle removing components when refreshing a snap
     that no longer defines them
   - Snap components: extend snapd Ubuntu Core installation API to
     allow for picking optional snaps and components to install
   - Snap components: extend kernel.yaml with "dynamic-modules",
     allowing kernel to define a location for kmods from component
     hooks
   - Snap components: renamed component type "test" to "standard"
   - Desktop IDs: support installing desktop files with custom names
     based on desktop-file-ids desktop interface plug attr
   - Auto-install snapd on classic systems as prerequisite for any non-
     essential snap install
   - Support loading AppArmor profiles on WSL2 with non-default kernel
     and securityfs mounted
   - Debian/Fedora packaging updates
   - Add snap debug command for investigating execution aspects of the
     snap toolchain
   - Improve snap pack error for easier parsing
   - Add support for user services when refreshing snaps
   - Add snap remove --terminate flag for terminating running snap
     processes
   - Support building FIPS complaint snapd deb and snap
   - Fix to not use nss when looking up for users/groups from snapd
     snap
   - Fix ordering in which layout changes are saved
   - Patch snapd snap dynamic linker to ignore LD_LIBRARY_PATH and
     related variables
   - Fix libexec dir for openSUSE Slowroll
   - Fix handling of the shared snap directory for parallel installs
   - Allow writing to /run/systemd/journal/dev-log by default
   - Avoid state lock during snap removal to avoid delaying other snapd
     operations
   - Add nomad-support interface to enable running Hashicorp Nomad
   - Add intel-qat interface
   - u2f-devices interface: add u2f trustkey t120 product id and fx
     series fido u2f devices
   - desktop interface: improve integration with xdg-desktop-portal
   - desktop interface: add desktop-file-ids plug attr to desktop
     interface
   - unity7 interface: support desktop-file-ids in desktop files rule
     generation
   - desktop-legacy interface: support desktop-file-ids in desktop
     files rule generation
   - desktop-legacy interface: grant access to gcin socket location
   - login-session-observe interface: allow introspection
   - custom-device interface: allow to explicitly identify matching
     device in udev tagging block
   - system-packages-doc interface: allow reading /usr/share/javascript
   - modem-manager interface: add new format of WWAN ports
   - pcscd interface: allow pcscd to read opensc.conf
   - cpu-control interface: add IRQ affinity control to cpu_control
   - opengl interface: add support for cuda workloads on Tegra iGPU in
     opengl interface


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66.1
   - AppArmor prompting (experimental): Fix kernel prompting support
     check
   - Allow kernel snaps to have content slots
   - Fix ignoring snaps in try mode when amending


