# changelog

author: Sérgio Basto <sergio@serjux.com> - 0.103.7-3
changelog:
  - (#2128276) Please port your pcre dependency to pcre2
  - Explicit dependency on systemd since systemd-devel no longer has this dependency on F37+


author: Sérgio Basto <sergio@serjux.com> - 0.103.7-4
changelog:
  - (#2136977) not requires data(clamav) on clamav-libs
  - (#2023371) Add documentation to preserve user permissions of DatabaseOwner


author: Sérgio Basto <sergio@serjux.com> - 0.103.8-2
changelog:
  - Split out documentation into separate -doc sub-package
  - (#2128276) Please port your pcre dependency to pcre2
  - Explicit dependency on systemd since systemd-devel no longer has this dependency on F37+
  - (#2136977) not requires data(clamav) on clamav-libs
  - (#2023371) Add documentation to preserve user permissions of DatabaseOwner


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.2.4-1
changelog:
  - Update to v1.2.4
  - Drop Patch0 (longer sleep in tests - backport from upstream)
  - Drop Patch1 (missing NUL-terminator - issue fixed upstream)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.2.5-7
changelog:
  - Remove build-time dependency on python3-mock (https://fedoraproject.org/wiki/Changes/DeprecatePythonMock)
  - Remove EPEL7-specific parts of the spec


author: Ondřej Nosek <onosek@redhat.com> - 1.42-1
changelog:
  - Fix Jenkins tests (onosek)
  - Return bash-completion back because of compatibility (onosek)
  - Fix unittests for Python 2 - missing dependency (onosek)
  - set-distgit-token: create a missing config file (mark.e.fuller)
  - Fix rsplit() usage to work with Python 2.7 - 2029175 (treydock)
  - mockbuild: default to use the local Mock configuration (praiskup)
  - Add support for epel9-next (carl)
  - Remove unused import from setup.py (onosek)
  - Enable Python argcomplete (onosek)
  - Test and support Python 3.10 (miro)


author: Ondřej Nosek <onosek@redhat.com> - 1.42-2
changelog:
  - Patch: fedpkg update --suggest-logout option added
  - Patch: Add compatibility for Bodhi >= 6.0.0
  - fedora-packager rpm dependency is "Recommends"


author: Ondřej Nosek <onosek@redhat.com> - 1.43-1
changelog:
  - Improve change management process documentation (onosek)
  - Fix medium level bandit findings (onosek)
  - rpmdefines changes depending on rpkg (onosek)
  - `request-branch`: detect existing branch - #481 (onosek)
  - Refactoring of _request_branch method (drumian)
  - Fix tests with bodhi-client 6+ (awilliam)
  - Add compatibility for Bodhi >= 6.0.0 (aurelien)
  - fedpkg update --suggest-logout option added - 472 (drumian)
  - WIP: Remove python3-mock dependency from fedpkg (drumian)


author: Ondřej Nosek <onosek@redhat.com> - 1.44-1
changelog:
  - Do not execute unittests for old bodhi-client (onosek)
  - New command `disable-monitoring` (onosek)
  - Set default_branch_merge to 'rawhide' (otto.liljalaakso)
  - `fedpkg update`: can handle $EDITOR with arguments - #492 (onosek)
  - Add Jenkinsfile for CI (onosek)


author: Pavel Raiskup <praiskup@redhat.com> 2.11-1
changelog:
  - mock: fix broken --help output
  - compress_logs: compress also after repo failures
  - move to libera.chat (msuchy@redhat.com)
  - Define _platform_multiplier macro (msuchy@redhat.com)
  - allow to --install external:* (msuchy@redhat.com)
  - move installation of external:* to separate function (msuchy@redhat.com)
  - honor --cwd for --shell (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.12-1
changelog:
  - don't set --cwd for --shell when we know it will fail (el7)
  - explicitly convert macro values to str (logans@cottsay.net)
  - disable versionlock DNF plugin by default (igor.raits@gmail.com)
  - move Requires of shadow-utils from mock-core-configs to mock-filesystem
    (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.13-1
changelog:
  - local repositories to use gpgcheck=0 by default
  - A new option --additional-package (for --rebuild)
  - external-deps: install pip packages to /usr
  - Install external deps into build chroot, not bootstrap
  - Migrate from optparse to argparse
  - mock: don't specify SOURCE when remounting bind-mounts
  - mock: add option --debug-config-expanded (sergio@serjux.com)
  - Fix use of deprecated function (xfgusta@gmail.com)
  - lvm_root: fix copy/paste error in a warning message (kdudka@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.15-1
changelog:
  - argparse: handle old-style commands *before* ignoring "--" (awilliam@redhat.com)
  - Update mock.1 (cheese@nosuchhost.net)


author: Pavel Raiskup <praiskup@redhat.com> 2.16-1
changelog:
  - disable system call filtering
  - pass env to podman run (dani@lapiole.org)
  - give user alternative help for missing 'epel-8-*' configs
  - podman, explictily specify stdin as tar source (vreeland.justin@gmail.com)
  - add a new 'ssl_extra_certs' option (patrick@laimbock.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - mock v3 contains several Python 2.7 (EL7) incompatibilites
    https://github.com/rpm-software-management/mock/issues/755
  - disable SECCOMP for Podman by default
  - opt in for SECCOMP invented
  - create simple_load_config() for use in 3rd party SW (msuchy@redhat.com)
  - implement --list-chroots command (msuchy@redhat.com)
  - add cachedir to output of hw_info plugin (msuchy@redhat.com)
  - mock: copy /usr/share/pki source CA certificates (dereks@lifeofadishwasher.com)
  - add missing args for --scrub and --short-circuit into bash
    completion (didiksupriadi41@fedoraproject.org)
  - remove el7 specific parts from the spec file (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.1-1
changelog:
  - let rpmbuild know that it should not clean up after itself (msuchy@redhat.com)
  - typo in the subscription error message
  - root_cache: simplify decompressing with BSD tar
  - switch from /bin/gtar to /bin/tar by default


author: Pavel Raiskup <praiskup@redhat.com> 3.2-1
changelog:
  - Fix the docker environment check for cgroupv2 (achal.velani@oracle.com)
  - mock-scm: recommend rpkg-util
  - don't use rpmbuild --noclean option if not supported
  - do only one fork() while reading --list-chroots configs
  - Error() (exceptions) code rewritten and simplified
  - dropped mock SGID from /var/{lib,cache}/mock dirs
  - change license to spdx (msuchy@redhat.com)
  - podman.py: don't let podman warnings taint container id (micho@redhat.com)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - use https://github.com/mate-desktop/mozo/commit/558d88a
  - use https://github.com/mate-desktop/mozo/commit/1824bef
  - add some upstream patches


author: Packit <hello@packit.dev> - 1.12.2-1
changelog:
  - chore: Release version 1.12.2 (github-actions)
  - chore: Use python 3.10 in GH actions (Tibor Dudlák)
  - refactor: pylint fixes related to Python 3.10 (Tibor Dudlák)
  - test: Fix test_utils.py to be included in pytest run (Tibor Dudlák)
  - chore(pytest): add missing python_path when using pytest >=7.0.0 (Tibor Dudlák)
  - test: Add test for value_to_bool util function (Tibor Dudlák)
  - fix: Owner requirement boolean parsing from string (Tibor Dudlák)
  - chore(Packit): Add upstream_tag_template to .packit.yaml (Tibor Dudlák)


author: Packit <hello@packit.dev> - 1.12.3-1
changelog:
  - chore: Release version 1.12.3 (github-actions)
  - chore(Packit): Enable copr build for commit to main only. (Tibor Dudlák)
  - chore(Packit): Enable TF tests job to run on pull request. (Tibor Dudlák)
  - chore(Packit): Add fedora gating.yaml to synced files. (Tibor Dudlák)
  - chore(TestingFarm): Add gating for fedora workflow (Tibor Dudlák)
  - fix: Add cache decorator for older python versions. (Tibor Dudlák)
  - fix(mrack.spec): Missing dependency in c8s for beaker-client (Tibor Dudlák)
  - chore(Packit): enable epel-8 and epel-9 updates and tests (Tibor Dudlák)
  - fix(AWS): refactor sources to be py3.6 compatible (Tibor Dudlák)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.13.0-1
changelog:
  - 72cc2f3 test: add extra dnf options when dealing with rhel/epel 8 (Tibor Dudlák)
  - 32a754b chore: set packit to sync changelog as well (Tibor Dudlák)
  - b0512b4 chore: sync fedora spec to upstream to maintain changelog history for fedora (Tibor Dudlák)
  - be7b50a chore: Generate proper changelog from commit history when releasing (Tibor Dudlák)
  - 98f4035 chore: Bump python-semantic-release to latest (Tibor Dudlák)
  - a0e76dd test(OpenStack): Fixup the network spread tests (Tibor Dudlák)
  - 88b9332 test(OpenStack): rewrite network alloaction tests (Tibor Dudlák)
  - 777862f feat(OpenStack): Provide a way to disable network spreading (Tibor Dudlák)
  - ff7331d fix(OpenStack): fix condition for network to get in interval (Tibor Dudlák)
  - 943316d fix: fqdn in name is ignored and mrack guesses the name instead #237 (Tibor Dudlák)
  - 46141dc feat(AWS): Add utilization check method (Tibor Dudlák)
  - bb80060 feat(OpenStack): Add utilization check method (Tibor Dudlák)
  - 55f9c2c feat: Do not use same sleep for every mrack run (Tibor Dudlák)
  - 6ce3927 test(AnsibleInventory): global level output values override (Tibor Dudlák)
  - a7a896a feat(AnsibleInventory): Allow additional global level values (Tibor Dudlák)
  - 91c562c feat(AnsibleInventory): Allow additional domain level ansible inventory values (Tibor Dudlák)
  - 109b03c test(OpenStack): Update calls in openststack tests (Tibor Dudlák)
  - 4467cc2 refactor(OpenStack): make private openstack methods truly private (Tibor Dudlák)
  - 72b9b9c chore: use custom release_suffix for PR testing via packit (Petr Vobornik)
  - f3f734a chore: disable pylint pre-commit hook (Petr Vobornik)
  - 4aa9b0a chore(Packit): Add synchronization of tmt plans and tests (Tibor Dudlák)
  - 02c3e01 chore(Packit): Configure users on whose actions packit is allowed to be run (Tibor Dudlák)
  - cf14ed9 chore(Packit): Add missing ci.fmf to synced files (Tibor Dudlák)


author: Iryna Shcherbina <ishcherb@redhat.com> - 4.7.3-3
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Miro Hrončok <mhroncok@redhat.com> - 4.7.3-7
changelog:
  - Subpackage python2-breathe has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Parag Nemade <pnemade AT redhat DOT com> - 3.5.1-2
changelog:
  - Rebuild for new ansible build
  - Adapt ansible packaging change that is build against python39 package
  - Disable tests as required test deps are not available


author: Ondřej Nosek <onosek@redhat.com> - 1.65-1
changelog:
  - Extra arguments now use shell-escaping - revert (onosek
  - Remove pytest warnings (onosek)
  - Refuse import of packages processed by rpmautospec (zbyszek)
  - follow redirects for lookaside (tkopecek)
  - Repair flake8 complaints (onosek)
  - Fix high level bandit findings (onosek)
  - container-build: improve help text for --compose-ids argument (kdreyer)
  - CONTRIBUTING.md fix links (onosek)
  - Improve change management process documentation (onosek)
  - Removing bandit issues from cli.py (drumian)
  - Extract source RPMs with rpm2archive if possible (praiskup)
  - Set up bandit scanner for rpkg (onosek)
  - Refuse to "commit -c" when using %autochangelog - 454 (drumian)
  - Refactoring loading rpmautospec feature (onosek)
  - add --background option for container-build which allows to create build with
    lower priority (rcerven)
  - 'clean --dry-run' deprecation warning (drumian)
  - Better exit code for connection error (drumian)
  - Fix generation of optional parameters in man page (mspacek)
  - Use absolute path for mock results in `lint` (onosek)
  - contaner-build does not check for existence of kojisession.buildContainer -
    532 (drumian)
  - Fix: 'lint' subcommand should not invoke rpmlint on debuginfo packages -
    rhbz#2052451 (drumian)
  - Add `--custom-user-metadata` to build command (onosek)
  - Fix: 'lint -i/--info' does not work - rhbz#2016616 (drumian)
  - Fix: AlreadyUploadedError when package has no sources - 604 (drumian)
  - Fix: Extra arguments now use shell-escaping - 587 (drumian)


author: Ondřej Nosek <onosek@redhat.com> - 1.66-1
changelog:
  - container-build: document --compose-ids overrides any new composes (kdreyer)
  - Use srpm when scratch-building from dirty repo - #652 (otto.liljalaakso)
  - Code cleanup in tests/test_cli.py (otto.liljalaakso)
  - Reduce indentation in assert_build helper (otto.liljalaakso)
  - Allow empty commits - 494 (msuchy)
  - Allow forcing download of all sources - #650 (otto.liljalaakso)
  - Add test case for not downloading unused sources (otto.liljalaakso)
  - Support 'results_dir=subdir' when building from srpm - #648
    (otto.liljalaakso)
  - Use local branch name as release when there is no remote (otto.liljalaakso)
  - Allow downstreams to define a default release (otto.liljalaakso)
  - Switch load_branch_merge to use multiple return (otto.liljalaakso)
  - Unittests for 'git push' hook script (onosek)
  - Checking a repo configuration before 'git push' with a git hook script - 491
    (onosek)
  - Fix skipping NVR check with autorelease (nils)
  - pyrpkg.spec.SpecFile: More lenient parser for Source/Patch lines (fweimer)
  - Fix URL in CHANGELOG.rst (tmz)
  - Add Jenkinsfile for CI (onosek)
  - mockbuild: escape rpm command under mock - rhbz#2130349 (onosek)
  - Fixes for exploded SRPM layouts - #633 (tdawson)
  - `fedpkg local` does not show rpmbuild output - rhbz#2124809 (onosek)


author: Henrik Nordstrom <henrik@henriknordstrom.net> 5.6.6-2
changelog:
  - Fixes for CVE-2022-1061 CVE-2022-1207 CVE-2022-1237 CVE-2022-1238
    CVE-2022-1240 CVE-2022-1244 CVE-2022-1283 CVE-2022-1284 CVE-2022-1296
    CVE-2022-1297


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> - 1.2-3
changelog:
  - Address Fedora review comments, v2.
  - Fix BR typo of python3-gobject
  - Add missing BR for intltool and gettext
  - Add missing runtime dependency on slop
  - Add fontawesome and appindicator recommendation
  - Install locale files


author: David Trudgian <dtrudg@sylabs.io> - 3.11.0-1
changelog:
  - Upgrade to 3.11.0 upstream version.
  - This is a compatible upgrade to a new upstream minor version.


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57.5
   - image: clean snapd mount after preseeding
   - wrappers,snap/quota: clear LogsDirectory= in the service unit
     for journal namespaces
   - cmd/snap,daemon: allow zero values from client to daemon for
     journal rate-limit
   - interfaces: steam-support allow pivot /run/media and /etc/nvidia
     mount
   - o/ifacestate: introduce DebugAutoConnectCheck hook
   - release, snapd-apparmor, syscheck: distinguish WSL1 and WSL2
   - autopkgtests: fix running autopkgtest on kinetic
   - interfaces: add microceph interface
   - interfaces: steam-support allow additional mounts
   - many: add stub services
   - interfaces: add kconfig paths to system-observe
   - i/b/system_observe: honour root dir when checking for
     /boot/config-*
   - interfaces: grant access to speech-dispatcher socket
   - interfaces: rework logic of unclashMountEntries


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57.6
    - SECURITY UPDATE: Local privilege escalation
      - snap-confine: Fix race condition in snap-confine when preparing a
        private tmp mount namespace for a snap
      - CVE-2022-3328


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.58
   - many: Use /tmp/snap-private-tmp for per-snap private tmps
   - data: Add systemd-tmpfiles configuration to create private tmp dir
   - cmd/snap: test allowed and forbidden refresh hold values
   - cmd/snap: be more consistent in --hold help and err messages
   - cmd/snap: error on refresh holds that are negative or too short
   - o/homedirs: make sure we do not write to /var on build time
   - image: make sure file customizations happen also when we have
     defaultscause
   - tests/fde-on-classic: set ubuntu-seed label in seed partitions
   - gadget: system-seed-null should also have fs label ubuntu-seed
   - many: gadget.HasRole, ubuntu-seed can come also from system-seed-
     null
   - o/devicestate: fix paths for retrieving recovery key on classic
   - cmd/snap-confine: do not discard const qualifier
   - interfaces: allow python3.10+ in the default template
   - o/restart: fix PendingForSystemRestart
   - interfaces: allow wayland slot snaps to access shm files created
     by Firefox
   - o/assertstate: add Sequence() to val set tracking
   - o/assertstate: set val set 'Current' to pinned sequence
   - tests: tweak the libvirt interface test to work on 22.10
   - tests: use system-seed-null role on classic with modes tests
   - boot: add directory for data on install
   - o/devicestate: change some names from esp to seed/seed-null
   - gadget: add system-seed-null role
   - o/devicestate: really add error to new error message
   - restart,snapstate: implement reboot-required notifications on
     classic
   - many: avoid automatic system restarts on classic through new
     overlord/restart logic
   - release: Fix WSL detection in LXD
   - o/state: introduce WaitStatus
   - interfaces: Fix desktop interface rules for document portal
   - client: remove classic check for `snap recovery --show-
     keys`
   - many: create snapd.mounts targets to schedule mount units
   - image: enable sysfs overlay for UC preseeding
   - i/b/network-control: add permissions for using AF_XDP
   - i/apparmor: move mocking of home and overlay conditions to osutil
   - tests/main/degraded: ignore man-db update failures in CentOS
   - cmd/snap: fix panic when running snap w/ flag but w/o subcommand
   - tests: save snaps generated during image preaparation
   - tests: skip building snapd based on new env var
   - client: remove misleading comments in ValidateApplyOptions
   - boot/seal: add debug traces for bootchains
   - bootloader/assets: fix grub.cfg when there are no labels
   - cmd/snap: improve refresh hold's output
   - packaging: enable BPF in RHEL9
   - packaging: do not traverse filesystems in postrm script
   - tests: get microk8s from another branch
   - bootloader: do not specify Core version in grub entry
   - many: refresh --hold follow-up
   - many: support refresh hold/unhold to API and CLI
   - many: expand fully handling links mapping in all components, in
     the API and in snap info
   - snap/system_usernames,tests: Azure IoT Edge system usernames
   - interface: Allow access to
     org.freedesktop.DBus.ListActivatableNames via system-observe
     interface
   - o/devicestate,daemon: use the expiration date from the assertion
     in user-state and REST api (user-removal 4/n)
   - gadget: add unit tests for new install functions for FDE on
     classic
   - cmd/snap-seccomp: fix typo in AF_XDP value
   - tests/connected-after-reboot-revert: run also on UC16
   - kvm: allow read of AMD-SEV parameters
   - data: tweak apt integration config var
   - o/c/configcore: add faillock configuration
   - tests: use dbus-daemon instead of dbus-launch
   - packaging: remove unclean debian-sid patch
   - asserts: add keyword 'user-presence' keyword in system-user
     assertion (auto-removal 3/n)
   - interfaces: steam-support allow pivot /run/media and /etc/nvidia
     mount
   - aspects: initial code
   - overlord: process auto-import assertion at first boot
   - release, snapd-apparmor, syscheck: distinguish WSL1 and WSL2
   - tests: fix lxd-mount-units in ubuntu kinetic
   - tests: new variable used to configure the kernel command line in
     nested tests
   - go.mod: update to newer secboot/uc22 branch
   - autopkgtests: fix running autopkgtest on kinetic
   - tests: remove squashfs leftovers in fakeinstaller
   - tests: create partition table in fakeinstaller
   - o/ifacestate: introduce DebugAutoConnectCheck hook
   - tests: use test-snapd-swtpm instead of swtpm-mvo snap in nested
     helper
   - interfaces/polkit: do not require polkit directory if no file is
     needed
   - o/snapstate: be consistent not creating per-snap save dirs for
     classic models
   - inhibit: use hintFile()
   - tests: use `snap prepare-image` in fde-on-classic mk-image.sh
   - interfaces: add microceph interface
   - seccomp: allow opening XDP sockets
   - interfaces: allow access to icon subdirectories
   - tests: add minimal-smoke test for UC22 and increase minimal RAM
   - overlord: introduce hold levels in the snapstate.Hold* API
   - o/devicestate: support mounting ubuntu-save also on classic with
     modes
   - interfaces: steam-support allow additional mounts
   - fakeinstaller: format SystemDetails result with %+v
   - cmd/libsnap-confine-private: do not panic on chmod failure
   - tests: ensure that fakeinstaller put the seed into the right place
   - many: add stub services for prompting
   - tests: add libfwupd and libfwupdplugin5 to openSUSE dependencies
   - o/snapstate: fix snaps-hold pruning/reset in the presence of
     system holding
   - many: add support for setting up encryption from installer
   - many: support classic snaps in the context of classic and extended
     models
   - cmd/snap,daemon: allow zero values from client to daemon for
     journal rate limit
   - boot,o/devicestate: extend HasFDESetupHook to consider unrelated
     kernels
   - cmd/snap: validation set refresh-enforce CLI support + spread test
   - many: fix filenames written in modeenv for base/gadget plus drive-
     by TODO
   - seed: fix seed test to use a pseudo-random byte sequence
   - cmd/snap-confine: remove setuid calls from cgroup init code
   - boot,o/devicestate: introduce and use MakeRunnableStandaloneSystem
   - devicestate,boot,tests: make `fakeinstaller` test work
   - store: send Snap-Device-Location header with cloud information
   - overlord: fix unit tests after merging master in
   - o/auth: move HasUserExpired into UserState and name it HasExpired,
     and add unit tests for this
   - o/auth: rename NewUserData to NewUserParams
   - many: implementation of finish install step handlers
   - overlord: auto-resolve validation set enforcement constraints
   - i/backends,o/ifacestate: cleanup backends.All
   - cmd/snap-confine: move bind-mount setup into separate function
   - tests/main/mount-ns: update namespace for 18.04
   - o/state: Hold pseudo-error for explicit holding, concept of
     pending changes in prune logic
   - many: support extended classic models that omit kernel/gadget
   - data/selinux: allow snapd to detect WSL
   - overlord: add code to remove users that has an expiration date set
   - wrappers,snap/quota: clear LogsDirectory= in the service unit for
     journal namespaces
   - daemon: move user add, remove operations to overlord device state
   - gadget: implement write content from gadget information
   - {device,snap}state: fix ineffectual assignments
   - daemon: support validation set refresh+enforce in API
   - many: rename AddAffected* to RegisterAffected*, add
     Change|State.Has, fix a comment
   - many: reset store session when setting proxy.store
   - overlord/ifacestate: fix conflict detection of auto-connection
   - interfaces: added read/write access to /proc/self/coredump_filter
     for process-control
   - interfaces: add read access to /proc/cgroups and
     /proc/sys/vm/swappiness to system-observe
   - fde: run fde-reveal-key with `DefaultDependencies=no`
   - many: don't concatenate non-constant format strings
   - o/devicestate: fix non-compiling test
   - release, snapd-apparmor: fixed outdated WSL detection
   - many: add todos discussed in the review in
     tests/nested/manual/fde-on-classic, snapstate cleanups
   - overlord: run install-device hook during factory reset
   - i/b/mount-control: add optional `/` to umount rules
   - gadget/install: split Run in several functions
   - o/devicestate: refactor some methods as preparation for install
     steps implementation
   - tests: fix how snaps are cached in uc22
   - tests/main/cgroup-tracking-failure: fix rare failure in Xenial and
     Bionic
   - many: make {Install,Initramfs}{{,Host},Writable}Dir a  function
   - tests/nested/manual/core20: fix manual test after changes to
     'tests.nested exec'
   - tests: move the unit tests system to 22.04 in github actions
     workflow
   - tests: fix nested errors uc20
   - boot: rewrite switch in SnapTypeParticipatesInBoot()
   - gadget: refactor to allow usage from the installer
   - overlord/devicestate: support for mounting ubuntu-save before the
     install-device hook
   - many: allow to install/update kernels/gadgets on classic with
     modes
   - tests: fix issues related to dbus session and localtime in uc18
   - many: support home dirs located deeper under /home
   - many: refactor tests to use explicit strings instead of
     boot.Install{Initramfs,Host}{Writable,FDEData}Dir
   - boot: add factory-reset cases for boot-flags
   - tests: disable quota tests on arm devices using ubuntu core
   - tests: fix unbound SPREAD_PATH variable on nested debug session
   - overlord: start turning restart into a full state manager
   - boot: apply boot logic also for classic with modes boot snaps
   - tests: fix snap-env test on debug section when no var files were
     created
   - overlord,daemon: allow returning errors when requesting a restart
   - interfaces: login-session-control: add further D-Bus interfaces
   - snapdenv: added wsl to userAgent
   - o/snapstate: support running multiple ops transactionally
   - store: use typed valset keys in store package
   - daemon: add `ensureStateSoon()` when calling systems POST api
   - gadget: add rules for validating classic with modes gadget.yaml
     files
   - wrappers: journal namespaces did not honor journal.persistent
   - many: stub devicestate.Install{Finish,SetupStorageEncryption}()
   - sandbox/cgroup: don't check V1 cgroup if V2 is active
   - seed: add support to load auto import assertion
   - tests: fix preseed tests for arm systems
   - include/lk: update LK recovery environment definition to include
     device lock state used by bootloader
   - daemon: return `storage-encryption` in /systems/<label> reply
   - tests: start using remote tools from snapd-testing-tools project
     in nested tests
   - tests: fix non mountable filesystem error in interfaces-udisks2
   - client: clarify what InstallStep{SetupStorageEncryption,Finish} do
   - client: prepare InstallSystemOptions for real use
   - usersession: Remove duplicated struct
   - o/snapstate: support specific revisions in UpdateMany/InstallMany
   - i/b/system_packages_doc: restore access to Libreoffice
     documentation
   - snap/quota,wrappers: allow using 0 values for the journal rate
     limit
   - tests: add kinetic images to the gce bucket for preseed test
   - multiple: clear up naming convention for thread quota
   - daemon: implement stub `"action": "install"`
   - tests/main/snap-quota-{install/journal}: fix unstable spread tests
   - tests: remove code for old systems not supported anymore
   - tests: third part of the nested helper cleanup
   - image: clean snapd mount after preseeding
   - tests: use the new ubuntu kinetic image
   - i/b/system_observe: honour root dir when checking for
     /boot/config-*
   - tests: restore microk8s test on 16.04
   - tests: run spread tests on arm64 instances in google cloud
   - tests: skip interfaces-udisks2 in fedora
   - asserts,boot,secboot: switch to a secboot version measuring
     classic
   - client: add API for GET /systems/<label>
   - overlord: frontend for --quota-group support (2/2)
   - daemon: add GET support for `/systems/<seed-label>`
   - i/b/system-observe: allow reading processes security label
   - many: support '--purge' when removing multiple snaps
   - snap-confine: remove obsolete code
   - interfaces: rework logic of unclashMountEntries
   - data/systemd/Makefile: add comment warning about "snapd." prefix
   - interfaces: grant access to speech-dispatcher socket (bug 1787245)
   - overlord/servicestate: disallow removal of quota group with any
     limits set
   - data: include snapd/mounts in preseeded blob
   - many: Set SNAPD_APPARMOR_REEXEC=1
   - store/tooling,tests: support UBUNTU_STORE_URL override env var
   - multiple: clear up naming convention for cpu-set quota
   - tests: improve and standardize debug section on tests
   - device: add new DeviceManager.encryptionSupportInfo()
   - tests: check snap download with snapcraft v7+ export-login auth
     data
   - cmd/snap-bootstrap: changes to be able to boot classic rootfs
   - tests: fix debug section for test uc20-create-partitions
   - overlord: --quota-group support (1/2)
   - asserts,cmd/snap-repair: drop not pursued
     AuthorityDelegation/signatory-id
   - snap-bootstrap: add CVM mode* snap-bootstrap: add classic runmode
   - interfaces: make polkit implicit on core if /usr/libexec/polkitd
     exists
   - multiple: move arguments for auth.NewUser into a struct (auto-
     removal 1/n)
   - overlord: track security profiles for non-active snaps
   - tests: remove NESTED_IMAGE_ID from nested manual tests
   - tests: add extra space to ubuntu bionic
   - store/tooling: support using snapcraft v7+ base64-encoded auth
     data
   - overlord: allow seeding in the case of classic with modes system
   - packaging/*/tests/integrationtests: reload ssh.service, not
     sshd.service
   - tests: rework snap-logs-journal test and add missing cleanup
   - tests: add spread test for journal quotas
   - tests: run spread tests in ubuntu kinetic
   - o/snapstate: extend support for holding refreshes
   - devicestate: return an error in checkEncryption() if KernelInfo
     fails
   - tests: fix sbuild test on debian sid
   - o/devicestate: do not run tests in this folder twice
   - sandbox/apparmor: remove duplicate hook into testing package
   - many: refactor store code to be able to use simpler form of auth
     creds
   - snap,store: drop support/consideration for anonymous download urls
   - data/selinux: allow snaps to read certificates
   - many: add Is{Core,Classic}Boot() to DeviceContext
   - o/assertstate: don't refresh enforced validation sets during check
   - go.mod: replace maze.io/x/crypto with local repo
   - many: fix unnecessary use of fmt.Sprintf
   - bootloader,systemd: fix `don't use Yoda conditions (ST1017)`
   - HACKING.md: extend guidelines with common review comments
   - many: progress bars should use the overridable stdouts
   - tests: remove ubuntu 21.10 from sru validation
   - tests: import remote tools
   - daemon,usersession: switch from HeaderMap to Header in tests
   - asserts: add some missing `c.Check()` in the asserts test
   - strutil: fix VersionCompare() to allow multiple `-` in the version
   - testutil: remove unneeded `fmt.Sprintf`
   - boot: remove some unneeded `fmt.Sprintf()` calls
   - tests: implement prepare_gadget and prepare_base and unify all the
     version
   - o/snapstate: refactor managed refresh schedule logic
   - o/assertstate, snapasserts: implementation of
     assertstate.TryEnforceValidationSets function
   - interfaces: add kconfig paths to system-observe
   - dbusutil: move debian patch into dbustest
   - many: change name and input of CheckProvenance to clarify usage
   - tests: Fix a missing parameter in command to wait for device
   - tests: Work-around non-functional --wait on systemctl
   - tests: unify the way the snapd/core and kernel are repacked in
     nested helper
   - tests: skip interfaces-ufisks2 on centos-9
   - i/b/mount-control: allow custom filesystem types
   - interfaces,metautil: make error handling in getPaths() more
     targeted
   - cmd/snap-update-ns: handle mountpoint removal failures with EBUSY
   - tests: fix pc-kernel repacking
   - systemd: add `WantedBy=default.target` to snap mount units
   - tests: disable microk8s test on 16.04


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.58.1
   - secboot: detect lockout mode in CheckTPMKeySealingSupported
   - cmd/snap-update-ns: prevent keeping unneeded mountpoints
   - o/snapstate: do not infinitely retry when an update fails during
     seeding
   - interfaces/modem-manager: add permissions for NETLINK_ROUTE
   - systemd/emulation.go: use `systemctl --root` to enable/disable
   - snap: provide more error context in `NotSnapError`
   - interfaces: add read access to /run for cryptsetup
   - boot: avoid reboot loop if there is a bad try kernel
   - devicestate: retry serial acquire on time based certificate
     errors
   - o/devicestate: run systemctl daemon-reload after install-device
     hook
   - cmd/snap,daemon: add 'held' to notes in 'snap list'
   - o/snapshotstate: check snapshots are self-contained on import
   - cmd/snap: show user+gating hold info in 'snap info'
   - daemon: expose user and gating holds at /v2/snaps/{name}


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.58.3
   - interfaces/screen-inhibit-control: Add support for xfce-power-
     manager
   - interfaces/network-manager: do not show ptrace read
     denials
   - interfaces: relax rules for mount-control `what` for functionfs
   - cmd/snap-bootstrap: add support for snapd_system_disk
   - interfaces/modem-manager: add net_admin capability
   - interfaces/network-manager: add permission for OpenVPN
   - httputil: fix checking x509 certification error on go 1.20
   - i/b/fwupd: allow reading host os-release
   - boot: on classic+modes `MarkBootSuccessfull` does not need a base
   - boot: do not include `base=` in modeenv for classic+modes installs
   - tests: add spread test that validates revert on boot for core does
     not happen on classic+modes
   - snapstate: only take boot participants into account in
     UpdateBootRevisions
   - snapstate: refactor UpdateBootRevisions() to make it easier to
     check for boot.SnapTypeParticipatesInBoot()


author: Benjamin A. Beasley <code@musicinmybrain.net>
changelog:
  - Update to 8b5f1f3
  - The stb_perlin-devel subpackage has been restored, as upstream believes
    all relevant patents are now expired.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0-0.20.20220908git8b5f1f3
changelog:
  - Patch in a candidate fix for ossfuzz issue 24232
  - Improves handling of certain invalid PNGs by stb_image


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0-0.21.20230129git6199bf7
changelog:
  - Update to 6199bf7 (stb_image 2.28)
  - Security-related patches for stb_image have been merged upstream, and
    there are other bugfixes.


author: Orion Poplawski <orion@cora.nwra.com> - 6.0.13-1
changelog:
  - Update to 6.0.13
  - Add policy to allow zabbix scripts to run chronyc as chronyc_t (bz#2160180)
  - Add policy to allow zabbix agent to run rpm read-only
  - Fix up alternatives scripts to allow better upgrades from other zabbix packages


