# changelog

author: Sérgio Basto <sergio@serjux.com> - 3.1-1
changelog:
  - Update VirtualGL to 3.1
  - Do not rely on hostname package (#1860323)
    (Fri Jul 24 2020 Pavel Zhukov <pavel@pzhukov-pc.home.redhat.com>)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 12.46-1
changelog:
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - Built By: Add more lang types.


author: Nick Clifton <nickc@redhat.com> - 12.49-1
changelog:
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)


author: Nick Clifton <nickc@redhat.com> - 12.53-1
changelog:
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.57-1
changelog:
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.


author: Jan Friesse <jfriesse@redhat.com> - 1.0-266.1.f288d59.git
changelog:
  - Rebase to newest upstream snapshot
  - This version fixes a critical bug that caused the authfile directive
    to be ignored. After installing the patched version, nodes may stop
    communicating. Solution is to either remove authfile from configuration
    file or update all other nodes.


author: Jan Friesse <jfriesse@redhat.com> - 1.0-283.5.9d4029a.git
changelog:
  - attr: Fix reading of server_reply
  - auth: Check result of gcrypt gcry_md_get_algo_dlen
    (fixes CVE-2024-3049)


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.8.5-0]
changelog:
  - Set configs for SPECTRE_BHI (Justin M. Forbes)
  - Add AMD PMF bug (Justin M. Forbes)
  - redhat/configs: Enable CONFIG_AMDTEE for x86 (David Arcari)
  - Add CVE fix for 6.8.5 (Justin M. Forbes)
  - Linux v6.8.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.8.6-0]
changelog:
  - nouveau: fix devinit paths to only handle display on GSP. (Dave Airlie)
  - Add bluetooth bug to Bugsfixed for 6.8.6 (Justin M. Forbes)
  - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit (Archie Pusaka)
  - Linux v6.8.6


author: Augusto Caringi <acaringi@redhat.com> [6.8.7-0]
changelog:
  - redhat/configs: Enable CONFIG_MITIGATION_SPECTRE_BHI (Augusto Caringi)
  - Turn on XEN_BALLOON_MEMORY_HOTPLUG for Fedora (Justin M. Forbes)
  - Linux v6.8.7


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.8.8-0]
changelog:
  - Update BugsFixed for 6.8.8 (Justin M. Forbes)
  - Turn on ISM for Fedora (Justin M. Forbes)
  - Turn off some Fedora UBSAN options to avoid false positives (Justin M. Forbes)
  - fedora: aarch64: Enable a QCom Robotics platforms requirements (Peter Robinson)
  - Turn on UBSAN for Fedora (Justin M. Forbes)
  - Linux v6.8.8


author: Augusto Caringi <acaringi@redhat.com> [6.8.9-0]
changelog:
  - redhat/configs: Enable CONFIG_CPU_MITIGATIONS (Augusto Caringi)
  - Turn on CONFIG_RANDOM_KMALLOC_CACHES for Fedora (Justin M. Forbes)
  - drm/nouveau/dp: Don't probe eDP ports twice harder (Lyude Paul)
  - drm/nouveau/kms/nv50-: Disable AUX bus for disconnected DP ports (Lyude Paul)
  - drm/dp: Don't attempt AUX transfers when eDP panels are not powered (Douglas Anderson)
  - Linux v6.8.9


author: Augusto Caringi <acaringi@redhat.com> [6.8.10-0]
changelog:
  - redhat/configs: Enable CONFIG_DEBUG_INFO_BTF_MODULES (Augusto Caringi)
  - Add bugs to BugsFixed for 6.8.10 (Justin M. Forbes)
  - Turn on INIT_ON_ALLOC_DEFAULT_ON for Fedora (Justin M. Forbes)
  - Reapply "drm/qxl: simplify qxl_fence_wait" (Linus Torvalds)
  - BugsFixed updates for 6.8.10 (Justin M. Forbes)
  - e1000e: change usleep_range to udelay in PHY mdic access (Vitaly Lifshits)
  - Linux v6.8.10


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.8.11-0]
changelog:
  - redhat/configs: fedora: aarch64: Re-enable CUSE (Neal Gompa)
  - Remove f38 from release_targets (Justin M. Forbes)
  - Add more Bugs addressed by 6.8.10 to BugsFixed (Justin M. Forbes)
  - Linux v6.8.11


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.8.12-200]
changelog:
  - Revert "cpupower: Bump soname version" (Justin M. Forbes)
  - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)


author: Martin Osvald <mosvald@redhat.com> - 3.8.1-11
changelog:
  - imapd/pop3d crashing on TLS shutdown (rhbz#2256083)
  - cyr_info crashes while printing conf-all/default confugiration (rhbz#2267210)


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.9.0-1
changelog:
  - Update to 0.9.0 (#2158656)
  - Fix /var/lib/greetd ownership on ostree systems
  - Convert to SPDX license format
  - Drop patch for 1891682 - fixed in all supported releases.


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-113
changelog:
  - xfs: some bios systems with /boot partition created with
    xfsprog < 6.5.0 can't boot with one of the xfs upstream patches
  - Resolves: #2254370


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-116
changelog:
  - grub-core/commands: add flag to only search root dev
  - Resolves: #2223437
  - Resolves: #2224951
  - Resolves: #2258096 
  - Resolves: CVE-2023-4001


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-119
changelog:
  - GRUB2 NTFS driver vulnerabilities
  - (CVE-2023-4692)
  - (CVE-2023-4693)
  - Resolves: #2236613
  - Resolves: #2241978
  - Resolves: #2241976
  - Resolves: #2238343


author: Jonathan Wright <jonathan@almalinux.org> - 1.31.0-1
changelog:
  - Build fedora 40+ against system capstone
  - Build fedora 39+ with llvm16-devel (compat package) rhbz#2246094
  - Build EPEL9 with GCC 13
  - update to 1.31.0 rhbz#2217232


author: Packit <hello@packit.dev> - 1.5.1-1
changelog:
  - fix pcre2-8 dependency
  - add END_TEST to test_openidc_resolver_url (Hans Zandbelt)
  - release 1.5.1 (Hans Zandbelt)
  - oops: copy/paste omisson for oauth2_jose_jwt_verify_ctx iat_validate (Hans Zandbelt)
  - avoid memory leak and fix check_oauth2 (Hans Zandbelt)
  - add issuer validation for JWT access tokens (Hans Zandbelt)
  - add support for resolving provider metadata from a Discovery endpoint (Hans Zandbelt)
  - add error logs about missing or invalid "active" boolean claim (Hans Zandbelt)
  - update eclipse .cproject (Hans Zandbelt)
  - update cjose link; see #43; thanks @compoundradius (Hans Zandbelt)
  - move repo to OpenIDC github organization (Hans Zandbelt)


author: Packit <hello@packit.dev> - 1.5.2-1
changelog:
  - 1.5.2: update DPoP support to RFC 9449 (Hans Zandbelt)
  - printout more cjose error details in JWT access token verification (Hans Zandbelt)
  - fix timing issue in check_openidc.c; closes #47 (Hans Zandbelt)
  - Resolves rhbz#2248991


author: Packit <hello@packit.dev> - 1.6.0-1
changelog:
  - 1.6.0: use libcurl version macro that works on older platforms (Hans Zandbelt)
  - 1.6.0: add support for the OAuth 2.0 Client Credentials grant type (Hans Zandbelt)
  - Use CURLOPT_REDIR_PROTOCOLS_STR when curl >= 7.85.0 (Nicolas Mora)
  - Resolves rhbz#2253482


author: Packit <hello@packit.dev> - 1.6.1-1
changelog:
  - release 1.6.1 (Hans Zandbelt)
  - add Mutual-TLS Certificate-Bound Access Tokens support to NGINX (Hans Zandbelt)
  - add support for Redis 6 ACL username based authentication (Hans Zandbelt)
  - update copyright year to 2024 (Hans Zandbelt)
  - Resolves rhbz#2269222


author: Daniel P. Berrangé <berrange@redhat.com> - 9.7.0-3
changelog:
  - Fix crash listing interfaces with missing link status attribute (rhbz #2266014)
  - Fix crash listing interfaces with missized array (CVE-2024-1441)


author: Daniel P. Berrangé <berrange@redhat.com> - 9.7.0-4
changelog:
  - Fix crash in event loop (CVE-2024-4418)
  - Fix I/O stall when multiple threads issue RPC calls
  - Fix leak of GSource handle
  - Fix leak of udev reference (rhbz #2266017)
  - Disable -Werror on mingw builds


author: Sérgio Basto <sergio@serjux.com> - 5.0.3-1
changelog:
  - Update lxc to 5.0.3 (inspired in https://build.opensuse.org/package/show/Virtualization:containers/lxc)


author: Jerry James <loganjerry@gmail.com> - 4.1.1-3
changelog:
  - Link metadata to SMuFL-compliant names (bz 2244606)
  - Fix misspelling of mscoretabulature that breaks font loading


author: Jerry James <loganjerry@gmail.com> - 4.2.1-8
changelog:
  - Version 4.2.1
  - Add patch to avoid races in localtime()
  - Add patch to avoid out-of-bounds vector accesses
  - Disable jack support; it interferes with pulseaudio support


author: Jerry James <loganjerry@gmail.com> - 4.2.1-9
changelog:
  - Add patch to avoid crash with the undefined behavior sanitizer
  - Add patch to avoid data race inside kors_profiler
  - Add patch to avoid data race in the modularity code


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.0-22234872.
    - Fix for CVE-2023-20900 - a SAML token signature bypass vulnerability.
    - Fix for CVE-2023-20867 - an Authentication Bypass vulnerability.
    - Linux quiesced snapshots have been updated to avoid intermittent hangs
      of the vmtoolsd process.
      - File systems prefrozen by custom quiescing scripts must be listed on the
        "excludedFileSystems" setting in the "vmbackup" section of the tools.conf
        file.
      - A tools.conf configuration setting is available to temporaily direct
        Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
        of ignoring file systems already frozen.
    - A number of Coverity reported issues have been addressed.
    - A number of GitHub issues and pull requests have been handled.


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-3
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper
    file descriptor hijack vulnerability


author: John Wolfe <jwolfe@vmware.com> - 12.3.5-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.5-22544099.
    . fix for CVE-2023-34058 - another SAML token signature bypass vulnerability.
    . fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the
                               vmware-user-suid-wrapper.
    . address https://github.com/vmware/open-vm-tools/issues/310
  - Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.


author: John Wolfe <john.wolfe@broadcom.com> - 12.4.0-1
changelog:
  - Package a new upstream version of open-vm-tools-12.4.0-23259341.
    - A number of Coverity reported issues have been addressed.


author: Packit <hello@packit.dev> - 98-1
changelog:
  Changes with 98
  ----------------
    * Update snapshots to 20240101 (#3876)
      * Author: SchutzBot, Reviewers: Jakub Rusz
    * build(deps): bump the go-deps group with 5 updates (#3877)
      * Author: dependabot[bot], Reviewers: Ondřej Budai
    * schutzbot: add my "mvogt" SSH key (#3882)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-01-10


author: Packit <hello@packit.dev> - 99-1
changelog:
  Changes with 99
  ----------------
    * Add a tool script to help check for unused runners (#3614)
      * Author: Brian C. Lane, Reviewers: Tomáš Hozza
    * Bump azure (#3853)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai
    * COMPOSER-2096: Add blueprint support to cloudapi & local access to cloudapi service (#3757)
      * Author: Brian C. Lane, Reviewers: Sanne Raymaekers
    * Fedora worker images (#3902)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Invert wrong boolean condition in filesystem test (#3889)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Remove oscap.sh firewalld rules workaround (#3905)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Update test runners to Fedora 39 (#3820)
      * Author: Alexander Todorov, Reviewers: Achilleas Koutsou, Michael Vogt, Ondřej Budai, Tomáš Hozza
    * edge: add iot-simplified-installer image type (#3900)
      * Author: djach7, Reviewers: Achilleas Koutsou
    * image-info: update for new "partition" option in mounts.Mount (#3883)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * tools/build-rpms: fix getting the osbuild commit from Schutzfile (#3897)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    * tools/fedora-worker-packer: fix packer only/except (#3910)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-01-24


author: Packit <hello@packit.dev> - 100-1
changelog:
  Changes with 100
  ----------------
    * CI: update terraform SHA (#3919)
      * Author: Jakub Rusz, Reviewers: Achilleas Koutsou
    * Cloud API: Add Fedora IoT bootable container (#3916)
      * Author: Achilleas Koutsou, Reviewers: Ondřej Budai
    * DEPLOYING/HACKING.md: Consistently use inline refs (#3930)
      * Author: Simon Steinbeiß, Reviewers: Tomáš Hozza
    * HACKING/DEPLOYING.md: Markdown syntax fixes (#3929)
      * Author: Simon Steinbeiß, Reviewers: Ondřej Budai
    * Update osbuild/images to v0.35.0 (#3932)
      * Author: Tomáš Hozza, Reviewers: Sanne Raymaekers
    * Use dot to separate distro major and minor version and replace distro registry with factory (#3887)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * build(deps): bump actions/setup-go from 4 to 5 (#3842)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump actions/upload-artifact from 3 to 4 (#3855)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump the go-deps group with 10 updates (#3923)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * pkg/jobqueue: fix worker status update query (#3922)
      * Author: Sanne Raymaekers, Reviewers: Diaa Sami, Gianluca Zuccarelli
    * templates/dashboards: add community stage service to orgs (#3931)
      * Author: Sanne Raymaekers, Reviewers: Simon Steinbeiß
    * templates/packer: deal with unbound variables (#3920)
      * Author: Sanne Raymaekers, Reviewers: Simon Steinbeiß
    * test: remove workarounds for fixed bugs (#3933)
      * Author: Xiaofeng Wang, Reviewers: Jakub Rusz
    * tests/CI: Add RHEL 9.3 and 8.9 GA to pipeline (#3892)
      * Author: tkoscieln, Reviewers: Alexander Todorov, Jakub Rusz

  — Somewhere on the Internet, 2024-02-07


author: Packit <hello@packit.dev> - 101-1
changelog:
  Changes with 101
  ----------------
    * Add minimal-raw and clean up the compose handler a bit (#3962)
      * Author: Ondřej Budai, Reviewers: Achilleas Koutsou
    * RHEL-16006: improve error on missing package name (#3964)
      * Author: Florian Schüller, Reviewers: Ondřej Budai, Tomáš Hozza
    * Support configuring distro aliases via ENV and set aliases in the composer template. (#3927)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai, Sanne Raymaekers
    * Tag rhel 9.2+ with SEV_LIVE_MIGRATABLE_V2 (#3970)
      * Author: Amelia Crate, Reviewers: Ondřej Budai, Tomáš Hozza
    * Update osbuild/images to v0.40.0 (#3973)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Simon de Vlieger
    * cloud/awscloud: create secure instance in the same subnet (#3961)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cloud/awscloud: describe security groups using filters (#3965)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Ondřej Budai
    * cloud/awscloud: max 4 overrides are allowed when creating a fleet (#3946)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai
    * cloud/awscloud: remove restricting egress rule from SG (#3954)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cloud/awscloud: take instance type from host (#3947)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß, Simon de Vlieger
    * cmd/osbuild-jobsite-builder: actually assign the stdout buffer (#3958)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cmd/osbuild-jobsite: capture osbuild's stdout (#3953)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * composer: glitchtip integration (#3907)
      * Author: Diaa Sami, Reviewers: Ondřej Budai
    * errors-level logs to glitchtip (#3934)
      * Author: Diaa Sami, Reviewers: Ondřej Budai
    * jobsite/manager: create export directory (#3955)
      * Author: Simon de Vlieger, Reviewers: Sanne Raymaekers
    * jobsite/manager: turn off compression (#3957)
      * Author: Simon de Vlieger, Reviewers: Sanne Raymaekers
    * jobsite: `manager` and `builder` (#3937)
      * Author: Simon de Vlieger, Reviewers: Sanne Raymaekers
    * osbuild-runner: run osbuild in an ec2 vm (#3939)
      * Author: Sanne Raymaekers, Reviewers: Nobody
    * osbuildexecutor/aws.ec2: pass the manifest to the job manager (#3948)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    * switch to images/pkg/dnfjson and remove internal copy (#3828)
      * Author: Diaa Sami, Reviewers: Nobody
    * templates/packer: let the executor listen on all interfaces (#3949)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai
    * templates/packer: rename executor log group (#3959)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * templates/packer: set -builder-path to /var/cache/osbuild-builder (#3950)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * templates/packer: setup vector in osbuild-executor (#3952)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * tools/appsre-build-fedora: wait until rpms are built upstream (#3971)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * worker-executor followups: fix oneshot service and secure instance for non-default vpcs (#3945)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2024-02-26


author: Packit <hello@packit.dev> - 102-1
changelog:
  Changes with 102
  ----------------
    * CI: Drop SonarQube in favor of Snyk (#3984)
      * Author: Jakub Rusz, Reviewers: Simon Steinbeiß
    * Enable masked systemd services in cloudapi (HMS-3661) (#3972)
      * Author: Gianluca Zuccarelli, Reviewers: Brian C. Lane, Tomáš Hozza
    * Enable testing in OpenShift (#3681)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * README: Fix reference to developer guide (#3969)
      * Author: Brian C. Lane, Reviewers: Tomáš Hozza
    * Skip Image Tests tests for image types already covered in osbuild/images (#3967)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * build(deps): bump golangci/golangci-lint-action from 3 to 4 (#3941)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump stackrox/kube-linter-action from 1.0.4 to 1.0.5 (#3982)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * ci: skip ostree-remount check in CS9 due to bug RHEL-25249 (#3978)
      * Author: mcattamoredhat, Reviewers: Irene Díez, Xiaofeng Wang
    * images: update dependency (#3983)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    * integration test for worker-executor (HMS-3634) (#3968)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * templates/packer: fix vector repos (#3987)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * test: remove libvirt workaround (#3975)
      * Author: tkoscieln, Reviewers: Alexander Todorov, Jakub Rusz, Tomáš Hozza
    * tests: Drop bigiso test (HMS-3710) (#3988)
      * Author: Simon Steinbeiß, Reviewers: Ondřej Budai

  — Somewhere on the Internet, 2024-03-06


author: Packit <hello@packit.dev> - 103-1
changelog:
  Changes with 103
  ----------------
    * Drop distro aliases and dot-notation tests (HMS-3710) (#3989)
      * Author: Simon Steinbeiß, Reviewers: Tomáš Hozza
    * Fixed link to developer guide (#4018)
      * Author: Cloud Jerry, Reviewers: Brian C. Lane
    * Packer: don't source non-existing file in worker_executor.sh (HMS-3727) (#3997)
      * Author: Tomáš Hozza, Reviewers: Sanne Raymaekers
    * Packer: make osbuild-executor worker config more configurable (HMS-3727) (#3985)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai, Sanne Raymaekers
    * Packer: remove escaped newline from worker config (HMS-3727) (#4002)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai
    * Remove rhel-10.0 alias from the openshift template (#4017)
      * Author: Ondřej Budai, Reviewers: Simon de Vlieger
    * Test/Koji: test only combinations that we run in the service (HMS-3710) (#3992)
      * Author: Tomáš Hozza, Reviewers: Ondřej Budai, Simon Steinbeiß
    * Use distro repos in cloudapi (#3928)
      * Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    * Worker: allow configuring executor CloudWatch group (HMS-3727) (#3998)
      * Author: Tomáš Hozza, Reviewers: Simon de Vlieger
    * ci: add a PR best practices check (#3990)
      * Author: Simon de Vlieger, Reviewers: Simon Steinbeiß
    * deps: bump (#4015)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * deps: update images to v0.43.0 (#3986)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * osbuild-jobsite: push sources to executor (HMS-3633) (#3981)
      * Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger
    * osbuild-worker: Convert osbuild raw json error to a string for logging (#3994)
      * Author: Brian C. Lane, Reviewers: Simon de Vlieger
    * templates/packer: make worker_config script executable (HMS-3727) (#3993)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza
    * templates/packer: set up vector correctly in the executor (HMS-3727) (#3996)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza
    * templates/packer: vector expects a yaml configuration now (HMS-3727) (#3995)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-03-20


author: Packit <hello@packit.dev> - 104-1
changelog:
  Changes with 104
  ----------------
    * Add installer customizations to blueprints and cloud API (HMS-1161) (#4005)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * Execute OpenShift Virtualization tests only on RHEL 9.x nightly (#4044)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * bump osbuild/images to 51 and add expiredate fields to user customizations (#4041)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * cloud/awscloud: allow internet access on secure instance again (#4025)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * cloudapi: Override the request distro with the blueprint distro (#4006)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou
    * osbuild-jobsite-builder: disable http.Server timeouts (#4031)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * osbuild-jobsite-manager: close writer before sending the store (#4029)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * osbuild-jobsite: increase populate timeout (#4027)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger
    * osbuild-worker: add support for mtls dnf repo secrets (HMS-3798) (#4035)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * repositories: remove rhel-8-beta (#4024)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza
    * templates/packer: support ldap service account for repo mtls conf (#4049)
      * Author: Sanne Raymaekers, Reviewers: Simon de Vlieger
    * test: drop oscap test script and gitlab job (HMS-3710) (#3991)
      * Author: Achilleas Koutsou, Reviewers: Simon Steinbeiß
    * worker: drop backwards compatibility for DepsolveJob serialisation (COMPOSER-1612) (#4021)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-04-03


author: Packit <hello@packit.dev> - 106-1
changelog:
  Changes with 106
  ----------------
    * Active worker gauge (COMPOSER-2215) (#4089)
      * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli
    * Add CI job to detect possible problematic usage of `trap` (#3977)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Makefile: remove installation of dnf-json (#4076)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers
    * Show worker count on grafana dashboard (COMPOSER-2215) (#4092)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * Update Arm EC2 instance to a newer one (#4064)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz
    * Update osbuild/images to v0.56.0 (#4096)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    * configurable worker timeouts (COMPOSER-2215) (#4090)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * osbuild-worker: fix mtls credentials injection in depsolve job (#4082)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    * osbuild-worker: fix nil pointer in depsolve job (#4086)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Tomáš Hozza
    * osbuild/images 0.55 (#4075)
      * Author: Sanne Raymaekers, Reviewers: Brian C. Lane
    * osbuildexecutor/ec2: pass extraEnv only to sources invocation (#4083)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    * templates/packer: fix proxy config in ldap service account init (#4098)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * tests: Fix leapp repo url (#4085)
      * Author: Jakub Rusz, Reviewers: Alexander Todorov
    * worker: support http proxy for depsolve and osbuild sources job HMS-3798 (#4066)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-04-24


author: Packit <hello@packit.dev> - 108-1
changelog:
  Changes with 108
  ----------------
    * Reenable codecov via action (#4119)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz
    * Update osbuild/images v0.59.0 (HMS-4031) (#4127)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * Use copr rpms for the community workers (#4129)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * build(deps): bump github.com/docker/docker from 25.0.3+incompatible to 25.0.5+incompatible (#4080)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 (#4000)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#4110)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 (#3999)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump the go-deps group across 1 directory with 14 updates (#4123)
      * Author: dependabot[bot], Reviewers: Achilleas Koutsou, Ondřej Budai, Tomáš Hozza
    * cloudapi: Add UploadTypesLocal for local_save status reports (#4038)
      * Author: Brian C. Lane, Reviewers: Simon Steinbeiß
    * templates/dashboards: fix community-stage tenant variable (#4100)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * templates/packer: add failure script (#4101)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai, Tomáš Hozza
    * test: update osname for edge deployments (#4148)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou
    * tools/fedora-worker-packer: increase timeout further (#4134)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller
    * tools/fedora-worker-packer: small fixes (commit sha + timeout increase) (#4133)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller

  — Somewhere on the Internet, 2024-05-15


author: Packit <hello@packit.dev> - 109-1
changelog:
  Changes with 109
  ----------------
    * Add RHEL-9.5 repo definitions (#4158)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * Add support for arbitrary kickstart file injection into ISOs (HMS-3879) (#4135)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * Minor user customization test improvements (#4007)
      * Author: andremarianiello, Reviewers: Brian C. Lane
    * templates/packer: invert tag logic (#4150)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Ondřej Budai
    * test: execute dmesg task as privileged user (#4094)
      * Author: mcattamoredhat, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2024-05-29


author: Stefano Brivio <sbrivio@redhat.com> - 0^20240318.g615d370-1
changelog:
  - Switch license identifier to SPDX (Dan Čermák)
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2024_02_20.1e6f92b..2024_03_18.615d370


author: Nathan Scott <nathans@redhat.com> - 6.1.0-1
changelog:
  - Remove unintended pmie logging to syslog (BZ 2223348)
  - Update pcp selinux policy to match core (BZ 2223568)
  - Resolve pmlogconf SIGABRT during fsync (BZ 2229441)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Resolves i686/x86_64 conflicts of PCP packages (BZ 2248841)
  - Additional selinux policy updates for pmproxy (BZ 2223568)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 6.2.2-3
changelog:
  - Revert time64_t related changes breaking i386 (BZ 2284431)
  - Try again with rebuild for selinux-policy rpmmacro problem.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.30.02-8
changelog:
  - Exclude failing gtest-math-matrix-test-testMatrixTSparse on Fedora 40
    (aarch64, ppc64le and s390x)


author: Mattias Ellert <ellert@ellert.se> - 6.30.04-1
changelog:
  - Update to 6.30.04
  - Drop patch root-adjust-test-for-failures-on-aarch64-ppc64le-s390x.patch
    (accepted upstrem)
  - Exclude failing TClingDataMemberInfo.Offset test on s390x


author: Mattias Ellert <ellert@ellert.se> - 6.32.00-1
changelog:
  - Update to 6.32.00
  - Drop EPEL 8 build (now requires Python >= 3.7 ans tbb >= 2020)
  - Dropped patches: 12
  - New patches: 6
  - The JsMVA python module is now a submodule of the ROOT python module
  - The notebook package was merged with the JupyROOT package


author: Python Maint <python-maint@redhat.com> - 3.13.0~a5-2
changelog:
  - Move all test modules to the python3.13-test package, namely:
    - __phello__
    - _xxinterpqueues
    - _xxsubinterpreters
    - xxlimited
    - xxlimited_35
    - xxsubtype
  - Remove internal usage of @LIBPYTHON@


author: David Cantrell <dcantrell@redhat.com> - 9.31-5
changelog:
  - Backport https://github.com/exg/rxvt-unicode/commit/417b540d6dba67d440e3617bc2cf6d7cea1ed968
  - Resolves: #2277965


author: David Trudgian <dtrudg@sylabs.io> - 3.11.0-1
changelog:
  - Upgrade to 3.11.0 upstream version.
  - This is a compatible upgrade to a new upstream minor version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.1-1
changelog:
  - Upgrade to 3.11.1 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.2-1
changelog:
  - Upgrade to 3.11.2 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.3-1
changelog:
  - Upgrade to 3.11.3 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.4-1
changelog:
  - Upgrade to 3.11.4 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.5-1
changelog:
  - Upgrade to 3.11.5 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.4-1
changelog:
  - xwayland 23.2.4 - (#2254280)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


