# changelog

author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Than Ngo <than@redhat.com> - 144.0.6^chromium144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
  - * CVE-2026-0899: Out of bounds memory access in V8
  - * CVE-2026-0900: Inappropriate implementation in V8
  - * CVE-2026-0901: Inappropriate implementation in Blink
  - * CVE-2026-0902: Inappropriate implementation in V8
  - * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  - * CVE-2026-0904: Incorrect security UI in Digital Credentials
  - * CVE-2026-0905: Insufficient policy enforcement in Network
  - * CVE-2026-0906: Incorrect security UI
  - * CVE-2026-0907: Incorrect security UI in Split View
  - * CVE-2026-0908: Use after free in ANGLE
  - Hoshino Lina: Update to cef-144.0.6+g5f7e671 (rhbz#2431156)


author: Than Ngo <than@redhat.com> - 144.0.11^chromium144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
  - * CVE-2026-1861: Heap buffer overflow in libvpx
  - * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.45-1
changelog:
  - Update to 145.0.7632.45
  - * CVE-2026-2313: Use after free in CSS
  - * CVE-2026-2314: Heap buffer overflow in Codecs
  - * CVE-2026-2315: Inappropriate implementation in WebGPU
  - * CVE-2026-2316: Insufficient policy enforcement in Frames
  - * CVE-2026-2317: Inappropriate implementation in Animation
  - * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  - * CVE-2026-2319: Race in DevTools
  - * CVE-2026-2320: Inappropriate implementation in File input
  - * CVE-2026-2321: Use after free in Ozone
  - * CVE-2026-2322: Inappropriate implementation in File input
  - * CVE-2026-2323: Inappropriate implementation in Downloads
  - Hoshino Lina: Update to cef-145.0.25+g265860d


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.75-1
changelog:
  - Update to 145.0.7632.75
  - * CVE-2026-2441: Use after free in CSS
  - Fix FTFS on aarch64/ppc64le caused by missing include file (el9)
  - Enable rustc_nightly_capability


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.25.0-1
changelog:
  - Update to version 1.25.0
    + Resolves: 2416455
    + New BuildRequires: cmake(Qt6LinguistTools)
    + Add translations
    + Add svg icons


author: Marek Blaha <mblaha@redhat.com> - 5.2.14.0-2
changelog:
  - Remove incorrect dnfdaemon output parameter names (https://github.com/rpm-software-management/dnf5/issues/2317)


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.23.0-1
changelog:
  - Update to 3.23.0 (CVE-2026-26965, CVE-2026-26955, CVE-2026-26271,
    CVE-2026-25997, CVE-2026-25959, CVE-2026-25955, CVE-2026-25954,
    CVE-2026-25953, CVE-2026-25952, CVE-2026-25942, CVE-2026-25941)
    Resolves: rhbz#2442589
  - Small spec cleanups
  - Enable rdp2tcp channel support


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Michal Kolar <mkolar@redhat.com> - 17.1-1
changelog:
  - Rebase to FSF GDB 17.1.
  - Backport upstream commit ce106639c20 from Tom de Vries, fixing a
    gdb.threads/thread-specific-bp.exp failure.
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.
  - Modify gdb-add-rpm-suggestion-script.patch to meet PEP 257
    requirement about termination of first line of docstring
    as required by gdb.gdb/unittest.exp.
  - Made spec file change to build gdb with --disable-gdb-compile due to
    this feature's brokenness.  With it disabled, failing tests skip
    cleanly without timeouts.  Also reduces binary size and attack
    surface.


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.4-1
changelog:
  - Update to v3.4
  - Drop Patch2 (qt6pas build failure - backport from this release)
  - Drop Patch3 (segfault in GTK2 widgetset - backport from this release)
  - Move GTK+ widgetset support to separate subpackage


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.0-1
changelog:
  - Update to v4.0
  - Drop Patch1 (crash in lazbuild) - issue fixed upstream
  - Drop Patch2 (Qt5 segfault) - backport from this release
  - Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -> "LGPL-2.0-only WITH Independent-modules-exception")


author: Simone Caronni <negativo17@gmail.com> - 0.0.13^20250419gitc2860cc-2
changelog:
  - Clean up SPEC file.
  - Simplify conditionals
  - Drivers for ppc64le are long gone
  - RPMFusion package is long gone


author: Packit <hello@packit.dev> - 151-1
changelog:
  Changes with 151
  ----------------
    - Bump distro aliased for RHEL 9 and 10 (HMS-9174) (#4854)
      - Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Sanne Raymaekers
    - Dockerfile-ubi-packer: do not use quay.io/app-sre/packer image (HMS-9246) (#4848)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Many: refactor 'osbuild-depsolve-dnf' mocking in tests to support refactoring in `osbuild/images` (HMS-9355) (#4862)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Packer: install 'rsync' in the ubi-packer container (HMS-9287) (#4850)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Sanne Raymaekers
    - build(deps): bump actions/github-script from 7 to 8 (#4852)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - gha: split gobump and images (#4859)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to 0.190.0 (`dnfjson` -> `depsolvednf` rename) (HMS-9365) (#4865)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: update osbuild/images to v0.188.0 (#4849)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - templates/packer: handle vector error (#4866)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Tomáš Hozza
    - test: run older CIV tag on nightlies (#4861)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - worker & executor: use vector to forward logs from executor to worker (HMS-9304) (#4858)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-09-17


author: Packit <hello@packit.dev> - 152-1
changelog:
  Changes with 152
  ----------------
    - Remove internal/runner/ (#4874)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Gianluca Zuccarelli, Lukáš Zapletal, Michael Vogt
    - Weldr API endpoints & store: don't use `rpmmd` package structs for serialization (HMS-9376) (#4868)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane, Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4872)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - cloudapi/v2: recover from panics in serializeManifest (HMS-9379) (#4869)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller
    - go.mod: update osbuild/images to v0.198.0 (HMS-9444) (#4877)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - go.mod: update to v0.197.0 (#4873)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - templates/packer/worker: remove unbound variable (#4871)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Tomáš Hozza
    - worker/executor: drop cloudwatch logging from executor (HMS-9304) (#4870)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 153-1
changelog:
  Changes with 153
  ----------------
    - CloudAPI: fix `/compose/{id}/manifests` endpoint behavior on manifest generation errors (HMS-9501) (#4885)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    - Many: adjust code to unified rpmmd.Package struct (HMS-9504) (#4889)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test/api/gcp: set root partition size to at least 4 GiB (#4879)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20251001 (#4880)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - build(deps): bump actions/setup-go from 5 to 6 (#4853)
      - Author: dependabot[bot], Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore: bump dependencies via gobump (#4891)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add pxe-tar-xz image type (HMS-9472) (#4882)
      - Author: Lucas Garfield, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - executor: remove internet access entirely (HMS-9304) (#4884)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - go.mod: update osbuild/images to v0.202.0 (#4886)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - internal/cloudapi: rename OverrideSerializeManifestFunc for consistency (#4887)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    - internal/worker: delete unneeded compatibility layers (HMS-9455) (#4875)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 154-1
changelog:
  Changes with 154
  ----------------
    - CI: run testing on RHEL 9.8 and 10.2 nightly (HMS-9226) (#4893)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20251023 (#4905)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4895)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - cloudapi: add new dnf customizations [HMS-9335] (#4899)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - cloudapi: split out resolver job enqueueing into a separate function (#4894)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - fix worker AMI builds by not running mock as root (#4902)
      - Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers
    - gitlab: only update github status at the end of the pipeline(s) (#4900)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane, Sanne Raymaekers
    - go.mod: update images to v0.209.0 (#4901)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: update osbuild/images to v0.208.0 (#4898)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Ondřej Budai
    - test/cases/usbi-wsl: delete azure resources in order (#4896)
      - Author: Sanne Raymaekers, Reviewers: Simon de Vlieger, Tomáš Hozza
    - worker: support partial results (HMS-9343) (#4897)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - build(deps): bump actions/upload-artifact from 5 to 6 (#4961)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - chore(deps): update konflux references (#5023)
      - Author: {}, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-18


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f42-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.30-2
changelog:
  - Rebuilt with jsonwebtoken patched for CVE-2026-25537
  - Fixes RHBZ#2437472; fixes RHBZ#2437467; fixes RHBZ#2437461


author: Remi Collet <remi@fedoraproject.org> - 8.0.6-1
changelog:
  - update to 8.0.6
    fixes CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 and CVE-2025-46819
  - update documentation to 8.0.5


author: Remi Collet <remi@fedoraproject.org> - 8.0.7-1
changelog:
  - Valkey 8.0.7 - Released Mon 23 February 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


