# changelog

author: Dave Dykstra <dwd@cern.ch> - 1.4.0~rc.1
changelog:
  - Update to upstream 1.4.0-rc.1
  - Add patch for starter to avoid newly reserved C keywords false and true


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Than Ngo <than@redhat.com> - 144.0.6^chromium144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
  - * CVE-2026-0899: Out of bounds memory access in V8
  - * CVE-2026-0900: Inappropriate implementation in V8
  - * CVE-2026-0901: Inappropriate implementation in Blink
  - * CVE-2026-0902: Inappropriate implementation in V8
  - * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  - * CVE-2026-0904: Incorrect security UI in Digital Credentials
  - * CVE-2026-0905: Insufficient policy enforcement in Network
  - * CVE-2026-0906: Incorrect security UI
  - * CVE-2026-0907: Incorrect security UI in Split View
  - * CVE-2026-0908: Use after free in ANGLE
  - Hoshino Lina: Update to cef-144.0.6+g5f7e671 (rhbz#2431156)


author: Than Ngo <than@redhat.com> - 144.0.11^chromium144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
  - * CVE-2026-1861: Heap buffer overflow in libvpx
  - * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.45-1
changelog:
  - Update to 145.0.7632.45
  - * CVE-2026-2313: Use after free in CSS
  - * CVE-2026-2314: Heap buffer overflow in Codecs
  - * CVE-2026-2315: Inappropriate implementation in WebGPU
  - * CVE-2026-2316: Insufficient policy enforcement in Frames
  - * CVE-2026-2317: Inappropriate implementation in Animation
  - * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  - * CVE-2026-2319: Race in DevTools
  - * CVE-2026-2320: Inappropriate implementation in File input
  - * CVE-2026-2321: Use after free in Ozone
  - * CVE-2026-2322: Inappropriate implementation in File input
  - * CVE-2026-2323: Inappropriate implementation in Downloads
  - Hoshino Lina: Update to cef-145.0.25+g265860d


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.75-1
changelog:
  - Update to 145.0.7632.75
  - * CVE-2026-2441: Use after free in CSS
  - Fix FTFS on aarch64/ppc64le caused by missing include file (el9)
  - Enable rustc_nightly_capability


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.24.0-1
changelog:
  - Update to version 1.24.0
    + Resolves: rhbz#2383142
    + Upstream removed deskflow-server and deskflow-client
    + Upstream provide deskflow-core [client|server] instead
    + shell script deskflow-server and deskflow-client are created
    + html doc included
  - Resolves: rhbz#2400833 Deskflow incorrectly replaces Synergy package 
    + deskflow no longer provide or conflict with synergy


author: Ding-Yi Chen <dingyichen@gmail.com> - 1.25.0-1
changelog:
  - Update to version 1.25.0
    + Resolves: 2416455
    + New BuildRequires: cmake(Qt6LinguistTools)
    + Add translations
    + Add svg icons


author: Marek Blaha <mblaha@redhat.com> - 5.2.14.0-2
changelog:
  - Remove incorrect dnfdaemon output parameter names (https://github.com/rpm-software-management/dnf5/issues/2317)


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Update to 3.2.0 (fedora#2395772)
  - Add xrizer subpackage for build deps management (fedora#2395971)


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Michal Kolar <mkolar@redhat.com> - 17.1-1
changelog:
  - Rebase to FSF GDB 17.1.
  - Backport upstream commit ce106639c20 from Tom de Vries, fixing a
    gdb.threads/thread-specific-bp.exp failure.
  - Backport upstream commit f08ffbbf269 to fix RHBZ 2435950
    This reverts a new feature that was never properly approved
    for merging in upstream GDB.
  - Modify gdb-add-rpm-suggestion-script.patch to meet PEP 257
    requirement about termination of first line of docstring
    as required by gdb.gdb/unittest.exp.
  - Made spec file change to build gdb with --disable-gdb-compile due to
    this feature's brokenness.  With it disabled, failing tests skip
    cleanly without timeouts.  Also reduces binary size and attack
    surface.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.30-1
changelog:
  - Update to 1.4.30
  - Name of Sinhala input method changed: si-wijesekera ➡️ si-wijesekara
    (This changes comes when m17n-db is updated to 1.8.6)
  - Translation update from Weblate (si 100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.34-1
changelog:
  - Update to 1.4.34
  - Add the “S-” prefix to msymbols for non-ASCII characters only if the
    character “is not graph”. “is not graph” is the same as “is space or is
    not printable”. (Resolves: https://github.com/ibus/ibus-m17n/issues/90)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.35-1
changelog:
  - Update to 1.4.35
  - Generate translations into metainfo.xml files with autotools Related:
    https://github.com/mike-fabian/ibus-m17n/issues/2
  - Rename m17n.appdata.xml to org.freedesktop.ibus.engine.m17n.metainfo.xml
    (Resolves: https://github.com/mike-fabian/ibus-m17n/issues/2)
  - Fix match pattern for layout for inscript
  - Fix match pattern for rank for inscript2


author: Mike FABIAN <mfabian@redhat.com> - 1.4.37-1
changelog:
  - Update to 1.4.37
  - Port UI to GTK4 (Resolves: github-issue#99). Configure option for Gtk4
    added: “--with-gtk=2.0|3.0|4.0|no” (default: 4.0)
  - Translation update from Weblate (cs 100%, de 100%, el 100%, es 100%,
    new: fi 100%, fr 100%, ja 100%, ka 100%, kab 100%, lt 100%, pt_BR
    100%, ro 96%, ru 100%, sv 100%, tr 100%, uk 100%, zh_CN 100%,
    zh_TW 28%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.38-1
changelog:
  - Update to 1.4.38
  - Convert png icons from 16-bit to 8-bit color (Resolves:
    https://github.com/ibus/ibus-m17n/issues/107)


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 42-1
changelog:
  Changes with 42
  ----------------
    - Fix release action (#368)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt
    - build(deps): bump actions/checkout from 5 to 6 (#381)
      - Author: dependabot[bot], Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#382)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: split gobump into two PRs (#371)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    - cmd: modify success message to include image path (#377)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    - doc/installation: mention RHEL 9.7 and 10.1 (#378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - doc: additional information on `ostree` (HMS-9741) (#373)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - doc: document `bootc` specifics (HMS-9740) (#375)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Tomáš Hozza
    - github: disable gomod updates with dependabot (#372)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: move to images v0.218 (#370)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - go.mod: move to images v0.223 (#383)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - main: add `--bootc-defaultfs` option (#324)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - many: metrics option for stage durations (#317)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-26


author: Packit <hello@packit.dev> - 43-1
changelog:
  Changes with 43
  ----------------
    - Containerfile: add subscription-manager (#390)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - bib: drop inContainerOrUnknown() and use setup.IsContainer() (#395)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - chore: bump dependencies via gobump (#389)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#394)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - cmd: make bootc-image-builder a multi-call binary of ibcli (HMS-9808) (#374)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - cmd: move the "upload" comand from bib here (#396)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update images to 0.228.0 (#393)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - docs: add a note about satellite (#385)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - go.mod: move to images v0.226.0 (#384)
      - Author: Michael Vogt, Reviewers: Anna Vítová, Simon de Vlieger
    - main: add `{supported,required}` bp options to describe-image (#376)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: rename `data-dir` to `force-data-dir` (#386)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - readme: new `--force-data-dir` (#387)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt
    - repos: force data is an override (#388)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - test: add test for subscribed content (#391)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 44-1
changelog:
  Changes with 44
  ----------------
    - [RFC] main: print pretty json manifest (#414)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: document details about  {,bib}cmd{ManifestFromCobra,Build} (#402)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: fix anaconda-iso mTLS key extraction (#404)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    - bib: small cleanups (#400)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cmd: move `awscloudNewUploader` back into upload.go (#397)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: remove bibupload as it was never exposed to the public (#405)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - data: install tmpfiles.d/image-builder.conf to auto-clean cache (#418)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: error when image-builder is used to create anaconda-iso (#401)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: add rhel specific tests (#403)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 45-1
changelog:
  Changes with 45
  ----------------
    - deps: bump images to 0.231.0 (#425)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2026-01-05


author: Packit <hello@packit.dev> - 47-1
changelog:
  Changes with 47
  ----------------
    - Revert "spec: Use gosource macro for Source0" (#433)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-16


author: Packit <hello@packit.dev> - 48-1
changelog:
  Changes with 48
  ----------------
    - Add pxe-tar-xz to bib types and add boot tests for f43, stream9, and stream10 (#436)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support rootless bootc-image-builder (#445)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: fix constant format string (#438)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - tests: Fix bootc pxe testing (#439)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 50-1
changelog:
  Changes with 50
  ----------------
    - SPEC: define default permissions for /var/cache/image-builder (#454)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/cache from 4 to 5 (#434)
      - Author: {}, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - deps: bump Go to 1.24.12 and use new Go functions (#452)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to v0.240.0 (#456)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 51-1
changelog:
  Changes with 51
  ----------------
    - go.mod: update osbuild/images to v0.243.0 (#457)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-19


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.3-0]
changelog:
  - Config update due to stable patches (Justin M. Forbes)
  - wifi: iwlwifi: Fix firmware version handling (Ville Syrjälä)
  - Linux v6.18.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.5-0]
changelog:
  - erofs: fix file-backed mounts no longer working on EROFS partitions (Gao Xiang)
  - erofs: don't bother with s_stack_depth increasing for now (Gao Xiang)
  - Linux v6.18.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.6-0]
changelog:
  - Conifg update for 6.18.6 backports (Justin M. Forbes)
  - fedora: aarch64: Enable TI_SCI_INTR_IRQCHIP as built-in (Ayush Singh)
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Linux v6.18.6


author: Augusto Caringi <acaringi@redhat.com> [6.18.9-0]
changelog:
  - Add a couple of bzs to be fixed with the 6.18.9 build (Justin M. Forbes)
  - media: ipu-bridge: Add DMI quirk for Dell XPS laptops with upside down sensors (Hans de Goede)
  - media: ov02c10: Remove unnecessary hflip and vflip pointers (Hans de Goede)
  - media: ov02c10: Fix the horizontal flip control (Hans de Goede)
  - media: ov02c10: Adjust x-win/y-win when changing flipping to preserve bayer-pattern (Hans de Goede)
  - media: ov02c10: Fix bayer-pattern change after default vflip change (Hans de Goede)
  - media: ov02c10: Support hflip and vflip (Sebastian Reichel)
  - media: ov02c10: Fix default vertical flip (Sebastian Reichel)
  - Linux v6.18.9


author: Tarulia Dulacre <mihawk.90+git@googlemail.com> - 2.4.3-1
changelog:
  - Update to 2.4.3 (rhbz#2372785)
  - change Supplements to Enhances reverse weak dependency (rhbz#2369371)


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - [MIDI] loading files would cause crash (null dereference) if ~/.timidity.cfg not present


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-2
changelog:
  - [MIDI] Add patch to prefer /etc/timidity++.cfg to /etc/timidity.cfg
  - [MIDI] Add upstream patch to set comment to .pat filename without full path
  - Recommends: fluid-soundfont-gm


author: Packit <hello@packit.dev> - 151-1
changelog:
  Changes with 151
  ----------------
    - Bump distro aliased for RHEL 9 and 10 (HMS-9174) (#4854)
      - Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Sanne Raymaekers
    - Dockerfile-ubi-packer: do not use quay.io/app-sre/packer image (HMS-9246) (#4848)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Many: refactor 'osbuild-depsolve-dnf' mocking in tests to support refactoring in `osbuild/images` (HMS-9355) (#4862)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Packer: install 'rsync' in the ubi-packer container (HMS-9287) (#4850)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Sanne Raymaekers
    - build(deps): bump actions/github-script from 7 to 8 (#4852)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - gha: split gobump and images (#4859)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to 0.190.0 (`dnfjson` -> `depsolvednf` rename) (HMS-9365) (#4865)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: update osbuild/images to v0.188.0 (#4849)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - templates/packer: handle vector error (#4866)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Tomáš Hozza
    - test: run older CIV tag on nightlies (#4861)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - worker & executor: use vector to forward logs from executor to worker (HMS-9304) (#4858)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-09-17


author: Packit <hello@packit.dev> - 152-1
changelog:
  Changes with 152
  ----------------
    - Remove internal/runner/ (#4874)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Gianluca Zuccarelli, Lukáš Zapletal, Michael Vogt
    - Weldr API endpoints & store: don't use `rpmmd` package structs for serialization (HMS-9376) (#4868)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane, Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4872)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - cloudapi/v2: recover from panics in serializeManifest (HMS-9379) (#4869)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller
    - go.mod: update osbuild/images to v0.198.0 (HMS-9444) (#4877)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - go.mod: update to v0.197.0 (#4873)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - templates/packer/worker: remove unbound variable (#4871)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Tomáš Hozza
    - worker/executor: drop cloudwatch logging from executor (HMS-9304) (#4870)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 153-1
changelog:
  Changes with 153
  ----------------
    - CloudAPI: fix `/compose/{id}/manifests` endpoint behavior on manifest generation errors (HMS-9501) (#4885)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    - Many: adjust code to unified rpmmd.Package struct (HMS-9504) (#4889)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test/api/gcp: set root partition size to at least 4 GiB (#4879)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20251001 (#4880)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - build(deps): bump actions/setup-go from 5 to 6 (#4853)
      - Author: dependabot[bot], Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore: bump dependencies via gobump (#4891)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add pxe-tar-xz image type (HMS-9472) (#4882)
      - Author: Lucas Garfield, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - executor: remove internet access entirely (HMS-9304) (#4884)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - go.mod: update osbuild/images to v0.202.0 (#4886)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - internal/cloudapi: rename OverrideSerializeManifestFunc for consistency (#4887)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    - internal/worker: delete unneeded compatibility layers (HMS-9455) (#4875)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 154-1
changelog:
  Changes with 154
  ----------------
    - CI: run testing on RHEL 9.8 and 10.2 nightly (HMS-9226) (#4893)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20251023 (#4905)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4895)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - cloudapi: add new dnf customizations [HMS-9335] (#4899)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - cloudapi: split out resolver job enqueueing into a separate function (#4894)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - fix worker AMI builds by not running mock as root (#4902)
      - Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers
    - gitlab: only update github status at the end of the pipeline(s) (#4900)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane, Sanne Raymaekers
    - go.mod: update images to v0.209.0 (#4901)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: update osbuild/images to v0.208.0 (#4898)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Ondřej Budai
    - test/cases/usbi-wsl: delete azure resources in order (#4896)
      - Author: Sanne Raymaekers, Reviewers: Simon de Vlieger, Tomáš Hozza
    - worker: support partial results (HMS-9343) (#4897)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - build(deps): bump actions/upload-artifact from 5 to 6 (#4961)
      - Author: {}, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - chore(deps): update konflux references (#5023)
      - Author: {}, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-18


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f42-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.30-2
changelog:
  - Rebuilt with jsonwebtoken patched for CVE-2026-25537
  - Fixes RHBZ#2437472; fixes RHBZ#2437467; fixes RHBZ#2437461


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


