# changelog

author: Jerry James <loganjerry@gmail.com> - 4.3.2p8-1
changelog:
  - Version 4.3.2p8
  - Drop upstreamed -alias and -c99 patches
  - Stop building for 32-bit x86
  - Build with ccluster and spasm support
  - Build docs only on x86_64 and ppc64le architectures


author: Jerry James <loganjerry@gmail.com> - 4.3.2p15-1
changelog:
  - Version 4.3.2p15
  - Drop upstreamed -sequence-point patch
  - Switch from %bcond_with{out} to %bcond
  - Add patch for compatibility with flint 3.x


author: Jerry James <loganjerry@gmail.com> - 4.4.0p4-1
changelog:
  - Version 4.4.0p4
  - Add upstream patch to fix id_Saturate
  - Upstream moved modules from libexecdir to libdir


author: Jerry James <loganjerry@gmail.com> - 4.4.1-1
changelog:
  - Version 4.4.1
  - Drop upstreamed type-mismatch and fix-id-saturate patches
  - Drop unused Java BRs (thanks to Marián Konček)
  - Remove dependency on surf-geometry


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0^20250627git4423fb9-1
changelog:
  - Update to latest git snaphot (2025-06-27)
  - Fix transaction error when updating the package (rhbz#2375285)


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.35-2
changelog:
  - Backport support for OpenSSL provider required for PKCS11 labels
  - Deactivate jemalloc default linking


author: Jose Fernandez <me@jrfernandez.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
  - Update to upstream version 0.7.1
  - Drop patches for dependency version relaxation (no longer needed with new
    upstream)
  - Fixes CVE-2025-58160: fixes RHBZ#2391984, fixes RHBZ#2392018


author: Than Ngo <than@redhat.com> - 138.0.25^chromium138.0.7204.168-1
changelog:
  - Update to 138.0.7204.168
  - * CVE-2025-8010: Type Confusion in V8
  - * CVE-2025-8011: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 139.0.20^chromium139.0.7258.66-1
changelog:
  - Updated to 139.0.7258.66
  - Asahi Lina: Update to cef-139.0.20+g60bd77d
  - * CVE-2025-8576: Use after free in Extensions
  - * CVE-2025-8578: Use after free in Cast
  - * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
  - * CVE-2025-8580: Inappropriate implementation in Filesystems
  - * CVE-2025-8581: Inappropriate implementation in Extensions
  - * CVE-2025-8582: Insufficient validation of untrusted input in DOM
  - * CVE-2025-8583: Inappropriate implementation in Permissions


author: Than Ngo <than@redhat.com> - 139.0.20^chromium139.0.7258.127-1
changelog:
  - Updated to 139.0.7258.127 (rhbz#2381869)
  - * CVE-2025-8879: Heap buffer overflow in libaom
  - * CVE-2025-8880: Race in V8
  - * CVE-2025-8901: Out of bounds write in ANGLE
  - * CVE-2025-8881: Inappropriate implementation in File Picker
  - * CVE-2025-8882: Use after free in Aura


author: Troy Dawson <tdawson@redhat.com> - 0.10.0-1
changelog:
  - Make lookaside cache work with SIG dist-git using "modern" layout (nforro)
  - Avoid superfluous quotes in request-gated-side-tag help (churchyard)
  - determine_rhel_state: Handle z-stream branches (sgallagh)
  - Authenticate to Product Pages (sgallagh)
  -- NOTE: centpkg time will be slower due to product page authentication.


author: Troy Dawson <tdawson@redhat.com> - 0.10.1-1
changelog:
  - Determining if package is synced solely on distrobaker config (sgajdosi)
  - Use the authenticated session for PP API (sgallagh)


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Add cockpit/ws arm64 container
  - Storage: Disk Self-Test error warnings on the overview page
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-1
changelog:
  - Update to release v1.8.0
  - Resolves: rhbz#2392433
  - Upstream fixes and new features
  - Correct packit configuration


author: Jakub Kadlcik <frostyx@email.cz> 1.177-1
changelog:
  - Multiple attempts to create repository before giving up
  - Run rawhide-to-release for all CoprDirs
  - Remove static methods from tests


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.0-1
changelog:
  - Implement project, build, chroot deletion and creation in Pulp
  - Fix timeout fail-safe in case copr-rpmbuild hangs up
  - Remove fake jobs and pass specific arguments to storage calls
  - Add support for Pulp
  - Improve logging for expiring user SSH builders


author: Pavel Raiskup <praiskup@redhat.com> 2.2-1
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
  - unify bindir and sbindir
  - lock the pulp-redirect.txt file
  - add HTTP redirect for new Pulp projects
  - fix FTBFS in openEuler 24.03 LTS
  - create HTTP redirects for migrated projects
  - fix pylint - Too many local variables
  - migrate os.listdir() to os.scandir() to increase performance
  - add resalloc ticket info to backend.log
  - drop unused attributes in RemoteHost class
  - per-arch/per-owner limit fixed
  - fix createrepo action for Pulp CoprDirs
  - add test-case for CoprDir's BuildJob.chroot_dir
  - add script to migrate existing build results to Pulp
  - typo in the per arch+owner limit option documentation
  - resultdir-cleaner: remove old appstream failures
  - copr-backend-resultdir-cleaner logs into config["log_dir"]
  - copr-backend-resultdir-cleaner to skip module dirs
  - manpage for copr-backend-resultdir-cleaner && logger fix
  - allow using crt+key pair for Pulp authentication


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - backend: add script to migrate pulp.json to Pulp labels
  - backend: add function to get pulp object based on its href
  - backend: pass build ID to upload_build_results
  - backend: more log "checkpoints" for build worker


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Set pulp_labels at RPM upload time.
  - Wait on add_and_remove task to finish
  - Switches PulpStorage to using the synchronous RPM upload API
  - Specify charset in lighttpd mimetypes
  - Fix waiting for Pulp copr_base repository
  - Create one repository version and publication per chroot
  - Optimize copr_log_hitcounter for memory


author: Jakub Kadlcik <frostyx@email.cz> 2.7-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Improve robustness and cooperation with rpmbuild
  - Don't run createrepo_c for migrated projects
  - Implement Pulp forking
  - Fix Pulp builds for CoprDirs
  - Adds batching to add_content() and delete_content() in Pulp client.
  - Explicitly set home directory and shell for the user
  - Make sure every PULP api call is logged
  - Set retain_package_versions and retain_repo_versions on repositories
  - Fix race condition in BatchedCreaterepo
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove el7 condition
  - Drop the 'Z' suffix from timestamp
  - Switch RPM upload to the synchronous API from pulp_rpm
  - Fix false-positive failures for build deletion
  - Fix ftbfs for deepcopy not able to handle itertools.count


author: Pavel Raiskup <praiskup@redhat.com> 0.70-1
changelog:
  - collect and compress fedora-review logs after run
  - use Copr custom macros when parsing the specfile


author: Pavel Raiskup <praiskup@redhat.com> 0.71-1
changelog:
  - don't set bootstrap_image_ready for rawhide
  - no Jinja-vars in config_opts keys (mock-core-configs 40.2 compat)
  - allow user SSH to builders
  - fix copr-rpmbuild --dump-configs
  - install copr-distgit-client with copr-rpmbuild


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Pavel Raiskup <praiskup@redhat.com> 1.3-1
changelog:
  - ignore unicode errors some commands' output
  - custom method - do not rely on working `/bin/su` in chroot
  - migrate os.listdir() to os.scandir() to increase performance
  - do not build package for i686 architecture
  - skip build only there are no unexpanded macros in ExclusiveArch/ExcludeArch


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Improve robustness and cooperation with backend
  - Pipe errors/warning out to builder-live.log
  - Make sure we use the latest dist-git-client


author: Pavel Raiskup <praiskup@redhat.com> 1.1-1
changelog:
  - add sysusers.d config file to allow rpm to create users/groups automatically
  - remove redundant byte compile lines, these dirs are empty already
  - migrate os.listdir() to os.scandir() to increase performance
  - depend on python3-rpkg >= 1.67-4


author: Pavel Raiskup <praiskup@redhat.com> 1.202-1
changelog:
  - make alembic working on F39+
  - unify naming convention for "_safe" methods
  - don't ignore custom method repos when resubmitting from the WebUI
  - the "recent copr builds" on homepage are opt-in configurable
  - allow keeping temporary projects up to 2 years
  - don't log errors/tracebacks if OIDC is disabled
  - don't create a separate logger for the oidc.py file
  - explain the reason for skipping chroot builds
  - better priority=X docs in web-UI
  - propagate the "priority" value in 'dnf5 copr enable' output


author: Pavel Raiskup <praiskup@redhat.com> 1.203-1
changelog:
  - big RFE: allow user SSH to builders
  - correctly check CoprDir before upload
  - migrate projects, build-chroots, monitor, modules, mock_chroots,
    webhooks enpoints to restx
  - add button for feeding log-detective.com
  - add runtime dependency on flask-session and markupsafe
  - keep logs 6 weeks instead of 13
  - clean expired projects (by cron) even without user permission
  - atomic increments for repo accesses, and fix racy counter tracebacks
  - fix fedora-messaging consumer for the new flask
  - allow ignoring project-exists errors during creation
  - compatibility with Werkzeug/Flask 3
  - fix race condition when creating CoprDir
  - specify 4xx status codes for ApiError exceptions
  - convert eror message to binary text before emitting
  - oidc: add OIDC_USERNAME_CLAIM
  - oidc: clean up duplicate return code
  - show unknown badge when a package has no builds yet
  - allow dot and plus characters in chroot denylist
  - more precise description for manual createrepo
  - add backref relationship between Package and Build


author: Jakub Kadlcik <frostyx@email.cz> 1.205-1
changelog:
  - Update download stats footnote
  - Migrate more enpoints to flask-restx
  - Speedup the removal of temporary projects
  - Add link to the Outdated chroots removal policy
  - Compatibility with SQLAlchemy 2.0


author: Jakub Kadlcik <frostyx@email.cz> 1.206-1
changelog:
  - Center the outage warning banner text
  - Fix unexpected output schema for deleting builds
  - Fix parsing build IDs to be deleted
  - add per package timeout option
  - Alembic: fix a migration syntax warning
  - EOL-emails deterministic
  - List temporary project after normal projects
  - Don't index unlisted and temporary projects
  - Speedup the update-indexes command
  - Make EOL chroot emails shorter
  - Add tests for branching custom directory
  - Run rawhide-to-release for all CoprDirs
  - Delete compatibility code between flask and flask-restx
  - Migrate builds to flask-restx
  - Fix bug in reporting failed SRPMs to log-detective
  - Commit after every 10 deleted projects instead of 100
  - Don't pass raw SQL as string but rather SQLAlchemy text


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.0-1
changelog:
  - Show Webhook History table under Settings -> Integrations
  - Fix the 500 for racy creation attempts
  - Implement project, build, chroot deletion and creation in Pulp
  - Provide statistics on how many users submitted at least one build in past month
  - Use the same repofile for all CentOS Stream versions


author: Pavel Raiskup <praiskup@redhat.com> 2.2-1
changelog:
  - fix FTBFS when using python below 3.12
  - Add sysusers.d config file to allow rpm to create users/groups automatically
  - fix code formatting test causing FTBFS on F43+
  - Revert "convert eror message to binary text before emitting"
  - fix a few pylint and sqlalchemy warnings
  - we use the standard results URL also for Pulp projects
  - feat: provide log-detective explain integration for failed builds
  - bugfix: use after/with-build-id fields when "rebuilding all"
  - make coprdirs have their repo available in the buildroot
  - isolate PR builds from different packages within one project
  - remove redundant byte compile lines, these dirs are empty already
  - change order of login menu, sign up should be the latest
  - create HTTP redirects for projects migrated to PULP
  - stop using deprecated Query.get method
  - unify error message for rebuild and rebuild all
  - add sponsors of copr project to page footer
  - add API documentation to the copr project useful links
  - migrate os.listdir() to os.scandir() to increase performance
  - assume user has been notified by clicking "Expire now" button
  - fix /build/source-chroot/ endpoint
  - document how to report security issues
  - change default logging level to INFO for check_for_anitya_version_updates
  - add script to migrate existing build results to Pulp
  - pagure events: use text() wrapper around raw queries
  - regenerate devel repository when multiple builds are deleted
  - support build-time dependencies from other storages
  - move repo functions to a separate file
  - builds_initiated_via_hook always passed as a list & doc string update
  - custom webhook handler now adds webhook history record
  - doc: link dnf.conf(5)


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Show coprdirs in the builds table
  - Implement Pulp forking
  - Redirect to the current URL after OIDC login
  - Drop support for OID auth
  - Add symlink to alma family logo from almalinux
  - Fix AI button visibility
  - After edit, redirect to the package
  - Disable network when crearing a new fedora review project
  - Hide excessive CoprDirs under a details tag
  - Fix local builds in Pulp projects
  - Add AlmaLinux logo
  - Update centos logo
  - Fix one pagure-events' traceback
  - Use the new BeautifulSoup find_all() method
  - Drop the duplicit session.commit() call
  - Fix SAWarnings about autoflush
  - pagure-events fail for "dots" in copr.name
  - Treat malformed task_id in backend_general
  - Log the user who removes a project


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Michal Ruprich <mruprich@redhat.com> - 10.1-4
changelog:
  - Resolves: #2311119 - Multiple AVCs for accessing lib_t in FRR-10.1
  - Resolves: #2311120 - AVCs for using a netlink socket in FRR


author: Jens Petersen <petersen@redhat.com> - 3.1.3-25
changelog:
  - update to pandoc-3.1.3 to enable LUA (#2238149)
  - add deps: hslua-{cli,module-zip,repl}, isocline, typst,
    digits, ordered-containers, toml-parser, and pandoc-lua-engine
  - pandoc server disabled for now
  - note that LUA support is disabled on ppc64le (#2172771)


author: Jens Petersen <petersen@redhat.com> - 3.1.3-28
changelog:
  - pandoc-cli is now packaged in Fedora
  - move hslua subpackages to pandoc-cli
  - backport fixes for CVE-2023-35936 and CVE-2023-38745


author: Jens Petersen <petersen@redhat.com> - 3.1.11.1-31
changelog:
  - https://hackage.haskell.org/package/pandoc-3.1.11.1/changelog
  - move pdf meta subpackage to pandoc-cli


author: Jens Petersen <petersen@redhat.com> - 3.1.11.1-34
changelog:
  - apply upstream patch to avoid error with ConTeXt (#2365309)
    https://github.com/jgm/pandoc/issues/9820


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20250819-0.1
changelog:
  - 9.14.1 alpha1
  - derived from ghc9.12 package
  - boot with ghc9.10
  - default to llvm19
  - ftbfs on s390x (#2390028)


author: Jens Petersen <petersen@redhat.com> - 9.14.0.20250819-0.3
changelog:
  - pass --no-ar-files to find-debuginfo to workaround long generation times
    with debugedit-5.2 (#2390105)


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Packit <hello@packit.dev> - 25-1
changelog:
  Changes with 25
  ----------------
    * deps: update images to 0.162.0 (#247)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai
    * main: `--version` includes git commit (#230)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    * packit: enable RHEL 10 builds (HMS-8829) (#246)
      * Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-16


author: Packit <hello@packit.dev> - 26-1
changelog:
  Changes with 26
  ----------------
    * deps: bump images to 0.164 (#252)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
    * main: add `--ignore-warnings` cmdline option (#250)
      * Author: Michael Vogt, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Simon de Vlieger
    * testutil: trivial cleanup/rename (#249)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-21


author: Packit <hello@packit.dev> - 27-1
changelog:
  Changes with 27
  ----------------
    * chore: set specfile version at build (#253)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2025-07-23


author: Packit <hello@packit.dev> - 28-1
changelog:
  Changes with 28
  ----------------
    * README.md: document `--ignore-warnings` (#254)
      * Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * ci/packit: remove EPEL release automation (#258)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    * ci: upgrade golangci-lint to 2.3.0 (#257)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    * deps: update `images` to 0.168 (HMS-8949, HMS-8922) (#262)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt, Tomáš Hozza
    * spec: fix up version number (#259)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2025-07-31


author: Packit <hello@packit.dev> - 29-1
changelog:
  Changes with 29
  ----------------
    * deps: fix images 0.168 (#266)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2025-08-01


author: Packit <hello@packit.dev> - 30-1
changelog:
  Changes with 30
  ----------------
    * image-builder: move to latest images library (#272)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * image-builder: use `github.com/osbuild/blueprint` (#273)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli

  — Somewhere on the Internet, 2025-08-11


author: Packit <hello@packit.dev> - 31-1
changelog:
  Changes with 31
  ----------------
    - build(deps): bump actions/checkout from 3 to 5 (#278)
      - Author: dependabot[bot], Reviewers: Brian C. Lane, Simon de Vlieger
    - build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#270)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - image-builder: use manifest.{Build,Payload}Pipelines (#279)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - main: fix --extra-repos support when cross building (#281)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - setup: Fix a typo carried over from bib (#277)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Michael Vogt

  — Somewhere on the Internet, 2025-08-19


author: Packit <hello@packit.dev> - 33-1
changelog:
  Changes with 33
  ----------------
    - deps: images 0.182.0 (#288)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Michael Vogt

  — Somewhere on the Internet, 2025-08-28


author: Jiri Vanek <jvanek@redhat.com> - 1:25.0.0.0.26-1
changelog:
  - Sycned with jdk24 changes
  - build from devel and external debuginfo instead of  unstripped
  - use manpages in-tree
  - use external jmods
  - updated to b26


author: Pavol Sloboda <pavol.sloboda02@gmail.com> - 2.6.2-3
changelog:
  - fix: fixed the BuildRequires of mariadb-devel package the mariadb-
    connector-c-devel package is available for all RHEL versions from version
    8 and above, as version 7 is quite old this condition is not necessary
    and all packages should use the BuildRequires of mariadb-connector-c-
    devel instead of mariadb-devel if possible


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0 (rhbz#2374737)
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.16.0-0.rc7.59]
changelog:
  - fedora: minor cleanups (Peter Robinson)
  - fedora: aarch64: enable a couple of brcmstb reset drivers (Peter Robinson)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.16.0-0.rc7.5f33ebd2018c.62]
changelog:
  - redhat/spec: package full bpftool in selftests (Gregory Bell)
  - selftests/bpf: Remove ksyms_weak_lskel test (Artem Savkov)
  - redhat/spec: Add libxml2-devel dependency for selftests build (Viktor Malik)
  - redhat/spec: Bypass check-rpaths for kselftests/bpf/urandom_read (Viktor Malik)
  - redhat/spec: Do not use source fortification for C++ selftest binaries (Viktor Malik)
  - redhat/spec: Do not use source fortification for selftests (Viktor Malik)
  - redhat/spec: Fix BPF selftests build with PIE (Viktor Malik)
  - redhat/spec: Add EXTRA_CXXFLAGS to bpf samples and selftests make (Artem Savkov)
  - Linux v6.16.0-0.rc7.5f33ebd2018c


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.16.1-0]
changelog:
  - Enable CONFIG_VHOST_ENABLE_FORK_OWNER_CONTROL (Justin M. Forbes)
  - Disable NOVA_CORE (Justin M. Forbes)
  - Turn off libbpf dynamic for perf (Justin M. Forbes)
  - Revert some RHEL only crypto changes (Justin M. Forbes)
  - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Aaron Ma)
  - HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length (Aaron Ma)
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - btrfs: fix log tree replay failure due to file with 0 links and extents (Filipe Manana)
  - Reset RHEL_RELEASE for the 6.17 cycle (Justin M. Forbes)
  - redhat/kernel.spec: fix uname_variant call sites (Jan Stancek) [RHEL-104231]
  - redhat/kernel.spec: fix uname_suffix call sites (Jan Stancek) [RHEL-104231]
  - redhat/configs: Add evaluate_configs.py and documentation (Prarit Bhargava)
  - redhat: Remove old evaluate_configs (Prarit Bhargava)
  - Linux v6.16.1


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.0-1
changelog:
  - Release v1.34.0
  - Resolves: rhbz#2391352
  - Urgent Upgrade Notice at https://github.com/kubernetes/kubernetes/blob/ma
    ster/CHANGELOG/CHANGELOG-1.34.md#urgent-upgrade-notes
  - Significant fixes and new features
  - Spec file clean up over v1.33 removing obsolete references
  - gocheck still a work in progress


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.0-2
changelog:
  - Drop conntrack requirement
  - Resolves: rhbz#2392421
  - Drops conntrack dependency
  - Corrects README version


author: Cole Robinson <crobinso@redhat.com> - 10.6.0-2
changelog:
  - Fix `virsh domifaddr --source=arp` on kernel 6.10 (bz #2302245)
  - Add new systemtap-sdt-dtrace to build deps


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0.0-2
changelog:
  - Fix location of mount, umount (rhbz #2359196)
  - Fix location of numad (rhbz #2359736)
  - Fix tests on rebuild with latest GCC 15


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.6-1
changelog:
  - New upstream stable branch version 1.42.6
  - Contains data integrity fix: "server: Fix .zero fallback path"


author: Michel Lind <salimma@fedoraproject.org> - 5.4.1-3
changelog:
  - Correctly set the soversion based on SemVer properties
    Backport of upstream PR#4319 from Neal Gompa (ngompa)
  - Split shared libraries into their own -libs subpackage


author: Andreas Schneider <asn@redhat.com> - 0.11.0-1
changelog:
  - Update to version 0.11.0
  - https://gpanders.com/blog/whats-new-in-neovim-0-11/
  - Check also `:help news` and `:help news-breaking`


author: Andreas Schneider <asn@redhat.com> - 0.11.4-1
changelog:
  - Update to version 0.11.4
  - https://github.com/neovim/neovim/releases/tag/v0.11.4
  - resolves: rhbz#2392274


author: Packit <hello@packit.dev> - 147-1
changelog:
  Changes with 147
  ----------------
    * Stages/rhsm: add unit test for the stage schema (#2072)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    * Stages/rhsm: support setting 'auto_enable_yum_plugins' option (#2070)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Florian Schüller, Michael Vogt
    * Stages/waagent.conf: support additional options (#2071)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Update images dependency ref to latest (#2073)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou
    * stages/chrony: support specifying refclocks (RHEL-79065) (#2068)
      * Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Michael Vogt, Tomáš Hozza

  — Somewhere on the Internet, 2025-04-16


author: Packit <hello@packit.dev> - 149-1
changelog:
  Changes with 149
  ----------------
    *  In Fedora 41+, depend on typer-slim rather than typer (#2075)
      * Author: Ben Beasley, Reviewers: Simon de Vlieger, Tomáš Hozza
    * Update images dependency ref to latest (#2078)
      * Author: SchutzBot, Reviewers: Michael Vogt, Tomáš Hozza
    * Update images dependency ref to latest (#2082)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * [RFC] tools: drop requirement for `module_platform_id` from request (#2087)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Neal Gompa (ニール・ゴンパ), Simon de Vlieger
    * solver: Call update_cache (#2084)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Neal Gompa (ニール・ゴンパ), Simon de Vlieger
    * solver: Use load_repos instead of update_and_load_enabled_repos (#2081)
      * Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2025-05-07


author: Packit <hello@packit.dev> - 151-1
changelog:
  Changes with 151
  ----------------
    * Update images dependency ref to latest (#2101)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou
    * sources: add tiny unit test for inline source fechting (#2102)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * stages/tar: allow chosen compression (HMS-8573, HMS-6116) (#2098)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt, Tomáš Hozza
    * test: simplify git clone command (#2099)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt

  — Somewhere on the Internet, 2025-06-04


author: Packit <hello@packit.dev> - 152-1
changelog:
  Changes with 152
  ----------------
    * Add the ability to exclude files and directories from squashfs and erofs images (#2106)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Always assert the correct architecture in test_curl_user_agent (#2118)
      * Author: Karolina Surma, Reviewers: Brian C. Lane, Simon de Vlieger
    * Avoid the multiprocessing forkserver method (#2115)
      * Author: Karolina Surma, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Update images dependency ref to latest (#2107)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Update images dependency ref to latest (#2114)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Update snapshots to 20250601 (#2100)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Update snapshots to 20250605 (#2105)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * compat: `ast.Str` -> `ast.Constant` (#2112)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    * compatibility: Fedora 43 is now using python 3.14 (#2108)
      * Author: Brian C. Lane, Reviewers: Anna Vítová, Simon de Vlieger
    * solver/dnf5: switch base exception type (#2120)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    * source/containers-storage: error message (#2121)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    * spec: Don't use tomli on Fedora, fix comment (#2117)
      * Author: Miro Hrončok, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * stages/grub2: set template vars to empty strings when missing (HMS-8646) (#2104)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Simon de Vlieger
    * stages/test: kickstart different messages (#2122)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    * stages/{containers,systemd}: skip validation of keys by configparser (#2111)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Simon Steinbeiß

  — Somewhere on the Internet, 2025-06-17


author: Packit <hello@packit.dev> - 153-1
changelog:
  Changes with 153
  ----------------
    * GHA: enable the stale action to delete its saved state (#2126)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Simon de Vlieger
    * stages/wsl-distribution: stage to write wsl config (HMS-8573) (#2125)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-06-20


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    * Add org.osbuild.dnf4.versionlock stage [HMS-8771] (#2135)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * Update images dependency ref to latest (#2142)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * add ssh_pwauth  to org.osbuild.cloud-init (#2138)
      * Author: odra, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * stages/vagrant: add virtualbox support (COMPOSER-2503) (#1136)
      * Author: Jelle van der Waa, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2025-07-07


author: Packit <hello@packit.dev> - 156-1
changelog:
  Changes with 156
  ----------------
    * stages/vagrant: allow configuring synced folders (HMS-6116) (#2143)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-15


author: Packit <hello@packit.dev> - 157-1
changelog:
  Changes with 157
  ----------------
    * Add ability to set grub2 default menu entry (#2156)
      * Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    * Add support for optional fips menu (#2153)
      * Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    * Update images dependency ref to latest (#2155)
      * Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    * Update images dependency ref to latest (#2157)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * org.osbuild.coreos.live-artifacts.mono: read os name from /usr/lib/os-release (#2148)
      * Author: Bipin B Narayan, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    * stages/ignition: parametrize the path to boot (#2149)
      * Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-30


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - New script: update test manifests (#2140)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2162)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2164)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20250730 (#2159)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - stages/tar: add --numeric-owner option [RHEL-102854] (#2144)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2025-08-13


author: Packit <hello@packit.dev> - 159-1
changelog:
  Changes with 159
  ----------------
    - Update images dependency ref to latest (#2166)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20250815 (#2165)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild/solver/dnf.py: Add support for DNF variables for osbuild repos (#2064)
      - Author: Josue David Hernandez, Reviewers: Nobody
    - readme/monitor: add development info / fix monitor and add duration (#2154)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - spec: explicitly buildrequire python-setuptools (#2171)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    - stages/bootc.install-to-filesystem: add more knobs (#2152)
      - Author: Jean-Baptiste Trystram, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/coreos.live-artifacts: rework volume ID handling (#2169)
      - Author: Jonathan Lebon, Reviewers: Michael Vogt, Simon de Vlieger
    - stages: extend test_bootc_install_to_fs test for new options (#2167)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2025-08-27


author: Packit <hello@packit.dev> - 136-1
changelog:
  Changes with 136
  ----------------
    * Return compose request details as part of metadata response (#4451)
      * Author: Brian C. Lane, Reviewers: Florian Schüller, Tomáš Hozza
    * cloudapi: silence logrus in tests (#4614)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * go.mod: update osbuild/images to v0.123.0 (#4642)
      * Author: Sanne Raymaekers, Reviewers: Simon Steinbeiß, Simon de Vlieger
    * templates/dashboards: increase timespan readability (#4633)
      * Author: Florian Schüller, Reviewers: Gianluca Zuccarelli, Sanne Raymaekers

  — Somewhere on the Internet, 2025-03-19


author: Packit <hello@packit.dev> - 137-1
changelog:
  Changes with 137
  ----------------
    * Add modularity support (#4644)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Advanced partitioning customizations in cloud API (COMPOSER-2403) (#4650)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers
    * Fix: osbuild-composer is not able to build RHEL-8 images since RHEL-9.5 (RHEL-71397) (#4651)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Schutzfile: bump osbuild to 142 (#4653)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Test/api.sh/vsphere: configure cloud-init via VM's extraConfig (#4664)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Tomáš Koscielniak
    * cloudapi/v2: mark md5 signature as required in package metadata (#4654)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * go.mod: bump github.com/getkin/kin-openapi to v0.131.0 (#4655)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Ondřej Budai
    * test: migrate the openshift virt test to a new cluster (COMPOSER-2458) (#4647)
      * Author: Ondřej Budai, Reviewers: Tomáš Koscielniak

  — Somewhere on the Internet, 2025-04-02


author: Packit <hello@packit.dev> - 138-1
changelog:
  Changes with 138
  ----------------
    * GH Action: check the SPEC osbuild/images deps minimum version (#4669)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * client/blueprints_test.go: delete condition for composer version < 83 (#4673)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-04-16


author: Packit <hello@packit.dev> - 141-1
changelog:
  Changes with 141
  ----------------
    * Add templates to subscription image options (HMS-6050) (#4712)
      * Author: rverdile, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Replace logrus with log (#4715)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Test/cross-distro: add version check for cross-building el8 on el9 (#4706)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    * Test/cross-distro: fix one issue and make the test more robust on "ZStream" branches (#4694)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: Fix missing specs for koji ContainerResolve (#4709)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: drop ImageRequest.GetImageOptions() method (#4711)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Sanne Raymaekers
    * go.mod: bump images to v0.144.0 (#4718)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    * go.mod: update osbuild/images to v0.143.0 (#4713)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Sanne Raymaekers
    * internal: drop `internal/fsnode` package (#4714)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-05-14


author: Packit <hello@packit.dev> - 142-1
changelog:
  Changes with 142
  ----------------
    * Update snapshots to 20250515 (#4724)
      * Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    * templates/packer: set wanted-by to cloud-init.target (#4723)
      * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Ondřej Budai

  — Somewhere on the Internet, 2025-05-28


author: Packit <hello@packit.dev> - 143-1
changelog:
  Changes with 143
  ----------------
    * Add job delete support (#4717)
      * Author: Brian C. Lane, Reviewers: Tomáš Hozza
    * GH Action/create-tag: allow passing the version when run manually (#4668)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Improve OCI CI scripts (HMS-8591) (#4742)
      * Author: Florian Schüller, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal
    * Packer: update Fedora and RHEL images used for workers (#4733)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * gitlab: enable OCI tests (#4741)
      * Author: Achilleas Koutsou, Reviewers: Florian Schüller, Simon de Vlieger, Tomáš Hozza
    * go.mod: update osbuild/images to v0.148.0 (#4732)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza, Tomáš Koscielniak
    * osbuild-store-dump: use `distrofactory` instead of importing fedora (#4738)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * tests/CI: Add runners for RHEL 9.7 and 10.1 (HMS-6278) (#4716)
      * Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 145-1
changelog:
  Changes with 145
  ----------------
    * Test/repositories/el8*: use rhui-4 instead of rhui-3 (#4665)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Michael Vogt
    * Update snapshots to 20250626 (#4763)
      * Author: SchutzBot, Reviewers: Brian C. Lane, Tomáš Hozza
    * ci: introduce gobump gha (#4758)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi/v2: add patch_url to customizations (#4756)
      * Author: rverdile, Reviewers: Brian C. Lane, Tomáš Hozza
    * common: fix unclosed logrus logging pipes (#4728)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger, Tomáš Hozza
    * fix: update gobump GHA (#4761)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-09


author: Packit <hello@packit.dev> - 146-1
changelog:
  Changes with 146
  ----------------
    *  go.mod: bump go version to 1.23.9 & update dependencies (#4760)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Preparation to consolidate Koji upload code to `osbuild/images` (HMS-8803) (#4770)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * Use Koji upload implementation from `osbuild/images` (HMS-8803) (#4772)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: Use error 400 for cloudapi delete errors (#4750)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * deps: bump images to 0.164 (#4781)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    * go.mod: update osbuild/images to v0.156.0 (#4773)
      * Author: Achilleas Koutsou, Reviewers: Ondřej Budai, Sanne Raymaekers
    * test/ubi-wsl.sh: add backward compatibility for composer < v146 (#4784)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    * tests/CI: Add RHEL 9.6 and 10.0 GA (HMS-8726) (#4767)
      * Author: Tomáš Koscielniak, Reviewers: Florian Schüller, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-23


author: Packit <hello@packit.dev> - 147-1
changelog:
  Changes with 147
  ----------------
    * GH: remove the PR template (#4787)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    * Update snapshots to 20250730 (#4800)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * chore: bump dependencies via gobump (#4803)
      * Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    * cloudapi: new image type: azure-sapapps-rhui [HMS-8738] (#4790)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * cloudapi: use distrofactory to get rhel-9.3 (#4789)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * deps: update sentry dependency (#4771)
      * Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    * go.mod: update osbuild/images to v0.168.0 (#4799)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    * jobqueue: handle escaped null bytes in postgres (HMS-8885) (#4779)
      * Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * many: fix various linter warnings (#4792)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    * many: switch to osbuild/images/pkg/upload for azure (HMS-8940) (#4798)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    * schutzbot/update_github_status.sh: fix GA pipeline status reporting (#4786)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * templates/packer: avoid errors in worker-executor startup (#4788)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * test/repositories: use CDN repos for 9.5, 9.6 and 10.0 (#4783)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Tomáš Koscielniak
    * workflows: use correct token for gobump (#4795)
      * Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-08-06


author: Packit <hello@packit.dev> - 150-1
changelog:
  Changes with 150
  ----------------
    - Test/regression-old-worker-new-composer: make the test case more robust (#4839)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Update snapshots to 20250825 (#4840)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - test/cases/rhel-upgrade: increase virt-install memory (#4843)
      - Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-03


author: Paul Howarth <paul@city-fan.org> - 0.001-3
changelog:
  - Incorporate package review feedback (rhbz#2277753)
    - Tweak %description
    - BR: perl(VERSION) >= 5.6


author: Charles R. Anderson <cra@alum.wpi.edu> 0.020-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(Config)
  - Remove duplicate explicit Requires:
    perl(Exporter)
    perl(ExtUtils::Builder::Planner)
    perl(ExtUtils::Helpers)
    perl(Getopt::Long)
    perl(List::Util)
  - Add missing Requires:
    perl(CPAN::Meta::Merge)
    perl(Perl::OSType)
    perl(Pod::Man)
    perl(TAP::Harness::Env)
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.017-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(blib) instead of perl-blib
  - Remove duplicate explicit Requires:
    perl(Exporter)
    perl(ExtUtils::MakeMaker)
    perl(List::Util)
  - Add missing Requires:
    perl(Data::Dumper)
    perl(Perl::OSType)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.031-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(Config)
  - Remove duplicate explicit Requires:
    perl(ExtUtils::Config)
    perl(ExtUtils::Helpers)
  - Add missing Requires: perl(DynaLoader)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Charles R. Anderson <cra@alum.wpi.edu> 0.001-3
changelog:
  - BR: coreutils for _fixperms macro
  - BR: perl(blib) instead of perl-blib
  - Remove explicit Requires: perl(Exporter)
  - NO_PACKLIST needs perl(ExtUtils::MakeMaker) >= 6.76 
  - Use more specific files list


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 5.6.1-1
changelog:
  - update to 5.6.1
  - re-license spec file to CECILL-2.1
  - raise dependency on PHP 7.4
  - raise dependency on phpdocumentor/type-resolver 1.7
  - add dependency on phpstan/phpdoc-parser
  - add dependency on doctrine/deprecations


author: Remi Collet <remi@remirepo.net> - 11.0.7-1
changelog:
  - update to 11.0.7
  - raise dependency on nikic/php-parser 5.3.1
  - raise dependency on phpunit/php-file-iterator 5.1.0
  - raise dependency on sebastian/version 5.0.2


author: Remi Collet <remi@remirepo.net> - 12.3.5-1
changelog:
  - update to 12.3.5
  - raise dependency on nikic/php-parser 5.6.1
  - raise dependency on sebastian/environment 8.0


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - raise dependency on sebastian/diff 7
  - raise dependency on sebastian/exporter 7
  - rename to php-sebastian-comparator7
  - move to /usr/share/php/SebastianBergmann/Comparator7


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-environment7
  - move to /usr/share/php/SebastianBergmann/Environment7


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-environment8
  - move to /usr/share/php/SebastianBergmann/Environment8


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.2
  - raise dependency on sebastian/object-reflector 4
  - raise dependency on sebastian/recursion-context 6
  - rename to php-sebastian-global-state7
  - move to /usr/share/php/SebastianBergmann/GlobalState7


author: Remi Collet <remi@remirepo.net> - 8.0.0-1
changelog:
  - update to 8.0.0
  - raise dependency on PHP 8.3
  - raise dependency on sebastian/object-reflector 5
  - raise dependency on sebastian/recursion-context 7
  - rename to php-sebastian-global-state8
  - move to /usr/share/php/SebastianBergmann/GlobalState8


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-recursion-context6
  - move to /usr/share/php/SebastianBergmann/RecursionContext6


author: Remi Collet <remi@remirepo.net> - 7.0.0-1
changelog:
  - update to 7.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-recursion-context7
  - move to /usr/share/php/SebastianBergmann/RecursionContext7


author: Remi Collet <remi@remirepo.net> - 5.0.0-1
changelog:
  - update to 5.0.0
  - raise dependency on PHP 8.2
  - rename to php-sebastian-type5
  - move to /usr/share/php/SebastianBergmann/Type5


author: Remi Collet <remi@remirepo.net> - 6.0.0-1
changelog:
  - update to 6.0.0
  - raise dependency on PHP 8.3
  - rename to php-sebastian-type6
  - move to /usr/share/php/SebastianBergmann/Type6


author: Remi Collet <remi@remirepo.net> - 12.2.3-1
changelog:
  - update to 12.2.3
  - raise dependency on phpunit/php-code-coverage 12.3.0
  - raise dependency on sebastian/comparator 7.1.0


author: Remi Collet <remi@remirepo.net> - 12.3.8-1
changelog:
  - update to 12.3.8
  - raise dependency on phpunit/php-code-coverage 12.3.6
  - raise dependency on sebastian/global-state 8.0.2


author: Remi Collet <remi@remirepo.net> - 0.9.0-2
changelog:
  - update to 0.9.0
  - add notice about dnf in self-update output
  - open https://github.com/php/pie/issues/217 broken bash completion


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.3-1
changelog:
  - Accept arbitrary options from %pyproject_buildrequires in pyproject-srpm-macros
  - This will make future additions smoother


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Jerry James <loganjerry@gmail.com> - 1.17.2-3
changelog:
  - Change ExcludeArch to ExclusiveArch
  - Limits the build to arches with working binary builders
  - Allows installation on any arch


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Pavel Raiskup <praiskup@redhat.com> 0.22-1
changelog:
  - fix misleading warning for non-copr library consumers
  - add `contextlib.nullcontext` function as EL8 compat
  - limit stdout/stderr of ssh.run_expensive() commands
  - use 'copr-common/<version>' as http user agent identifier
  - changes needed to allow user SSH to builders


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Specify reason for running createrepo
  - Improve robustness and cooperation between backend and rpmbuild
  - Remove license classifier
  - Modernize specfile using pyproject macro


author: Packit <hello@packit.dev> - 0.32.1-1
changelog:
  - ModemManager: Add initial mock (thanks Guido Günther)
  - bluez5: Add advertising API (thanks Frederik Leonhardt)
  - Fix loading of libglib on macOS (thanks peturingi)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - all templates: Drop wrong variant wrapping from all properties
  - tests: Skip TestNetworkManager::test_one_wifi_with_accesspoints with NM ≥ 1.49.3


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - templates: Add gsd-rfkill (thanks Guido Günther)
  - Allow adding objects derived from DBusMockObject (thanks Sebastian Wick)
  - Drop Python <= 3.7 support (thanks Tomasz Kłoczko)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - modemmanager: Add operator code (thanks Guido Günther)
  - modemmanager: Allow to set CellBroadcast channel list (thanks Guido Günther)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - mockobject: Fix _wrap_in_dbus_variant for Struct and Dict types (thanks Sebastian Wick)
  - Drop setup.{cfg,py} and RHEL 9 support, move to pybuild (rhbz#2377609)
  - Drop iio-sensor-proxy tests, the template is broken (see #241)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.36.00-2
changelog:
  - Add root-tree-ntuple and root-tree-ntuple-utils dependensies to root-core
    (listed in root-config --libs)
  - Rename root-fonts package to root-font-files
  - Add optional test dependency python3-pandas now available in EPEL 10
  - Add dependency jupyter-notebook to root-jupyroot for EPEL 10.1 and later
  - Fix Python 3.14 refcount issues in tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


author: Ondřej Nosek <onosek@redhat.com> - 1.67-5
changelog:
  - Patch: `chain-build`: correct the info message
  - Patch: Fix regular expression for parsing Source lines
  - Patch: Add draft builds support


author: Ondřej Nosek <onosek@redhat.com> - 1.68-1
changelog:
  - Restrict Git index version to what GitPython supports (otto.liljalaakso)
  - `set-pagure-token`: config - more restrictive permissions (git)
  - `pre-push-check`: show spectool command output - #732 (onosek)
  - `prep`: added an argument to check dependencies - 585 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - Fix formatting for error when mockbuild sources fails (otto.liljalaakso)
  - `clog` is duplicating changelog lines - 581 (onosek)
  - Fixing unittests for py36 (onosek)
  - `chain-build`: correct the info message - 567 (onosek)
  - Fix regular expression for parsing Source lines - #721 (onosek)
  - Add draft builds support (onosek)
  - Fixing encoding of the url when checking lookaside (onosek)
  - Fix package in Pypi (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.11-2
changelog:
  - Rebuilt with rust-tracing-subscriber-0.3.20
  - Fixes CVE-2025-58160: fixes RHBZ#2392055, fixes RHBZ#2392012, fixes
    RHBZ#2391975


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20250128gitc84545f-1
changelog:
  - Update to 0^20250128gitc84545f
  - Remove `PyConfig.use_system_logger`: it will only be available on Python
    3.13.2 which is not released yet.
  - Fix multiple definitions for `Py_fclose`
  - Avoid `Py_ARRAY_LENGTH()` (because it fails with C++ on Python 3.9 on
    macOS)
  - Improve `test_config`
  - Replace `extern` with `PyAPI_FUNC()`


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68
   - FDE: add support for new and more extensible key format that is
     unified between TPM and FDE hook
   - FDE: add support for adding passphrases during installation
   - FDE: update secboot to 30317622bbbc
   - Snap components: make kernel components available on firstboot
     after either initramfs or ephemeral rootfs style install
   - Snap components: mount drivers tree from initramfs so kernel
     modules are available in early boot stages
   - Snap components: support remodeling to models that contain
     components
   - Snap components: support offline remodeling to models that contain
     components
   - Snap components: support creating new recovery systems with
     components
   - Snap components: support downloading components with 'snap
     download' command
   - Snap components: support sideloading asserted components
   - AppArmor Prompting(experimental): improve version checks and
     handling of listener notification protocol for communication with
     kernel AppArmor
   - AppArmor Prompting(experimental): make prompt replies idempotent,
     and have at most one rule for any given path pattern, with
     potentially mixed outcomes and lifespans
   - AppArmor Prompting(experimental): timeout unresolved prompts after
     a period of client inactivity
   - AppArmor Prompting(experimental): return an error if a patch
     request to the API would result in a rule without any permissions
   - AppArmor Prompting(experimental): warn if there is no prompting
     client present but prompting is enabled, or if a prompting-related
     error occurs during snapd startup
   - AppArmor Prompting(experimental): do not log error when converting
     empty permissions to AppArmor permissions
   - Confdb(experimental): rename registries to confdbs (including API
     /v2/registries => /v2/confdb)
   - Confdb(experimental): support marking confdb schemas as ephemeral
   - Confdb(experimental): add confdb-control assertion and feature
     flag
   - Refresh App Awareness(experimental): LP: #2089195 prevent
     possibility of incorrect notification that snap will quit and
     update
   - Confidential VMs: snap-bootstrap support for loading partition
     information from a manifest file for cloudimg-rootfs mode
   - Confidential VMs: snap-bootstrap support for setting up cloudimg-
     rootfs as an overlayfs with integrity protection
   - dm-verity for essential snaps: add support for snap-integrity
     assertion
   - Interfaces: modify AppArmor template to allow owner read on
     @{PROC}/@{pid}/fdinfo/*
   - Interfaces: LP: #2072987 modify AppArmor template to allow using
     setpriv to run daemon as non-root user
   - Interfaces: add configfiles backend that ensures the state of
     configuration files in the filesystem
   - Interfaces: add ldconfig backend that exposes libraries coming
     from snaps to either the rootfs or to other snaps
   - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when
     inside a container
   - Interfaces: add auditd-support interface that grants audit_control
     capability and required paths for auditd to function
   - Interfaces: add checkbox-support interface that allows
     unrestricted access to all devices
   - Interfaces: fwupd | allow access to dell bios recovery
   - Interfaces: fwupd | allow access to shim and fallback shim
   - Interfaces: mount-control | add mount option validator to detect
     mount option conflicts early
   - Interfaces: cpu-control | add read access to /sys/kernel/irq/
   - Interfaces: locale-control | changed to be implicit on Ubuntu Core
     Desktop
   - Interfaces: microstack-support | support for utilizing of AMD SEV
     capabilities
   - Interfaces: u2f | added missing OneSpan device product IDs
   - Interfaces: auditd-support | grant seccomp setpriority
   - Interfaces: opengl interface | enable parsing of nvidia driver
     information files
   - Allow mksquashfs 'xattrs' when packing snap types os, core, base
     and snapd as part of work to support non-root snap-confine
   - Upstream/downstream packaging changes and build updates
   - Improve error logs for malformed desktop files to also show which
     desktop file is at fault
   - Provide more precise error message when overriding channels with
     grade during seed creation
   - Expose 'snap prepare-image' validation parameter
   - Add snap-seccomp 'dump' command that dumps the filter rules from a
     compiled profile
   - Add fallback release info location /etc/initrd-release
   - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
     initramfs deb builds
   - Remove stale robust-mount-namespace-updates experimental feature
     flag
   - Remove snapd-snap experimental feature (rejected) and it's feature
     flag
   - Changed snap-bootstrap to mount base directly on /sysroot
   - Mount ubuntu-seed mounted as no-{suid,exec,dev}
   - Mapping volumes to disks: add support for volume-assignments in
     gadget
   - Fix silently broken binaries produced by distro patchelf 0.14.3 by
     using locally build patchelf 0.18
   - Fix mismatch between listed refresh candidates and actual refresh
     due to outdated validation sets
   - Fix 'snap get' to produce compact listing for tty
   - Fix missing store-url by keeping it as part of auxiliary store
     info
   - Fix snap-confine attempting to retrieve device cgroup setup inside
     container where it is not available
   - Fix 'snap set' and 'snap get' panic on empty strings with early
     error checking
   - Fix logger debug entries to show correct caller and file
     information
   - Fix issue preventing hybrid systems from being seeded on first
     boot
   - LP: #1966203 remove auto-import udev rules not required by deb
     package to avoid unwanted syslog errors
   - LP: #1886414 fix progress reporting when stdout is on a tty, but
     stdin is not


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.4
   - Snap components: LP: #2104933 workaround for classic 24.04/24.10
     models that incorrectly specify core22 instead of core24
   - Update build dependencies


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.1.8-3
changelog:
  - Do not hardcode the build type
  - Use CMAKE_BUILD_TYPE RelWithDebInfo to avoid -Werror in compiler flags


