# changelog

author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Than Ngo <than@redhat.com> - 137.0.7151.55-1
changelog:
  - Update to 137.0.7151.55
    * CVE-2025-5063: Use after free in Compositing
    * CVE-2025-5280: Out of bounds write in V8
    * CVE-2025-5064: Inappropriate implementation in Background Fetch API
    * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
    * CVE-2025-5066: Inappropriate implementation in Messages
    * CVE-2025-5281: Inappropriate implementation in BFCache
    * CVE-2025-5283: Use after free in libvpx
    * CVE-2025-5067: Inappropriate implementation in Tab Strip
  - Fix FTBFS caused by simdutf and pdfium-png_decoder
  - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream
  - Refresh ppc64le patches
  - Enable system simdutf for F43


author: Than Ngo <than@redhat.com> - 137.0.7151.68-1
changelog:
  - Update to 137.0.7151.68
    * CVE-2025-5419: Out of bounds read and write in V8
    * CVE-2025-5068: Use after free in Blink


author: Than Ngo <than@redhat.com> - 137.0.7151.103-1
changelog:
  - Update to 137.0.7151.103
    * CVE-2025-5958: Use after free in Media
    * CVE-2025-5959: Type Confusion in V8
  - Provide correct version for bundle librarires
  - Fix rhbz#2368923, Chromium crash


author: Than Ngo <than@redhat.com> - 137.0.7151.119-1
changelog:
  - Update to 137.0.7151.119
    * CVE-2025-6191: Integer overflow in V8
    * CVE-2025-6192: Use after free in Profiler


author: Than Ngo <than@redhat.com> - 138.0.7204.49-1
changelog:
  - Update to 138.0.7204.49
    * CVE-2025-6555: Use after free in Animation
    * CVE-2025-6556: Insufficient policy enforcement in Loader
    * CVE-2025-6557: Insufficient data validation in DevTools


author: Than Ngo <than@redhat.com> - 138.0.7204.157-1
changelog:
  - Update to 138.0.7204.157
    * CVE-2025-7656: Integer overflow in V8
    * CVE-2025-7657: Use after free in WebRTC
    * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU


author: Than Ngo <than@redhat.com> - 138.0.7204.168-1
changelog:
  - Update to 138.0.7204.168
    * CVE-2025-8010: Type Confusion in V8
    * CVE-2025-8011: Type Confusion in V8


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 24.2-5
changelog:
  - Backport fixes for CVE-2024-6174 and CVE-2024-11584
  - cloud-init included the systemd socket unit cloud-init-hotplugd.socket
    with default SocketMode that grants 0666 permissions, making it world-
    writable. An unprivelege user could trigger hotplug-hook commands
    (CVE-2024-11584)


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui to 0.1.18
  - TLS cipher setting in pcsd now follows system-wide crypto policies by default
  - Added cockpit-ha-cluster subpackage that adds pcs-web-ui as a Cockpit application


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.0-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
    Resolves: rhbz#2341012
  - New subpackage pcs-web-ui - enables standalone web UI when the subpackage is installed on the system (default), uninstall the subpackage to disable the web UI
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.22
  - Fixes for compatibility with Ruby 3.4
    Resolves: rhbz#2331005


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.1-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
    Resolves: rhbz#2371770
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.23 (see CHANGELOG_WUI.md)
  - There is now a changelog for the HA Cluster Management Cockpit application and the standalone web UI in both packages
  - The upstream version of pcs-web-ui can now be queried through RPM in both packages - see bundled(pcs-web-ui)
  - Updated bundled Python dependency dacite
  - Compatibility with rubygem-rack >= 3
    Resolves: rhbz#2372462


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Petr Pisar <ppisar@redhat.com> - 5.2.12.0-2
changelog:
  - Set a mode for ghost files to 0644 (bug #2343342)
  - Respect install root in expired-pgp-keys plugin (bug #2356528)
  - Add "-i" and "-f" short options for repoquery command (bug #2338174)
  - Document environment variables for a terminal and temporary files
    (bug #2353349)


author: Marek Blaha <mblaha@redhat.com> - 5.2.14.0-2
changelog:
  - Remove incorrect dnfdaemon output parameter names (https://github.com/rpm-software-management/dnf5/issues/2317)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.23.0-3
changelog:
  - Ignore fedpkg mockbuild generated artifacts
  - Ignore generated rpms and results_ sub-directory generated by fedpkg
    during mockbuild


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.24.0-1
changelog:
  - Update package to release v0.24.0
  - Resolve: rhbz#2366388, rhbz#2360632
  - Upstream fixes and changes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.36.1-1
changelog:
  - Update to release v2.36.1
  - Resolves: rhbz#2367247, rhbz#2360592, rhbz#2353097, rhbz#2352158
  - Improvements and fixes. See upstream changelog


author: Mike FABIAN <mfabian@redhat.com> - 2.27.59-1
changelog:
  - Update to 2.27.59
  - Make Super prefix ('s-') work when using an m17n input method using that
    prefix (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/712)
  - Update emoji-data.txt, emoji-sequences.txt, emoji-test.txt, emoji-
    variation-sequences.txt, emoji-zwj-sequences.txt to the Unicode 17.0.0
    draft as of 2025-05-14
  - Update UnicodeData.txt, DerivedAge.txt, NameAliases.txt to the Unicode
    17.0.0 draft as of 2025-05-14
  - Update emoji annotations from CLDR
  - When _command_show_selection_info() can not get a selection, use the
    grapheme cluster directly left of the cursor as a fallback (Related:
    https://github.com/mike-fabian/ibus-typing-booster/issues/733)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.63-1
changelog:
  - Update to 2.27.63
  - Make non-ASCII input work in m17n_translit.py also for the more exotic
    prefixes (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/745)
  - Make database code more robust (Should fix some problems on FreeBSD)
  - Fix quoting for sqlite3 (Should fix some problems on FreeBSD)
  - Improve _xorg_locale_path() to find the path as well on FreeBSD
  - Add `Categories=Settings;` to the ibus-setup-typing-booster.desktop file
    (from the FreeBSD port)
  - Fix HunspellSuggestTestCase.test_sv_SE to work with sv_SE.dic as on
    Fedora 42 **and** on FreeBSD
  - Add preedit representations for the special dead keys used in the "French
    (BEPO, AFNOR) layout (Related: https://github.com/ibus/ibus/pull/2763
  - Improve regexp for msymbol patterns triggering commits (Related:
    https://github.com/mike-fabian/ibus-typing-booster/issues/712)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (es 100%, it 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.64-1
changelog:
  - Update to 2.27.64
  - Do not start each transliteration with `minput_reset_ic()` to keep the
    m17n-lib state between commits (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/746)
  - Update emoji annotations from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 2.27.65-1
changelog:
  - Update to 2.27.65
  - Make the command `show-selection-info` work always, not only when
    “Minimum number of chars for completion” is 0 (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/757)
  - Make default symbols black and white when running on Gnome and gnome-
    shell ≥ 49.0 (See: https://gitlab.gnome.org/GNOME/gnome-
    shell/-/merge_requests/3753)
  - Enable translations for 5 more tooltips, use same texts as in the
    gsettings schema file
  - Make the symbols for active input mode and direct input mode configurable
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/749)
  - Make compose preedit representations configurable by changing the Compose
    file(s) (See:
    https://github.com/ibus/ibus/issues/2748#issuecomment-2944388273)
  - Translation update from Weblate (de 100%, ja 99.6%, ka 100%, pl 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.66-1
changelog:
  - Update to 2.27.66
  - Improve show_selection_info command behaviour when getting the
    surrounding text fails (Return True, not False in that case)
  - Use `SurroundingText` dataclass to track surrounding text state; use
    `get_surrounding_text()` only to trigger an update
  - Use @dataclass always, also for Python 3.6
  - Don’t use transliterated keys for compose sequences if the first input
    method is Japanese or Chinese (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/760)
  - Translation update from Weblate (ko 100%, sv 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.67-1
changelog:
  - Update to Release 2.27.67
  - Add time.sleep(self._ibus_event_sleep_seconds) after early commits of an
    m17n candidates (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/764)
  - Translation update from Weblate (es 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.68-1
changelog:
  - Update to 2.27.68
  - Do not try to point the popovers on search results directly to the emoji
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/766)
  - Translation update from Weblate (el 31.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.69-1
changelog:
  - Update to 2.27.69
  - In the show-selection-info command: if using surrounding text fails, fall
    back to the primary selection. Makes it work in google-chrome, terminals,
    ... (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/768)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.70-1
changelog:
  - Update to 2.27.70
  - Add selection-to-preedit command (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/769)
  - Translation update from Weblate (fi 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.71-1
changelog:
  - Update to 2.27.71
  - Add a new gsettings option `emojistyle` and make it changeable with a
    `toggle_emoji_style` command (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/774)
  - Fix list of sentence ending characters to avoid incorrect auto-
    capitalization (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/773)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (de 100%, es 99.2 %, it 98.5%, ja
    100%)


author: Miroslav Suchý <msuchy@redhat.com> 1.62-1
changelog:
  - add Avasys public license as allowed-firmware
  - add public domain dedication for python-hexdump
  - add public domain dedication for allegro (loadpng addon)
  - add LicenseRef-soundfont as not-allowed
  - add broadcom firmware license
  - Reclassify LicenseRef-qmail as allowed (deprecated)
  - add GPL-2.0-only WITH CGAL-linking-exception
  - add firmware licensing terms for atmel-firmware
  - add wwl license
  - add generic-xts license
  - add LicenseRef-Mod-Archive as not-allowed
  - add public domain dedication for perl-Math-Expression-Evaluator
  - add public domain dedication for perl-MaxMind-DB-Reader-XS
  - add public domain dedication for python-django-pdb
  - add UltraPermissive dedication of package python-utmp
  - add public domain dedication for re2c
  - add public domain dedication for python-nine
  - add public domain dedication for perl-Devel-Trace
  - add LGPL-3.0-or-later WITH LGPL-3.0-linking-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.63-1
changelog:
  - add LICENSE.Sigma from sigrok-firmware
  - Add public-domain text for python-zmq
  - add public domain for mg


author: Miroslav Suchý <msuchy@redhat.com> 1.64-1
changelog:
  - add copyleft-next-0.3.1 license
  - Add public-domain text for llvm-test-suite
  - document usage exception for fedora-remix-logos
  - add MIPS and ThirdEye licenses
  - add libcsv UltraPermissive dedication
  - Add public-domain text for stb


author: Miroslav Suchý <msuchy@redhat.com> 1.65-1
changelog:
  - Add BSD-3-Clause WITH AdditionRef-WebM-patent license
  - add public domain dedication in desktop-backgrouds
  - mark OFL-1.1-RFN and OFL-1.1-no-RFN as equal
  - ultrapermissive dedication of broda from crosswords package


author: Miroslav Suchý <msuchy@redhat.com> 1.66-1
changelog:
  - Mark LicenseRef-CRC32 as deprecated
  - allow packages that includes or bundle ccan as an exception
  - add LicenseRef-Julius-dictation-kit as not allowed
  - add Seiko-Epson license to firmware
  - add public domain findings for sc
  - add ultra permissive dedication of perl-Math-FFT
  - add aastr ultra permissive dedication
  - add GPL-2.0-or-later WITH mif-exception
  - add public domain dedication for libtelnet
  - Add PHP-3.0
  - LicenseRef-Fedora-Public-Domain: Add zpaqfranz


author: Miroslav Suchý <msuchy@redhat.com> 1.67-1
changelog:
  - add autossh man page ultra permissive dedication
  - add LGPL-2.1-only WITH Digia-Qt-LGPL-exception-1.1
  - add jove license
  - add man2html license
  - add DocBook-DTD license
  - add BSD-2-Clause-pkgconf-disclaimer
  - correct expression of PHP-3.0
  - Add SpacemiT esos.elf license as allowed-firmware
  - Add 7zip public domain headers
  - add Game-Programming-Gems license
  - add LGPL-2.1-or-later WITH polyparse-exception
  - add GPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - enhance BSD-3-Clause-Clear usage text
  - document known exception for kernel for BSD-3-Clause-Clear
  - add LicenseRef-Hauppauge-firmware-eula as not allowed
  - add LicenseRef-Hauppauge as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.68-1
changelog:
  - add CC-SA-1.0 as allowed-content
  - allow golang-x-perf to use CC-BY-4.0 for code as an exception
  - add GPL-3.0-or-later WITH Libtool-exception
  - UltraPermissive: Add a text found in libisds
  - add LicenseRef-Geotrans as not-allowed
  - Add public-domain dedication for jemalloc/rust-tikv-jemalloc-sys
  - add Aspell-RU
  - add ngrep
  - add Unlicense-libwhirlpool
  - add Unlicense-libtelnet
  - add CDLA-Permissive-2.0
  - add BSD-3-Clause WITH AdditionRef-Dart
  - add UltraPermissive dedication of autossh


author: Miroslav Suchý <msuchy@redhat.com> 1.70-1
changelog:
  - add GPL-2.0-only WITH Universal-FOSS-exception-1.0
  - add libpng licenses
  - add UltraPermissive dedication of tolua++
  - add note and link that APSL-1.x can be used as APSL-2.0
  - add LicenseRef-Remix-icon as not-allowed
  - describe how to use LicenseRef-IUPAC-InChI-Trust
  - Add public-domain dedication for dcm2niix
  - add LicenseRef-Aalok-Everfree as not-allowed
  - add public domain dedication of libtommath
  - add public domain dedication of heimdal


author: Owen Taylor <otaylor@redhat.com> - 1.0-1
changelog:
  - Version 1.0
  - Add 'flatpak-module init'
  - Support zstd compressed repository metadata
  - Disable min-free-space check for ostree repositories
  - Handle RPMs with different versions for different subpackages
  - Provide a better error message during dependency resolution when
    the runtime is out of date.


author: Steven Presti <spresti@redhat.com> - 2.21.0-2
changelog:
  - Rename ignition.cfg -> 05_ignition.cfg to mirror upstream
    additionally backport rename.
  - Rename ignition-ignition-grub subpackage to ignition-grub
  - Update grub2 config to use the correct dir for bootupd static grub configs
    https://github.com/coreos/ignition/pull/2037#issuecomment-2736300056


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.15.1-0]
changelog:
  - arm64: dts: rockchip: Drop assigned-clock* from cpu nodes on rk3588 (Diederik de Haas)
  - arm64: dts: rockchip: Improve LED config for NanoPi R5S (Diederik de Haas)
  - arm64: dts: rockchip: Move rk3568 PCIe3 MSI to use GIC ITS (Chukun Pan)
  - arm64: dts: rockchip: Update eMMC for NanoPi R5 series (Peter Robinson)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c (Peter Robinson)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-quartz64-b (Diederik de Haas)
  - arm64: dts: rockchip: Add phy-supply to gmac0 on NanoPi R5S (Diederik de Haas)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3588-rock-5b (Diederik de Haas)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-rockpro64 (Diederik de Haas)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3328-rock64 (Diederik de Haas)
  - arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588 (Chukun Pan)
  - arm64: dts: rockchip: Add gmac phy reset GPIO to QNAP TS433 (Uwe Kleine-König)
  - arm64: dts: rockchip: Correct gmac phy address on QNAP TS433 (Uwe Kleine-König)
  - Reset build id for fedora-srpm script (Justin M. Forbes)
  - redhat/configs: Add configs for new ov02c10 and ov02e10 drivers (Hans de Goede)
  - media: i2c: Add Omnivision OV02C10 sensor driver (Heimir Thor Sverrisson)
  - media: i2c: ov02e10: add OV02E10 image sensor driver (Jingjing Xiong)
  - platform/x86: int3472: Debug log when remapping pins (Hans de Goede)
  - platform/x86: int3472: Add handshake pin support (Hans de Goede)
  - platform/x86: int3472: Prepare for registering more than 1 GPIO regulator (Hans de Goede)
  - platform/x86: int3472: Avoid GPIO regulator spikes (Hans de Goede)
  - platform/x86: int3472: Make regulator supply name configurable (Hans de Goede)
  - platform/x86: int3472: Rework AVDD second sensor quirk handling (Hans de Goede)
  - platform/x86: int3472: Drop unused gpio field from struct int3472_gpio_regulator (Hans de Goede)
  - platform/x86: int3472: Stop setting a supply-name for GPIO regulators (Hans de Goede)
  - platform/x86: int3472: Add skl_int3472_register_clock() helper (Hans de Goede)
  - powerpc: Fix struct termio related ioctl macros (Madhavan Srinivasan)
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.16 cycle (Justin M. Forbes)
  - fedora: add 'fedora' SBAT suffix for UKI addons (Li Tian)
  - redhat: add downstream SBAT for UKI addons (Emanuele Giuseppe Esposito)
  - uki_addons: provide custom SBAT as input parameter (Emanuele Giuseppe Esposito)
  - uki_addons: remove completely sbat/sbat.conf (Emanuele Giuseppe Esposito)
  - Linux v6.15.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.15.2-0]
changelog:
  - Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (Justin M. Forbes)
  - Linux v6.15.2


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.15.2-0]
changelog:
  - wifi: ath12k: support MLO as well if single_chip_mlo_support flag is set (Baochen Qiang)
  - wifi: ath12k: use fw_features only when it is valid (Baochen Qiang)
  - wifi: ath12k: introduce ath12k_fw_feature_supported() (Baochen Qiang)
  - aarch64: Switch TI_SCI_CLK and TI_SCI_PM_DOMAINS symbols to built-in (Peter Robinson)
  - redhat/configs: fedora: set some qcom clk, icc, and pinctrl drivers to built in (Brian Masney)


author: Augusto Caringi <acaringi@redhat.com> [6.15.6-0]
changelog:
  - Turn on MITIGATION_TSA for RHEL configs (Augusto Caringi)
  - Turn on TSA Mitigation for Fedora (Justin M. Forbes)
  - Linux v6.15.6


author: Richard W.M. Jones <rjones@redhat.com> - 6.0.2-3
changelog:
  - Enable the multithreading API
    (https://github.com/sahlberg/libnfs/blob/master/README.multithreading)


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (note: skipped 1.17.2 downstream)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Michel Lind <salimma@fedoraproject.org> - 5.4.1-3
changelog:
  - Correctly set the soversion based on SemVer properties
    Backport of upstream PR#4319 from Neal Gompa (ngompa)
  - Split shared libraries into their own -libs subpackage


author: Jerry James <loganjerry@gmail.com> - 2.2.0-1
changelog:
  - Version 2.2.0
  - Fix the VCS field
  - Sort BRs and Rs so I can tell what is there
  - Allow parallel builds


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.9.1-1
changelog:
  - Update to 1.9.1 - Closes rhbz#2362077 rhbz#2354430 rhbz#2352319
    rhbz#2350839 rhbz#2348836 rhbz#2339349


author: Packit <hello@packit.dev> - 131-1
changelog:
  Changes with 131
  ----------------
    * Update snapshots to 20250201 (#4591)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou
    * cloudapi: Add /distributions/ to cloudapi (#4336)
      * Author: Brian C. Lane, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2025-02-05


author: Packit <hello@packit.dev> - 135-1
changelog:
  Changes with 135
  ----------------
    * CI: Update slack notifications and remove Alex (#4623)
      * Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Simon Steinbeiß, Tomáš Hozza
    * CODEOWNERS: set people for `/templates` (#4636)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * Preparation for RHEL 9.7 and 10.1 (COMPOSER-2451) (#4629)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    * Update snapshots to 20250225 (#4626)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Use golangci-lint v1.60 and cleanup the errors it returns (#4612)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Florian Schüller
    * cloudapi: Use constants for distro in compose_test.go (#4620)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Michael Vogt
    * internal/cloud/gcp/compute: Add TDX_CAPABLE guest OS feature (#4587)
      * Author: Beñat Gartzia, Reviewers: Ondřej Budai, Tomáš Hozza
    * tests/CI: Disable installer test for RHEL 10.0 nightly (#4634)
      * Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * tests/CI: Re-enable the vmware tests on RHEL 10 (#4577)
      * Author: Tomáš Koscielniak, Reviewers: Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2025-03-05


author: Packit <hello@packit.dev> - 136-1
changelog:
  Changes with 136
  ----------------
    * Return compose request details as part of metadata response (#4451)
      * Author: Brian C. Lane, Reviewers: Florian Schüller, Tomáš Hozza
    * cloudapi: silence logrus in tests (#4614)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * go.mod: update osbuild/images to v0.123.0 (#4642)
      * Author: Sanne Raymaekers, Reviewers: Simon Steinbeiß, Simon de Vlieger
    * templates/dashboards: increase timespan readability (#4633)
      * Author: Florian Schüller, Reviewers: Gianluca Zuccarelli, Sanne Raymaekers

  — Somewhere on the Internet, 2025-03-19


author: Packit <hello@packit.dev> - 137-1
changelog:
  Changes with 137
  ----------------
    * Add modularity support (#4644)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Advanced partitioning customizations in cloud API (COMPOSER-2403) (#4650)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers
    * Fix: osbuild-composer is not able to build RHEL-8 images since RHEL-9.5 (RHEL-71397) (#4651)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Schutzfile: bump osbuild to 142 (#4653)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Test/api.sh/vsphere: configure cloud-init via VM's extraConfig (#4664)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Tomáš Koscielniak
    * cloudapi/v2: mark md5 signature as required in package metadata (#4654)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * go.mod: bump github.com/getkin/kin-openapi to v0.131.0 (#4655)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Ondřej Budai
    * test: migrate the openshift virt test to a new cluster (COMPOSER-2458) (#4647)
      * Author: Ondřej Budai, Reviewers: Tomáš Koscielniak

  — Somewhere on the Internet, 2025-04-02


author: Packit <hello@packit.dev> - 138-1
changelog:
  Changes with 138
  ----------------
    * GH Action: check the SPEC osbuild/images deps minimum version (#4669)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * client/blueprints_test.go: delete condition for composer version < 83 (#4673)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-04-16


author: Packit <hello@packit.dev> - 141-1
changelog:
  Changes with 141
  ----------------
    * Add templates to subscription image options (HMS-6050) (#4712)
      * Author: rverdile, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Replace logrus with log (#4715)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Test/cross-distro: add version check for cross-building el8 on el9 (#4706)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    * Test/cross-distro: fix one issue and make the test more robust on "ZStream" branches (#4694)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: Fix missing specs for koji ContainerResolve (#4709)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: drop ImageRequest.GetImageOptions() method (#4711)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Sanne Raymaekers
    * go.mod: bump images to v0.144.0 (#4718)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    * go.mod: update osbuild/images to v0.143.0 (#4713)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Sanne Raymaekers
    * internal: drop `internal/fsnode` package (#4714)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-05-14


author: Packit <hello@packit.dev> - 142-1
changelog:
  Changes with 142
  ----------------
    * Update snapshots to 20250515 (#4724)
      * Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    * templates/packer: set wanted-by to cloud-init.target (#4723)
      * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Ondřej Budai

  — Somewhere on the Internet, 2025-05-28


author: Packit <hello@packit.dev> - 143-1
changelog:
  Changes with 143
  ----------------
    * Add job delete support (#4717)
      * Author: Brian C. Lane, Reviewers: Tomáš Hozza
    * GH Action/create-tag: allow passing the version when run manually (#4668)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Improve OCI CI scripts (HMS-8591) (#4742)
      * Author: Florian Schüller, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal
    * Packer: update Fedora and RHEL images used for workers (#4733)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * gitlab: enable OCI tests (#4741)
      * Author: Achilleas Koutsou, Reviewers: Florian Schüller, Simon de Vlieger, Tomáš Hozza
    * go.mod: update osbuild/images to v0.148.0 (#4732)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza, Tomáš Koscielniak
    * osbuild-store-dump: use `distrofactory` instead of importing fedora (#4738)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * tests/CI: Add runners for RHEL 9.7 and 10.1 (HMS-6278) (#4716)
      * Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 145-1
changelog:
  Changes with 145
  ----------------
    * Test/repositories/el8*: use rhui-4 instead of rhui-3 (#4665)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Michael Vogt
    * Update snapshots to 20250626 (#4763)
      * Author: SchutzBot, Reviewers: Brian C. Lane, Tomáš Hozza
    * ci: introduce gobump gha (#4758)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi/v2: add patch_url to customizations (#4756)
      * Author: rverdile, Reviewers: Brian C. Lane, Tomáš Hozza
    * common: fix unclosed logrus logging pipes (#4728)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger, Tomáš Hozza
    * fix: update gobump GHA (#4761)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-09


author: Packit <hello@packit.dev> - 146-1
changelog:
  Changes with 146
  ----------------
    *  go.mod: bump go version to 1.23.9 & update dependencies (#4760)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Preparation to consolidate Koji upload code to `osbuild/images` (HMS-8803) (#4770)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * Use Koji upload implementation from `osbuild/images` (HMS-8803) (#4772)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: Use error 400 for cloudapi delete errors (#4750)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * deps: bump images to 0.164 (#4781)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    * go.mod: update osbuild/images to v0.156.0 (#4773)
      * Author: Achilleas Koutsou, Reviewers: Ondřej Budai, Sanne Raymaekers
    * test/ubi-wsl.sh: add backward compatibility for composer < v146 (#4784)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    * tests/CI: Add RHEL 9.6 and 10.0 GA (HMS-8726) (#4767)
      * Author: Tomáš Koscielniak, Reviewers: Florian Schüller, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-23


author: Dumitru Ceara <dceara@redhat.com> - 24.03.90-5
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - cb8e5433281b8ab5f3a65e52e41f46839e32d4fc
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Numan Siddique <numans@ovn.org> - 24.03.90-6
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - 8efac26f6637fc35fd1d3e5b41b935ebcb074a1d
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Dumitru Ceara <dceara@redhat.com> - 24.03.90-7
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - 76bd54eb36d52d1b3fa663d185f53dcaa2cff06b
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Numan Siddique <numans@ovn.org> - 24.09.2-04
changelog:
  - Update the OVN sources to upstream release v24.09.2
    with the base OVN commit df4f80a60d4cd712870aa73d32d5677448c11c78
    and OVS commit 9e07a69bbb2a7d3eb35f9b487161c50cfa5bd65e
    The below commits are also synced:

  - Prepare for 24.09.3.
  [Upstream: 0a899586b9ec222b335a956021971de1c2dd2312]

  - ic: Fix NULL ptr deref on log of duplicate routes.
  [Upstream: 5a19ae8fa2965e4bf6864f84dfd1adef85ba4b13]

  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes.
  [Upstream 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]

  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.9-0.1.rc3
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.9-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.9-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.9-1
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.9,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.9


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.1.rc1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc1
  - syncing with upstream spec-file (removed nagios)


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.2.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc2
  - disable docs for now as koji build shows issues with python requirements
    for inkscape


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.4.rc3
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc3,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc3
  - synced dropping inkscape build-requirement with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-5
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0
  - Regarding noteworthy changes coming with the bump of the major version see
    https://projects.clusterlabs.org/w/projects/pacemaker/pacemaker_3.0_changes/
  - add patch to when resetting scheduler as well reset error and warning flags
    lacking pcmk_reset_scheduler in 3.0.0 branch pcmk__set_scheduler_defaults
    seems to be the most reasonable alternative for now


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Aaron Merey <amerey@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi-7.2.0.
  - Remove upstreamed patches
    papi-python3.patch
    papi-libsde.patch
    papi-gcc15.patch
  - Add papi-revert-arm-test.patch.
  - Add papi-revert-event-depr.patch.


author: Paul Howarth <paul@city-fan.org> - 3.04-13
changelog:
  - Fix decryption of ciphertext created with 'header' => 'randomiv'
    https://bugzilla.redhat.com/show_bug.cgi?id=2235322
    https://github.com/lstein/Lib-Crypt-CBC/issues/6
    https://github.com/lstein/Lib-Crypt-CBC/pull/7


author: Paul Howarth <paul@city-fan.org> - 3.07-1
changelog:
  - Update to 3.07 (rhbz#2383870)
    - New upstream maintainer
    - Fix CVE-2025-2814 by using Crypt::URandom
    - Fix decryption of ciphertext created with 'header' => 'randomiv'
    - Fixed bug in which manually-specified key and -pkdf=>"none" was not having
      any effect
    - Converted build process to Dist::Zilla
    - Miscellaneous minor Dist::Zilla related changes
  - Switch upstream source URL from cpan.metacpan.org to www.cpan.org to skip a
    redirect
  - Package new LICENSE, SECURITY.md and vulnerabilities.txt files


author: Petr Pisar <ppisar@redhat.com> - 0.15-36
changelog:
  - Correct a license to "(GPL-1.0-or-later OR Artistic-1.0-Perl) AND
    BSD-3-Clause"
  - Quallify bundled(mt19937ar) RPM provide with a release date
  - Package the tests


author: Adam Williamson <awilliam@redhat.com> - 1.0.3-16
changelog:
  - Backport #1964 (partial) and #2361 (rebased) to fix build with Python 3.14
  - Rebuilt for Python 3.14


author: Adam Williamson <awilliam@redhat.com> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - Drop patches merged upstream
  - Backport more patches to fix build/tests and a FICS bug with Python 3.13+


author: Michel Lind <salimma@fedoraproject.org> - 4.2.14-1
changelog:
  - Update to 4.2.14 to address multiple CVEs
  - resolves CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, CVE-2024-39614


author: Michel Lind <salimma@fedoraproject.org> - 4.2.20-1
changelog:
  - Update to version 4.2.20; Fixes: RHBZ#2350882
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 4.2.22-1
changelog:
  - Update to version 4.2.22
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path
  - Revert setuptools bump; we don't need it and don't have the needed
    version
  - Rebase Python 3.13 patch


author: Packit <hello@packit.dev> - 0.32.1-1
changelog:
  - ModemManager: Add initial mock (thanks Guido Günther)
  - bluez5: Add advertising API (thanks Frederik Leonhardt)
  - Fix loading of libglib on macOS (thanks peturingi)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - all templates: Drop wrong variant wrapping from all properties
  - tests: Skip TestNetworkManager::test_one_wifi_with_accesspoints with NM ≥ 1.49.3


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - templates: Add gsd-rfkill (thanks Guido Günther)
  - Allow adding objects derived from DBusMockObject (thanks Sebastian Wick)
  - Drop Python <= 3.7 support (thanks Tomasz Kłoczko)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - modemmanager: Add operator code (thanks Guido Günther)
  - modemmanager: Allow to set CellBroadcast channel list (thanks Guido Günther)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - mockobject: Fix _wrap_in_dbus_variant for Struct and Dict types (thanks Sebastian Wick)
  - Drop setup.{cfg,py} and RHEL 9 support, move to pybuild (rhbz#2377609)
  - Drop iio-sensor-proxy tests, the template is broken (see #241)


author: Michel Lind <salimma@fedoraproject.org> - 5.1.7-1
changelog:
  - Update to version 5.1.7; Fixes: RHBZ#2350881
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 5.1.8-1
changelog:
  - Update to 5.1.8
  - On Windows, this fixes CVE-2025-27556. Mentioning for compleness
  - Fixes a regression in Django 5.1.7 affecting
    LogEntryManager.log_actions() - #36234
  - Remove legacy symlinks


author: Michel Lind <salimma@fedoraproject.org> - 5.2.2-1
changelog:
  - Update to 5.2.2
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path


author: Michel Lind <salimma@fedoraproject.org> - 5.2.4-1
changelog:
  - Update to version 5.2.4
  - Skip test_strip_tags and test_parsing_errors on Python 3.14; Fixes:
    RHBZ#2374042


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.9.5-3
changelog:
  - Add additional license terms for GlyphsInfo data files
  - Mark GlyphData license files in-place rather than installing duplicates


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


author: Christian Krause <chkr@fedoraproject.org> - 3.6.9-1
changelog:
  - Update to 3.6.9 (#2267692)
  - Remove example client and server (upstream split the source package)
  - Remove according weak requirements for example tools


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.0~b3-1
changelog:
  - Update to Python 3.14.0b3
  - The .pyc magic number was bumped
  - python3.14-freethreading is no longer provisional


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.68.2-1
changelog:
  - Update to 1.68.2 - Closes rhbz#2311287 rhbz#2326578 rhbz#2333262
    rhbz#2333238 rhbz#2331989 rhbz#2331961


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.68.2-2
changelog:
  - Update to 1.68.2
  - Move to bundling with gotmax23 tool
  - Bump golang.org/x/net/html to v0.33.0 to fix CVE-2024-45338
  - Bump golang.org/x/crypto/ssh to v0.31.0 to fix CVE-2024-45337
  - Bump github.com/quic-go/quic-go to 0.48.2 to fix CVE-2024-53259 and
    CVE-2024-22189
  - s390x is temporarly disable until a workaround to
    https://github.com/cronokirby/saferith/issues/52 is found


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Zdenek Pytela <zpytela@redhat.com> - 41.39-1
changelog:
  - Allow collectd accept and listen to tcp sockets
  - Allow init_t nnp domain transition to redis_t
  - Allow tlshd read network sysctls
  - Allow NetworkManager create and use icmp_socket
  - Allow varnishd execute the prlimit64() syscall
  - Allow rhsmcertd connect to systemd-machined
  - Allow virt_domain write to virt_image_t files
  - Allow system-dbusd list systemd-machined directories
  - Allow asterisk read network sysctls
  - Allow virtstoraged fsetid capability
  - Allow xdm watch a mnt_t directory
  - Allow collectd bind TCP sockets to the collectd port
  - Allow virtqemud relabel from tmpfs lnk files
  - Allow gnome-remote-desktop additional sockets permissions
  - Update insights-core policy
  - Update systemd-homed policy
  - Allow xenstored_t manage xend_var_lib_t files (bsc#1228540)


author: Zdenek Pytela <zpytela@redhat.com> - 41.40-1
changelog:
  - Add missing permissions for ftpd_anon_write to manage NFS directories
  - Add missing permissions for ftpd_anon_write to manage CIFS directories
  - Allow nut-upsmon write systemd inhibit pipes
  - Allow systemd-user-runtime-dir connect to systemd-userdbd over a unix socket
  - Remove permissive domain for systemd_vsftpd_generator_t
  - Change generator-specific rules to apply to systemd_generator
  - Define file equivalency for /var/etc
  - Allow tuned-ppd create ppd_base_profile with a file transition
  - Allow lldpd connect to systemd-homed over a unix socket
  - Allow sysadm_sudo_t signal rpm script
  - Fix the "/var/cache/systemd/home(/.*)?" regex


author: Zdenek Pytela <zpytela@redhat.com> - 41.41-1
changelog:
  - Allow mdadm nosuid_transition
  - Label plasma user service files as xdm_unit_file_t.
  - Revert "Allow systemd-homed to start services."
  - Allow virtstoraged write qemu runtime files
  - Allow virtqemud read/write/setattr input event devices
  - Allow systemd create journal pid files
  - Allow networkmanager send a general signal to iptables
  - Allow syslogd watch syslog_conf_t directories
  - Allow systemd-machined work with its private tmp and tmpfs files
  - Allow geoclue read virt lib files
  - Fix files_dontaudit_delete_all_files()
  - Label /run/polkit-1 with policykit_var_run_t
  - Label /dev/diag as diagnostic_device_t
  - Allow systemd-homed to start services.
  - Allow named_t to read NetworkManager's runtime files
  - Improve README* documentation


author: Zdenek Pytela <zpytela@redhat.com> - 41.42-1
changelog:
  - Drop config for /run/random-seed
  - Update file location for systemd random-seed file
  - Allow tomcat execute cracklib-check with a domain transition
  - Allow sssd watch lib dirs
  - Confine systemd-hibernate-resume
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  - Allow login_pgm read filesystem sysctls
  - Allow gconfd connect to system dbus
  - Allow NetworkManager manage NetworkManager_etc_rw_t symlinks
  - Add %verify(not md5 size mtime) for customizable_types


author: Zdenek Pytela <zpytela@redhat.com> - 41.43-1
changelog:
  - Allow nmbd read network sysctls
  - Allow iio-sensor-proxy sendto to journald over a unix datagram socket
  - Allow logrotate stop all systemd services
  - systemd: rework systemd_manage_random_seed
  - Allow tuned-ppd connect to sssd over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 41.44-1
changelog:
  - virt: allow QEMU use of the qgs daemon for attestation
  - qgs: add contrib module for TDX "qgs" daemon
  - kernel: add interfaces for using SGX enclaves
  - Define file equivalency for /usr/etc
  - Allow mongod to receive pressure stall information
  - Dontaudit systemd_generator read sssd public files
  - Allow plymouthd read/write input event devices
  - Label 99-nvme-nbft-connect.sh with NetworkManager_dispatcher_nvme_script_t
  - Allow systemd-user-runtime-dir sendto to syslogd
  - Remove pcp module
  - Update irqbalance policy for using unconfined scripts
  - Allow utempter use terminal multiplexor
  - Allow virtqemud execute ovs-vsctl with a domain transition
  - Update the files_search_mnt() interface


author: Zdenek Pytela <zpytela@redhat.com> - 41.45-1
changelog:
  - Add fs_write_cgroup_dirs() and fs_setattr_cgroup_dirs() interfaces
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  - Allow openvswitch ioctl vduse devices
  - Label /dev/vduse/control and /dev/vduse/NAME devices
  - Allow virtstoraged the sys_rawio capability
  - Allow virtqemud read insights-core state files
  - Allow virtnodedev create mdevctl config dirs
  - Allow virtqemud additional permissions on scsi generic chr files
  - Allow local login execute gnome keyring daemon
  - Allow virtqemud send a generic signal to passt
  - Allow svirt-tcg read init state
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  - Label /run/opendkim with dkim_milter_data_t
  - Allow sa-update status systemd services
  - Allow updpwd logging send audit messages
  - Temporary dontaudit iio-sensor-proxy sys_admin.
  - Allow iio-sensor-proxy sendto to journald over a unix datagram socket
  - Revert "Allow iio-sensor-proxy sendto to journald over a unix datagram socket"


author: Zdenek Pytela <zpytela@redhat.com> - 42.1-1
changelog:
  - Update systemd-generators policy
  - Allow plymouthd_t read proc files of systemd_passwd_agent (bsc#1245470)
  - Allow insights-client file transition for files in /var/tmp
  - Allow tuned-ppd manage tuned log files
  - Allow systemd-coredump mount on tmpfs filesystems
  - Update sssd_dontaudit_read_public_files()
  - Allow zram-generator raw read fixed disk device


author: Zdenek Pytela <zpytela@redhat.com> - 42.2-1
changelog:
  - Allow virtqemud_t use its private tmpfs files (bsc#1242998)
  - Allow virtqemud_t setattr to /dev/userfaultfd (bsc#1242998)
  - Allow virtqemud_t read and write /dev/ptmx (bsc#1242998)
  - Extend virtqemud_t tcp_socket permissions (bsc#1242998)
  - Allow virtqemud_t to read and write generic pty (bsc#1242998)
  - Allow systemd-importd create and unlink init pid socket
  - Allow virtqemud handle virt_content_t chr files
  - Allow svirt read virtqemud fifo files
  - All sblim-sfcbd the dac_read_search capability
  - Allow sblim domain read systemd session files
  - Allow sblim-sfcbd execute dnsdomainname
  - Confine nfs-server generator
  - Allow systemd-timedated start/stop timemaster services
  - Allow "hostapd_cli ping" run as a systemd service
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  - Allow 'oomctl dump' to interact with systemd-oomd
  - Basic functionality for systemd-oomd
  - Basic enablement for systemd-oomd
  - Allow samba-bgqd send to smbd over a unix datagram socket
  - Update kernel_secretmem_use()
  - Add the file/watch_mountns permission


author: Zdenek Pytela <zpytela@redhat.com> - 42.3-1
changelog:
  - Allow virtqemud write to sysfs files
  - Allow irqbalance search sssd lib directories
  - Allow samba-dcerpcd send sigkills to passwd
  - Allow systemd-oomd watch dbus pid sock files
  - Allow some confined users read and map generic log files
  - Allow login_userdomain watch the /run/log/journal directory
  - Allow login_userdomain dbus chat with tuned-ppd
  - Allow login_userdomain dbus chat with switcheroo-control
  - Allow userdomain to connect to systemd-oomd over a unix socket
  - Add insights_client_delete_lib_dirs() interface


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


