# changelog

author: Filipe Rosset <rosset.filipe@gmail.com> - 0.9.5-5
changelog:
  - Modernized spec file for rawhide/epel10 - Removed redundant %%global
    _hardened_build 1 (default in Fedora) - Used %%set_build_flags and
    %%make_build for better compliance - Updated %%install to use more
    idiomatic install commands - Listed binaries explicitly in %%files to
    avoid warnings - Improved man page globs to be compression-neutral -
    Ensured correct directory ownership for logs


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:25.0.0-1
changelog:
  - Updated to v25.0.0.
  - Subpackage GtkAda3-devel now requires the GTK+-3.0 and GLib 2.0 development
    files.


author: Douglas Kosovic <doug@uq.edu.au> - 1.20.20-5
changelog:
  - Add README.Fedora for Fedora or README.EPEL for EPEL
  - Use (go-l2tp or xl2tpd) dependency for Fedora 43 to handle upgrades
    from earlier Fedora versions that had xl2tpd installed.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.0-1
changelog:
  - Updated to 1.52.0 release
    Verify file permissions for private connections to prevent unprivileged
    user from using other user's certs (CVE-2025-9615)
  - Ensure NetworkManager dependency has CVE-2025-9615 update.
  - Correct sed example in generated README.Fedora and README.EPEL files.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.2-1
changelog:
  - Updated to 1.52.2 release which has experimental IPv6 support.
  - Update CVE-2025-9615 related Requires and BuildRequires.
  - Fix typos found by codespell.


author: Dan Fruehauf <malkodan@gmail.com> - 1.4.1-1
changelog:
  - Update to upstream 1.4.1
  - Local bind support
  - Remote bind support
  - Support for no remote device, sudo command, and no remote command


author: Dan Fruehauf <malkodan@gmail.com> - 1.4.3-1
changelog:
  - Always run autoreconf -fvi
  - Fix file access for private key and known hosts (rhbz#2428396)
  - Fix pkg-config macro
  - Move D-Bus policy file to /usr/share/dbus-1/system.d/


author: John Marshall <jmarshall@hey.com> - 2.4.1-4
changelog:
  - Avoid incorrect "Provides: libhts.so.3" from internal shared library
  - Update description to reflect that 2.4.1 contains HTSlib 1.15.1


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.0-1
changelog:
  - Version 0.7.0
  - linkdupes subpackage is added. It is required by build-reproducibility-
    srpm-macros, so it'll be pulled into buildroots.
  - redhat-rpm-config needs to be updated to call
    %__os_install_post_hardlink in %__os_install_post for the helper to
    actually be used in builds.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.1-1
changelog:
  - Version 0.7.1
  - This implements https://fedoraproject.org/wiki/Changes/Hardlink_identical
    _files_in_packages_by_default.


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.15-1
changelog:
  - update to 3.6.2.15 (resolves rhbz#2416531)
  - drop serial ctest call work-around, fixed upstream
    (https://github.com/adventuregamestudio/ags/pull/2910)


author: Björn Persson <Bjorn@Rombobjörn.se> - 2.9-1
changelog:
  - Upgraded to 2.9.
  - Set_Up and Tear_Down procedures are now called for testsuites derived from
    Ahven.Framework.Test_Suite.


author: Michal Schorm <mschorm@redhat.com> - 3.3.2-3
changelog:
  - Rebuilt for  https://fedoraproject.org/wiki/Changes/switch_distribution_default_MariaDB_from_10.11_to_11.8


author: Nick Clifton <nickc@redhat.com> - 13.08-1
changelog:
  - Rebase sources and rebuild against the latest version of gcc.  (#2445165)
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)


author: Nick Clifton <nickc@redhat.com> - 13.13-1
changelog:
  - Annocheck: Do not complain about Rust binaries that do not support branch protection.
  - Annocheck: Skip the dynamic-tags test if a GNU Property note is present.
  - Annocheck: Look for compromising characters in pathnames.
  - Require C++17 for building.


author: Terje Rosten <terjeros@gmail.com> - 3.1.8-1
changelog:
  - 3.1.8
  - apt-key is gone
  - Add openssl-devel to buildreq
  - Fix include issue
  - apt-extracttemplates has moved


author: Richard W.M. Jones <rjones@redhat.com> - 18.12.1-1.10
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Cristian Le <git@lecris.dev> - 18.11.0-1
changelog:
  - Update to version 18.11.0
  - Atuin 18.9.0 fixes fish 4.x removal of `bind -k` (rhbz#2440541)
  - Add better documentation of how to handle MSRV
  - Move the profile.d script outside of the spec file


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - Move to fork of Augeas which contains a small number of PRs:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.5
changelog:
  - Rebase our branch on top of Augeas
  - Use patches to make it clearer what we are adding on top of upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Soft fork Augeas, see
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/J7SM6NLIMPU7J4LIRBDPTPWVXOKZWWEH/
  - Add more patches from pull requests that affect Fedora and RHEL


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.10
changelog:
  - Fix parsing /etc/crypttab with link-volume-key (RHBZ#2452937)
    https://github.com/hercules-team/augeas/pull/880
  - Fix miscellaneous GCC 16 errors
    https://github.com/hercules-team/augeas/pull/881


author: Fabrice Creuzot <code@luigifab.fr> - 3.0.0-1
changelog:
  - New upstream release
  - Add support for CSD window
  - Add --enable-only-gtkx and --disable-gtkx options


author: Björn Persson <Bjorn@Rombobjörn.se> - 2:24.0.0-3
changelog:
  - Fixed to use /dev/urandom instead of a non-cryptographic PRNG.
    Resolves: CVE-2024-41708 (RHBZ#2314766)


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:26.0.0-1
changelog:
  - Updated to v26.0.0.
  - This version adds a time limit to mitigate CVE-2025-52494.
    Resolves: RHBZ#2402593


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Paul Howarth <paul@city-fan.org> - 2.2.18-1
changelog:
  - Update to 2.2.18 (rhbz#2407559)
    - Much better CSS language support
    - The color editor now also supports hsl() and rgb() style colors
    - Show colors by just hovering the mouse over a color code
    - Reinstate feature to dynamically change a shortcut key by hovering the
      mouse over a menu item and pressing a new shortcut key again; this feature
      was present in all gtk2 applications and has not been working for bluefish
      gtk3 builds until now
    - Remove the infobrowser from the build since it no longer compiles with new
      libxml versions; this plugin was already deprecated and disabled by default
      for years


author: Paul Howarth <paul@city-fan.org> - 2.2.19-1
changelog:
  - Update to 2.2.19 (rhbz#2416526)
    - Fix a regression in 2.2.18 that could cause a crash when right clicking in
      a document of type Text
    - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
      main menu is now also working in the snippets menu


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0 (rhbz#2435810)
    - Bluefish 2.4.0 has some new features and many small improvements; it is no
      longer  a 2.2 release because backwards compatibility with the 2.0 series
      of Bluefish has been removed
    - If you upgrade from 2.0 straight to 2.4, your config files and project
      files are no longer 100% correctly loaded
    - Starting from 2.4, Bluefish will place config files no longer in ~/.bluefish
      - On Linux it will be ~/.config and ~/.local/
      - On Windows it will be LocalAppData and RoamingAppData
      - On OSX it will be ~/Library/Application Support
    - The biggest new feature, still experimental, is that you can edit two
      documents side-by-side
    - You can change opening and ending tags in XML or HTML simultaneously if you
      hit [ctrl][t]
    - You can more easily save the current contents to a template
    - For new users, and also active in new projects, is a UI selection dialog,
      where you can choose between a UI optimised for web development,
      programming or just have everything enabled or disabled; this will help
      new Bluefish users to customize Bluefish in an easier way
    - There are a few fixes as well:
      - Selecting lines by dragging in the margin works more reliably
      - Paste special works more reliably
      - Line comments in Python are better detected, which is visible in the
        syntax highlighting
      - The toggle comment function is improved
      - The Windows build has better error messages when starting external
        commands fails


author: Paul Howarth <paul@city-fan.org> - 2.4.1-1
changelog:
  - Update to 2.4.1
    - Bluefish 2.4.1 is a minor maintenance release with a few notable changes
    - The experimental "side by side" feature that was introduced in 2.4.0 is no
      longer experimental and is fully stable now
    - A new feature is that Bluefish will automatically adjust the text colours
      for people that use a dark desktop theme
    - Translations for Ελληνικά (Greek) and தமிழ் (Tamiḻ) have been completely
      renewed
    - A critical bug and a regression in the split view function has been fixed
    - The windows build has some minor improvements
    - Several translations are updated


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 3.9.0-6
changelog:
  - Fix security vulnerabilities
    CVE-2026-32877,CVE-2026-32883,CVE-2026-32884,CVE-2026-34580,CVE-2026-
    34582


author: Jose Fernandez <me@jrfernandez.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
  - Update to upstream version 0.7.1
  - Drop patches for dependency version relaxation (no longer needed with new
    upstream)
  - Fixes CVE-2025-58160: fixes RHBZ#2391984, fixes RHBZ#2392018


author: Jerry James <loganjerry@gmail.com> - 1:2.2.1-4
changelog:
  - Add patch from the cryptominisat project
  - Build with cmake instead of autotools
  - Both changes needed to update cryptominisat to latest version


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.3.1-2
changelog:
  - Run autopoint before autoreconf, since apparently autoreconf doesn't
    do it automatically, but that breaks badly with gettext 0.25.


author: Jerry James <loganjerry@gmail.com> - 2.49.95-3
changelog:
  - Add patch to fix undefined behavior (rhbz#2339979)
  - Add two patches to fix memory leaks
  - Do not force -O1


author: Jerry James <loganjerry@gmail.com> - 2.49.95-3
changelog:
  - Add patches to fix more undefined behavior
  - Fix misaligned memory accesses on ppc64le
  - Fix mismatched readline function declarations


author: Jerry James <loganjerry@gmail.com> - 2.49.95-8
changelog:
  - Update to latest git snapshot to fix gnulib issue
  - Update the French translation
  - Add patch to update POSIX structure sizes for 64-bit systems
  - Fix a broken file-stat test


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-5
changelog:
  - totemsrp: Return error if sanity check fails
    (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity
    (fixes CVE-2026-35092)


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.4
changelog:
  - update from trunk
    - PRs ada/68179, ada/123589, algol68/123007, algol68/123653, algol68/123734,
  	analyzer/123145, analyzer/123540, c/123437, c++/122391, c++/123601,
  	c++/123627, c++/123639, c++/123677, c++/123692, c++/123694,
  	diagnostics/122622, fortran/94377, fortran/109512, fortran/123375,
  	ipa/123412, libgcc/123650, libgomp/88707, libgomp/122314,
  	libgomp/122356, libstdc++/114153, middle-end/123697,
  	middle-end/123744, modula2/123739, pch/110746,
  	rtl-optimization/121787, rtl-optimization/122215,
  	rtl-optimization/123380, rtl-optimization/123585, sarif-replay/123056,
  	target/71340, target/113666, target/117575, target/122781,
  	target/122869, target/123279, target/123460, target/123521,
  	target/123584, target/123603, target/123607, target/123626,
  	target/123631, target/123724, target/123742, testsuite/123175,
  	testsuite/123751, tree-optimization/113524, tree-optimization/123061,
  	tree-optimization/123314, tree-optimization/123513,
  	tree-optimization/123602, tree-optimization/123636,
  	tree-optimization/123645, tree-optimization/123656,
  	tree-optimization/123729, tree-optimization/123731,
  	tree-optimization/123736, tree-optimization/123741,
  	tree-optimization/123745, tree-optimization/123753,
  	tree-optimization/123755, tree-optimization/123756


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.5
changelog:
  - update from trunk
    - PRs algol68/123733, algol68/123785, c++/101140, c++/122494, c++/122609,
  	c++/123354, c++/123404, c++/123578, c++/123597, c++/123620,
  	c++/123663, c++/123667, c++/123676, c++/123684, c++/123737,
  	c++/123814, d/122800, fortran/118955, fortran/123772,
  	libstdc++/123758, middle-end/122348, middle-end/123703,
  	middle-end/123709, middle-end/123775, other/67300,
  	rtl-optimization/80357, rtl-optimization/94014,
  	rtl-optimization/123144, target/123780, target/123791, target/123792,
  	tree-optimization/106883, tree-optimization/120258,
  	tree-optimization/121347, tree-optimization/122474,
  	tree-optimization/122749, tree-optimization/123628,
  	tree-optimization/123657, tree-optimization/123767,
  	tree-optimization/123771, tree-optimization/123776,
  	tree-optimization/123778, tree-optimization/123794,
  	tree-optimization/123799, tree-optimization/123803,
  	tree-optimization/123820


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.6
changelog:
  - update from trunk
    - PRs ada/89159, ada/121316, ada/123580, ada/123832, ada/123857, ada/123861,
  	ada/123867, ada/123902, algol68/123959, analyzer/98447,
  	analyzer/116228, analyzer/116865, analyzer/117491, analyzer/122623,
  	analyzer/123880, c/101312, c/102846, c/123500, c/123583, c/123882,
  	c++/38612, c++/102613, c++/102846, c++/110871, c++/110872, c++/113968,
  	c++/114450, c++/121832, c++/122169, c++/122785, c++/123557,
  	c++/123611, c++/123614, c++/123659, c++/123695, c++/123738,
  	c++/123752, c++/123790, c++/123818, c++/123825, c++/123837,
  	c++/123845, c++/123866, c++/123871, c++/123913, c++/123918,
  	c++/123920, c++/123934, c++/123964, c++/123977, c++/124002,
  	cobol/119332, d/116975, d/120096, d/121477, d/122817, d/123046,
  	d/123263, d/123264, d/123349, d/123407, d/123419, d/123422, d/123798,
  	debug/110885, debug/123376, debug/123886, diagnostics/110522,
  	fortran/117303, fortran/123868, fortran/123941, fortran/123952,
  	gcov-profile/121084, gcov-profile/121123, gcov-profile/121409,
  	gcov-profile/123855, ipa/106260, ipa/111036, ipa/116296, ipa/123226,
  	ipa/123416, ipa/123619, libffi/117635, libgomp/113213, libgomp/121813,
  	libitm/69018, libstdc++/86164, libstdc++/114865, libstdc++/117404,
  	libstdc++/120567, libstdc++/123921, middle-end/49330,
  	middle-end/97898, middle-end/118608, middle-end/121661,
  	middle-end/122689, middle-end/123447, middle-end/123575,
  	middle-end/123826, middle-end/123869, middle-end/123876,
  	middle-end/123887, middle-end/123892, middle-end/123978, other/123841,
  	rtl-optimization/106859, rtl-optimization/119982,
  	rtl-optimization/122170, rtl-optimization/123294,
  	rtl-optimization/123322, rtl-optimization/123833,
  	rtl-optimization/123922, target/36503, target/117048, target/121571,
  	target/122097, target/122343, target/123016, target/123206,
  	target/123245, target/123548, target/123604, target/123766,
  	target/123779, target/123806, target/123807, target/123824,
  	target/123870, target/123910, target/123969, target/123971,
  	testsuite/123559, testsuite/123936, translation/89915,
  	tree-optimization/109410, tree-optimization/110043,
  	tree-optimization/114274, tree-optimization/114969,
  	tree-optimization/116747, tree-optimization/121104,
  	tree-optimization/121726, tree-optimization/122197,
  	tree-optimization/122537, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123672,
  	tree-optimization/123849, tree-optimization/123864,
  	tree-optimization/123897, tree-optimization/123898,
  	tree-optimization/123925, tree-optimization/123940,
  	tree-optimization/123958, tree-optimization/123983,
  	tree-optimization/123986


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.7
changelog:
  - update from trunk
    - PRs ada/121576, ada/124025, c++/123616, c++/123640, c++/123823,
  	c++/123889, c++/123984, d/123995, d/124026, fortran/85547,
  	fortran/122949, fortran/123545, fortran/123673, fortran/123961,
  	rtl-optimization/123796, target/123911, target/123926,
  	testsuite/124036, tree-optimization/117217, tree-optimization/123225,
  	tree-optimization/124034


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/124016, ada/124054, ada/124106, ada/124179, ada/124192,
  	ada/124201, ada/124224, ada/124226, ada/124282, ada/124285,
  	algol68/124028, algol68/124049, algol68/124115, analyzer/108400,
  	analyzer/111099, analyzer/113496, analyzer/117369, analyzer/121928,
  	analyzer/123973, analyzer/123981, analyzer/124055, analyzer/124073,
  	analyzer/124104, analyzer/124116, analyzer/124139, analyzer/124188,
  	analyzer/124195, analyzer/124232, c/87591, c/105555, c/119651,
  	c/123365, c/123472, c/123716, c++/98939, c++/101670, c++/102397,
  	c++/119756, c++/120685, c++/120974, c++/121500, c++/121822,
  	c++/122318, c++/122621, c++/123143, c++/123440, c++/123608,
  	c++/123612, c++/123641, c++/123642, c++/123660, c++/123661,
  	c++/123662, c++/123989, c++/124012, c++/124045, c++/124070,
  	c++/124096, c++/124119, c++/124150, c++/124153, c++/124173,
  	c++/124184, c++/124204, c++/124215, c++/124227, cobol/119455,
  	cobol/121499, cobol/122839, cobol/123238, demangler/106641,
  	diagnostics/122001, diagnostics/124014, fortran/78187, fortran/80012,
  	fortran/88076, fortran/99250, fortran/108663, fortran/120505,
  	fortran/121360, fortran/121429, fortran/122491, fortran/123943,
  	fortran/123947, fortran/123949, fortran/124071, fortran/124080,
  	fortran/124208, fortran/124235, fortran/124286, ipa/122856,
  	ipa/123229, ipa/123629, libfortran/88076, libfortran/123366,
  	libstdc++/105580, libstdc++/113450, libstdc++/119745,
  	libstdc++/121402, libstdc++/121771, libstdc++/123176,
  	libstdc++/123875, libstdc++/123908, libstdc++/123991,
  	libstdc++/124015, libstdc++/124024, libstdc++/124124,
  	middle-end/113436, middle-end/123386, middle-end/124056,
  	middle-end/124250, middle-end/124280, other/88472,
  	rtl-optimization/116053, rtl-optimization/116600,
  	rtl-optimization/120169, rtl-optimization/121191,
  	rtl-optimization/123048, rtl-optimization/123381,
  	rtl-optimization/123994, rtl-optimization/124062,
  	rtl-optimization/124079, target/57261, target/80881, target/112400,
  	target/113453, target/115042, target/119979, target/120233,
  	target/120234, target/120241, target/120888, target/122448,
  	target/123137, target/123195, target/123285, target/123556,
  	target/123624, target/124048, target/124094, target/124098,
  	target/124134, target/124136, target/124138, target/124147,
  	target/124162, target/124167, target/124194, target/124236,
  	target/124294, testsuite/103515, testsuite/115827, testsuite/123191,
  	testsuite/124064, translation/118988, tree-optimization/90036,
  	tree-optimization/95825, tree-optimization/99959,
  	tree-optimization/107690, tree-optimization/110091,
  	tree-optimization/114375, tree-optimization/117935,
  	tree-optimization/121103, tree-optimization/122297,
  	tree-optimization/124038, tree-optimization/124068,
  	tree-optimization/124086, tree-optimization/124099,
  	tree-optimization/124108, tree-optimization/124130,
  	tree-optimization/124132, tree-optimization/124142,
  	tree-optimization/124288


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.9
changelog:
  - update from trunk
    - PRs c/122572, c++/123408, c++/123665, c++/123810, c++/124229, c++/124306,
  	c++/124324, c++/124368, cobol/119456, fortran/124330, ipa/60674,
  	libfortran/124330, libstdc++/117402, libstdc++/119197,
  	libstdc++/122217, libstdc++/124363, middle-end/45273,
  	rtl-optimization/123786, rtl-optimization/124041,
  	rtl-optimization/124351, target/64835, target/124165, target/124315,
  	target/124335, target/124336, target/124341, target/124349,
  	target/124366, target/124367, testsuite/122961, testsuite/124320,
  	testsuite/124359, tree-optimization/119568
    - fix -flto -g handling of aarch64 AEABI attributes
      (#2439677, PR target/124365)


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.10
changelog:
  - update from trunk
    - PRs ada/107475, ada/120669, ada/124369, ada/124376, algol68/124322,
  	algol68/124372, analyzer/107646, analyzer/124375, analyzer/124433,
  	analyzer/124451, bootstrap/124406, bootstrap/124547, c/97991,
  	c/122866, c/123461, c/123856, c/124230, c++/39057, c++/109521,
  	c++/115852, c++/118482, c++/120039, c++/120285, c++/122559,
  	c++/122786, c++/123618, c++/123622, c++/124118, c++/124145,
  	c++/124154, c++/124200, c++/124297, c++/124307, c++/124309,
  	c++/124311, c++/124331, c++/124388, c++/124389, c++/124390,
  	c++/124397, c++/124399, c++/124404, c++/124417, c++/124425,
  	c++/124431, c++/124440, c++/124447, c++/124456, c++/124459,
  	c++/124466, c++/124472, c++/124474, c++/124478, c++/124483,
  	c++/124485, c++/124489, c++/124493, c++/124494, c++/124496,
  	c++/124575, d/123202, d/124158, driver/69367, driver/69849,
  	fortran/82721, fortran/84779, fortran/93832, fortran/95338,
  	fortran/97818, fortran/102333, fortran/102459, fortran/102596,
  	fortran/103139, fortran/105168, fortran/106946, fortran/110877,
  	fortran/115316, fortran/120286, fortran/120723, fortran/121043,
  	fortran/121743, fortran/122696, fortran/122902, fortran/124161,
  	fortran/124450, fortran/124482, gcov-profile/123923,
  	gcov-profile/124075, ipa/124291, ipa/124462, libfortran/124371,
  	libstdc++/116110, libstdc++/118030, libstdc++/118341,
  	libstdc++/119794, libstdc++/120527, libstdc++/121790,
  	libstdc++/122300, libstdc++/122567, libstdc++/124268,
  	libstdc++/124290, libstdc++/124443, libstdc++/124444,
  	libstdc++/124463, libstdc++/124513, libstdc++/124568,
  	middle-end/120030, middle-end/121159, middle-end/124435,
  	middle-end/124491, middle-end/124552, objc/124260, other/124508,
  	preprocessor/105412, rtl-optimization/121649, rtl-optimization/123094,
  	rtl-optimization/123822, rtl-optimization/124078,
  	rtl-optimization/124439, rtl-optimization/124452,
  	rtl-optimization/124454, rtl-optimization/124476, target/117182,
  	target/122000, target/122925, target/122953, target/123271,
  	target/123749, target/124044, target/124126, target/124333,
  	target/124403, target/124407, target/124409, target/124436,
  	target/124461, target/124565, target/124566, testsuite/112520,
  	testsuite/119930, testsuite/124066, testsuite/124484,
  	translation/124422, tree-optimization/80006, tree-optimization/98064,
  	tree-optimization/120987, tree-optimization/122380,
  	tree-optimization/124037, tree-optimization/124135,
  	tree-optimization/124358, tree-optimization/124528,
  	tree-optimization/124555, tree-optimization/124578


author: Jakub Jelinek <jakub@redhat.com> 16.0.1-0.11
changelog:
  - update from trunk
    - PRs ada/77535, ada/87170, ada/95452, ada/105212, ada/124596, ada/124606,
  	ada/124607, ada/124836, c/61896, c/123234, c/123424, c/124635,
  	c++/98930, c++/103901, c++/117133, c++/118630, c++/120338, c++/121643,
  	c++/121961, c++/122632, c++/122884, c++/123087, c++/123237,
  	c++/123346, c++/123529, c++/123566, c++/123613, c++/123700,
  	c++/123726, c++/123783, c++/123975, c++/123998, c++/124120,
  	c++/124177, c++/124198, c++/124246, c++/124457, c++/124477,
  	c++/124487, c++/124488, c++/124531, c++/124544, c++/124573,
  	c++/124614, c++/124617, c++/124645, c++/124646, c++/124648,
  	c++/124689, c++/124735, c++/124755, c++/124768, c++/124771,
  	c++/124773, c++/124781, c++/124785, c++/124790, c++/124792,
  	c++/124824, c++/124831, c++/124835, c++/124842, c++/124844,
  	c++/124850, c++/124862, d/88150, debug/94491, debug/124644,
  	fortran/66973, fortran/79330, fortran/79524, fortran/84245,
  	fortran/85352, fortran/93554, fortran/93715, fortran/93814,
  	fortran/94978, fortran/95163, fortran/95879, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/101281,
  	fortran/101760, fortran/102314, fortran/102430, fortran/102619,
  	fortran/103367, fortran/104827, fortran/107425, fortran/109788,
  	fortran/114021, fortran/115315, fortran/119273, fortran/120140,
  	fortran/121185, fortran/124259, fortran/124512, fortran/124567,
  	fortran/124598, fortran/124631, fortran/124652, fortran/124656,
  	fortran/124661, fortran/124666, fortran/124739, fortran/124751,
  	fortran/124780, fortran/124807, gcov-profile/121074, ipa/124700,
  	ipa/124777, libfortran/124543, libgomp/123177, libgomp/124123,
  	libstdc++/124722, lto/124828, middle-end/123635, middle-end/124634,
  	middle-end/124671, middle-end/124697, middle-end/124827,
  	middle-end/124877, modula2/105408, modula2/124081, modula2/124840,
  	other/94182, other/124784, preprocessor/70917,
  	rtl-optimization/124572, rtl-optimization/124649,
  	rtl-optimization/124696, sanitizer/124170, target/69639,
  	target/102309, target/105192, target/107337, target/109116,
  	target/120839, target/122483, target/123102, target/123210,
  	target/123238, target/123852, target/124597, target/124613,
  	target/124670, target/124674, target/124684, target/124704,
  	target/124705, target/124710, target/124712, target/124759,
  	target/124789, target/124818, target/124876, target/124892,
  	target/124897, testsuite/93080, testsuite/113276, testsuite/123135,
  	testsuite/124326, testsuite/124548, testsuite/124849,
  	tree-optimization/88576, tree-optimization/122976,
  	tree-optimization/124597, tree-optimization/124599,
  	tree-optimization/124627, tree-optimization/124677,
  	tree-optimization/124692, tree-optimization/124742,
  	tree-optimization/124743, tree-optimization/124746,
  	tree-optimization/124754, tree-optimization/124802,
  	tree-optimization/124809, tree-optimization/124810,
  	tree-optimization/124826, tree-optimization/124868,
  	tree-optimization/124875, tree-optimization/124891


author: Jakub Jelinek <jakub@redhat.com> 16.1.1-1
changelog:
  - update from trunk and releases/gcc-16 branch
    - GCC 16.1.0 release
    - PRs ada/107391, ada/107392, ada/124918, ada/125044, c/84717, c++/120502,
  	c++/123879, c++/124582, c++/124632, c++/124706, c++/124756,
  	c++/124855, c++/124910, c++/124926, c++/124927, c++/124944,
  	c++/124950, c++/124953, c++/124973, c++/124981, c++/124989,
  	c++/125035, c++/125096, cobol/119818, d/123411, d/124157, d/124922,
  	fortran/63858, fortran/93329, fortran/93463, fortran/108382,
  	fortran/117077, fortran/120431, ipa/120098, libfortran/120431,
  	libstdc++/112490, libstdc++/119714, libstdc++/124410,
  	libstdc++/124540, libstdc++/124890, libstdc++/125024,
  	libstdc++/125112, middle-end/95551, middle-end/122021,
  	middle-end/124900, middle-end/124971, modula2/120189,
  	preprocessor/124930, rtl-optimization/124643, sanitizer/124248,
  	sanitizer/124969, target/103383, target/124133, target/124933,
  	target/124959, target/124984, target/125117, testsuite/124682,
  	testsuite/124939, tree-optimization/116463, tree-optimization/124909,
  	tree-optimization/124941, tree-optimization/124988,
  	tree-optimization/125019, tree-optimization/125039,
  	tree-optimization/125079


author: Jakub Jelinek <jakub@redhat.com> 16.1.1-2
changelog:
  - update from releases/gcc-16 branch
    - PRs ada/125168, ada/125240, c++/100903, c++/115181, c++/124628,
  	c++/124770, c++/124957, c++/124979, c++/124991, c++/125043,
  	c++/125111, c++/125115, c++/125179, c++/125184, c++/125206,
  	c++/125208, c++/125280, c++/125315, d/125089, fortran/111952,
  	fortran/125059, fortran/125192, fortran/125198, libfortran/125095,
  	libstdc++/109965, libstdc++/121919, middle-end/125146,
  	middle-end/125259, rtl-optimization/123967, target/53929,
  	target/120587, target/124316, target/125049, target/125057,
  	target/125155, target/125180, target/125194, target/125308,
  	tree-optimization/120003, tree-optimization/125025,
  	tree-optimization/125153, tree-optimization/125185
  - create and include ga68.m68 files in gcc-algol68 package (#2463921)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.8-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-5
changelog:
  - Add --skip-dynamic-tags for annocheck
  - annocheck test fails on aarch64 for pinns due to changes in binutils not
    handled by annocheck.
  - See https://sourceware.org/bugzilla/show_bug.cgi?id=33963 for more
    informaton
  - Tempory skip. Remove when annocheck 13.07 or newer is deployed in Fedora
    packit CI


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.1-2
changelog:
  - Refresh spec file using go2rpm
  - Update spec file template using go2rpm
  - Use kubernetes-cni instead of containernetworking-plugins
  - Adds addition cni conflist
  - Use gocheck2 for tests


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.3-1
changelog:
  - Update to release v1.35.3
  - Resolves: rhbz#2466629
  - Fix CVE-2026-35469
  - Upstream fixes and new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.0-2
changelog:
  - Add CGO flags to build
  - Add CGO_CFLAGS and CFO_LDFLAGS to resolve annocheck stack-prot test
    failure
  - Exclude s390x and ppc64le from flags
  - Refresh spec


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.16-1
changelog:
  - 2.4.16 (fedora#2417970)
  - rebuild due binutils bug (fedora#2418285)
  - fix division by zero crash in pstops (fedora#2415396)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.17-1
changelog:
  - 2.4.17 (fedora#2456363, fedora#2456362, fedora#2454994, fedora#2454993,
    fedora#2454992, fedora#2454990)


author: Jan Macku <jamacku@redhat.com> - 8.18.0-6
changelog:
  - Fix bad reuse of HTTP Negotiate connection (CVE-2026-1965)
  - Fix token leak with redirect and netrc (CVE-2026-3783)
  - Fix wrong proxy connection reuse with credentials (CVE-2026-3784)
  - Fix use after free in SMB connection reuse (CVE-2026-3805)


author: Martin Osvald <mosvald@redhat.com> - 3.12.1-5
changelog:
  - cyrus-imapd.spec: various small fixes
  - Add comment about source of public key
  - Use gpgverify in accordance with devel guide
  - Download imaptest sources from lookaside cache
  - Disable cld2 dependent tests properly
  - Fix rpminspect failures


author: Martin Osvald <mosvald@redhat.com> - 3.12.1-7
changelog:
  - cyrus-imapd.spec: various small fixes
  - rename patches to conform with devel guide
  - do variable substitution in braced form


author: Mihai Patrascoiu <mihai.patrascoiu@cern.ch> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Align specfile with upstream (including whitespace from tabs to spaces)


author: Mark Wielaard <mjw@fedoraproject.org> - 5.2-3
changelog:
  - Add 0001-Add-debugedit-classify-ar-and-use-it-before-running-.patch
  - Install debugedit-classify-ar and man page


author: Mark Wielaard <mjw@fedoraproject.org> - 5.3-1
changelog:
  - New upstream 5.3 release
  - Drop all local patches
  - Add new release gpg key
  - Add gcc-c++ as BuildRequires


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-2
changelog:
  - Fix a crash in dnf5daemon-server when receiving an unknown locale from
    a D-Bus client (CVE-2026-3836) (bug #2445771)


author: Petr Pisar <ppisar@redhat.com> - 5.4.0.0-3
changelog:
  - Fix a crash when formatting an RPM scriptlet output containing a non-ASCII
    character in C locale (bug #2443774)


author: Sander Hoentjen <shoentjen@antagonist.nl> - 2.0.3-1
changelog:
  - Update to new upstream
  - Fixes #2453419 (CVE-2026-27854)
  - Fixes #2453421 (CVE-2026-27853)
  - Fixes #2453426 (CVE-2026-24030)
  - Fixes #2453427 (CVE-2026-0397)
  - Fixes #2453429 (CVE-2026-24029)
  - Fixes #2453430 (CVE-2026-0396)
  - Fixes #2453431 (CVE-2026-24028)


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.3-1
changelog:
  - Update to release v0.26.3
  - Resolves CVE-2024-25621: rhbz#2419004, rhbz#2419033, rhbz#2419427
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves: rhbz#2413270
  - Resolves: rhbz#2407614, rhbz#2407881, rhbz#2408158, rhbz#2409066
  - Resolves: rhbz#2409350, rhbz#2409628, rhbz#2410014, rhbz#2410300
  - Resolves: rhbz#2410579, rhbz#2410946, rhbz#2411477, rhbz#2412381
  - Resolves: rhbz#2412530, rhbz#2412682, rhbz#2412762
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.3.1-1
changelog:
  - Update to release v29.3.1
  - Resolves: rhbz#2451425
  - Upstream notes that this release resolves: CVE-2026-34040,
    CVE-2026-33997, CVE-2026-33748, CVE-2026-33747
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.0-1
changelog:
  - Update to release v29.4.0
  - Resolves: rhbz#2455894
  - Resolves  CVE-2026-34986: rhbz#2455665
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.1-1
changelog:
  - Update to release v29.4.1
  - Resolves: 2459826
  - Upstream fixes
  - Built with golang 1.26 (rawhide and f44 only at this time)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.2-1
changelog:
  - Update to release v29.4.2
  - Resolves: rhbz#2459826
  - Upstream fixes
  - This release includes hardening for CVE-2026-31431
  - Temporary skip for branch protection test


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.0.0-1
changelog:
  - Update to release v5.0.0
  - Resolves: rhbz#2414590
  - Upstream notes: 'To avoid confusion with the "v2" and "v3" legacy compose
    file formats, we decided to directly jump to version 5.x'
  - New features and fixes.
  - Major change: 'Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)'


author: Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.0-1
changelog:
  - Update to release v3.1.0
  - Resolves: rhbz#2455529, rhbz#2455654
  - Resolves CVE-2026-35172
  - Resolves CVE-2026-33540
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.1-1
changelog:
  - Update to release v3.1.1
  - Resolves: rhbz#2455529
  - Fixes CVE-2026-41888
  - Upstream fixes and updates
  - Temporary annocheck skip test for broken branch protection test on
    aarch64


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-ATOMIC_VAR_INIT.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-fix-configure-conditional.patch
    elfutils-0.192-more-dwarf5-lang.patch
    elfutils-0.192-fix-zsh-profile.patch
    elfutils-0.192-stacktrace-lto.patch
    elfutils-0.192-imasig-fail-free.patch
    elfutils-0.192-strip-ignore-non-ET_REL.patch


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-aarch64-Recognize-SHT_AARCH64_ATTRIBUTES.patch
    elfutils-0.194-alloc-jobs.patch
    elfutils-0.194-fix-const.patch
    elfutils-0.194-sh_addr-non-zero.patch


author: psklenar@redhat.com <psklenar@redhat.com> - 2.7.1-2
changelog:
  - fedora CI plans move to gitlab for centos-stream test space
    https://issues.redhat.com/browse/RHELMISC-13073


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.19.3-2
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13268 Revert
    "Orphaned for 6+ weeks"


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-3
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.6-6
changelog:
  - Switch to pkg-config style dependency
  - Use SPDX identifier in License: tag and add licensing break-down
  - update build_ldflags instead of messing with LDFLAGS


author: Packit <hello@packit.dev> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: rhbz#2336848


author: Packit <hello@packit.dev> - 0.5.4-1
changelog:
  * packit: drop centos propose downstream and jobs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/743
   * fix: packit: bring back pkg_tool centpkg by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/744
   * Makefile tarball targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/745
   * chore: describe how to release a new version by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/746
   * chore: allow libcryptsetup-rs >= 0.11.2 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/739
   * chore: bump diesel from 2.2.3 to 2.2.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/728
   * Update to latest version of aws-nitro-enclaves-cose by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/724
   * chore: bump reqwest from 0.12.7 to 0.12.9 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/751
   * chore: bump ring from 0.17.8 to 0.17.13 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/754
   * chore: bump futures from 0.3.30 to 0.3.31 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/753
   * chore: prepare 0.5.4 release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/757


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.3...v0.5.4


author: Packit <hello@packit.dev> - 0.5.5-1
changelog:
  * chore: bump openssl from 0.10.70 to 0.10.72 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/758
   * fix: replace default.target with initrd.target by @lbrabec in https://github.com/fdo-rs/fido-device-onboard-rs/pull/762
   * ci(mergify): upgrade configuration to current format by @mergify in https://github.com/fdo-rs/fido-device-onboard-rs/pull/766
   * chore: bump tokio from 1.36.0 to 1.45.1 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/769
   * chore: bump actions/upload-artifact from 3 to 4 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/593
   * chore: bump actions/checkout from 3 to 4 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/551
   * chore: bump regex from 1.10.3 to 1.11.1 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/752
   * chore: bump tss-esapi crate to 7.6 by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/772
   * chore: fix the container deps by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/775
   * chore: bump for 0.5.5 release by @pcdubs in https://github.com/fdo-rs/fido-device-onboard-rs/pull/771

   * @lbrabec made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/762
   * @mergify made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/766

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.4...v0.5.5
  - Resolves: rhbz#2369025


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-3
changelog:
  - Rebuild against MIT Kerberos 1.22.2
  - Fix build against NodeJS in F44/45
  - Allow SELinux policy for ipa-otpd in non-IPA environment (standalone SSSD)
  - Fix freeipa-client package scriptlet to not fail when config is missing
  - Resolves: rhbz#2439482


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-8
changelog:
  - Fix SELinux policy for SSSD MFA helpers
  - Fix cases when passkey child was crashing when called from ipa-otpd


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.1-9
changelog:
  - Ensure proper error code return in case MS-PAC generator not yet enabled
  - Resolves: rhbz#2448253
  - Rebuild against Samba 4.24.0 final release
  - Related: rhbz#2448612


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.0-1
changelog:
  - Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
    CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885,
    CVE-2026-31897)
    Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415
    Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428
    Resolves: rhbz#2447431


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.2-1
changelog:
  - Update to 3.24.2 (CVE-2026-33952, CVE-2026-33977, CVE-2026-33982,
    CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-33986,
    CVE-2026-33987, CVE-2026-33995)
    Resolves: rhbz#2448592


author: Jerry James <loganjerry@gmail.com> - 4.0.0-1
changelog:
  - Version 4.0.0
  - License change from LGPL-3.0-or-later to Apache-2.0
  - Drop upstreamed cmake patch
  - Depend on coin-or-HiGHS and jansson


author: Marek Kasik <mkasik@redhat.com> - 3.12.1-4
changelog:
  - Rebuild (poppler)
  - Statically link stdc++ due to undefined references
  -   Assisted-by: Claude Code


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
  - Backport fixes from upstream to use BeaconDB
  - Use BeaconDB for the default location services source


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-21
changelog:
  - Auto-sync with upstream branch master,
    commit e539a269990dac3ff4d2432c0eb6966a5ee4f274:
  - hurd: Fix sigreturn clobbering some xmm registers (Samuel Thibault)
  - Linux: test sizes larger than UINT_MAX for copy_file_range (Xi Ruoyao)
  - Update the bundled <linux/fuse.h> userspace header from Linux 6.18 (Xi Ruoyao)
  - Linux: fix copy_file_range test on Linux >= 6.18 (Xi Ruoyao)
  - Switch currency symbol for the bg_BG locale to euro (Florian Weimer)


author: Frédéric Bérat <fberat@redhat.com> - 2.42.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 7b543dcdf97d07fd4346feb17916e08fe83ad0ae:
  - elf: Ignore LD_PROFILE if LD_PROFILE_OUTPUT is not set (bug 33797) (Florian Weimer)
  - hurd: make __thread_set_pcsptp align stack (Samuel Thibault)
  - Update advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0951 (Carlos O'Donell)
  - Add advisory text for CVE-2026-0861 (Siddhesh Poyarekar)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915) (Carlos O'Donell)
  - memalign: reinstate alignment overflow check (CVE-2026-0861) (Siddhesh Poyarekar)
  - malloc: Add tst-mallocfork to tests-exclude-threaded exception list (Arjun Shankar)
  - aarch64: Fix LD_AUDIT with GCS in permissive mode (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for GCS handling (Adhemerval Zanella)
  - aarch64: Add LD_AUDIT tests for BTI handling (Adhemerval Zanella)
  - aarch64: Add LD_PRELOAD tests for BTI handling (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_fpclassify for _Float64x/long double" (Adhemerval Zanella)
  - Revert "x86: Do not use __builtin_isinf_sign for _Float64x/long double" (Adhemerval Zanella)
  - aarch64: update NEWS for 2.43 release (Yury Khrustalev)
  - aarch64: Add LD_DEBUG=security to log BTI and GCS warnings (Yury Khrustalev)
  - tst-if_nameindex.c: Fix minimum buffer size (Samuel Thibault)
  - ldbl-128ibm-compat: Add local aliases for printf family symbols (Sachin Monga)
  - math: Fix powerpc64le -Os build after 6b7067460f (Adhemerval Zanella)
  - x86: Fix x86_64 build failure with -Os (BZ 33367) (Adhemerval Zanella)
  - math: Sync acosh from CORE-MATH (Adhemerval Zanella)
  - math: Sync atanh from CORE-MATH (Adhemerval Zanella)
  - math: Sync asinh from CORE-MATH (Adhemerval Zanella)
  - aarch64: Fix error messages for GCS and BTI incompatible modules (Yury Khrustalev)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-1
changelog:
  - Auto-sync with upstream branch master,
    commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc:
  - po: Incorporate translatins (nl updated, ar new) (Andreas K. Hüttel)
  - Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling (Aurelien Jarno)
  - NEWS: add new section 2.43.1 (Andreas K. Hüttel)
  - Replace advisories directory with file ADVISORIES (Andreas K. Hüttel)
  - Create ChangeLog.old/ChangeLog.32 (Andreas K. Hüttel)
  - version.h, include/features.h: Increase version number (Andreas K. Hüttel)
  - contrib.texi: Add missing accent (Andreas K. Hüttel)
  - tst-cond23: add <support/test-driver.h> include (Aurelien Jarno)
  - install.texi, INSTALL: update versions (Andreas K. Hüttel)
  - contrib.texi: Updates (Andreas K. Hüttel)
  - NEWS: Insert list of fixed security advisories (Andreas K. Hüttel)
  - NEWS: Mention build issues due to const-preserving macros (Andreas K. Hüttel)
  - NEWS: Insert list of fixed bugs (Andreas K. Hüttel)
  - NEWS: Editorial changes (Andreas K. Hüttel)
  - NEWS: Additional items and minor consolidation (Andreas K. Hüttel)
  - NEWS: Group ISO C23 related changes (Andreas K. Hüttel)
  - po: Incorporate translations (Andreas K. Hüttel)
  - Update advisory text for GLIBC-SA-2026-0003 (Adhemerval Zanella)
  - Add advisory text for CVE-2025-15281 (Carlos O'Donell)
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814) (Adhemerval Zanella)
  - libc.pot: regenerate (Andreas K. Hüttel)
  - Linux: fix tst-copy_file_range-large failure in 32-bit glibc build on 64-bit kernel [BZ 33790] (Xi Ruoyao)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-2
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 48f5a05a7a1eeb9e0567ab429f654648f831307f:
  - nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940) (Florian Weimer)
  - Linux: In getlogin_r, use utmp fallback only for specific errors (Florian Weimer)
  - nss: Introduce dedicated struct nss_database_for_fork type (Florian Weimer)
  - Don't include <bits/openat2.h> directly (bug 33848) (Andreas Schwab)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-3
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit ce1013a197eb4a3b8ff2b07e0672f4d0b976ce7c:
  - tests: fix tst-rseq with Linux 7.0 (Michael Jeanson)
  - riscv: Resolve calls to memcpy using memcpy-generic in early startup (Adhemerval Zanella Netto)
  - elf: Use dl-symbol-redir-ifunc.h instead _dl_strlen (Adhemerval Zanella)
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso (Xi Ruoyao)
  - resolv: Check hostname for validity (CVE-2026-4438) (Carlos O'Donell)
  - resolv: Count records correctly (CVE-2026-4437) (Carlos O'Donell)
  - posix: Run tst-wordexp-reuse-mem test (Florian Weimer)
  - aarch64: Tests for locking GCS (Yury Khrustalev)
  - aarch64: Lock GCS status at startup (Yury Khrustalev)
  - tests: aarch64: fix makefile dependencies for dlopen tests for BTI (Yury Khrustalev)
  - malloc: Avoid accessing /sys/kernel/mm files (Wilco Dijkstra)
  - Add BZ 33904 entry to NEWS (Adhemerval Zanella)
  - debug: Fix build with --enable-fortify-source=1 (BZ 33904) (Adhemerval Zanella)


author: Florian Weimer <fweimer@redhat.com> - 2.43-4
changelog:
  - Add downstream patches with fixes for vulnerabilities.
  - Fix buffer overflow in scanf %mc (CVE-2026-5450)
  - Fix ns_sprintrrf buffer overreads (CVE-2026-6238)
  - Fix ns_sprintrrf buffer overflow in TSIG record processing (CVE-2026-5435)
  - Fix memory corruption in ungetwc (CVE-2026-5928)
  - Auto-sync with upstream branch release/2.43/master,
    commit 8362e8ce10b24068bacc19552c128dd10e082fd9:
  - iconv: Use pending character state in IBM1390, IBM1399 character sets
    (CVE-2026-4046)


author: Frédéric Bérat <fberat@redhat.com> - 2.43-5
changelog:
  - Auto-sync with upstream branch release/2.43/master,
    commit 4070d808bea1c077eb7e7d52b52b91cae98205d5:
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (Rocket Ma)
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (Rocket Ma)
  - abilist.awk: Handle weak unversioned defined symbols (H.J. Lu)
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921) (Florian Weimer)
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h (DJ Delorie)
  - Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046) (Florian Weimer)
  - Remove applied or redundant patches:
    - glibc-RHEL-172420.patch
    - glibc-RHEL-172421.patch


author: Carl George <carlwgeorge@fedoraproject.org> - 2.1.2-1
changelog:
  - Update to version 2.1.2 rhbz#2457076
  - Update vendored goldmark to 1.7.17 to resolve CVE-2026-5160


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 2:25.0.0-1
changelog:
  - Updated to v25.0.0.
  - The high-level API for manipulating GNAT project files has been split off from
    the set of core components. It is now part of a new subpackage,
    gnatcoll-projects.
  - Project file gnatcoll.gpr is superseded by two new project files:
    gnatcoll_core.gpr and gnatcoll_projects.gpr. The old project file,
    gnatcoll.gpr, is still available from gnatcoll-projects-devel.


author: Milan Crha <mcrha@redhat.com> - 50~beta-7
changelog:
  - dnf5-plugin: Update the dnf5 plugin with the recent upstream fixes
  - reload package information after repository is enabled
  - change when repository GPG keys are auto-accepted
  - show fedora-third-party repositories in their section


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2.4.8-4
changelog:
  - add a root certificate bundle due to changes in ca-certificates (#2380121)
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile


author: Clemens Lang <cllang@redhat.com> - 2.4.9-1
changelog:
  - New upstream release 2.4.9
  - Fixes CVE-2025-68973 (https://gpg.fail/memcpy)
  - Fixes https://gpg.fail/sha1
  - Fixes https://gpg.fail/detached


author: Christian Krause <chkr@fedoraproject.org> - 4.3-1
changelog:
  - Fix FTBFS (#2261207)
  - Update to latest upstream release 4.3
  - Update patch for linking lua dynamically
  - Add patch to avoid using deprecated Python modules


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.5-5
changelog:
  - Handle test issues related to libfpm / perf counters
  - Skip perf counter tests on s390x
  - Serialize the multi-threaded perf counter test


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Milan Crha <mcrha@redhat.com> - 4.22.1-2
changelog:
  - Add a patch "gtkapplication-wayland: Add a missing NULL check when
    forgetting a window"
  - Resolves: rhbz#2450986


author: Paul Howarth <paul@city-fan.org> - 3.3.121-6
changelog:
  - Add dependency on gdk-pixbuf2-modules-extra, needed for XPM support on
    F-41, EL-10 onwards
    (https://github.com/gtkwave/gtkwave/issues/417#issuecomment-2682344768)


author: Paul Howarth <paul@city-fan.org> - 3.3.122-1
changelog:
  - Update to 3.3.122
    - Buffer warning fix in fstVcdIDForFwrite
    - Warning fixes in vzt_read.c and fstapi.c
    - Prototype fixes for port to gcc15
    - Fixes for tcl9 compatibility
    - Added fixes for --saveonexit command line option
    - Fix for convert_real for TR_REAL traces
    - Fix for popen_san() in vcd2fst using fsdb binaries
    - Added fstWriterGetFlushContextPending() to fstapi.c/.h
    - Reenable wayland code for primary and baseline markers in wavewindow.c
    - Unnamed scope fix for fstReader
    - Opaque pointer warning fix for fstapi.c
    - Remove broken pseudo-2D array support in fst.c
    - Fix in fst.c for signals whose MSB/LSB/len mismatch
    - libfst #15: fstReaderOpen should not fail on empty FST file
    - Fix crash introduced in 3.3.120 with legacy VCD loader caused by
      "Fix case of missing newline at EOF for VCD loaders"
    - Fix fstminer not handling string transitions correctly (GH#423)
    - Fix in fst.c for duplicate string values
    - Remove duplicate string values from adjacent value changes
    - libghw: Add from upstream for ghdl_rtik_type_i64
    - Fix inconsistent handling of invalid vector bounds in VCD and FST loaders
      (GH#428)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 3.3.123-1
changelog:
  - Update to 3.3.123
    - Fix broken autocoalesce of bitblasted vectors that fix for GH#428 in
      3.3.122 introduced
    - Fix improper autocoalesce of adjacent duplicate symbols
    - Preserve dimension on integer array element when expanded


author: Paul Howarth <paul@city-fan.org> - 3.3.124-1
changelog:
  - Update to 3.3.124
    - Ensure type name in $var for VCD saver is >0 length
    - Preserve bitblasted vector ordering with VCD saver.
    - Use full type names in VCD saver instead of abbreviations
    - Dump all bits for a bitblasted vector in VCD saver in order to ensure
      stray bit extractions do not cause a failure to reconstruct vectors in
      proper order in the extracted file


author: Paul Howarth <paul@city-fan.org> - 3.3.125-1
changelog:
  - Update to 3.3.125
    - Added json2stems to distribution to support newer versions of Verilator
    - VCD parser fix for colon in VCD variable name
    - Parameter size 0 fix for Vivado: backs out very old fix (for MTI) that
      converts 0 size signals to reals
    - Update vcd2fst so that it handles MTI 0 size conversion


author: Paul Howarth <paul@city-fan.org> - 3.3.126-1
changelog:
  - Update to 3.3.126
    - Added -H --noheader command line option for GTK3
    - Added headerbar rc variable to disable GTK3 headerbars
    - Fix for rendering multiline string constants in dumps
    - Add warning message for missing XPM loader
    - Updated libghw to current version
    - Changed behaviour of X search in pattern search so it is matched by a
      single X bit


author: Paul Howarth <paul@city-fan.org> - 3.3.127-1
changelog:
  - Update to 3.3.127
    - Fix for fixed point shift that does not disable it on the specify value
      change menu option
    - Changed ps2pdf to pstopdf on Mac as ps removed by Sonoma
    - Warnings fix in vcd2fst for missing string.h include
    - Added FST_ST_SV_ARRAY (FST) and "sv_array" (VCD) for arrays
      (gtkwave/libfst#17)
    - Wrote replacement for gdk_pixbuf_new_from_xpm_data
    - Update FSDB to handle FST_ST_SV_ARRAY (VCS emits this),
      FSDB_ST_SV_INTERFACEPORT_REF, and FSDB_VT_STRING
    - Added "SV_ST_ARRAY" to exclude file parsing on init
    - Fix use after free of GLOBALS->entrybox_text in regexp_highlight_generic()
  - Drop dependency on gdk-pixbuf2-modules-extra, XPM support now done locally


author: Parag Nemade <pnemade AT redhat DOT com> - 13.0.0-2
changelog:
  - Upstream added new binary hb-vector
  - Upstream added new pkgconfig files harfbuzz-raster.pc and harfbuzz-vector.pc
  - Added new subpackages harfbuzz-raster and harfbuzz-vector


author: Andrea Musuruane <musuruan@gmail.com> - 2.6.1-3
changelog:
  - Rebuilt for SDL3 >= 3.4.2 (fixes BZ #2434639)
  - Added missing dependency for gobject-introspection


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.34~rc1-1
changelog:
  - Bump to 1.5.34-rc1
  - Update translations
  - Fix "no memory" error with focus changes in Sway
  - Resolves #2444009 Latch key in Latvian(tilde) keymap
  - Fix only GTK3 builds
  - Close leaked keymap fd on early return in ibus-wayland


author: Mike FABIAN <mfabian@redhat.com> - 1.4.34-1
changelog:
  - Update to 1.4.34
  - Add the “S-” prefix to msymbols for non-ASCII characters only if the
    character “is not graph”. “is not graph” is the same as “is space or is
    not printable”. (Resolves: https://github.com/ibus/ibus-m17n/issues/90)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.35-1
changelog:
  - Update to 1.4.35
  - Generate translations into metainfo.xml files with autotools Related:
    https://github.com/mike-fabian/ibus-m17n/issues/2
  - Rename m17n.appdata.xml to org.freedesktop.ibus.engine.m17n.metainfo.xml
    (Resolves: https://github.com/mike-fabian/ibus-m17n/issues/2)
  - Fix match pattern for layout for inscript
  - Fix match pattern for rank for inscript2


author: Mike FABIAN <mfabian@redhat.com> - 1.4.37-1
changelog:
  - Update to 1.4.37
  - Port UI to GTK4 (Resolves: github-issue#99). Configure option for Gtk4
    added: “--with-gtk=2.0|3.0|4.0|no” (default: 4.0)
  - Translation update from Weblate (cs 100%, de 100%, el 100%, es 100%,
    new: fi 100%, fr 100%, ja 100%, ka 100%, kab 100%, lt 100%, pt_BR
    100%, ro 96%, ru 100%, sv 100%, tr 100%, uk 100%, zh_CN 100%,
    zh_TW 28%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.38-1
changelog:
  - Update to 1.4.38
  - Convert png icons from 16-bit to 8-bit color (Resolves:
    https://github.com/ibus/ibus-m17n/issues/107)


author: Timothée Ravier <tim@siosm.fr> - 2.26.0-4
changelog:
  - F44+: Ship OpenSSH config file specifying AuthorizedKeysFile
  - Have ignition-edge require the matching main ignition package


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.2-1
changelog:
  - Update to 2.2
  - Close: rhbz#2352408
  - Refresh license field (analysed with scancode-toolkit and manually reviewed)


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.3-4
changelog:
  - Panthor lacks big-endian support and has no Meson toggle, strip it from
    build files for BE archs


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.4-1
changelog:
  - update igt-gpu-tools to 2.4 - removed json-c old dependency - added
    jansson and pciutils-devel new dependencies - disabled tests/amdgpu for
    unsupported arches s390x ppc64 ppc64le aarch64 - updated upstream bug
    with current details at [1] [1] https://gitlab.freedesktop.org/drm/igt-
    gpu-tools/-/work_items/171


author: Packit <hello@packit.dev> - 48-1
changelog:
  Changes with 48
  ----------------
    - Add pxe-tar-xz to bib types and add boot tests for f43, stream9, and stream10 (#436)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support rootless bootc-image-builder (#445)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: fix constant format string (#438)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - tests: Fix bootc pxe testing (#439)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 50-1
changelog:
  Changes with 50
  ----------------
    - SPEC: define default permissions for /var/cache/image-builder (#454)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - build(deps): bump actions/cache from 4 to 5 (#434)
      - Author: {}, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - deps: bump Go to 1.24.12 and use new Go functions (#452)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to v0.240.0 (#456)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-17


author: Packit <hello@packit.dev> - 51-1
changelog:
  Changes with 51
  ----------------
    - go.mod: update osbuild/images to v0.243.0 (#457)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-19


author: Packit <hello@packit.dev> - 53-1
changelog:
  Changes with 53
  ----------------
    - chore: bump dependencies via gobump (#475)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: allow specifying AWS credentials profile (#443)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: bump images to 0.248.0 (#479)
      - Author: Simon de Vlieger, Reviewers: Nobody
    - docs: update COPR command for RHEL (#477)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - test: bump ISO timeout (#469)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2026-03-13


author: Packit <hello@packit.dev> - 55-1
changelog:
  Changes with 55
  ----------------
    - chore: bump dependencies via gobump (#460)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal
    - deps: bump images (#483)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Anna Vítová

  — Somewhere on the Internet, 2026-03-24


author: Packit <hello@packit.dev> - 57-1
changelog:
  Changes with 57
  ----------------
    - deps: update `images` to 0.254.0 (#489)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-06


author: Packit <hello@packit.dev> - 58-1
changelog:
  Changes with 58
  ----------------
    - deps: bump images to 0.256.0 (#491)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal

  — Somewhere on the Internet, 2026-04-07


author: Packit <hello@packit.dev> - 63-1
changelog:
  Changes with 63
  ----------------
    - deps: bump images to 0.259.0 (#501)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - docs: update satellite info (#503)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: `--version` -> `version` subcommand (#505)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - many: Generate rpmlist as an output of manifestgen (#502)
      - Author: Anna Vítová, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-29


author: Packit <hello@packit.dev> - 64-1
changelog:
  Changes with 64
  ----------------
    - cmd: drop "bootc is experimental" (#510)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - deps: bump osbuild/images dependency (#507)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - deps: update dependencies (w/o osbuild/images) (#508)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - doc: fix broken link (#509)
      - Author: Simon de Vlieger, Reviewers: Anna Vítová, Lukáš Zapletal
    - doc: introduce advanced bootc (#462)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - docs: generate manpages (#504)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - main: hide `--use-librepo` (#513)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - main: hide `--with-rpmlist` (#512)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-05-13


author: Patrick Monnerat <patrick@monnerat.net> 13.0.50.20220502-27
changelog:
  - Patch "cve-2025-11082" fixes CVS 2025-11082.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400356
  - Patch "cve-2025-11083" fixes CVS 2025-11083.
    https://bugzilla.redhat.com/show_bug.cgi?id=2400349
  - Conditional explicit BR tcl/tk 8.
  - Dummy rpm check section.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-1
changelog:
  - New upstream snapshot.
  - Fixes CVEs 2025-11494, 2025-11495, 2026-2341, 2026-3441, 2026-3442.
    https://bugzilla.redhat.com/show_bug.cgi?id=2402843
    https://bugzilla.redhat.com/show_bug.cgi?id=2402846
    https://bugzilla.redhat.com/show_bug.cgi?id=2438918
    https://bugzilla.redhat.com/show_bug.cgi?id=2443834
  - Fixes CVEs 2025-69644, 2025-69645, 2025-69646.
    https://bugzilla.redhat.com/show_bug.cgi?id=2445281
    https://bugzilla.redhat.com/show_bug.cgi?id=2445284
    https://bugzilla.redhat.com/show_bug.cgi?id=2446276
  - Fixes FTBFS.
    https://bugzilla.redhat.com/show_bug.cgi?id=2434680
  - Relax BR of itcl/itk/iwidgets.
  - Patch "libtool_tag" to force C++ language tagging in libtool.


author: Patrick Monnerat <patrick@monnerat.net> 18.0.50.20260306-3
changelog:
  - Fix CVE-2026-6846.
    https://sourceware.org/bugzilla/show_bug.cgi?id=34049
    https://bugzilla.redhat.com/show_bug.cgi?id=2460525


author: Martin Osvald <mosvald@redhat.com> - 3.0.2-5
changelog:
  - Do not set environmental variables to prevent clashes with compilation
    time settings (rhbz#2428214)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.4-0]
changelog:
  - wifi: mt76: mt7925: fix incorrect TLV length in CLC command (Quan Zhou)
  - ASoC: SOF: Don't allow pointer operations on unconfigured streams (Mark Brown)
  - Turn on DVB_PT3 for Fedora at user request (Justin M. Forbes)
  - Enable MEDIA_TUNER_MXL301RF for Fedora (Justin M. Forbes)
  - mfd: bcm2835-pm: Add BCM2712 PM device support (Phil Elwell)
  - mfd: bcm2835-pm: Introduce SoC-specific type identifier (Phil Elwell)
  - Linux v7.0.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.6-0]
changelog:
  - net: skbuff: propagate shared-frag marker through pskb_copy() (Hyunwoo Kim)
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling)
  - Add BugsFixed for 7.0.7 (Justin M. Forbes)
  - ovl: fix verity lazy-load guard broken by fsverity_active() semantic change (Colin Walters)
  - Revert rxrpc dirtyfrag fix in favor of version which landed upstream (Justin M. Forbes)
  - Re-enable Intel MEI for Fedora x86 (Justin M. Forbes)
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim)
  - Linux v7.0.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.7-0]
changelog:
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert old fragnesia fixes in favor of more complete solution (Justin M. Forbes)
  - Revert old fragnesia fixes in favor of more complete solution (Justin M. Forbes)
  - Change version in Bugsfixed due to build (Justin M. Forbes)
  - Linux v7.0.7


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.8-0]
changelog:
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert v3 of the fragnesia fixes as v4 covers an additional case (Justin M. Forbes)
  - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Pauli Virtanen)
  - Linux v7.0.8


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-0]
changelog:
  - Turn on XFS_ONLINE_REPAIR for Fedora (Justin M. Forbes)
  - Enable SND_DESIGNWARE for Fedora x86 (Justin M. Forbes)
  - Enable HID_SENSOR_PROX for Fedora x86 (Justin M. Forbes)
  - drm/i915/dp_tunnel: Don't update tunnel state during system resume (Imre Deak)
  - Linux v7.0.9


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-0]
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - Revert fragnesia for so I can replace it with the newer one (Justin M. Forbes)
  - net/sched: act_pedit: extend the writable skb range per key (Zhang Cen)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-4]
changelog:
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)


author: Justin M. Forbes <jforbes@fedoraproject.org> [7.0.9-5]
changelog:
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling)
  - xfrm: esp: restore combined single-frag length gate (Jingguo Tan)
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells)
  - Revert "v3 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg" (Justin M. Forbes)
  - Revert "v3 rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer" (Justin M. Forbes)
  - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
  - ASoC: rt722-sdca: add FU06 Playback Switch for speaker mute control (Aaron Ma)
  - ASoC: amd: ps: fix the pcm device numbering for acp pdm dmic (Syed Saba Kareem)
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Mark Pearson)
  - ASoC: amd: acp-sdw-legacy: rename the dmic component name (Vijendar Mukunda)
  - ASoC: amd: acp: update dmic_num logic for acp pdm dmic (Vijendar Mukunda)


author: Julien Rische <jrische@redhat.com> - 1.22.2-2
changelog:
  - Force "fork" method for RADIUS daemon in OTP test
  - Create sub-package for xrealmautz KDC plugin
  - resolves: rhbz#2437324
  - Fix PKINIT paChecksum2 ASN.1 tests


author: Julien Rische <jrische@redhat.com> - 1.22.2-4
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  - resolves: rhbz#2463398
  - resolves: rhbz#2463395
  - Add upstream patches to build against openssl 4.0
  - Make configure.ac work with autoconf 2.73


author: Michal Hlavinka <mhlavink@redhat.com> - 692-4
changelog:
  - update lesspipe to 2.23
  - dont use html to process xml files, the result isnt usable (rhbz#2451451)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Add xxhash-devel as BuildRequires
  - Update library to libabigail.so.5.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Do not build with by default XXH_INLINE_ALL anymore
  - Drop xxhash-static dependency
  - Add xz-devel >= 5.2.0 dependency to support reading xz-compressed binaries
  - Support new libabigail.so.6.0.0 SONAME


author: Dodji Seketeli <dodji@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Support new libabigail.so.8.0.0 SONAME
  - Run 'make check check-self-compare' instead of two separate make invocations.


author: Viktor Malik <vmalik@redhat.com> - 2:1.6.2-2
changelog:
  - Add libbpf-usdt-devel subpackage containing the usdt.h single-header library
    for creating USDTs (User Statically-Defined Tracepoints).


author: Remi Collet <remi@remirepo.net> - 1.30.6-2
changelog:
  - temporarily drop man pages on Fedora 44 as FTBFS
    reported as https://jira.mongodb.org/browse/CDRIVER-6210


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Dominik Mierzejewski <dominik@greysector.net> - 0.7.5-2
changelog:
  - fixed duplicate files warning
  - made file lists more explicit
  - corrected License tag
  - added missing Provides: for bundled parson
  - added executable bit to fwfetcher.py script and fixed shebang
  - avoid timestamps in generated docs for reproducibility


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Mattia Verga <mattia.verga@proton.me> - 2.1.7-1
changelog:
  - Update to 2.1.7 (Fedora#2419094)
  - Switch to use system's hidapi libs
  - QT client now built on QT6


author: Jan Macku <jamacku@redhat.com> - 1.68.0-4
changelog:
  - add missing build dependency on systemd-devel (#2460065)
  - install missing sample configuration file for nghttpx service (#2460064)


author: Jerry James <loganjerry@gmail.com> - 10.0.0-1
changelog:
  - Version 10.0.0
  - Add dtoa to License
  - Add patch to fix crashes in SCIPcreateConsBasicSOCNonlinear
  - Add patch to fix floating point output on s390x
  - Workaround float128/long double clash on ppc64le
  - Build with OpenMP support


author: Jerry James <loganjerry@gmail.com> - 3.5.2-1
changelog:
  - Version 3.5.2
  - Drop all patches
  - Add MIT to license due to rx-ranges and magic_enum
  - Drop the doc subpackage due to unavailable dependencies
  - Use HPCombi on aarch64


author: Remi Collet <remi@remirepo.net> - 1.0.21-1
changelog:
  - update to 1.0.21
  - open https://github.com/jedisct1/libsodium/discussions/1503 build failure on aarch64
  - workaround build failure using -flax-vector-conversions on aarch64


author: Petr Písař <ppisar@redhat.com> - 0.7.36-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (upstream GH#616)


author: Simone Caronni <negativo17@gmail.com> - 1.01^20250317git3e6edf1-1
changelog:
  - Update to latest snapshot.
  - Update to latest snapshot for libsurvive-extras-data that now is properly
    licensed.
  - cnmatrix and cnkalman are now part of the source.
  - Unconditionally enable tests.
  - Drop soon to be removed python bindings from cnkalman.
  - Move all licensing information in one place.
  - Sort libraries being bundled.
  - Enable sciplot for build.


author: Jerry James <loganjerry@gmail.com> - 3.6.2-1
changelog:
  - Version 3.6.2
  - Use zlib-ng directly instead of via the compatibility interface
  - Temporarily disable one failing test on ppc64le


author: Jerry James <loganjerry@gmail.com> - 3.6.2-2
changelog:
  - Work around a test failure
  - The failure appears to be due to changes in bsearch behavior in newer
    glibc builds


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.01.12-1
changelog:
  - update to 2026.01.12 (resolves rhbz#2428676)
  - switch Source URL to https newly provided by upstream


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2026.02.26-1
changelog:
  - update to 2026.02.26 (resolves rhbz#2442890)
  - add strict dependency on main package to -tools subpackage


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.287-3
changelog:
  - Add explicit folder definitions for cases where XDG Base Directory spec
    variables are not defined


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Stefan Becker <chemobejk@gmail.com> - 2.10-1
changelog:
  - Rebase to upstream version 2.10 (rhbz#2208236)
  - Add patch to fix baudrate setting on F43+ (rhbz#2407160)


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: Tom Callaway <spot@fedoraproject.org> - 2.1.2-2
changelog:
  - add explicit Requires on cjson-devel to mosquitto-devel (header assumes the cjson headers are also present)


author: Jerry James <loganjerry@gmail.com> - 0.9.0-4
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-1
changelog:
  - rebase to 1.27.1 (rhbz#2412002)
  - changes to mutool run to bring it into sync with WASM library
  - improvements for text extraction
  - improved HTML+CSS support
  - mutool grep: new tool to search for text in documents
  - various bugfixes


author: David Abdurachmanov <davidlt@rivosinc.com> - 8.4.7-5
changelog:
  - Disable numactrl and libquadmath on risc-v
  - Disable ld.gold on risc-v
  - Add list of skipped tests for risc-v


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.7-1
changelog:
  - require only git-core which is already sufficient for %autosetup -S git_am
  - rebase to latest upstream release (rhbz#2414527)


author: Mark McKinstry <mmckinst@fedoraproject.org> - 20240728-1
changelog:
  - upgrade to 20240728
  - include work from Xose Perez https://src.fedoraproject.org/rpms/nawk/pull-request/7


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20260105-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Richard Russon <rich@flatcap.org> - 20260406-1
changelog:
  - Features
    - #4799 Add IMAP connection monitoring, timeouts, and reconnection backoff
  - Bug Fixes
    - #4755 Fix off-by-one in ARRAY_RESERVE()
    - #4819 Fix IMAP crash when changing folders
    - Fix freeze in IMAP with OpenSSL
    - Fix blocking IMAP pipeline drain with many mailboxes
    - Fix crash on threaded index update
    - Fix crash on NULL thread in display subject
    - Fix menu half-down when data fits in one page
    - Fix alias search prompt
    - Fix index tag colours
    - Protect hooks against unhook during execution
    - Fix leak in pattern alias search
    - Consistently convert headers to LF EOL convention
  - Changed Config
    - Changed: `compose_show_preview = yes`
    Display a preview of the message body in the Compose window
  - Docs
    - `$message_id_format`: mention Base64Url encoding
    - Fix descriptions of deprecated config options
  - Build
    - #4826 Use optreset on Solaris too
    - #4827 Avoid function name clash on Solaris
    - #4828 Allow Solaris to use qsort_s
    - Check docs requirements in configure
  - Code
    - Fix graphviz debug output


author: Richard Russon <rich@flatcap.org> - 20260504-1
changelog:
  - Security
    - Fix GSSAPI buffer underflow on short unwrapped tokens
    - Reject percent-encoded NUL bytes in URL decoding
    - Skip CN fallback when SAN dNSName entries exist (RFC6125)
    - Cap POP3 UIDL responses to prevent OOM from a malicious server
    - Harden POP host URL copy
  - Bug Fixes
    - #4836 imap: fix memory leak in `msg_parse_flags`
    - #4849 Fix memmove in `mutt_str_expand_tabs`
    - #4850 IMAP: enhance stability with re-entrancy protection and reconnection fixes
    - #4852 Say which mailcap field we are looking for
    - #4853 Don't overwrite content_type
    - pager: fix crash on `uncolor *`
    - pager: fix wrong line index in signature syntax realloc
    - pager: fix OOB read on short log lines in `display_line()`
    - pager: fix off-by-one in newline restoration
    - imap: fix sort for missing emails
    - imap: fix crash when syncing mailbox on exit
    - Fix crash in `cmd_parse_fetch()` when edata is NULL
    - log: fix missing errors on startup
    - Force cursor to be visible on exit


author: Andreas Schneider <asn@redhat.com> - 0.11.4-1
changelog:
  - Update to version 0.11.4
  - https://github.com/neovim/neovim/releases/tag/v0.11.4
  - resolves: rhbz#2392274


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-4
changelog:
  - Fix RHEL 8 & 9 compatibility
  - Fix SSL passphrase dialog patch when used with OpenSSL < 3 (EL8 w/o EPEL)
  - Build now works with and without EPEL enabled


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-9
changelog:
  - Spec file and macro cleanups
  - move some files into the packages that have the dependencies they rely on
    (e.g. systemd, logrotate are not present in nginx-core, so don't install
    files pertaining to them there)
  - remove unused LDFLAGS and DESTDIR overrides, for perl we patch the
    Makefile.PL already
  - use zlib-ng-devel dependency also in nginx-mod-devel
  - improve macro consistency
  - sync configure command in macros.nginxmods.in with main package


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.0-1
changelog:
  - update to 1.30.0
  - drop upstreamed manpage patch - https://github.com/nginx/nginx/pull/1089
  - refresh other patches


author: Felix Kaechele <felix@kaechele.ca> - 2:1.30.1-1
changelog:
  - update to 1.30.1
  - fixes CVE-2026-42926, CVE-2026-42945, CVE-2026-42946, CVE-2026-42934,
    CVE-2026-40460 and CVE-2026-40701


author: Jens Petersen <petersen@redhat.com> - 2.34.7-1
changelog:
  - update to 2.34.7 (rhbz#2457630) fixes GHSA-vh5x-56v6-4368
  - https://discourse.nixos.org/t/security-advisory-local-privilege-
    escalation-in-lix-and-nix/77407
  - https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: Martin Gansser <martinkg@fedoraproject.org> - 0.2.0^20241204git8ac191c-1
changelog:
  - Update to last git commit
  - Add 0001-fix-qt6-arg-format.patch
  - Add 0002-fix-qt6-arg-sampleformat.patch


author: Simone Caronni <negativo17@gmail.com> - 9.12-8
changelog:
  - Clean up SPEC file, drop EOL distro conditionals and macros.
  - Fix Source URL, the old one is no longer valid.
  - Use macros everywhere.
  - Sort BuildRequires, files, configure parameters, etc.
  - Be consistent with macros and variables.
  - Trim changelog.


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Update to 3.25.0
  - Drop patches which are included in upstream
  - Adapt p11sak patch
  - Fix RPM build warnings
  - Add jq and openssl in Build Requirement, required for testcases


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Require openssl >= 3.5.1
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
  - Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Fix the image mode issue again as bootc expects to use /run/lock


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.0-1
changelog:
  - New upstream release (#2311896)
  - Separate OpenSC into libraries and binaries
  - Change expected test failures in FIPS mode
  - Do not build with OpenPACE on RHEL


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - New upstream release (#2442363) fixing various security issues:
    - CVE-2025-66038 Memory corruption via improper compact-TLV length validation
    - CVE-2025-66215 Stack-buffer-overflow with physical access via crafted smart card or USB device
    - CVE-2025-49010 Stack-buffer-overflow via crafted smart card or USB device responses
    - CVE-2025-66037 Out-of-bounds read via crafted input
    - CVE-2025-13763 Several uses of potentially uninitialized memory detected by fuzzers


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-6
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex


author: Zoltan Fridrich <zfridric@redhat.com> - 10.2p1-8
changelog:
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: rhbz#2454941
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: rhbz#2454951
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: rhbz#2454944
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: rhbz#2454943
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: rhbz#2454961


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5, resolving CVE-2025-15467, CVE-2025-15468,
    CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420,
    CVE-2025-69421, CVE-2025-69419, CVE-2026-22795, CVE-2026-22796, CVE-2025-11187


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.5-2
changelog:
  - Backport security patches from OpenSSL 3.5.6
    Resolves: CVE-2026-2673
    Resolves: CVE-2026-28387
    Resolves: CVE-2026-28388
    Resolves: CVE-2026-28389
    Resolves: CVE-2026-28390
    Resolves: CVE-2026-31789
    Resolves: CVE-2026-31790


author: Packit <hello@packit.dev> - 154-1
changelog:
  Changes with 154
  ----------------
    - CI: run testing on RHEL 9.8 and 10.2 nightly (HMS-9226) (#4893)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20251023 (#4905)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4895)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - cloudapi: add new dnf customizations [HMS-9335] (#4899)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - cloudapi: split out resolver job enqueueing into a separate function (#4894)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - fix worker AMI builds by not running mock as root (#4902)
      - Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers
    - gitlab: only update github status at the end of the pipeline(s) (#4900)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane, Sanne Raymaekers
    - go.mod: update images to v0.209.0 (#4901)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: update osbuild/images to v0.208.0 (#4898)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Ondřej Budai
    - test/cases/usbi-wsl: delete azure resources in order (#4896)
      - Author: Sanne Raymaekers, Reviewers: Simon de Vlieger, Tomáš Hozza
    - worker: support partial results (HMS-9343) (#4897)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Packit <hello@packit.dev> - 162-1
changelog:
  Changes with 162
  ----------------
    - Add Transactions and Modules fields to depsolve job result (HMS-9090) (#5006)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Move workers to rhel 10 (HMS-9987) (#4975)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    - Update snapshots to 20260201 (#4997)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - cloudapi/v2: allow upload types for pxe & network installer (HMS-10178) (#5004)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - go.mod: bump osbuild/images to v0.236.0 (HMS-10105) (#4990)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    - templates/packer: fix registration script (#5007)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Lukáš Zapletal
    - tests: Update Upgrade test to RHEL 9.8 from 9.7 (#4999)
      - Author: Tomáš Koscielniak, Reviewers: Brian C. Lane, Tomáš Hozza
    - tools/build-rpms: build rpms on rhel 10 (#5005)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 165-1
changelog:
  Changes with 165
  ----------------
    -  templates/packer: set crypto policy to LEGACY on rhel workers (#5038)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Anna Vítová, Gianluca Zuccarelli
    - Schutzfile: bump osbuild (#5044)
      - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Lukáš Zapletal
    - Update osbuild/images to v0.242.0 and enable aws-cvm in cloud API (#5026)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#5043)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    - cloudapi/v2: add content sets to subscription image options (HMS-8857) (#4981)
      - Author: Bryttanie, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - cloudapi: Add optional blueprint-id UUID field (HMS-3881) (#4996)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: bump osbuild/images to v0.244.0 (#5033)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-04


author: Packit <hello@packit.dev> - 168-1
changelog:
  Changes with 168
  ----------------
    - Add DequeueAnyChannel to enable multi-tenant BootcPreManifest processing (HMS-10445) (#5084)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Ondřej Budai
    - Fail bootc composes on composer build version mismatch (HMS-10378) (#5082)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Ondřej Budai
    - Make bootc container source type configurable (HMS-10262) (#5087)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Replace monolithic bootc-manifest worker job with multi-stage server-orchestrated job graph (HMS-10378) (#5069)
      - Author: Tomáš Hozza, Reviewers: Nobody
    - Update snapshots to 20260405 (#5080)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - chore(deps): update konflux references (#5070)
      - Author: {}, Reviewers: Anna Vítová, Lukáš Zapletal
    - chore(deps): update konflux references (#5089)
      - Author: {}, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - chore: add .gitattributes file (#5078)
      - Author: Lukáš Zapletal, Reviewers: Anna Vítová, Simon de Vlieger, Tomáš Hozza
    - cloudapi: Add fedora names for network-installer (#5079)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - cmd/osbuild-worker: cleanup jobimpl-osbuild.go (#5083)
      - Author: Anna Vítová, Reviewers: Brian C. Lane, Tomáš Hozza
    - templates/packer: add container registries init script (#5086)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - worker: use slices.EqualFunc to compare dependency modules (#5085)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-04-15


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Numan Siddique <numans@ovn.org> - 25.09.0-1
changelog:
  - Updated the OVN sources to upstream release v25.09.0 with the
    commit 8890abf5a25b7b67f08aca8917c1d00cf2296a56 and picked up
    the commits from v25.09.0 till the tip of branch-25.09
    b5f5e0f9cf58a4062a3709b237d152127eba445f (42 commits) in ovn.patch
  - Updated the OVS sources to the branch-25.09 ovs submodule
    commit - 852f07e5251c6a0c0d5c43dc980d12a4f1bcd370


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-1
changelog:
  - Updated the OVN sources to the upstream release v25.09.2 with the
    commit e3e0587865d8f02d0a8f72de53b82e464c5029d8.


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-82
changelog:
  - Updated the OVN sources to pick up the commits from v25.09.2 till the
    tip of branch-25.09 (c7066edbc3985f06c6bfa45e3724088baa97c4bd).
  - Updated the OVS sources to the branch-25.09 OVS submodule
    commit da6b84d691593e57951bcc5f2f916336c6e0d5cc.


author: Dumitru Ceara <dceara@redhat.com> - 26.03.3-10
changelog:
  - Updated the OVN sources to upstream release v26.03.1 with the
    commit 0cc1ea5bb71d29b91244f5368ecbbda8837bc542 and picked up
    the commits from v26.03.1 till the tip of branch-26.03
    a1482006410f09dfe471c6aec76de3902327f1ad (2 commits) in
    ovn.patch.
  - Updated the OVS sources to the branch-26.03 ovs submodule
    commit bdb95cc1920d4ab66fe062a9470eeb33a51d33e2


author: Neal Gompa <ngompa@fedoraproject.org> - 2.1.0-2
changelog:
  - Fix setting to background in LXQt sessions
  - Clean up spec formatting and changelog
  - Drop broken rpmautospec setup


author: Paul Wouters <paul.wouters@aiven.io> - 2.10.0-1
changelog:
  - Initial vendor version of pebble
  - Resolves: rhbz#2453110 Review Request: pebble - A miniature version of
    Boulder, a small RFC 8555 ACME test


author: Paul Howarth <paul@city-fan.org> - 1.57-1
changelog:
  - Update to 1.57 (rhbz#2325504)
    - Add on_error callback to csv()
    - Retain runtime error from csv()


author: Paul Howarth <paul@city-fan.org> - 1.58-1
changelog:
  - Update to 1.58 (rhbz#2334923)
    - Add strict_eol (warnings default in csv())
    - Add XS line number in errors
    - Add streaming support (not set in stone)


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60 (rhbz#2343165)
    - Add SECURITY.md
    - CR/NL/CRNL inside quoted fields not affected by strict_eol
    - Fix incorrect error 2014 (GH#62)


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61 (rhbz#2383739)
    - Add love letter to CSV from xan project with reference
    - Bugtracker to Github (long overdue) (GH#63)
    - Update to Devel::PPPort-3.73


author: Paul Howarth <paul@city-fan.org> - 1.62-1
changelog:
  - Update to 1.62 (rhbz#2463743)
    - It is 2026
    - Fix possible stack corruption (GH#65, CVE-2026-7111)


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-10
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <remi@remirepo.net> - 1.8.0-1
changelog:
  - update to 1.8.0
  - raise dependency on PHP 8.2
  - switch to phpunit11
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-pecl-ds2
  - run standard php test suite from extension sources
    instead of separate tests using phpunit
  - drop ZTS build


author: Remi Collet <remi@remirepo.net> - 1.1.0-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.2.1-1
changelog:
  - update to 1.2.1
  - PHP License updated from version 3 to version 4 (BSD-3-Clause)
  - drop pear/pecl dependency
  - sources from github


author: Adam Williamson <awilliam@redhat.com> - 6.6.4-3
changelog:
  - Backport MR #99 to fix launcher icon when selecting dark mode
  - Backport MR #100 to maybe fix strange behavior in wifi page


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.3-1
changelog:
  - New version
    Resolves: rhbz#2379297
  - Updated cyrus-imapd comment in config to point to the correct location
    Related: RHEL-63089


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.5-1
changelog:
  - New version
    Resolves: rhbz#2406450
  - Changed protocol for downloading sources from FTP to HTTP (HTTPS isn't supported)


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.10.7-3
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-128018


author: Filip Janus <fjanus@redhat.com> - 18beta1-5
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-9
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Fixes for C23 compatibility
  - Update mod_vroot to 0.9.12
    - Implement a realpath(3) callback for the FSIO API, for better
      interoperability of other modules when mod_vroot is in effect


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-3
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866
  - Add explicit BR: libxcrypt-devel


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-1
changelog:
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)


author: Paul Howarth <paul@city-fan.org> - 1.3.9-1
changelog:
  - Update to 1.3.9 (see RELEASE_NOTES for details)
  - Update mod_proxy to 0.9.5
    - Implemented new IgnoreForeignAddress ProxyOption
    - Fixed passive data transfers to backend IPv4 address when IPv6 support is
      enabled


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-1
changelog:
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Tom Callaway <spot@fedoraproject.org> - 13.0.4-2
changelog:
  - rebuild for lua 5.5
  - apply upstream fix for configure
  - make a new patch to actually support lua 5.5


author: Tom spot Callaway <spotaws@amazon.com> - 2.9.4-2
changelog:
  - only run the tests on architectures where this app is likely to be
    actually used, due to itenerant failures on the other architectures


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-5
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/fixes_boost.patch.


author: Jan Pazdziora <adelton@fedoraproject.org> - 2.9.4-6
changelog:
  - Arch Linux patch
    https://gitlab.archlinux.org/archlinux/packaging/packages/prusa-
    slicer/-/blob/main/boost-1.89.patch.


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-2
changelog:
  - Security fix for CVE-2025-56005 for the bundled ply within the bundled
    pycparser
  - Fixes: rhbz#2431976


author: Charalampos Stratakis <cstratak@redhat.com> - 7.3.21-7
changelog:
  - Security fix for CVE-2026-25645 in the bundled requests in the bundled
    pip wheel
  - Fixes: rhbz#2452324


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 46.0.3-1
changelog:
  - Update to v46.0.3
  - Removed the deprecated get_attribute_for_oid method on
    CertificateSigningRequest. Users should use get_attribute_for_oid()
    instead.
  - Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the
    cipher module. These are still available in Decrepit cryptography.
  - In X.509, when performing a PSS signature with a SHA-3 hash, it is now
    encoded with the official NIST SHA3 OID.
  - Added support for free-threaded Python 3.14.


author: Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1
changelog:
  - Update to 46.0.7
  - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be
    passed to APIs that accept Python buffers, which could lead to buffer
    overflow. CVE-2026-39892


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-21
changelog:
  - Drop unused test dependency on deprecated python3-nose
  - Use pytest instead when built with tests
  - The tests still fail (numpy incompatibility, using the imp module, ...)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0.8-10
changelog:
  - Compile as C++14 instead of C++11, for compatibility with eigen3 5.0
  - Use the original upstream for fcl, rather than the ambi-robotics fork


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.32.0-5
changelog:
  - Unretirement request: pagure.io/releng/issue/12906 Revert "Retired: Fails
    to install: https://pagure.io/releng/issue/12871"


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: rhbz#2457944, rhbz#2458224, rhbz#2458488, rhbz#2458016


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-11
changelog:
  - Convert License tag to SPDX format
  - Convert to autosetup
  - Use relative symlinks from /usr/bin/* to ../libexec/rancid/*
  - Remove doc files that were duplicated in /usr/share/rancid


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-12
changelog:
  - Enable git as default VCS for new installs
  - Remove extraneous BuildRequires
  - Requires /usr/sbin/sendmail and cronie for crontabs
  - Requires openssh-clients and git
  - Suggests telnet


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-7
changelog:
  - Fix for CVE-2026-41035
  - Fixing bad time in rsync logs
  - Fixing regression from CVE-2024-12086 fix
  - Fixing improper clearing of DISPLAY env variable


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
  - Harden rsyslog service unit
  - Disable openssl engines support
    Resolves: rhbz#2320050


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-1
changelog:
  - Rebase to 8.2510.0
    Resolves: rhbz#2404131
  - imjournal open error handling fix
    Resolves: rhbz#2375742
  - Add mmleefparse module to base package


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.10.0-35
changelog:
  - Adjust to mesa 24.2.2 change that swrast with dril does not expose
    accum buffers anymore
  - Adjust test result message with recent mesa


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Jeremy Cline <jeremycline@microsoft.com> - 0.10.0-1
changelog:
  - Update to v0.10.0
  - All requests to sigul are retried, rather than just those that fail due
    to I/O or timeouts


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.0-2
changelog:
  - Expand dependency bounds downward rather than requiring old versions
  - Improve documentation for the metadata patch


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f44-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Luboš Uhliarik <luhliari@redhat.com> - 7:7.1-1
changelog:
  - new version 7.1
  - removed squidclient
  - removed purge
  - removed cachemgr.cgi
  - removed basic_smb_lm_auth and ntlm_smb_lm_auth helpers


author: Paul Wouters <paul.wouters@aiven.io> - 6.0.2-3
changelog:
  - Re-enable python subpackage, re-enable upstream tests
  - patch to use --no-isolation with python by Carlos Rodriguez-Fernandez
  - python dependencies fixed so pip no longer tries to download items
  - apply upstream patch to remove md2 support - now all tests pass again


author: Jerry James <loganjerry@gmail.com> - 1.4.6-1
changelog:
  - Version 1.4.6
  - Drop upstreamed testtools patch
  - Drop the python3-subunit-test subpackage
  - New gojson2subunit and junitxml2subunit filters


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-104
changelog:
  - Move runtexfile and show-pdf-tags from collection-binextra to here
  - Add xdvipsk package (new)
  - Update aleph to svn77830
  - Update amstex to svn77830
  - Update aomart to svn76110
  - Update arara to svn75653
  - Update attachfile2 to svn77682
  - Update autosp to svn77851
  - Update axodraw2 to svn77682
  - Update bib2gls to svn76845
  - Update bibtex to svn77830
  - Update bibtexperllibs to svn76255
  - Update bibtex8 to svn75712
  - Update chktex to svn78219
  - Update citation-style-language to svn77682
  - Update clojure-pamphlet to svn77682
  - Update context to svn78010
  - Update context-legacy to svn78010
  - Update csplain to svn76924
  - Update ctie to svn77830
  - Update cweb to svn77830
  - Update dtxgen to svn75946
  - Update dvicopy to svn77830
  - Update dvidvi to svn75712
  - Update dvipdfmx to svn77942
  - Update dvipng to svn77830
  - Update dvips to svn77830
  - Update dvisvgm to svn77830
  - Update ebong to svn76924
  - Update eolang to svn77164
  - Update exceltex to svn76924
  - Update expltools to svn78336
  - Update extractbb to svn77855
  - Update fontools to svn78330
  - Update fontware to svn77830
  - Update glossaries to svn78288
  - Update hitex to svn77830
  - Update hyperxmp to svn78281
  - Update kpathsea to svn77861
  - Update l3build to svn77170
  - Update l3sys-query to svn77682
  - Update lacheck to svn75712
  - Update latex to svn76924
  - Update latex2man to svn77377
  - Update latex2nemeth to svn76924
  - Update latexdiff to svn77278
  - Update latexindent to svn76064
  - Update luafindfont to svn75679
  - Update luahbtex to svn77830
  - Update luajittex to svn77830
  - Update luatex to svn78218
  - Update lwarp to svn78111
  - Update make4ht to svn78133
  - Update makedtx to svn77871
  - Update makeindex to svn75712
  - Update markdown to svn77254
  - Update match_parens to svn76442
  - Update metafont to svn77830
  - Update metapost to svn77830
  - Update mflua to svn77830
  - Update mfware to svn77830
  - Update minted to svn78270
  - Update mkpic to svn76483
  - Update mptopdf to svn78010
  - Update multibibliography to svn77682
  - Update musixtex to svn77682
  - Update m-tx to svn78106
  - Update oberdiek to svn78315
  - Update omegaware to svn77830
  - Update optex to svn78109
  - Update patgen to svn77830
  - Update pdfbook2 to svn76924
  - Update pdftex to svn77868
  - Update pdftosrc to svn77830
  - Update pst-pdf to svn77682
  - Update ps2eps to svn76924
  - Update ps2pk to svn75712
  - Update ptex to svn77830
  - Update pythontex to svn77873
  - Update splitindex to svn77682
  - Update sty2dtx to svn76924
  - Update tex to svn77830
  - Update tex4ebook to svn78132
  - Update tex4ht to svn78343
  - Update texfot to svn77286
  - Update texliveonfly to svn76924
  - Update texlive-en to svn78030
  - Update texlive-scripts to svn78361
  - Update texlive-scripts-extra to svn78162
  - Update texlive.infra to svn78313
  - Update texlogsieve to svn77351
  - Update texosquery to svn77682
  - Update texware to svn77830
  - Update tie to svn77830
  - Update tpic2pdftex to svn75712
  - Update ttfutils to svn77830
  - Update typog to svn76661
  - Update uptex to svn77830
  - Update urlbst to svn76790
  - Update web to svn77830
  - Update xetex to svn77830
  - Update xindex to svn77844
  - Update xmltex to svn76924


author: Tom Callaway <spot@fedoraproject.org> - 12:20260301-106
changelog:
  - Add local RPM dependency generator to produce tex(...) Provides
    Full credit to Elliott Sales de Andrade <quantum.analyst@gmail.com>


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Dominik Mierzejewski <dominik@greysector.net> - 1.8.2-23
changelog:
  - stop using obsolete cmake3 macros
  - specify SONAME in file list explicitly
  - apply upstream patch to fix format truncation


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-5
changelog:
  - Fix usbguard-tmpfiles.conf
  - Remove catch1 dependency
  - Adapt for protobuf api changes
  - Fix regression in specifying IPC privileges using UID
  - selinux subpackage update: unified bin and sbin
  Resolves: rhbz#2297169


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2,
    uninstall-ignore-error, ipc-privileges, protobuf-3.0,
    catch2-support, disable-catch
  - Add SELinux policy fix for systemd-homed stream connect
    Resolves: rhbz#2380396
    Resolves: rhbz#2376283


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <remi@fedoraproject.org> - 8.1.4-1
changelog:
  - Valkey 8.1.4 - Released Fri 09 October 2025
  - Upgrade urgency SECURITY:
    CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689


author: Remi Collet <remi@remirepo.net> - 9.0.2-1
changelog:
  - Valkey 9.0.2 - February 3, 2026
  - Upgrade urgency HIGH: There are critical bugs that may affect a subset of users.


author: Remi Collet <remi@remirepo.net> - 9.0.4-1
changelog:
  - Valkey 9.0.4 - May 5, 2026
  - Upgrade urgency SECURITY: This release includes security fixes.
    CVE-2026-23479 CVE-2026-25243 CVE-2026-23631


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-1
changelog:
  - update to 1.0.36 (#2246227)
  - drop obsolete patches
  - fix some tests in i686
  - simde-0.8.2 is now required
  - run all tests on aarch64, all issues resolved
  - review skipped tests on i686, ppc64le and s390x


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.36-3
changelog:
  - use upstream way of running tests
  - run unit tests
  - re-enable most tests on s390x now that they pass
  - skip failing test on ppc64le and s390x with GCC 15


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.37-1
changelog:
  - update to 1.0.37 (resolves rhbz#2349655)
  - skip new failing tests on i686 and ppc64le
  - re-enable wasm2c/spec/float_exprs.txt test, now that GCC 15 is fixed


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
    - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
    (49699333+dependabot[bot]) - test: iot-qcow2-image does not support
    packages (bcl) - test: qcow2 renamed to server-qcow2 (bcl) - build(deps):
    bump github.com/stretchr/testify from 1.10.0 to 1.11.1
    (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 4 to
    5 (49699333+dependabot[bot]) - tests: Use current host arch in info and
    list tests (bcl)


author: Brian C. Lane <bcl@redhat.com> - 36.2-1
changelog:
  - * Tue Apr 28 2026 Brian C. Lane <bcl@redhat.com> - 36.2-1 - New release:
    36.2 (bcl) - maint: Ran ./tools/prepare-source.sh (bcl) - composer-cli:
    Use new FilterCompose helper for status command (bcl) - composer-cli: Use
    new FilterCompose helper for the list command (bcl) - weldr: Add
    FilterComposes helper function (bcl) - cloud: Add FilterComposes helper
    function (bcl) - workflows: Pin govulncheck at v1.1.4 for use with go
    1.24 (bcl) - Add missing Obsoletes and Provides (bcl) - Add codeowners as
    per security audit (mcorr) - Makefile: Update rpm building to use vendor
    archive (bcl) - spec: Update to use the go-vendor-tools and macros (bcl)
    - ci: modernize golanci-lint GHA (lzap+git) - deps: update to Go 1.24
    (lzap+git) - build(deps): bump github.com/BurntSushi/toml from 1.5.0 to
    1.6.0 (49699333+dependabot[bot]) - build(deps): bump
    github.com/spf13/cobra from 1.10.1 to 1.10.2 (49699333+dependabot[bot]) -
    build(deps): bump actions/checkout from 5 to 6 (49699333+dependabot[bot])


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 1:1.0.4-1
changelog:
  - Update to 1.0.4 release
  - Add Epoch because the 1.1 release from git was 1.0.1
  - Add Debian patch to port to GTK3


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.6-1
changelog:
  - xwayland 24.1.6 (#2343992)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10-1
changelog:
  - update to 1.10 fixes rhbz#2464731 - fix license GPL-3.0-only - updated /
    reorganize BuildRequires list


author: Dennis van Raaij <dvraaij@fedoraproject.org> - 4.1.5^git20251117.c9a0e98-1
changelog:
  - Removed debug package creation opt-out.
  - Updated to Git revision c9a0e98 (Nov 17, 2025).
  - Updated the SPDX license expression.
  - The examples can now be found in the package documentation directory.
  - All package summaries and descriptions have been updated.
  - The README-file has been removed from the package as it doesn't contain any
    useful information for Fedora users.
  - The license file can now be found in the package license directory.
  - Made the generated project file architecture-independent.


