# changelog

author: Peter Robinson <pbrobinson@fedoraproject.org> - 20240513-1
changelog:
  - Update to upstream 20240513
  - Splitout Marvell FastLinQ adapter firmware to sub-package
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - Amphion: Update vpu firmware
  - Update firmware Intel Bluetooth BlazarU/Solar/Magnetor
  - i915: Add BMG DMC v2.06
  - Add CS35L41 HDA Firmware for Asus HN7306
  - Tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - Remove Calibration Firmware and Tuning for CS35L41
  - Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: Numerous firmware updates
  - Montage: update firmware for Mont-TSSE
  - Add tuning parameter configs for CS35L41 Firmware
  - Fix firmware names for Laptop SSID 104316a3
  - Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
  - update mediatek bluetooth chip (MT7922)
  - update MT7922 WiFi device FW
  - iwlwifi: updates/additions for core87-44 release
  - nvidia: Update Tegra210 XUSB firmware to v50.29
  - mediatek: Update MT8173 VPU firmware to v1.1.9


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20240610-1
changelog:
  - Update to upstream 20240610
  - Add firmware for Lenovo Thinkbooks
  - amdgpu: numerous firmware additions/updates
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00639
  - cnm: update chips&media wave521c firmware.
  - Add ordinary firmware for RTL8821AU device


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20240709-1
changelog:
  - Update to upstream 20240709
  - Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - Various Intel Bluetooth firmware updates
  - rtl_bt: Update RTL8822C BT UART/USB firmware
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - add new cc33xx firmware for TI cc33xx WiFi chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20240811-1
changelog:
  - Update to upstream 20240811
  - qcom: update path for video firmware for vpu-1/2/3.0
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: A lot of firmware updates
  - mediatek: Update mt8195 SOF firmware
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22, MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10, GSC 104.0.0.1161 for LNL, LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - update firmware for MT7921/MT7922 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921/MT7922)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - i915: Update Xe2LPD DMC to v2.21
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - add firmware for qat_402xx devices
  - Update AMD cpu microcode
  - intel: avs: Add numerous sound topology files
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20240909-1
changelog:
  - Update to upstream 20240909
  - i915: Update MTL DMC v2.23
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - update  MT7921 WiFi/bluetooth device firmware
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0
  - update  MT7925 WiFi/bluetooth device firmware
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - Update AMD SEV firmware
  - update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20241017-1
changelog:
  - Update to upstream 20241017
  - rtlwifi: Update firmware for RTL8192FU to v7.3
  - Remove execute bit from firmware files
  - rtl_nic: add firmware rtl8125d-1
  - iwlwifi: add gl/Bz FW for core91-69 release
  - iwlwifi: update ty/So/Ma firmwares for core91-69 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for somt7996me ASUS/HP/Lenovo Laptops
  - update firmware for en8811h 2.5G ethernet phy
  - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: add board-2.bin
  - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin
  - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31
  - rtlwifi: Add firmware v39.0 for RTL8192DU
  - Revert "ath12k: WCN7850 hw2.0: update board-2.bin"
  - QCA: Add Bluetooth firmwares for WCN785x with UART transport
  - amdgpu: DMCUB DCN35 update
  - brcm: Add BCM4354 NVRAM for Jetson TX1
  - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram
  - add firmware for MediaTek Bluetooth chip (MT7920)
  - add firmware for MT7920
  - amdgpu: update numerous firmware
  - qcom: update gpu firmwares for qcm6490 chipset
  - mt76: mt7996: add firmware files for mt7992/mt7996 chipset variants
  - qcom: add gpu firmwares for sa8775p chipset
  - rtw89: 8922a: add fw format-2 v0.35.42.1
  - WHENCE: Fix battmgr.jsn entry type
  - qcom: qcm6490: add ADSP and CDSP firmware
  - Update firmware file for various Intel Bluetooth
  - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301
  - realtek: rt1320: Add patch firmware of MCU


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20241110-1
changelog:
  - Update to upstream 20241110
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - MT7920: update WiFi/bluetooth firmware
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - MT7925: update WiFi/bluetooth firmware
  - WHENCE: Add sof-tolg for mt8195
  - Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  - xe: Update LNL GSC to v104.0.0.1263
  - i915: Update MTL/ARL GSC to v102.1.15.1926
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - mediatek: Add sof-tolg for mt8195
  - i915: Add Xe3LPD DMC
  - Add firmware for Cirrus CS35L41
  - Update firmware file for Intel BlazarU core
  - Makefile: error out of 'install' if COPYOPTS is set
  - check_whence.py: skip some validation if git ls-files fails
  - qcom: Add Audio firmware for X1E80100 CRD/QCPs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - brcm: replace NVRAM for Jetson TX1


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Highlights:
    - ipagroup: Allow multiple group management.
    - ipaclient: Add subid option to select the sssd profile with-subid.
    - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup.
    - ipaclient: Keep server affinity while deploying by deferring the
      creation the final krb5.conf.
    - ipaserver: Allow deployments with random serial numbers.
    - ipareplica/server: Enable removal from domain with undeployment.
    - More Ansible lint fixes.


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Highlights:
    - Multiple service management with ipaservice module
    - New ipacert module for certificate management
    - Action group support for the Ansible collections on Ansible Galaxy and
      Ansible AutomationHub
    - Fixed maxsequence handling in ipapwpolicy module
    - Even more Ansible lint driven changes


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Highlights:
    - Support for GECOS, street, smb and idp attributes in ipauser module
    - Support for indirect maps in ipaautomountmap module
    - Update of user_auth_type choices in ipaconfig and ipauser modules
    - Update of auth_ind choices in ipahost and ipaservice modules
    - Upstream test and environment enhancements
    - Documentation updates


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Highlights:
    - New idoverridegroup management module.
    - New idoverrideuser management module.
    - New idview management module.
    - New idp management module.
    - Bug fixes and CI improvements.


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Highlights:
    - Fix ipaserver deployment on CentOS 8 Stream
    - Fix ipaclient deployment with automount
    - Fix ipaclient OTP error reporting
    - Add missing support for renaming groups and users
    - Idempotency fixes in several modules


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-2
changelog:
  - New -collection sub package providing the freeipa.ansible_freeipa
    collection
  - New build requires for ansible-core and python


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Highlights:
    - New inventory plugin
    - Use batch command internally for ipahost, ipaservice and ipauser
    - Fix idempotency issues in ipahost, ipaservice and ipauser
    - Fix idempotency in ipaclient_dns_resolver
    - Documentation fixes


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    - Support for FreeIPA 4.12
    - Idempotency fixes
    - Minimum supported ansible-core version: 2.15.0
    - Fixes for ansible-test 2.17.1


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    - Multi sudorule management with the ipasudorule module
    - Use batch command internally for ipasudorule
    - Lots of CI/infra fixes and enhancements
    - Documentation fixes


author: Omair Majid <omajid@redhat.com> - 8.0.103-1
changelog:
  - Update to .NET SDK 8.0.103 and Runtime 8.0.3
  - Add dotnet.macros with %dotnet_runtime_arch and %dotnet_runtime_id


author: Packit <hello@packit.dev> - 2.4.1-1
changelog:
  - New version 2.4.1 (Vojtech Trefny)
  - ci: Add Packit configuration for downstream builds on release (Vojtech Trefny)
  - spec: Bump release to 27 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - Translated using Weblate (Friulian) (Fabio Tomat)
  - Translated using Weblate (Indonesian) (Andika Triwidada)
  - Translated using Weblate (Hebrew) (Yaron Shahrabani)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - Translated using Weblate (Russian) (Igor Gorbounov)
  - Translated using Weblate (Slovak) (Ondrej Sulek)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Translated using Weblate (Swedish) (Luna Jernberg)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Translated using Weblate (Croatian) (Gogo Gogsi)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Translated using Weblate (Turkish) (Oğuz Ersen)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (yangyangdaji)
  - Translated using Weblate (Korean) (김인수)
  - Translated using Weblate (Ukrainian) (Yuri Chornoivan)
  - Translated using Weblate (Polish) (Piotr Drąg)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Translated using Weblate (Finnish) (Jiri Grönroos)
  - Update translation files (Weblate)
  - Translated using Weblate (German) (Ettore Atalan)
  - Fix various typos discovered by spellintian (Vojtech Trefny)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (yangyangdaji)
  - Translated using Weblate (French) (Alexandre Hen)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Translated using Weblate (Korean) (김인수)
  - Translated using Weblate (German) (Ettore Atalan)
  - Update translation files (Weblate)
  - Translated using Weblate (Turkish) (Oğuz Ersen)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.4.2-1
changelog:
  - New version 2.4.2 (Vojtech Trefny)
  - pylint: Update pylintrc (Vojtech Trefny)
  - Allow creating biosboot even if not in installer mode (Vojtech Trefny)
  - Allow adding nested btrfs subvolumes (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from d6a4098..5bb8125 (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (yangyangdaji)
  - misc: Vagrantfile update (Vojtech Trefny)
  - Translated using Weblate (Korean) (김인수)
  - Translated using Weblate (Swedish) (Luna Jernberg)
  - Translated using Weblate (Korean) (김인수)
  - Translated using Weblate (Czech) (Jan Kalabza)
  - Translated using Weblate (Czech) (Pavel Borecki)
  - Translated using Weblate (Portuguese (Brazil)) (Felipe Nogueira)
  - Translated using Weblate (Czech) (Pavel Borecki)
  - Update translation files (Weblate)
  - Translated using Weblate (French) (grimst)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4.2-3
changelog:
  - Add cmdline option to force blivet-gui to keep above other apps (#2238282)
  - Add a cmdline option to enabled blivet's auto_dev_updates flag (#2238292)


author: Packit <hello@packit.dev> - 2.5.0-1
changelog:
  - New version 2.5.0 (Vojtech Trefny)
  - Translated using Weblate (Japanese) (김인수)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - Translated using Weblate (Korean) (김인수)
  - Translated using Weblate (French) (Damien Pou)
  - Translated using Weblate (French) (Corentin Maret)
  - Translated using Weblate (Czech) (Vojtěch Trefný)
  - Translated using Weblate (Czech) (Matěj Valášek)
  - Translated using Weblate (Punjabi) (A S Alam)
  - misc: Vagrantfile update (Vojtech Trefny)
  - ci: Fix Packit actions to bump release number (Vojtech Trefny)
  - ci: Set custom release suffix for Packit (Vojtech Trefny)
  - spec: Bump release to 99 to be always ahead of the Fedora packages (Vojtech Trefny)
  - misc: Add basic filesystem tools to test dependencies (Vojtech Trefny)
  - tests: Make sure GUI tests can run without btrfs kernel module (Vojtech Trefny)
  - pylint: Ignore attribute defined outside __init__ in setup.py (Vojtech Trefny)
  - Remove support for labelling JFS and ReiserFS (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - Translated using Weblate (Korean) (김인수)
  - Fix logging for mount point change (Vojtech Trefny)
  - Fix logic when checking for dialog response (Vojtech Trefny)
  - pylint: Use 'exit' instead of 'do_exit' for pylint.lint.Run (Vojtech Trefny)
  - Add a cmdline option to enabled blivet's auto_dev_updates flag (Vojtech Trefny)
  - man: Update copyright year (Vojtech Trefny)
  - Add cmdline option to force blivet-gui to keep above other apps (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - ci: Update GH actions checkout action to v4 (Vojtech Trefny)
  - Fix project name in tests/run_tests.py (Vojtech Trefny)
  - Translated using Weblate (Russian) (Mi Lachew)
  - ci: 'master' branch renamed to 'main' (Vojtech Trefny)
  - Fix segfault when trying to reuse an invalid GtkTreeIter (Vojtech Trefny)
  - Update translation files (Weblate)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Translated using Weblate (Czech) (Vojtěch Trefný)
  - Translated using Weblate (Czech) (Pavel Borecki)


author: Than Ngo <than@redhat.com> - 129.0.6668.89-1
changelog:
  - update to 129.0.6668.89
    * High CVE -2024-7025: Integer overflow in Layout
    * High CVE-2024-9369: Insufficient data validation in Mojo
    * High CVE-2024-9370: Inappropriate implementation in V8


author: Than Ngo <than@redhat.com> - 129.0.6668.100-1
changelog:
  - update to 129.0.6668.100
    * CVE-2024-9602: Type Confusion in V8
    * CVE-2024-9603: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 130.0.6723.58-1
changelog:
  - update to 130.0.6723.58
    * High CVE-2024-9954: Use after free in AI
    * Medium CVE-2024-9955: Use after free in Web Authentication
    * Medium CVE-2024-9956: Inappropriate implementation in Web Authentication
    * Medium CVE-2024-9957: Use after free in UI
    * Medium CVE-2024-9958: Inappropriate implementation in PictureInPicture
    * Medium CVE-2024-9959: Use after free in DevTools
    * Medium CVE-2024-9960: Use after free in Dawn
    * Medium CVE-2024-9961: Use after free in Parcel Tracking
    * Medium CVE-2024-9962: Inappropriate implementation in Permissions
    * Medium CVE-2024-9963: Insufficient data validation in Downloads
    * Low CVE-2024-9964: Inappropriate implementation in Payments
    * Low CVE-2024-9965: Insufficient data validation in DevTools
    * Low CVE-2024-9966: Inappropriate implementation in Navigations


author: Than Ngo <than@redhat.com> - 130.0.6723.69-1
changelog:
  - Update to 130.0.6723.69
    * High CVE-2024-10229: Inappropriate implementation in Extensions
    * High CVE-2024-10230: Type Confusion in V8
    * High CVE-2024-10231: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 130.0.6723.91-1
changelog:
  - Update to 130.0.6723.91
    * Critical CVE-2024-10487: Out of bounds write in Dawn
    * High CVE-2024-10488: Use after free in WebRTC


author: Than Ngo <than@redhat.com> - 130.0.6723.116-1
changelog:
  - Update to 130.0.6723.116
    * High CVE-2024-10826: Use after free in Family Experience
    * High CVE-2024-10827: Use after free in Serial


author: Than Ngo <than@redhat.com> - 131.0.6778.69-1
changelog:
  - Update to 131.0.6778.69
    * High CVE-2024-11110: Inappropriate implementation in Blink
    * Medium CVE-2024-11111: Inappropriate implementation in Autofill
    * Medium CVE-2024-11112: Use after free in Media
    * Medium CVE-2024-11113: Use after free in Accessibility
    * Medium CVE-2024-11114: Inappropriate implementation in Views
    * Medium CVE-2024-11115: Insufficient policy enforcement in Navigation
    * Medium CVE-2024-11116: Inappropriate implementation in Paint
    * Low CVE-2024-11117: Inappropriate implementation in FileSystem


author: Jakub Kadlcik <frostyx@email.cz> 0.67-1
changelog:
  - Add loggs to python-backoff decorator
  - Set git.safe_directory as repo rootdir
  - Explain how to reproduce the build locally
  - Retry only git clone without checkouting
  - Use git checkout instead of switch but ignore files


author: Pavel Raiskup <praiskup@redhat.com> 0.69-1
changelog:
  - require python-specfile (in new enough) version, and use it for specfile
    parsing instead of parsing the metadata from SRPMs
  - make sure we have (also) the latest DNF5 on builders
  - override disttag macro to None
  - make sure detected epoch is int() or None
  - build RPMs in one Mock step, instead of two (SRPM and then RPM)
  - use Mock's bootstrap_image_ready for the custom build (Mock 5.0+ required)
  - store review.json generated by fedora-review into the result directory
  - better/more verbose logging in the results.json generator
  - drop dependency on simplejson
  - repeatedly try to download files from lookaside cache
  - moving the package NEVRA parsing to from backend here into copr-rpmbuild
  - priority=X support added for the Copr repository itself
  - query exclusivearch and excludearch from the specfile, and store into results.json


author: Pavel Raiskup <praiskup@redhat.com> 0.70-1
changelog:
  - collect and compress fedora-review logs after run
  - use Copr custom macros when parsing the specfile


author: Pavel Raiskup <praiskup@redhat.com> 0.71-1
changelog:
  - don't set bootstrap_image_ready for rawhide
  - no Jinja-vars in config_opts keys (mock-core-configs 40.2 compat)
  - allow user SSH to builders
  - fix copr-rpmbuild --dump-configs
  - install copr-distgit-client with copr-rpmbuild


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Simone Caronni <negativo17@gmail.com> - 1.1.17^20240918git845568c-1
changelog:
  - Update to latest snapshot.
  - Switch to more recent packaging guidelines for snapshot versions.
  - Move egl-gbm ICD to egl-gbm package.


author: Miroslav Suchý <msuchy@redhat.com> 1.53-1
changelog:
  - add HPND-Netrek license
  - Add license text for py-sdl2 Public Domain license
  - remove LicenseRef-framed as ulem license was extended to allow LicenseRef-
    framed variation
  - add HIDAPI license
  - add Ruby-pty license
  - add LicenseRef-OASIS-spec


author: Miroslav Suchý <msuchy@redhat.com> 1.54-1
changelog:
  - public domain dedication found in mailcap
  - public domain dedications found in web server icons
  - replaced obsolescent command with modern equivalent
  - add LicenseRef-compface
  - Add rijndael from sdl-crypto to public domain
  - add public domain dedication for xz
  - Add sha1 from sdl-crypto to public domain
  - correct location of HPND-Netrek.toml


author: Miroslav Suchý <msuchy@redhat.com> 1.55-1
changelog:
  - Split rpmlint-fedora-license-data-legacy from rpmlint-fedora-license-
    data
  - add LicenseRef-IUPAC-InChI-Trust as not allowed
  - add TrustedQSL
  - add TU-Berlin-1.0 license
  - add DocBook-XML license
  - add DocBook-Schema license
  - add AGPL-3.0-or-later WITH PS-or-PDF-font-exception-20170817
  - Extend ISO-8879 exception to dotnet9.0


author: Miroslav Suchý <msuchy@redhat.com> 1.56-1
changelog:
  - add public domain dedication in package calf
  - add public domain dedication for btop
  - add public domain dedication for upx
  - add DocBook-Stylesheet
  - add LGPL-2.1-only WITH WxWindows-exception-3.1
  - add public domain dedication for bsh
  - Add vim into OPUBL-1.0 exceptions
  - add GPL-1.0-or-later WITH Autoconf-exception-generic
  - LicenseRef-Fedora-Public-Domain: Add perlmulticore.h
  - add MIT-Click


author: Miroslav Suchý <msuchy@redhat.com> 1.57-1
changelog:
  - add filedrop public domain dedication
  - add ddate public domain dedication
  - Add wgrib license text
  - add zork public domain dedication
  - add AGPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - allow CC-BY-SA 3.0 for fonts
  - add Boehm-GC-without-fee license
  - add LicenseRef-Julius as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.58-1
changelog:
  - add Ultra permissive dedication of docbook5-schemas
  - add public domain dedication for clc
  - add Sendmail-Open-Source-1.1 license
  - add public domain dedication for biblesync
  - add public domain dedication for BareBonesBrowserLaunch
  - add public domain dedication for astronomy-menus
  - add LGPL-2.1-only WITH OCCT-exception-1.0
  - add CERN-OHL-P-2.0
  - add Jam license
  - add public domain dedication for ants


author: Miroslav Suchý <msuchy@redhat.com> 1.59-1
changelog:
  - add public domain findings for sdl-telnet
  - add public domain findings for libmodplug
  - add public domain findings for mb2md
  - add public domain findings for perl-DateTime-Precise
  - add public domain findings for gimpfx-foundry
  - add public domain findings for gnome-valgrind-session
  - add public domain findings for sqlite2
  - Blessing.toml -> blessing.toml
  - add public domain findings for surfraw
  - add GPL-3.0-or-later WITH GPL-3.0-389-ds-base-exception
  - add public domain findings for klt
  - add public domain findings for libb64
  - add public domain dedication of emacs-slime
  - add public domain dedication of cproto
  - add public domain dedication for cockatrice
  - add LGPL-2.1-or-later WITH Independent-modules-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.60-1
changelog:
  - add LicenseRef-Intel-firmware
  - add public domain dedication for oflb-goudy-bookletter-1911-fonts
  - add public domain dedication for nacl
  - add Apache-2.0 WITH mxml-exception
  - add public domain dedication for nec2c
  - add any-OSI-perl-modules
  - add public domain dedication for ogre
  - add text of Unsplash license
  - add LicenseRef-Intel-firmware
  - add SGI-B-1.1 as not-allowed
  - add public domain dedication for libgenht
  - add ultra permissive findings for lyx
  - add public domain findings for golang-github-xi2-xz
  - add UltraPermissive dedication of package samcoupe-rom
  - add UltraPermissive dedication of package radial
  - add LicenseRef-MIT-CRL-Xim license as not-allowed
  - add public domain findings for icon
  - add public domain findings for jhead
  - add public domain findings for mingw-pdcurses
  - add LicenseRef-BASS (beneath a steel sky) as not-allowed
  - add public domain and ultra permissive findings for rubygem-ruby-shadow


author: Miroslav Suchý <msuchy@redhat.com> 1.62-1
changelog:
  - add Avasys public license as allowed-firmware
  - add public domain dedication for python-hexdump
  - add public domain dedication for allegro (loadpng addon)
  - add LicenseRef-soundfont as not-allowed
  - add broadcom firmware license
  - Reclassify LicenseRef-qmail as allowed (deprecated)
  - add GPL-2.0-only WITH CGAL-linking-exception
  - add firmware licensing terms for atmel-firmware
  - add wwl license
  - add generic-xts license
  - add LicenseRef-Mod-Archive as not-allowed
  - add public domain dedication for perl-Math-Expression-Evaluator
  - add public domain dedication for perl-MaxMind-DB-Reader-XS
  - add public domain dedication for python-django-pdb
  - add UltraPermissive dedication of package python-utmp
  - add public domain dedication for re2c
  - add public domain dedication for python-nine
  - add public domain dedication for perl-Devel-Trace
  - add LGPL-3.0-or-later WITH LGPL-3.0-linking-exception


author: Jan Grulich <jgrulich@redhat.com> - 130.0.1-3
changelog:
  - Fix PipeWire camera support enablement for F41+
  - Additional WebRTC backports for PipeWire camera support


author: Martin Stransky <stransky@redhat.com> - 131.0-2
changelog:
  - Fix regression from mzbz#1634961 - enable Gnome Shell search in opened tabs
  - Temporary disabled PGO due to build issues.


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Packit <hello@packit.dev> - 13.12-1
changelog:
  - Code cleanup (Martin Tůma)
  - Fixed broken TMS maps rendering (Martin Tůma)
  - Asynchronous rendering of online vector maps (Martin Tůma)
  - Added support for online vector maps overzoom (Martin Tůma)
  - Limit the overzoom to max 3 levels (Martin Tůma)
  - Added support for MVT overzoom (Martin Tůma)
  - Code cleanup (Martin Tůma)
  - Provide the zoom level to QImageReader when fetching the tile size (Martin Tůma)
  - Cosmetics (Martin Tůma)
  - Added workaround for broken Qt SVG image plugin colliding with the MVT plugin (Martin Tůma)
  - Translated using Weblate (Ukrainian) (Vadym Nekhai)
  - Translated using Weblate (Esperanto) (Nikolay Korotkiy)
  - Translated using Weblate (Ukrainian) (Nikolay Korotkiy)
  - Translated using Weblate (Russian) (Nikolay Korotkiy)
  - Translated using Weblate (Finnish) (Nikolay Korotkiy)
  - Fixed possible double delete (Martin Tůma)
  - Improved error reporting (Martin Tůma)
  - Fixed crash on empty MBTiles files (Martin Tůma)
  - Version++ (Martin Tůma)
  - Metadata update (Martin Tůma)
  - Translated using Weblate (Catalan) (raf)
  - Translated using Weblate (Hungarian) (99 efi)
  - Translated using Weblate (Swedish) (bittin1ddc447d824349b2)
  - Code cleanup (Martin Tůma)
  - Resolves rhbz#2231722


author: Packit <hello@packit.dev> - 13.13-1
changelog:
  - Increase the default pixmap cache size on Android to 384MB (Martin Tůma)
  - Fixed broken map scale (ruler) on HiDPI maps (Martin Tůma)
  - Limit the overzoom by the resulting tile size rather than number of levels (Martin Tůma)
  - Version++ (Martin Tůma)
  - Resolves rhbz#2255189


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.3-1
changelog:
  - crypto: Correctly convert passphrases from Python to C (vtrefny)
  - tests: Minor NVMe HostNQN fixes (tbzatek)
  - nvme: Generate HostID when missing (tbzatek)
  - Always use "--fs ignore" with lvresize (mvollmer)
  - nvme: Use interim buffer for nvme_get_log_sanitize() (tbzatek)
  - fs: Fix memory leak (vtrefny)
  - fs: Fix leaking directories with temporary mounts (vtrefny)
  - tests: Specificy required versions when importing GLib and BlockDev introspection (biebl)
  - tests: Replace deprecated unittest assert calls (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.4-1
changelog:
  - tests: Fix "invalid escape sequence '\#'" warning from Python 3.12 (vtrefny)
  - tests: Fail early when recompilation fails in library_test (vtrefny)
  - lvm-dbus: Replace g_critical calls with bd_utils_log_format (vtrefny)
  - Use log function when calling a plugin function that is not loaded (vtrefny)
  - logging: Default to DEBUG log level if compiled with --enable-debug (vtrefny)
  - nvme: Rework memory allocation for device ioctls (tbzatek)
  - packit: Add configuration for downstream builds (vtrefny)
  - fs: correct btrfs set label description (jvanderwaa)
  - fs: Disable progress for ntfsresize (vtrefny)
  - part: Do not open disk read-write for read only operations (vtrefny)
  - ci: Bump actions/checkout from v3 to v4 (vtrefny)
  - plugins: btrfs: use g_autofree where possible for g_free (jvanderwaa)
  - plugins: use g_autofree for free'ing g_char's (jvanderwaa)
  - spec: Move obsoleted devel subpackages to libblockdev-devel (vtrefny)
  - spec: Obsolete vdo plugin packages (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-1
changelog:
  - tests: Skip some checks for btrfs errors with btrfs-progs 6.6.3 (vtrefny)
  - Fix missing progress initialization in bd_crypto_luks_add_key (vtrefny)
  - fs: Report reason for open() and ioctl() failures (tbzatek)
  - utils: Add expected printf string annotation (tbzatek)
  - lvm-dbus: Avoid using already-freed memory (tbzatek)
  - lvm-dbus: Fix leaking error (tbzatek)
  - python: Add a deepcopy function to our structs (vtrefny)
  - tests: Remove unreliable nvme attribute checks (tbzatek)
  - tests: Use BDPluginSpec constructor in LVM DBus plugin tests (vtrefny)
  - tests: Avoid setting up intermediary loop device for the nvme target (tbzatek)
  - tests: Default to /tmp for create_sparse_tempfile() (tbzatek)
  - part: Fix potential double free when getting parttype (vtrefny)
  - Mark NVDIMM plugin as deprecated since 3.1 (vtrefny)
  - tests: Remove some obsolete rules to skip tests (vtrefny)
  - fs: Add support for getting filesystem min size for NTFS and Ext (vtrefny)
  - fs: Fix allowed UUID for generic mkfs with VFAT (vtrefny)
  - fs: Add a generic function to check for fs info availability (vtrefny)
  - fs: Add a function to check label format for F2FS (vtrefny)
  - swap: Add support for checking label and UUID format (vtrefny)
  - ci: Remove the custom version command for Packit (vtrefny)
  - ci: Manually prepare spec file for Packit (vtrefny)
  - overrides: Remove unused 'sys' import (vtrefny)
  - Add BDPluginSpec constructor and use it in plugin_specs_from_names (vtrefny)
  - Sync spec with downstream (vtrefny)
  - ci: Add an action to compile libblockdev with different compilers (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.1-1
changelog:
  - lvm-dbus: Fix passing size for pvresize over DBus (vtrefny)
  - nvme: Add bd_nvme_is_tech_avail to the API file (vtrefny)
  - tests: Add NVMe controller type checks (tbzatek)
  - tests: Add NVMe persistent discovery controller tests (tbzatek)
  - tests: Fix removing custom LVM devices file (vtrefny)
  - tests: Ignore LVM devices file for non-LVM tests (vtrefny)
  - tests: Manually remove removed PVs from LVM devices file (vtrefny)
  - dm_logging: Annotate redirect_dm_log() printf format (tbzatek)
  - Fix some more occurrences of missing port to G_GNUC_UNUSED (tbzatek)
  - Port to G_GNUC_INTERNAL for controlling symbols visibility (tbzatek)
  - Use glib2 G_GNUC_UNUSED in place of UNUSED locally defined (giulio.benetti)
  - Makefile: Fix bumpver to work with micro versions (vtrefny)


author: Packit <hello@packit.dev> - 123-1
changelog:
  Changes with 123
  ----------------
    * Start building RPMs on CentOS Stream 10 for testing (#1799)
      * Author: Alexander Todorov, Reviewers: Florian Schüller, Tomáš Hozza
    * Tests: force checkout manifest-db (#1820)
      * Author: Tomáš Hozza, Reviewers: Florian Schüller, Gianluca Zuccarelli
    * sources(curl): disable `curl --parallel` by default (#1811)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    * sources(curl): download multiple URLs with the same curl command (#1573)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    * stages/oscap.remediation: small import adjustment (#1814)
      * Author: Gianluca Zuccarelli, Reviewers: Achilleas Koutsou, Michael Vogt
    * stages: add stage for creating dm-verity partitions (#1806)
      * Author: Nikita Dubrovski, Reviewers: Achilleas Koutsou, Michael Vogt, Paweł Poławski

  — Somewhere on the Internet, 2024-07-17


author: Packit <hello@packit.dev> - 124-1
changelog:
  Changes with 124
  ----------------
    * CI: build RPMs for RHEL-10.0-nightly (COMPOSER-2161) (#1822)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Florian Schüller
    * Fix dnf4 mark stage test (#1825)
      * Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    * Make `tailored_profile_id` required for `json` autotailoring (#1794)
      * Author: Gianluca Zuccarelli, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * Test/manifests: start testing on c10s and el10.0-nightly (COMPOSER-2161) (#1821)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Alexander Todorov
    * Test: fix dnf4.mark stage test with DNF5 (#1824)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * mpp: Allow container-storage image resolution (#1792)
      * Author: Roberto Majadas, Reviewers: Achilleas Koutsou, Ondřej Budai
    * sources(curl): error if curl exists 0 but there are downloads left (#1816)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * sources(curl): use json like output inside of custom record (#1817)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * stages/autotailor: fix stage schema (#1823)
      * Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * test: add new `https_serve_directory()` and test certs (#1815)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski

  — Somewhere on the Internet, 2024-07-31


author: Packit <hello@packit.dev> - 125-1
changelog:
  Changes with 125
  ----------------
    * Makefile: run `tox parallel` without the spinner (#1835)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Tomáš Hozza
    * Test/dnf4.mark: adjust the test for markings used by DNF5 (#1827)
      * Author: Tomáš Hozza, Reviewers: Michael Vogt, Paweł Poławski
    * Tests: Add unit tests for org.osbuild.gunzip stage (#1689)
      * Author: Paweł Poławski, Reviewers: Brian C. Lane, Michael Vogt
    * jsoncom: gracefully report EMSGSIZE errors (#1840)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * main,monitor: fix total steps in progress reporting (#1826)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * osbuild-depsolve-dnf: fix some bugs and extend test coverage (#1834)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * osbuild-depsolve-dnf: refactor into osbuild.solver module (#1776)
      * Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    * osbuild: make `inputs` `map()` function use fd for reply as well (#1836)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * solver: include "solver" key in the dnfjson reply (#1829)
      * Author: Michael Vogt, Reviewers: Brian C. Lane, Paweł Poławski
    * test_dnf4_mark(): disable all plugins when inspecting markings (#1837)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Paweł Poławski

  — Somewhere on the Internet, 2024-08-14


author: Packit <hello@packit.dev> - 126-1
changelog:
  Changes with 126
  ----------------
    * CI: update terraform hash (#1859)
      * Author: Achilleas Koutsou, Reviewers: Florian Schüller, Michael Vogt, Ondřej Budai, Sanne Raymaekers, Tomáš Hozza
    * New utility module: chroot (#1860)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * Stages/`org.osbuild.dracut`: fix runtime environment for dracut (COMPOSER-2193) (#1846)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    * Update snapshots to 20240819 (#1856)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Michael Vogt
    * osbuild: add "Conflicts"/"Provides" to avoid breaking composer (#1849)
      * Author: Michael Vogt, Reviewers: Brian C. Lane, Tomáš Hozza
    * schutzbot: add Achilleas' SSH keys (#1858)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * test/depsolve: use strings for pytest.skip() (#1852)
      * Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Michael Vogt, Paweł Poławski

  — Somewhere on the Internet, 2024-08-21


author: Packit <hello@packit.dev> - 129-1
changelog:
  Changes with 129
  ----------------
    * Add initial support for generating SPDX SBOM documents (COMPOSER-2274) (#1818)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    * devices/loopback: add read-only option (#1842)
      * Author: Jonathan Lebon, Reviewers: Michael Vogt, Simon de Vlieger
    * jsoncomm: transparently handle huge messages via fds (#1838)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * stages/coreos.platform: use shutil.copy (#1888)
      * Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    * stages: fix btrfs subvolume creation under subdirectories (#1883)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * test: add test that ensures return value of `chroot.run()` (#1880)
      * Author: Michael Vogt, Reviewers: Paweł Poławski, Simon de Vlieger

  — Somewhere on the Internet, 2024-09-18


author: Packit <hello@packit.dev> - 131-1
changelog:
  Changes with 131
  ----------------
    * spec: remove unneeded dnf depedendency (#1896)
      * Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    * spec: use python3-libdnf5 in RHEL 11 and ELN (#1894)
      * Author: Yaakov Selkowitz, Reviewers: Michael Vogt, Ondřej Budai
    * stages(tar): expose new `transform` option to tar stage (#1886)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Ondřej Budai

  — Somewhere on the Internet, 2024-10-09


author: Packit <hello@packit.dev> - 132-1
changelog:
  Changes with 132
  ----------------
    * CI: Update excluded tests list (#1899)
      * Author: Paweł Poławski, Reviewers: Brian C. Lane, Florian Schüller
    * chore: add dicussions link to README (#1901)
      * Author: Lukáš Zapletal, Reviewers: Paweł Poławski, Simon de Vlieger
    * meta: use pathlib to join paths in `class Index` (#1903)
      * Author: Michael Vogt, Reviewers: Paweł Poławski, Simon de Vlieger
    * osbuild.spec: Add python3-dnf dependency for osbuild-tools (#1908)
      * Author: Renata Ravanelli, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * sources: MTLS and proxy support for ostree (#1892)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2024-10-23


author: Packit <hello@packit.dev> - 133-1
changelog:
  Changes with 133
  ----------------
    * README: document test prerequisites (#1915)
      * Author: Florian Schüller, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    * feat: add remove-signatures option to container-deploy stage (#1906)
      * Author: Miguel Martin, Reviewers: Achilleas Koutsou, Michael Vogt
    * org.osbuild.mkdir: support creating dirs on mounts (#1904)
      * Author: Nikita Dubrovski, Reviewers: Achilleas Koutsou, Dusty Mabe, Michael Vogt
    * schema: `metadata` at the top level (#1900)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    * sources: MTLS and proxy support for ostree (#1910)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Michael Vogt
    * stages/org.osbuild.tar: implement disk-full test (RHEL-4653) (#1909)
      * Author: Florian Schüller, Reviewers: Achilleas Koutsou
    * util: use non-absolute paths for chroot/mount/umount and add test (#1881)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2024-11-06


author: Packit <hello@packit.dev> - 134-1
changelog:
  Changes with 134
  ----------------
    * Build RPMs on 9.6 nightly (COMPOSER-2384) (#1923)
      * Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Jakub Rusz, Sanne Raymaekers
    * Update snapshots to 20241107 (#1924)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * org.osbuild.selinux: support working on mounts (#1911)
      * Author: Nikita Dubrovski, Reviewers: Nobody
    * osbuild-mpp: Allow using formating in the mpp-resolve-images handling (#1926)
      * Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    * spec: depend on and use dnf4 in Fedora 41 for osbuild-depsolve-dnf (#1921)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2024-11-20


author: Packit <hello@packit.dev> - 135-1
changelog:
  Changes with 135
  ----------------
    * test: regenerate X509 test certs (#1931)
      * Author: Lukáš Zapletal, Reviewers: Ondřej Ezr, Tomáš Hozza

  — Somewhere on the Internet, 2024-11-22


author: Packit <hello@packit.dev> - 0.100.3-1
changelog:
  - `dist-git init` command now allows `upstream-git-url` not to be specified. (#2387)
  - Resolves: rhbz#2306481


author: Packit <hello@packit.dev> - 0.101.0-1
changelog:
  - Packit now supports passing custom arguments to various static analyzers through `--csmock-args` CLI option and `csmock_args` configuration. (#2402)
  - When synching a new release Packit is now able to fast forward a specified merge to a configured list of branches.
    Use the `dist_git_branches` new syntax as in this example:
    `{"rawhide": {"fast_forward_merge_into": ["f40"]}, "fedora-stable": {}}` (#2363)
  - Resolves: rhbz#2310376


author: Packit <hello@packit.dev> - 0.101.1-1
changelog:
  - In the user configuration file, it's possible to set `default_parse_time_macros`, e.g. might be helpful in situations like [packit/packit-service#2514](https://github.com/packit/packit-service/issues/2514). (#2408)
  - Packit now allows to configure mock bootstrap feature setup of Copr projects with a new `bootstrap` configuration option. (#2411)
  - Resolves: rhbz#2313250


author: Packit <hello@packit.dev> - 0.102.0-1
changelog:
  - Check for `upstream_project_url` presence in the configuration when `pull_from_upstream` job is configured was removed from `validate-config`, as this is no longer required. (#2423)
  - `packit init` now adds working directories that are used in `packit prepare-sources` into the `.gitignore` file in the same directory where Packit config resides. (#2431)
  - Previously, `create-update` command took `--resolve-bugzillas` option and `propose-downstream` command took `--resolve-bug` option. The options have been unified into `--resolve-bug` for better user experience. If you used `create-update` with `--resolve-bugzillas` you have to use `--resolve-bug` (or shorthand `-b`) now instead. (#2428)
  - Resolves: rhbz#2316445


author: Packit <hello@packit.dev> - 0.102.1-1
changelog:
  - We have fixed an issue that was introduced during the unification of the interface for passing resolved Bugzillas / Jira tickets to the `sync-release` or `bodhi_update` jobs. (#2442)
  - `packit validate-config` now checks for the existence of downstream package. (#2436)
  - Packit now allows building VM images via CLI without any Copr repository specified. (#2434)
  - Resolves: rhbz#2318003


author: Packit <hello@packit.dev> - 0.102.2-1
changelog:
  - Fixed passing list of resolved bugs when running `packit propose-downstream` or `packit pull-from-upstream`. (#2447)
  - Resolves: rhbz#2321004


author: Packit <hello@packit.dev> - 0.103.0-1
changelog:
  - Packit now supports and defaults to `fast_forward_merge_into` syntax via `--dist-git-branches-mapping` in `dist-git init`. (#2456)


author: Packit <hello@packit.dev> - 0.104.0-1
changelog:
  - Packit configuration file can now have a placeholder top-level key `_` that is ignored when read.
    This is useful for storing yaml anchors in complex config files, e.g.:
  ```yaml
  _:
    base-test: &base-test
      job: tests
      fmf_path: .distro
  jobs:
    - <<: *base-test
      trigger: pull_request
      manual_trigger: true
    - <<: *internal-test
      trigger: commit
      use_internal_tf: true
  ```
  (#2378)
  - You can now define `with_opts` and `without_opts` in target-specific configuration of `copr_build` job to build with `--with` and `--without` rpmbuild options. (#2463)
  - Resolves: rhbz#2325040


author: Haibo Lin <hlin@redhat.com> - 4.6.3-1
changelog:
  - Fix formatting of long line (lsedlar)
  - unified-isos: Resolve symlinks (lsedlar)
  - gather: Skip lookaside packages from local lookaside repo (lsedlar)
  - pkgset: Avoid adding modules to unavailable arches (hlin)
  - iso: Extract volume id with xorriso if available (lsedlar)
  - De-duplicate log messages for ostree and ostree_container phases (awilliam)
  - Handle tracebacks as str or bytes (lsedlar)
  - ostree/container: add missing --version arg (awilliam)
  - Block pkgset reuse on module defaults change (lsedlar)
  - Include task ID in DONE message for OSBS phase (awilliam)
  - Various phases: consistent format of failure message (awilliam)
  - Update tests to exercise kiwi specific metadata (lsedlar)
  - Kiwi: translate virtualbox and azure productmd formats (awilliam)
  - kiwibuild: Add tests for the basic functionality (lsedlar)
  - kiwibuild: Remove repos as dicts (lsedlar)
  - Fix additional image metadata (lsedlar)
  - Drop kiwibuild_version option (lsedlar)
  - Update docs with kiwibuild options (lsedlar)
  - kiwibuild: allow setting description scm and path at phase level (awilliam)
  - Use latest Fedora for python 3 test environment (lsedlar)
  - Install unittest2 only on python 2 (lsedlar)
  - Fix 'failable' handling for kiwibuild phase (awilliam)
  - image_build: Accept Kiwi extension for Azure VHD images (jeremycline)
  - image_build: accept Kiwi vagrant image name format (awilliam)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.7.0-1
changelog:
  - kiwibuild: Add support for type, type attr and bundle format (lsedlar)
  - createiso: Block reuse if unsigned packages are allowed (lsedlar)
  - Allow live_images phase to still be skipped (lsedlar)
  - createiso: Recompute .treeinfo checksums for images (lsedlar)
  - Drop support for signing rpm-wrapped artifacts (lsedlar)
  - Remove live_images.py (LiveImagesPhase) (awilliam)
  - Clean up requirements (lsedlar)
  - Update pungi.spec for py3 (hlin)


author: Adam Williamson <awilliam@redhat.com> - 4.7.0-5
changelog:
  - Backport patches for subvariant and filename for ostree_container
  - Backport patch to split ostree phases out and improve compose speed


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-1
changelog:
  - Update to 3.9.3, security update for CVE-2024-23334 and CVE-2024-23829 (fix
    RHBZ#2261891, fix RHBZ#2261910)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-3
changelog:
  - Backport support for llhttp 9.2.1
  - Started rejecting obsolete line folding in Python parser to match


author: Peter Bieringer <pb@bieringer.de> - 3.2.2-1
changelog:
  - Update to 3.2.2
  - Obsolete radicale-config-storage-hooks-SELinux-note.patch by inject inside spec file
  - Obsolete radicale-httpd by contrib config from upstream


author: Peter Bieringer <pb@bieringer.de> - 3.3.0-1
changelog:
  - Update to 3.3.0
  - Align minimum requirements with EL9: defusedxml >= 0.7.1 / passlib >= 1.7.4 / dateutil >= 2.8.1


author: Packit <hello@packit.dev> - 0.30.0-1
changelog:
  - Fixed an exception that occured when accessing the `Specfile.has_autochangelog` property while having unparseable lines (e.g. lines ending with unescaped `%`) in `%changelog`. (#387)


author: Packit <hello@packit.dev> - 0.31.0-1
changelog:
  - Value of a `Tag` no longer includes trailing whitespace (if any). (#393)
  - specfile now tries to expand macros before processing conditions to be able to resolve conditional expressions defined by macros, for example OpenSUSE Tumbleweed defines `%ifpython3` macro as `%if "%{python_flavor}" == "python3"`. (#394)
  - Resolves: rhbz#2294393


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - Explicitly invalidate the global parse hash when a SpecParser instance is created to prevent this issue. (#409)


author: Packit <hello@packit.dev> - 0.32.3-1
changelog:
  - specfile can now handle multi-line tag values (enclosed in a macro body, e.g. `%shrink`). (#412)
  - Resolves: rhbz#2299289


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.1.15-1
changelog:
  - Update to v1.1.15
  - It fixes a few issues with seccomp, leaked mounts, and system
    performance. See upstream change log.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.1
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix snapd riscv64 build
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.2
   - Bump squashfuse from version 0.5.0 to 0.5.2 (used in snapd deb
     only)


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66
   - AppArmor prompting (experimental): expand kernel support checks
   - AppArmor prompting (experimental): consolidate error messages and
     add error kinds
   - AppArmor prompting (experimental): grant /v2/snaps/{name} via
     snap-interfaces-requests-control
   - AppArmor prompting (experimental): add checks for duplicate
     pattern variants
   - Registry views (experimental): add handlers that commit (and
     cleanup) registry transactions
   - Registry views (experimental): add a snapctl fail command for
     rejecting registry transactions
   - Registry views (experimental): allow custodian snaps to implement
     registry hooks that modify and save registry data
   - Registry views (experimental): run view-changed hooks only for
     snaps plugging views affected by modified paths
   - Registry views (experimental): make registry transactions
     serialisable
   - Snap components: handle refreshing components to revisions that
     have been on the system before
   - Snap components: enable creating Ubuntu Core images that contain
     components
   - Snap components: handle refreshing components independently of
     snaps
   - Snap components: handle removing components when refreshing a snap
     that no longer defines them
   - Snap components: extend snapd Ubuntu Core installation API to
     allow for picking optional snaps and components to install
   - Snap components: extend kernel.yaml with "dynamic-modules",
     allowing kernel to define a location for kmods from component
     hooks
   - Snap components: renamed component type "test" to "standard"
   - Desktop IDs: support installing desktop files with custom names
     based on desktop-file-ids desktop interface plug attr
   - Auto-install snapd on classic systems as prerequisite for any non-
     essential snap install
   - Support loading AppArmor profiles on WSL2 with non-default kernel
     and securityfs mounted
   - Debian/Fedora packaging updates
   - Add snap debug command for investigating execution aspects of the
     snap toolchain
   - Improve snap pack error for easier parsing
   - Add support for user services when refreshing snaps
   - Add snap remove --terminate flag for terminating running snap
     processes
   - Support building FIPS complaint snapd deb and snap
   - Fix to not use nss when looking up for users/groups from snapd
     snap
   - Fix ordering in which layout changes are saved
   - Patch snapd snap dynamic linker to ignore LD_LIBRARY_PATH and
     related variables
   - Fix libexec dir for openSUSE Slowroll
   - Fix handling of the shared snap directory for parallel installs
   - Allow writing to /run/systemd/journal/dev-log by default
   - Avoid state lock during snap removal to avoid delaying other snapd
     operations
   - Add nomad-support interface to enable running Hashicorp Nomad
   - Add intel-qat interface
   - u2f-devices interface: add u2f trustkey t120 product id and fx
     series fido u2f devices
   - desktop interface: improve integration with xdg-desktop-portal
   - desktop interface: add desktop-file-ids plug attr to desktop
     interface
   - unity7 interface: support desktop-file-ids in desktop files rule
     generation
   - desktop-legacy interface: support desktop-file-ids in desktop
     files rule generation
   - desktop-legacy interface: grant access to gcin socket location
   - login-session-observe interface: allow introspection
   - custom-device interface: allow to explicitly identify matching
     device in udev tagging block
   - system-packages-doc interface: allow reading /usr/share/javascript
   - modem-manager interface: add new format of WWAN ports
   - pcscd interface: allow pcscd to read opensc.conf
   - cpu-control interface: add IRQ affinity control to cpu_control
   - opengl interface: add support for cuda workloads on Tegra iGPU in
     opengl interface


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66.1
   - AppArmor prompting (experimental): Fix kernel prompting support
     check
   - Allow kernel snaps to have content slots
   - Fix ignoring snaps in try mode when amending


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.9-1
changelog:
  - Version 254.9
  - Fixes kernel-install on /boot on btrfs (rhbz#2251262)
  - Various small fixes for systemd itself, systemd-resolved, bootctl,
    systemd-networkd, udev, systemd-repart, systemd-homed, libsystemd,
    virtualization detection, systemd-analyze, systemd-dissect, systemd-
    journal-remote, documentation.
  - Hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.12-1
changelog:
  - Version 254.12
  - Too many small bugfixes too list.
  - Updates to hwdb from 2024-04-08 in upstream.
  - Resolves rhbz#2269506.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.16-1
changelog:
  - Version 254.16
  - Fixes for systemd, systemd-resolved, man pages and other documentation,
    unit installation
  - Hardware db update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.18-1
changelog:
  - Version 254.18
  - Various small fixes in man components, incl. systemd-resolved, systemd-
    boot, virtualization detection, kernel-install.
  - Includes a hardward database update.


author: Lukáš Zachar <lzachar@redhat.com> - 1.32.2
changelog:
  - Remove /var/tmp workdir from rpm packaging
  - Refactor package manager discovery to allow priorities
  - Add unit test for package manager installing a file system path
  - Update pre-commit checks and add a couple of new ones
  - Removing c9s workaround for pytest-container
  - Clarify the `--last` symlink creation race a bit
  - Remove the `.travis.yml` config file
  - Correctly show the `--provision-timeout` default
  - Refresh Beaker API client in mrack to use up-to-date Kerberos ticket


author: Tomáš Bajer <tbajer@redhat.com> - 1.33.0
changelog:
  - Fix installation of packages from files (#2914)
  - Simplify the documentation building (#2483)
  - Install dependencies of upgrade tasks
  - Improve fail message when library doesn't exist
  - Parse the `system` hardware requirement (#2795)
  - Define `location.lab-controller` hardware requirement (#2794)
  - Test restart on crash (#2870)
  - Add `codespell` pre-commit and fix revealed errors
  - Add test restart counter, similar to `TMT_REBOOT_COUNT`
  - Fix error message if no supported package manager found
  - Fix copy/paste issue for `combine_hw_disk_size()`
  - Slightly improve rendering of ReST for command like
  - Allow `duration` in the `execute` schema
  - Log hash of the beakerlib library repo
  - Fix inability of rpm-ostree to install multiple packages (#2887)
  - Fix Alpine Linux support (#2828)
  - Allow custom failure patterns in `dmesg` test check
  - Make `junit_xml` more visible to linters
  - Add support for `virtualization.hypervisor` hardware requirement (#2733)
  - Add a new section `Review` to contributor docs
  - Accept SSH options from environment variable (#2783)
  - Fix AVC denial detection on Fedora rawhide (#2881)
  - Reuse "become" image to fix sudo-related trouble in /tests/provision/user (#2892)
  - Polish prepare/ansible documentation
  - Support `cpu.cores` hardware requirement for mrack (#2728)
  - Allow pip install from git-archive
  - Add the `cpu.vendor` hardware requirement
  - Fix incorrect translation of `cpu.processors` to Beaker
  - Document custom Jinja template filters (#2769)
  - Update logger-name for clean


author: Martin Hoyer <mhoyer@redhat.com> - 1.34.0
changelog:
  - Fix normalization of `hardware` key/option (#3015)
  - Keep patched sources directly in TMT_SOURCE_DIR (#2999)
  - Copy launch description to suite description (#2992)
  - Add support for multiple disks to testcloud plugin (#2767)
  - Improve rendering of story links in our docs (#3001)
  - Simplify parsing of HW requirements and add missing ones (#2928)
  - Make test shell wrapper filename even more unique (#2998)
  - Add support for basic rerun of tests (#2521)
  - Split provision/virtual plans to subgroups per step (#2938)
  - Document custom container images built for tmt tests (#2930)
  - Require python3.9 in 'develop' target
  - Fix multiple rules `adjust` example in `duration` spec (#2971)
  - Fix "skip missing" behavior when installig debuginfo packages with dnf (#2956)
  - Extend results schema to allow test phases (#2933)
  - Fix path to watchdog log (#2901)
  - Display locals in traceback when requested (#2900)
  - Polish test-check/dmesg documentation (#2897)
  - docs: tweak docs to include how to see details about test failures (#2541)
  - Allow multiplication in duration input value (#2845)
  - Fix validation of fmf id URL, it must be cloneable first (#2957)
  - Cover `tmt.trying` with `pyright` check (#2942)
  - Clarify the `trigger` context dimension values (#2961)
  - Add konflux as possible initiator (#2947)
  - Fix some invalid links in documentation (#2940)
  - Define "block-device" key for guest topology HW exposition
  - Cover tmt.steps.prepare.shell with pyright checks
  - Ignore report files created by pytest-html
  - Fix pre-commit typing python version (#2959)
  - Cover tmt.steps.prepare.distgit with pyright
  - Pass correct spec to _parse_system and _parse_location (#2924)
  - Support `cpu.model-name` hardware requirement for mrack (#2921)
  - Enforce "one blank line after class docstring" rule (#2934)
  - Enable pydocstyle checks in ruff (#2906)
  - Update distros in the `mrack` provisioning config (#2932)
  - Drop duplicate list of supported HW requirements in beaker plugin (#2902)
  - Update interaction with Fedora rawhide (#2931)
  - Run the `no-commit-to-branch` check only locally


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
changelog:
  - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
  - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
  	(#2298690)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-3
changelog:
  - error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145]
  	(#2314784)
  - PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]
  	(#2314783)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.5-1
changelog:
  - update to xen-4.17.5
    remove or adjust patches now included or superceded upstream
    now need to enable systemd explicitly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.5-3
changelog:
  - Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818]
  - libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]


